last executing test programs: 1.302175357s ago: executing program 0 (id=1): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x3}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 1.228193389s ago: executing program 1 (id=20): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'], 0x9) 1.203340203s ago: executing program 3 (id=23): r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x20000041) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000440)='sched_switch\x00', r3}, 0x18) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000a00)="2fcae43858d1f54e351d22d59cc2e2f36c9c636bab6036ed5264a2ba7060aac02bea946585eac2c63bf4fdcf6c7d69bc49f7e7b4ed49b63c51edf4be8351a5334a9f75a029fb2f31594e22e46911af7915d5291f5cbab5fc0925188af42369cee005bd29931564cc99169f8d51c7407424051fe3bae9f170e9e568cabdb3c01a9875cc0820b18460ceb4a09728cf749ce765eec9d60308fc0222353c46c9c2c685067134d6fb681e673c4a3df9fa1eb7c1fbf61917552b83f3673ff7ee91c320a5affc0243ae539eaace0b44bfd87e44f399eae551a329840091765d69d25c3f73ce2b44f160a3bba58a3f598fafa7501299d2dd45124b2a5fdd733b363364678b3b436e7e777a8fba890eec1d2d65011f747370be2a69f49dee0ca87b89734ee4824e1fbea8eac20b82019302388401b35417469d9ef90342999e7e99105c54ab4af45dc68412b8256a54e112dd252838a30d28786ea010526d8fddc652faffdf8fa2aa2617f2a78a935e279cd5d064ddfa0f2d43c893f784596b9284a6885297bcc389c7e2e36ebe977db9cab5152f4e16886e7351e4a913b4106be23fadf9ede0e971427e3f2c0775dc8c6815eea228e2736dbcc0e6c7c6cd98676f4ee12968f9b30387fe05bbe38b434e2b0048263a9417d8e7d7e0844371ae6e3ed8dcf32eda86ed831ac3421c998a52047876bd865026fd518bce90775b8bf351a31b30b87933d55db7565f9d2a290247ff016667fcd943b0aec0ed1dc54b79405a9d5cf0bfa640eec16b13a2b45146a0088a3477693e3f34b22d70f79a397ae1d83dd72c1a3b3eb3b76cd85b1ac5dcfac186673ffb135b7acade1c0f5b830ffe3f5255f21ddc66f96dbdd52e75432ca0a945679b43fb4d0a5d05450c2d4ecf884795fb4e71609418058fceeb8229d70fee63d14a7f71b1d27d1e355cb355010a70e85fcec3b7b269a3823df83698797c92b9c3ce16ff452bf77a49521fffd1afd1e4cfa8e50c0783218d7fde655ae92eafc2062e87dd6dec786fefa14b560101ec1ae19b069c388a6c37af38e309d73db374c3591ca45cf08b16c56452d6d11bc73efcc4f785fcf8b9aa36ccc19885ee705adc2caf934a2b893b49c7dd2117940b20a61563fe1df2044d6bbc290a0b52be9f91f6dba5f8e317456ca41912bb18fd48fe02a2ad2fa0d76dd3fa37f4c82988295070fff78050fee1cbb5ce56fb105f2912a2826a91d3f45998a51e48a13d634071c9658d9b9063625ac33b1dbeb514f82ae9ea63baf6f52010c70ec051070c49494f66b7fe331108d1678901c3e86b420e1c3edc3736e53644a0b19568de2f992103dceb2f210ab4d4ab88135fcc7792985370c1265d1e9e05ddb0469ca77f36c1cab7134fcf161912d949f7df8fb7015ac2f110a54fd0e72e871e0421b6171b68f72474108a6f154a63494eec17ebac61a3428ee6da30b81e3b41de3ee60a6967de386542bddf817003642907d3d099c2d6e0b21a4930441ed50a2b4c17dc315a3a2d3be6f4d28990dc6b9749e32eb2cd6c7cc82812a75a62062f6b17348ebbce4f29a0ffbb6e67e42e862b456b45b9e1caa4d45437a75d7ff5ded09dfb11c5900e7cc61b4093e2765ef19789fbdac0313170a67c5cfb76050f1581bdc640486f93272a976c236617ab0088a22a45e375648aa56ab5a0ea63eb2c66fc846fd3820a2f9a5701140146a024c093a830858c3edf42e49ddedfe249eeb4b40812de2ddc4ebecc836263ab322b80cee33c7b85322b4c2b545ee40494022107cdf2884cd933a3e3236e0643e1dd1f0f919e76ea2caed6deb30cad0e80fcc2cb7ed0ae7a78a388bade55790a3d3a128e10cada114dea3fe8634a5e5fd65e4e58b696d6c74ab44d9f93b820e66a2b0b2d3932bdcd61d766c6522c82c273e643d5fc57f20cea10d9b9b4296cbfb4dc0187de738b7fc6d42699b865a534a6c70b19b6c621e6915dee00dd73f1255c17f665a81cb8dbf30c99b9208dff9fa069fce9489a6cb60cd7688a93a1671b1e22d099bb0f3e4b124156ca6edaf7614f9fc8b12b539654745b0bf669976b9f324128765bad81750574c06d4b5bada764e9c5fdf6e8a24ef2cb7ad248ff38a21d67ac69c8003cc7183f08b4c1a3732ab9f37d88db2d86cbebe929803d5c2f4c8e95c60a730f01a48ab66bd9c95ab3a6f47645fe3f2bc07ac617def7e867e15896945b8e42106902eb39c9e6d87d5b56bb84d7b90e468ca4c860390eff7c5c38a9ce3dde0fb8f099b95b599d707ae6a7056f4cc244559bb5f1d5e7f0356876e60bc2d25ac0a8b9964f78f7b3e96c47a700931be89247da69b82b16e37839d6a899cfcedfea4f88f7c6447737312291c62f88630e41da77f2082ff38d8ba91ddc0a38b2df18fa68d832d5ff7b31ee036d4b8a39042876dd8d74b2401138d6bf26e77ae534f6e43460f849b0429dc716607e03df2487213e8ff1cc8f00012ed20c99fc72c0d8b61ad3bf9847d7cebe0448b89e2573aa1170d0ef42d675d827bb1e2b4196a7cdbfa2eb559154de2027c01b79f4914a7946920cd4250d6dedcaa054cab509ed2ec4b7fe5a08fc7bd5c74a2b464a4964a0213e4650a9064d483c288d823b52bbf689cbbecf158c8e6de381f03bcad50ad09704cacc5c3f7d0b76bec884257ede61bb3fc764c8b39bfce276f7e2cd8d512b6f233139d732d509627785e213212bb36c592854f7147a2dd798ac06e7278575c016d3ac13e30bf05109fcf13bb59d41ffa7d8ca6ef545b90e6b91c24d0dae370a0652e90c8eb4a49eadb84a4c121778b3f6a4619a4bf977dd0a65edf3949bfa18cac6bde7498eb58eec7377746888413ffc329c8a85b08e01cd727595e6bb5b446d27ab2723db7835da236a8838e082e85c8211450c454fcf890abdf3f3c1fa641316466187bd768bc7f25da16bedf8fbbc9780949258c89b72053d90b300d6d012a9cad5db447a0e6a6793f3b41165dde95685585ec7f1bb66e181ffc32ee87d54b7a8f895c9ea9d30108601d5491ad23c8f80383508d7bf1db33eca23bd09213506df42c09b03de3a0d8c3e5cd06195710f6b03bd0b5364b93309bacc2f723f1022898e0613f7890f417a44c6363e6659d02e05b05385d6f90e6b3dfdfaf2dcb599aeb15e2aae30f4765394a8ce57f0a055cbe0bf7821ec46ae4b6534a45f521daed0787dc3324d86a434bcd27eea8310910a351e7ab047541cfbdb83aa62b932056190181159abddd7aa2775ffb5c31da0fcaba355c97ca325ada38d61566076d0355256451b0ff67085a228eaa62fc40c5ff7a324848cec46f63cc6f20f378bae63109594869ba70b02b0508bb7f1a4d24212aca9037f572206b8675e22d5add8995cce36efacda912217a691ed8a68aa49fcd7b5f1aab9a905184c4e90acde10b48da523d27813e86848b75181c020900fdbbe96634d0a8157d6a3fcf2a0dbc2b8715006477bf23b6e5c75c3b93efde037151c74f7797a4b0c504e97ce4230262c6d83bcca439e7d33ea1c5eb531a41962624d5b0d2528d744e1e5d33e7a22da2dfdb6c9da987128c16d91e710b87b72a5e4f3ab9bcbf98d8c5c41483f0156bca4ed400eccb9444657b178c4a90a92fc7457d6d21fc43ca025b8d6ad09bc1606ac8b5f47f37735ee72bfbb05144d04d76b804bcd232675e364193d220271f581f3a98559b371