last executing test programs: 4.296063543s ago: executing program 4 (id=130): syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa0086dd60f53a0400303a00fe8000000000000000000000000000bbff02000000000000000000000000000102009078"], 0x0) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x8040) (async) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 32) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) msgctl$MSG_INFO(0x0, 0xc, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r6, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000070601030000000000000000010000050900020073797a3100000000050001000700dd89baea3ed8c1"], 0x28}, 0x1, 0x0, 0x0, 0x40091}, 0x20000080) recvmsg(r8, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x0) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r7, 0x7}, &(0x7f0000000140)=0x8) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x8}, 0x8) (rerun: 32) syz_mount_image$vfat(&(0x7f0000000c80), &(0x7f00000000c0)='./file0\x00', 0x401, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0xfd, 0x2ce, &(0x7f0000000980)="$eJzs3c1qE1EUwPHTtGmTlDZZiKAgPehGN0MbnyBIC2JAqU1RF8LUTjRkTEomRiJiu3PrzncoLt0J1hfoxp17cVMEwYVdSEeayZhpnH6kNk3a/n9Q5nbuPXPvfBDODJmbjXtvnhbzjpE3qxKJqUQktiKbIimJiCcuy83S9poBGZagFbk2+st13fsPbmWy2elZ1ZnM3PW0qo5PfHz+8t3lT9XR+ffjH0ZkPfVw40f66/r59QsbW3P+1stVNXWhXK6aC7aliwWnaKjesS3TsbRQcqzKjvq8XV5aqqtZWhxLLFUsx1GzVNeiVddqWauVupqPzUJJDcPQsYScNYN7VcbDVuZWZ2fNTEedRDocFI5T6FmuVDLmYGhlbvU4BgUAAPrLv/m/tOX/2zm/Z7f8/+eXS3c7zf+fFBwtOFraL/+PCPl/9zTy/63QpBGnQ3T7BiBjJkJv3cj/AQAAAAAAAAAAAAAAAAAAAAA4CTZdN+m6btJf+n8jIhKTrZjXyk32epzojr3Pv4j/fyBkoIfDxRELvLgXE7Ff13K1nLf06jN5KYgtlkxGRX43rocmrzxzMzs9qQ0pWbOXm/GNlwRH/HhfKjx+yovXQPxyLReVRLD/tCTlXHh8ui0+KiK13LBcvRKINyQpnx9JWWxZbFzXrfhXU6o3bmfb+o832gEAAAAAcBoY+ldq5/2vN5ukYag/bUhbvbey9XxAkvs8H1BZG5ZW/JBcHOrdfgMAAAAAcJY49RdF07atyuELE/P/Fd4Hhbh0HnUkh+6EFYzm18H2bOy6buMHYw645bdxkV2qIrJrVbcL30WkDw74URe+PfNO4EEa9/JTCQAAAEA3tJL+Xo8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICz66CTh/ntDzP3WKC7wd7sJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAf/gQAAP//zpkXWw==") r9 = syz_clone(0x20a04000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r9, 0x12) (async) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000040)={0x11}) 4.295639243s ago: executing program 4 (id=131): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f00000001c0)={@loopback, r2}, 0x14) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="010104"], 0xc) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x4, 0x100, "1a182a", 0x86, 0x6}) 4.24588174s ago: executing program 4 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000f80f000007"], 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x10) rseq(0x0, 0x0, 0x40000, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffef, @rand_addr=0x64010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000009058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x279, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x1e, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc2c, 0x0, 0x0, 0x0, 0x1}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, @printk={@d}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x168f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0xa, 0x0, 0x2, 0x4, 0x4}]}, &(0x7f0000000700)='syzkaller\x00', 0x4, 0xb2, &(0x7f0000000900)=""/178, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x9, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r1, r1, r1, r1], 0x0, 0x10, 0xbdf3}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0xd1, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="7ecd83c4e7af79e1a9e7432547d0516241ff2a9343ffa3de37671df6cd9f7f614e69a7e729c47b2f89983f4677e7b6528a652cc0d4148a636089b1722fcbd219d848057cdcad629ffb6c931e3bb95646315bf8d37d9b843ecadb2bca27902607e550ba2eead0152993805307bb116336cfc0c8b393199e0808fa8be9badc287817b52d893db4e229aae8a5", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX=r6, @ANYRESOCT=r5, @ANYRESHEX=r5, @ANYRESDEC=r5, @ANYRES16=r3, @ANYRES32=r5], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r8, 0x0, 0x5003) syz_clone3(&(0x7f00000004c0)={0x1280000, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0), {0x3a}, &(0x7f0000000200)=""/252, 0xfc, &(0x7f0000000300)=""/59, &(0x7f0000000340)=[r8], 0x1, {r9}}, 0x58) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 3.958560098s ago: executing program 4 (id=134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000005480), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000280)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x100000002, 0x3a, 'Ui\xe7\xc7\x10\xd8t*Y\xed{ot\x1b\x1a\xde*\xb0d.', 0x3a, 'dont_appraise', 0x3a, './file0', 0x3a, [0x43, 0x4f, 0x4f, 0x43, 0x50, 0x43]}, 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) fchown(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x301}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x82, 0x57, 0x0, 0x0, 0x0, 0x3, {0x0, 0x0, 0x0, 