ff64ba5fc408320b692839e9c02395530d1ca1e86bacd024184ff966ee24dfdea2c1ab3f99ea477f58bf1ea5a11e0678b7978515d9a0f500a1af0bd0ba4d41b89d164b700544494d445fa547e66ebe457d50781b488e22946aea65ea2039a5cdb59d740be708d9dbf7611b163941c2ad5c733a328a5e400df6a6d9ccde07112789004ce19a69690ad2b05e62755a7be7f6dd4756a8257feb38835c22fe503a4732b515a0b24769b08a8eddea08092d93cb7ae38d9c032621da0400acf7ea35aa0d74d1529280ae98d185c25541c6e5c5c8af8454ab6ba05fa340aed3828402133b9035cd872d9eaa12e1e76c0380333a258053a7641a5832fbd550e9447e1baacaaaa0379728a61302ffb7122436a1088dfb403e0927c16511cbb851fa1acf722bb84417e8216fedc415fb9dbbb8a18204506539a0f04abd4f8d1175ebbd2dfce93c3aad007fd0ba0d01a6aff53fda2dff94531163147bd4fba8703adb6d0966517f01c8a7ff7fc666acfd119424b8fcf0bb55db6a0ade87b390bde94d29ee9c3f7f8be1c477e8a8b83fa2b082d0b2cad08e1998302a16481b863e048648d28fcf5f25ffa729e69f7b475f1ab8619d44c8898bb89da4e8447242002ef14f8520cf3ad658515541240112191d20ef63aff619c420e960c2debffef345120b0a8443fb9aa0b3619d447806a2fb2f8faa2bea80711aa1c5a8c08540de9e35de19a463e6eee58e74d3d3a4a1b94494df4915375706e27fd729fccfa7edf821f1efe54ee5acb902b332536285228e2419df0c1250711ac5f1de85f370a05ae4af2fd6707610203fb43d4f95bb0d5d430ee3a2df4e5678d002f1c53b00ab2b09a8b0da91baf317199620e5fc3491315e70c11782f3686d74772497166012eb3673025bbd9bfaefc5b1893646d2365f0753a1a634c5956582ba788a57c30f5dfec3894fe11bff1edd79775ba7c0ce2473458e50e0477b6e8dc9be508ae03280535d2f53e23d9573c1777f", 0xcfd}, {&(0x7f0000000000)="5e8b89553ad58b22f486ef002e209588fe3f64f5de89dd6afe7c51b983de170031ae133b90", 0x25}, {0x0}, {&(0x7f0000000640)="c8dcb85dae0ce03587fd50523dc144d9c5c0c3f47ca5d6aecc4bd456d59e26655bebae982ccf7fa4f4234f22766951d6f7df8a796920d9ba2440d8115cedb9ce38b4189a1ce35f77d670523f1c93a59eaed7a705f3cc2ea197f7cafbd50a59c451f4b6b10c55f0d5ac65ee7781411b6a71f166a37566bca6ab7e1f243e60dd892804e47ea077dd583c384dc534bf5c086cd1ae", 0x93}], 0x4}, 0x40) sendmsg$kcm(r1, 0x0, 0x8000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x8484) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) vmsplice(r4, 0x0, 0x0, 0x1) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, 0x0) 1.20307s ago: executing program 1 (id=24): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x80003, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r2, 0xffffffffffffffff, 0x0) 1.115501011s ago: executing program 1 (id=26): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x74000800) r2 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x3}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.103081157s ago: executing program 0 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.102574122s ago: executing program 3 (id=29): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r1, @ANYBLOB="bf4400000000000000000c000000"], 0x2ac}}, 0x0) 1.009566459s ago: executing program 3 (id=34): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000000)={0x6, 0x8}) 956.444425ms ago: executing program 3 (id=36): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) setresuid(0xee00, 0xee00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) 722.505549ms ago: executing program 1 (id=37): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0x2969f17eafcc2913) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3218002, &(0x7f0000000240)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x60c, &(0x7f00000008c0)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x800000000000000) 717.284531ms ago: executing program 4 (id=39): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) 620.682888ms ago: executing program 4 (id=40): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) inotify_init1(0x800) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 620.135758ms ago: executing program 2 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x9, 0x1, 0x1}}, 0x40) 611.790014ms ago: executing program 2 (id=42): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) removexattr(0x0, 0x0) 603.848494ms ago: executing program 1 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 508.604075ms ago: executing program 2 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd70000000000049000000080001007063690011000200303030303a30303a313000300000000008007300000000000e00"], 0x60}}, 0x24004000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xec}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 508.228932ms ago: executing program 1 (id=45): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)) 459.839135ms ago: executing program 3 (id=46): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 409.276433ms ago: executing program 3 (id=47): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000180)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000dc00128009000100766c616e00000000cc00028006000100000000001c00"], 0x10c}, 0x1, 0xba01}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(0xffffffffffffffff, 0x0) r4 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r4, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r5}, 0x9) signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x10}, 0x20040001) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x54}, 0x31) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 336.78809ms ago: executing program 2 (id=48): socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, 0x0, 0x0, 0x44040001, 0x1}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 330.301277ms ago: executing program 4 (id=49): prctl$PR_SET_NAME(0xf, &(0x7f0000000700)=',&#^%\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121282, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 227.612879ms ago: executing program 0 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x6b}, 0x0) close(r2) 172.845285ms ago: executing program 4 (id=51): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0xa, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}], 