0x10000}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x10) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x4903, 0x3a, 'uid>', 0x3a, '*', 0x3a, './file0', 0x3a, [0x50, 0x46, 0x4f, 0x50, 0x43]}, 0x31) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100003042bbd70f2fddbdf2500000300", @ANYRES32=0x0, @ANYBLOB="20100000000000001400350067656e65766530000000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0xe0a0ffd997287dd5}, 0x40080) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003b40), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r11, &(0x7f0000003c00)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r13 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r13, 0x6, 0x0, 0x0, 0x0) r14 = fsmount(r13, 0x0, 0xe) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r14, @ANYRES32=r12, @ANYBLOB="120000000600000000000000", @ANYRES32, @ANYBLOB="240ee708a81c", @ANYRES64=0x0], 0x10) 2.986587669s ago: executing program 4 (id=147): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) 2.968640022s ago: executing program 4 (id=149): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x2, 0x300, 0xfffffffe, 0x257, 0x0, r5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0x1000000, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) (async, rerun: 32) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) r6 = gettid() (rerun: 32) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r9, 0x0, r8, 0x0, 0x6, 0x0) pipe2$9p(0x0, 0x0) (async) tee(r7, 0xffffffffffffffff, 0x4e, 0x5) 2.287500847s ago: executing program 3 (id=161): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000, 0x40000) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000ac0)={0x0, 0x0, '\x00', @bt={0xffffff7f, 0x9, 0x4, 0xe54, 0x5, 0x8000000000000000, 0x0, 0xa}}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00030000000006"], 0x30}}, 0x4090) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x627e, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000002900000037000000840000000000000024000000000000002900000032000000fe80000000000000000000000000002f", @ANYBLOB="a363f01759420a7efb347bf0c1a55eea", @ANYBLOB="0003c425"], 0x40}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xffffffff, @mcast2, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="b882d26344b1fdc9b4dd7ca1906176e7096c702d7a29f6611115eb", 0x1b}, {&(0x7f00000003c0)="57f0b0d636c39f59640c0261cee8aa616f82f8458622d1db2b85b7d0877cd5b9f3b9762513fceda2c392b74c26dec80bb40de91d84893297e35decfa20b092d1a5120f73fb4796e40e2cb05bc5393aa21d0b4fb6a869ea98f16a9d9d335534986e99be23f6533ead1d8cb6cb23", 0x6d}], 0x2, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts={{0x30, 0x29, 0x36, {0x1d, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}}}], 0x48}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0xffffffff, @private2, 0x7fffffff}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000540)="f996535a4371a2cdd47eee8dba3d00714228e99d75d6f1dcd48a878422ff122439b4600bdbf968c33dcb3917b549591b6344491c04b59dc138bfde616a7899a0a469e22b1a", 0x45}, {&(0x7f00000005c0)="784ebb34437df3fb2e13c721", 0xc}, {&(0x7f0000000600)="fa3de3e13655369cd55296547efba8e8e1e09435ddad1caee79d2f6da98c5d92f8ffeca1f19afc56e5896ed0986b7480f51c10841ad2d9", 0x37}], 0x3, &(0x7f0000000680)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x2, 0x4, 0x0, [@private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x70}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000b80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x10, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x16, 0x4, 0x1, 0x81, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x30}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x0, 0x8, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x138}}], 0x4, 0x40440c0) syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000, 0x40000) (async) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000ac0)={0x0, 0x0, '\x00', @bt={0xffffff7f, 0x9, 0x4, 0xe54, 0x5, 0x8000000000000000, 0x0, 0xa}}) (async) socket$inet6(0xa, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000010000000000a00030000000006"], 0x30}}, 0x4090) (async) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f00000000c0)=0xfffffff7, 0x4) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@loopback}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) (async) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x627e, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000002900000037000000840000000000000024000000000000002900000032000000fe80000000000000000000000000002f", @ANYBLOB="a363f01759420a7efb347bf0c1a55eea", @ANYBLOB="0003c425"], 0x40}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0xffffffff, @mcast2, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="b882d26344b1fdc9b4dd7ca1906176e7096c702d7a29f6611115eb", 0x1b}, {&(0x7f00000003c0)="57f0b0d636c39f59640c0261cee8aa616f82f8458622d1db2b85b7d0877cd5b9f3b9762513fceda2c392b74c26dec80bb40de91d84893297e35decfa20b092d1a5120f73fb4796e40e2cb05bc5393aa21d0b4fb6a869ea98f16a9d9d335534986e99be23f6533ead1d8cb6cb23", 