0x2, 0x40500f0) 160.786798ms ago: executing program 0 (id=52): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a"], 0x5c}}, 0x0) 120.204696ms ago: executing program 2 (id=53): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x800000001fe, 0x2) r2 = dup(r1) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x17, 0x4009, 0x0, 0x1, 0x0}) 36.828541ms ago: executing program 4 (id=54): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x1, 0x2, 0x0) 36.331186ms ago: executing program 2 (id=55): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x2800010, &(0x7f0000000300)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x21f, &(0x7f0000000940)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file1/file3\x00', 0x0) 33.439142ms ago: executing program 4 (id=56): openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x0, 0x3d) 0s ago: executing program 0 (id=57): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 26.501491][ T6539] cgroup: Unknown subsys name 'net' [ 26.601450][ T6539] cgroup: Unknown subsys name 'cpuset' [ 26.603261][ T6539] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 26.743914][ T6539] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.337986][ T6551] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.339590][ T6551] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.341414][ T6551] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.343746][ T6551] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.356877][ T6558] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.357510][ T6154] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.357804][ T6154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.358094][ T6154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.358234][ T6154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.359288][ T6154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.359513][ T6154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.359963][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.360367][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.365051][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.375431][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.381153][ T6154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.387134][ T6154] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.389489][ T6154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.389951][ T6154] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.390524][ T6154] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.390719][ T6154] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.396979][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.397520][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.400729][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.403485][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.573536][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 29.578575][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 29.604027][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 29.637027][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.637727][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.637848][ T6553] bridge_slave_0: entered allmulticast mode [ 29.638293][ T6553] bridge_slave_0: entered promiscuous mode [ 29.658771][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.658881][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.658968][ T6553] bridge_slave_1: entered allmulticast mode [ 29.659425][ T6553] bridge_slave_1: entered promiscuous mode [ 29.661758][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 29.687423][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 29.694063][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.698247][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.708411][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.709693][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.711658][ T6549] bridge_slave_0: entered allmulticast mode [ 29.713292][ T6549] bridge_slave_0: entered promiscuous mode [ 29.726060][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.726152][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.726207][ T6552] bridge_slave_0: entered allmulticast mode [ 29.726638][ T6552] bridge_slave_0: entered promiscuous mode [ 29.727369][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.727388][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.727454][ T6552] bridge_slave_1: entered allmulticast mode [ 29.727859][ T6552] bridge_slave_1: entered promiscuous mode [ 29.733881][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.733913][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.733964][ T6549] bridge_slave_1: entered allmulticast mode [ 29.734408][ T6549] bridge_slave_1: entered promiscuous mode [ 29.747891][ T6553] team0: Port device team_slave_0 added [ 29.753908][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.758711][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.762988][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.763053][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.763105][ T6560] bridge_slave_0: entered allmulticast mode [ 29.763585][ T6560] bridge_slave_0: entered promiscuous mode [ 29.764693][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.764792][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.764863][ T6560] bridge_slave_1: entered allmulticast mode [ 29.765260][ T6560] bridge_slave_1: entered promiscuous mode [ 29.769583][ T6553] team0: Port device team_slave_1 added [ 29.771459][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.772569][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.799134][ T6549] team0: Port device team_slave_0 added [ 29.800609][ T6549] team0: Port device team_slave_1 added [ 29.808731][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.808852][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.808932][ T6559] bridge_slave_0: entered allmulticast mode [ 29.809511][ T6559] bridge_slave_0: entered promiscuous mode [ 29.810871][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.810877][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.810888][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.811818][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.811825][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.811837][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.827805][ T6552] team0: Port device team_slave_0 added [ 29.828622][ T6552] team0: Port device team_slave_1 added [ 29.837041][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.838720][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.838790][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.838888][ T6559] bridge_slave_1: entered allmulticast mode [ 29.839349][ T6559] bridge_slave_1: entered promiscuous mode [ 29.851413][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.851439][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.851454][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.860108][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.869323][ T6553] hsr_slave_0: entered promiscuous mode [ 29.870577][ T6553] hsr_slave_1: entered promiscuous mode [ 29.871821][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.872074][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.872094][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.874529][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.874543][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.874557][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.875123][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.875130][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.875141][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.886209][ T6560] team0: Port device team_slave_0 added [ 29.888306][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.898029][ T6560] team0: Port device team_slave_1 added [ 29.902605][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.930108][ T6549] hsr_slave_0: entered promiscuous mode [ 29.930451][ T6549] hsr_slave_1: entered promiscuous mode [ 29.930661][ T6549] debugfs: 'hsr0' already exists in 'hsr' [ 29.930696][ T6549] Cannot create hsr debugfs directory [ 29.935944][ T6552] hsr_slave_0: entered promiscuous mode [ 29.936258][ T6552] hsr_slave_1: entered promiscuous mode [ 29.938505][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 29.939465][ T6552] Cannot create hsr debugfs directory [ 29.940876][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.942370][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.946563][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.952511][ T6559] team0: Port device team_slave_0 added [ 29.955519][ T6559] team0: Port device team_slave_1 added [ 29.957815][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.957842][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.957857][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.989536][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.989565][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.989580][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.004452][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.004478][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.004493][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.018260][ T6560] hsr_slave_0: entered promiscuous mode [ 30.018566][ T6560] hsr_slave_1: entered promiscuous mode [ 30.018749][ T6560] debugfs: 'hsr0' already exists in 'hsr' [ 30.018760][ T6560] Cannot create hsr debugfs directory [ 30.030263][ T6559] hsr_slave_0: entered promiscuous mode [ 30.031822][ T6559] hsr_slave_1: entered promiscuous mode [ 30.032979][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 30.034004][ T6559] Cannot create hsr debugfs directory [ 30.133877][ T6553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.137928][ T6553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.140751][ T6553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.144976][ T6553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.162224][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.162271][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.162476][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.162508][ T6553] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.168287][ T6560] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.171513][ T6560] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.179285][ T6560] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.181900][ T6560] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.203918][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.203961][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.204042][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.204080][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.212273][ T6552] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.218846][ T6552] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.221558][ T6552] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.223986][ T6552] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.245000][ T6559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.249724][ T6559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.253704][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.258560][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.261547][ T6559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.264470][ T6559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.268497][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.270427][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.275245][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.276830][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.300798][ T4875] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.300852][ T4875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.310840][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.310876][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.322281][ T6549] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.326492][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.329673][ T6549] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.333587][ T6549] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.339522][ T6549] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.355632][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.355680][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.363824][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.365548][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.383633][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.383686][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.384042][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.384060][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.393438][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.401808][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.415335][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.415384][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.426055][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.426099][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.431104][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.444885][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.444930][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.452901][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.455269][ T4875] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.455314][ T4875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.487941][ T6553] veth0_vlan: entered promiscuous mode [ 30.491630][ T6553] veth1_vlan: entered promiscuous mode [ 30.498682][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.503282][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.509966][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.515834][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.522400][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.522441][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.522776][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.522799][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.546317][ T6553] veth0_macvtap: entered promiscuous mode [ 30.547374][ T6553] veth1_macvtap: entered promiscuous mode [ 30.549832][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.576756][ T6560] veth0_vlan: entered promiscuous mode [ 30.578309][ T6560] veth1_vlan: entered promiscuous mode [ 30.585562][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.592770][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.599823][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.615992][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616239][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616279][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616302][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.635662][ T6560] veth0_macvtap: entered promiscuous mode [ 30.636915][ T6560] veth1_macvtap: entered promiscuous mode [ 30.649253][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.655478][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.682313][ T663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.682343][ T663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.684109][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.686430][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.687630][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.687704][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.687746][ T15] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.687765][ T15] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.708912][ T663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.708947][ T663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.740846][ T6549] veth0_vlan: entered promiscuous mode [ 30.749806][ T6552] veth0_vlan: entered promiscuous mode [ 30.754666][ T6549] veth1_vlan: entered promiscuous mode [ 30.763166][ T6553] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.783285][ T6559] veth0_vlan: entered promiscuous mode [ 30.784860][ T6559] veth1_vlan: entered promiscuous mode [ 30.786224][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.786260][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.812808][ T6552] veth1_vlan: entered promiscuous mode [ 30.818710][ T6559] veth0_macvtap: entered promiscuous mode [ 30.826145][ T6549] veth0_macvtap: entered promiscuous mode [ 30.827619][ T6549] veth1_macvtap: entered promiscuous mode [ 30.832210][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.833685][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.838888][ T6559] veth1_macvtap: entered promiscuous mode [ 30.854892][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.855331][ T6552] veth0_macvtap: entered promiscuous mode [ 30.856189][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.863141][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.865023][ T42] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.865066][ T42] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.865095][ T42] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.871833][ T31] audit: type=1326 audit(30.830:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.871867][ T31] audit: type=1326 audit(30.830:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878400][ T31] audit: type=1326 audit(30.840:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878430][ T31] audit: type=1326 audit(30.840:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878462][ T31] audit: type=1326 audit(30.840:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878480][ T31] audit: type=1326 audit(30.840:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878497][ T31] audit: type=1326 audit(30.840:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878513][ T31] audit: type=1326 audit(30.840:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878529][ T31] audit: type=1326 audit(30.840:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=185 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.878544][ T31] audit: type=1326 audit(30.840:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6665 comm="syz.3.7" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa495b9e8 code=0x7ffc0000 [ 30.905682][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.918438][ T6552] veth1_macvtap: entered promiscuous mode [ 30.922691][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.936494][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.945346][ T770] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.945414][ T770] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.945445][ T770] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.945460][ T770] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.954705][ T6672] sit0: entered promiscuous mode [ 30.957250][ T6672] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 30.957493][ T6672] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10'. [ 30.988082][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.998698][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.998729][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.005507][ T770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005560][ T770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005581][ T770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.005595][ T770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.056619][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.056654][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.103909][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.103946][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.121039][ T6680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 31.123656][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.123692][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.145167][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.145208][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.177282][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.177310][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.252368][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3'. [ 31.361794][ T6711] syz.4.25 uses obsolete (PF_INET,SOCK_PACKET) [ 31.380610][ T53] Bluetooth: hci0: command tx timeout [ 31.380735][ T53] Bluetooth: hci2: command tx timeout [ 31.382108][ T6713] vlan2: entered allmulticast mode [ 31.382121][ T6713] dummy0: entered allmulticast mode [ 31.418715][ T6720] netlink: 664 bytes leftover after parsing attributes in process `syz.3.29'. [ 31.461163][ T6551] Bluetooth: hci3: command tx timeout [ 31.461334][ T6551] Bluetooth: hci4: command tx timeout [ 31.461389][ T6551] Bluetooth: hci1: command tx timeout [ 31.482555][ T6713] Zero length message leads to an empty skb [ 31.512954][ T6732] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 31.840807][ T6741] loop1: detected capacity change from 0 to 1024 [ 31.843584][ T6741] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.846283][ T6741] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 31.846328][ T6741] EXT4-fs (loop1): #clusters per group too big: 3905560576 [ 31.886988][ T6747] Falling back ldisc for ptm0. [ 31.953908][ T6744] loop4: detected capacity change from 0 to 2048 [ 31.995084][ T6543] loop4: p1 < > p4 [ 32.007853][ T6543] loop4: p4 size 8388608 extends beyond EOD, truncated [ 32.032752][ T6744] loop4: p1 < > p4 [ 32.034142][ T6744] loop4: p4 size 8388608 extends beyond EOD, truncated [ 32.253514][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 32.259321][ T6746] udevd[6746]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.320535][ T6543] udevd[6543]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 32.327381][ T6746] udevd[6746]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.418363][ T6795] vhci_hcd: invalid port number 9 [ 32.418402][ T6795] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 32.460600][ T6801] loop2: detected capacity change from 0 to 128 [ 32.551398][ T6809] loop0: detected capacity change from 0 to 512 [ 32.575132][ T6768] sit0: left promiscuous mode [ 32.603973][ T6809] [ 32.604421][ T6809] ====================================================== [ 32.605455][ T6809] WARNING: possible circular locking dependency detected [ 32.606569][ T6809] syzkaller #0 Not tainted [ 32.607248][ T6809] ------------------------------------------------------ [ 32.608296][ T6809] syz.0.57/6809 is trying to acquire lock: [ 32.609145][ T6809] ffff0000f1e50b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x150/0x2a0 [ 32.610736][ T6809] [ 32.610736][ T6809] but task is already holding lock: [ 32.611896][ T6809] ffff0000ddf59d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 32.613433][ T6809] [ 32.613433][ T6809] which lock already depends on the new lock. [ 32.613433][ T6809] [ 32.614978][ T6809] [ 32.614978][ T6809] the existing dependency chain (in reverse order) is: [ 32.616222][ T6809] [ 32.616222][ T6809] -> #2 (&ei->xattr_sem){++++}-{4:4}: [ 32.617290][ T6809] down_write+0x50/0xc0 [ 32.617988][ T6809] ext4_xattr_set_handle+0x11c/0x1260 [ 32.618863][ T6809] ext4_initxattrs+0xa4/0x11c [ 32.619602][ T6809] security_inode_init_security+0x6dc/0x7f4 [ 32.620562][ T6809] ext4_init_security+0x44/0x58 [ 32.621328][ T6809] __ext4_new_inode+0x27f4/0x3190 [ 32.622175][ T6809] ext4_create+0x1f8/0x3fc [ 32.622873][ T6809] path_openat+0x12d8/0x2c40 [ 32.623633][ T6809] do_filp_open+0x18c/0x36c [ 32.624341][ T6809] do_sys_openat2+0x11c/0x1b4 [ 32.625074][ T6809] __arm64_sys_openat+0x120/0x158 [ 32.625881][ T6809] invoke_syscall+0x98/0x254 [ 32.626674][ T6809] el0_svc_common+0xe8/0x23c [ 32.627404][ T6809] do_el0_svc+0x48/0x58 [ 32.628162][ T6809] el0_svc+0x5c/0x254 [ 32.628872][ T6809] el0t_64_sync_handler+0x84/0x12c [ 32.629754][ T6809] el0t_64_sync+0x198/0x19c [ 32.630488][ T6809] [ 32.630488][ T6809] -> #1 (jbd2_handle){++++}-{0:0}: [ 32.631532][ T6809] start_this_handle+0xe74/0x10dc [ 32.632288][ T6809] jbd2__journal_start+0x288/0x51c [ 32.633051][ T6809] __ext4_journal_start_sb+0x378/0x88c [ 32.633921][ T6809] ext4_do_writepages+0xb94/0x39b4 [ 32.634721][ T6809] ext4_writepages+0x178/0x2a0 [ 32.635528][ T6809] do_writepages+0x270/0x468 [ 32.636261][ T6809] file_write_and_wait_range+0x1d0/0x2c4 [ 32.637203][ T6809] ext4_sync_file+0x274/0xb44 [ 32.637989][ T6809] __arm64_sys_fsync+0x170/0x1d4 [ 32.638867][ T6809] invoke_syscall+0x98/0x254 [ 32.639661][ T6809] el0_svc_common+0xe8/0x23c [ 32.640401][ T6809] do_el0_svc+0x48/0x58 [ 32.641108][ T6809] el0_svc+0x5c/0x254 [ 32.641775][ T6809] el0t_64_sync_handler+0x84/0x12c [ 32.642647][ T6809] el0t_64_sync+0x198/0x19c [ 32.643395][ T6809] [ 32.643395][ T6809] -> #0 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 32.644679][ T6809] __lock_acquire+0x1774/0x30a4 [ 32.645510][ T6809] lock_acquire+0x14c/0x2e0 [ 32.646288][ T6809] percpu_down_read_internal+0x5c/0x298 [ 32.647137][ T6809] ext4_writepages+0x150/0x2a0 [ 32.647965][ T6809] do_writepages+0x270/0x468 [ 32.648682][ T6809] __writeback_single_inode+0x15c/0x13e8 [ 32.649587][ T6809] writeback_single_inode+0x18c/0x54c [ 32.650358][ T6809] write_inode_now+0x13c/0x1a4 [ 32.651077][ T6809] iput+0x7d4/0xad4 [ 32.651737][ T6809] ext4_xattr_block_set+0x13dc/0x24bc [ 32.652568][ T6809] ext4_expand_extra_isize_ea+0xeb8/0x1830 [ 32.653513][ T6809] __ext4_expand_extra_isize+0x2a0/0x37c [ 32.654458][ T6809] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 32.655287][ T6809] ext4_evict_inode+0x930/0x1084 [ 32.656043][ T6809] evict+0x414/0x928 [ 32.656716][ T6809] iput+0x95c/0xad4 [ 32.657340][ T6809] ext4_process_orphan+0x240/0x2b4 [ 32.658147][ T6809] ext4_orphan_cleanup+0x930/0x107c [ 32.659008][ T6809] ext4_fill_super+0x4854/0x4fcc [ 32.659816][ T6809] get_tree_bdev_flags+0x360/0x414 [ 32.660548][ T6809] get_tree_bdev+0x2c/0x3c [ 32.661259][ T6809] ext4_get_tree+0x28/0x38 [ 32.661974][ T6809] vfs_get_tree+0x90/0x28c [ 32.662728][ T6809] do_new_mount+0x284/0x944 [ 32.663442][ T6809] path_mount+0x5b4/0xdfc [ 32.664114][ T6809] __arm64_sys_mount+0x3e8/0x468 [ 32.664865][ T6809] invoke_syscall+0x98/0x254 [ 32.665591][ T6809] el0_svc_common+0xe8/0x23c [ 32.666333][ T6809] do_el0_svc+0x48/0x58 [ 32.667057][ T6809] el0_svc+0x5c/0x254 [ 32.667688][ T6809] el0t_64_sync_handler+0x84/0x12c [ 32.668531][ T6809] el0t_64_sync+0x198/0x19c [ 32.669307][ T6809] [ 32.669307][ T6809] other info that might help us debug this: [ 32.669307][ T6809] [ 32.670803][ T6809] Chain exists of: [ 32.670803][ T6809] &sbi->s_writepages_rwsem --> jbd2_handle --> &ei->xattr_sem [ 32.670803][ T6809] [ 32.672699][ T6809] Possible unsafe locking scenario: [ 32.672699][ T6809] [ 32.673877][ T6809] CPU0 CPU1 [ 32.674831][ T6809] ---- ---- [ 32.675638][ T6809] lock(&ei->xattr_sem); [ 32.676303][ T6809] lock(jbd2_handle); [ 32.677339][ T6809] lock(&ei->xattr_sem); [ 32.678327][ T6809] rlock(&sbi->s_writepages_rwsem); [ 32.679179][ T6809] [ 32.679179][ T6809] *** DEADLOCK *** [ 32.679179][ T6809] [ 32.680476][ T6809] 3 locks held by syz.0.57/6809: [ 32.681255][ T6809] #0: ffff0000f1e520e0 (&type->s_umount_key#26/1){+.+.}-{4:4}, at: alloc_super+0x168/0x7d4 [ 32.682836][ T6809] #1: ffff0000f1e52610 (sb_internal){.+.+}-{0:0}, at: ext4_evict_inode+0x2b0/0x1084 [ 32.684351][ T6809] #2: ffff0000ddf59d78 (&ei->xattr_sem){++++}-{4:4}, at: __ext4_mark_inode_dirty+0x358/0x6fc [ 32.685888][ T6809] [ 32.685888][ T6809] stack backtrace: [ 32.686752][ T6809] CPU: 1 UID: 0 PID: 6809 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT [ 32.688226][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 32.689745][ T6809] Call trace: [ 32.690212][ T6809] show_stack+0x2c/0x3c (C) [ 32.690904][ T6809] __dump_stack+0x30/0x40 [ 32.691546][ T6809] dump_stack_lvl+0xd8/0x12c [ 32.692223][ T6809] dump_stack+0x1c/0x28 [ 32.692852][ T6809] print_circular_bug+0x324/0x32c [ 32.693726][ T6809] check_noncircular+0x154/0x174 [ 32.694546][ T6809] __lock_acquire+0x1774/0x30a4 [ 32.695248][ T6809] lock_acquire+0x14c/0x2e0 [ 32.695896][ T6809] percpu_down_read_internal+0x5c/0x298 [ 32.696772][ T6809] ext4_writepages+0x150/0x2a0 [ 32.697545][ T6809] do_writepages+0x270/0x468 [ 32.698320][ T6809] __writeback_single_inode+0x15c/0x13e8 [ 32.699138][ T6809] writeback_single_inode+0x18c/0x54c [ 32.699995][ T6809] write_inode_now+0x13c/0x1a4 [ 32.700741][ T6809] iput+0x7d4/0xad4 [ 32.701339][ T6809] ext4_xattr_block_set+0x13dc/0x24bc [ 32.702193][ T6809] ext4_expand_extra_isize_ea+0xeb8/0x1830 [ 32.703101][ T6809] __ext4_expand_extra_isize+0x2a0/0x37c [ 32.703920][ T6809] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 32.704709][ T6809] ext4_evict_inode+0x930/0x1084 [ 32.705483][ T6809] evict+0x414/0x928 [ 32.706100][ T6809] iput+0x95c/0xad4 [ 32.706694][ T6809] ext4_process_orphan+0x240/0x2b4 [ 32.707580][ T6809] ext4_orphan_cleanup+0x930/0x107c [ 32.708409][ T6809] ext4_fill_super+0x4854/0x4fcc [ 32.709153][ T6809] get_tree_bdev_flags+0x360/0x414 [ 32.709966][ T6809] get_tree_bdev+0x2c/0x3c [ 32.710655][ T6809] ext4_get_tree+0x28/0x38 [ 32.711296][ T6809] vfs_get_tree+0x90/0x28c [ 32.711992][ T6809] do_new_mount+0x284/0x944 [ 32.712673][ T6809] path_mount+0x5b4/0xdfc [ 32.713297][ T6809] __arm64_sys_mount+0x3e8/0x468 [ 32.714016][ T6809] invoke_syscall+0x98/0x254 [ 32.714658][ T6809] el0_svc_common+0xe8/0x23c [ 32.715364][ T6809] do_el0_svc+0x48/0x58 [ 32.715941][ T6809] el0_svc+0x5c/0x254 [ 32.716492][ T6809] el0t_64_sync_handler+0x84/0x12c [ 32.717174][ T6809] el0t_64_sync+0x198/0x19c [ 32.721628][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 32.721914][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 32.725364][ T6768] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19 [ 32.725387][ T6768] caif:caif_disconnect_client(): nothing to disconnect [ 32.734674][ T6768] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT [ 32.734711][ T6768] chnl_net:chnl_net_open(): state disconnected [ 32.734740][ T6768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 32.746461][ T6809] ------------[ cut here ]------------ [ 32.746485][ T6809] EA inode 11 i_nlink=2 [ 32.746586][ T6809] WARNING: CPU: 0 PID: 6809 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x408/0x44c [ 32.754323][ T6809] Modules linked in: [ 32.754868][ T6809] CPU: 0 UID: 0 PID: 6809 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT [ 32.756134][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 32.757525][ T6809] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.758674][ T6809] pc : ext4_xattr_inode_update_ref+0x408/0x44c [ 32.759465][ T6809] lr : ext4_xattr_inode_update_ref+0x408/0x44c [ 32.760322][ T6809] sp : ffff8000a2036ce0 [ 32.760921][ T6809] x29: ffff8000a2036d90 x28: 0000000000000000 x27: 1fffe0001bb9e7bd [ 32.762062][ T6809] x26: dfff800000000000 x25: ffff8000a2036d00 x24: ffff700014406da0 [ 32.763241][ T6809] x23: ffff800092c29000 x22: ffff0000ddcf3c38 x21: 0000000000000002 [ 32.764412][ T6809] x20: 0000000000000001 x19: ffff0000ddcf3bf8 x18: 1fffe000337d4a90 [ 32.765559][ T6809] x17: ffff80008f5ae000 x16: ffff800082defcc0 x15: 0000000000000001 [ 32.766726][ T6809] x14: 1ffff00014406d10 x13: 0000000000000000 x12: 0000000000000000 [ 32.767934][ T6809] x11: 0000000000080000 x10: 0000000000069574 x9 : 9adbc0b49d45bd00 [ 32.769076][ T6809] x8 : 9adbc0b49d45bd00 x7 : 0000000000000000 x6 : ffff800080565b88 [ 32.770188][ T6809] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807d6f80 [ 32.771309][ T6809] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 32.772534][ T6809] Call trace: [ 32.773044][ T6809] ext4_xattr_inode_update_ref+0x408/0x44c (P) [ 32.774045][ T6809] ext4_xattr_set_entry+0x928/0x15c0 [ 32.774761][ T6809] ext4_xattr_ibody_set+0x204/0x5fc [ 32.775547][ T6809] ext4_expand_extra_isize_ea+0xf00/0x1830 [ 32.776386][ T6809] __ext4_expand_extra_isize+0x2a0/0x37c [ 32.777199][ T6809] __ext4_mark_inode_dirty+0x3c0/0x6fc [ 32.778057][ T6809] ext4_evict_inode+0x930/0x1084 [ 32.778806][ T6809] evict+0x414/0x928 [ 32.779366][ T6809] iput+0x95c/0xad4 [ 32.779903][ T6809] ext4_process_orphan+0x240/0x2b4 [ 32.780713][ T6809] ext4_orphan_cleanup+0x930/0x107c [ 32.781515][ T6809] ext4_fill_super+0x4854/0x4fcc [ 32.782207][ T6809] get_tree_bdev_flags+0x360/0x414 [ 32.782891][ T6809] get_tree_bdev+0x2c/0x3c [ 32.783592][ T6809] ext4_get_tree+0x28/0x38 [ 32.784238][ T6809] vfs_get_tree+0x90/0x28c [ 32.784951][ T6809] do_new_mount+0x284/0x944 [ 32.785557][ T6809] path_mount+0x5b4/0xdfc [ 32.786147][ T6809] __arm64_sys_mount+0x3e8/0x468 [ 32.786824][ T6809] invoke_syscall+0x98/0x254 [ 32.787461][ T6809] el0_svc_common+0xe8/0x23c [ 32.788185][ T6809] do_el0_svc+0x48/0x58 [ 32.788806][ T6809] el0_svc+0x5c/0x254 [ 32.789398][ T6809] el0t_64_sync_handler+0x84/0x12c [ 32.790121][ T6809] el0t_64_sync+0x198/0x19c [ 32.790818][ T6809] irq event stamp: 2255 [ 32.791461][ T6809] hardirqs last enabled at (2255): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 32.792912][ T6809] hardirqs last disabled at (2254): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 32.794408][ T6809] softirqs last enabled at (2014): [] handle_softirqs+0xaf8/0xc88 [ 32.795732][ T6809] softirqs last disabled at (1987): [] __do_softirq+0x14/0x20 [ 32.796900][ T6809] ---[ end trace 0000000000000000 ]--- [ 32.851875][ T6809] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.57: iget: bad extra_isize 90 (inode size 256) [ 32.852118][ T6809] EXT4-fs (loop0): Remounting filesystem read-only [ 32.852276][ T6809] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 32.852306][ T6809] EXT4-fs (loop0): 1 orphan inode deleted [ 32.852518][ T6809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.870872][ T6549] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.460074][ T53] Bluetooth: hci2: command tx timeout [ 33.460162][ T6551] Bluetooth: hci0: command tx timeout [ 33.540058][ T53] Bluetooth: hci1: command tx timeout [ 33.540090][ T53] Bluetooth: hci4: command tx timeout [ 33.540102][ T53] Bluetooth: hci3: command tx timeout [ 35.540245][ T6551] Bluetooth: hci2: command tx timeout [ 35.540282][ T6551] Bluetooth: hci0: command tx timeout [ 35.620262][ T53] Bluetooth: hci3: command tx timeout [ 35.620333][ T6551] Bluetooth: hci4: command tx timeout [ 35.620364][ T6551] Bluetooth: hci1: command tx timeout [ 37.620203][ T53] Bluetooth: hci0: command tx timeout [ 37.620240][ T53] Bluetooth: hci2: command tx timeout [ 37.700029][ T6154] Bluetooth: hci3: command tx timeout [ 37.700053][ T53] Bluetooth: hci1: command tx timeout [ 37.700063][ T6154] Bluetooth: hci4: command tx timeout