0x6d}], 0x2, &(0x7f0000000480)=[@hoplimit={{0x14, 0x29, 0x34, 0x6}}, @hopopts={{0x30, 0x29, 0x36, {0x1d, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast1}]}}}], 0x48}}, {{&(0x7f0000000500)={0xa, 0x4e21, 0xffffffff, @private2, 0x7fffffff}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000540)="f996535a4371a2cdd47eee8dba3d00714228e99d75d6f1dcd48a878422ff122439b4600bdbf968c33dcb3917b549591b6344491c04b59dc138bfde616a7899a0a469e22b1a", 0x45}, {&(0x7f00000005c0)="784ebb34437df3fb2e13c721", 0xc}, {&(0x7f0000000600)="fa3de3e13655369cd55296547efba8e8e1e09435ddad1caee79d2f6da98c5d92f8ffeca1f19afc56e5896ed0986b7480f51c10841ad2d9", 0x37}], 0x3, &(0x7f0000000680)=[@rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x2, 0x4, 0x0, [@private2, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x70}}, {{&(0x7f0000000700)={0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe}, 0x1c, &(0x7f0000000740), 0x0, &(0x7f0000000b80)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x10, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x16, 0x4, 0x1, 0x81, 0x0, [@loopback, @dev={0xfe, 0x80, '\x00', 0x30}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7ff}}, @pktinfo={{0x24, 0x29, 0x32, {@private0={0xfc, 0x0, '\x00', 0x1}, r3}}}, @rthdr={{0x38, 0x29, 0x39, {0x84, 0x4, 0x0, 0x8, 0x0, [@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}, @hopopts={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}]}}}, @tclass={{0x14, 0x29, 0x43, 0x6}}], 0x138}}], 0x4, 0x40440c0) (async) 2.210549429s ago: executing program 3 (id=163): syz_read_part_table(0x5e4, &(0x7f0000000000)="$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") (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)={0x40, r1, 0x1, 0x70bd2a, 0x0, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}]}, 0x40}}, 0x20044084) (async) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000020c0), 0x101800, 0x0) (async, rerun: 64) r3 = epoll_create1(0x0) (rerun: 64) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000240)={0x2000}) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, 0x0, &(0x7f0000000040)) 2.104272573s ago: executing program 3 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x61) r0 = syz_mount_image$fuse(0x0, &(0x7f00000004c0)='./file7\x00', 0x2020, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]}) name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x799, 0x401}, 0x109b, 0x7}}, &(0x7f0000000140), 0x1400) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) chdir(&(0x7f0000000300)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2) 1.908089641s ago: executing program 3 (id=167): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) 1.890474988s ago: executing program 1 (id=169): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") (async) r3 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109242, 0x62) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0x1) (async) ioctl$FIBMAP(r3, 0x1, &(0x7f00000000c0)=0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="012800040000000000004b00000008000300", @ANYRES32=r2], 0x58}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="012800040000000000004b00000008000300", @ANYRES32=r2], 0x58}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010200004"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8bcd5ffb7020000083f1800cf03000000000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x5c, &(0x7f0000000380)=""/92, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x4a}, 0x94) 1.834830302s ago: executing program 3 (id=170): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfa, {{@in6=@private0, @in=@empty, 0x0, 0x0, 0x800, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0x5, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x20048000) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045000028fffe00009506907864010101ac1414aa00004e22eb7b1ba689769d8ef39c2249b7bd07e710126d2f43818fd5fbde7b8d39a4b838bd4d4c0fc9262eccd197d52818e771e23cfd023dee1799a7d724816ef750", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c1000ca90781000"], 0x0) syz_usb_disconnect(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='sys/bus/pci/drivers/vfio-pci/new_id\x00', 0x1, 0x0) 1.150200938s ago: executing program 1 (id=174): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB="30010000", @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbbf25170000001c000280080001009d0a000008000200000200000800080000000000000006800400020004000300080001000600000008000600030000002800030009b07c95c270194b5173a83dab752f4de72aada8964e18c08b0ce10800060001000000040002000800010006000000080001000200000008000600000000007c0005801c000280080001001000000008000300070000000800030088e60000140002800800030008000000080004000100000008000100756470000b51e0fdd595be3afb08000100657468000c0002800800030000000080070001006962000008000100657468000c0002800800010013000000080001006574680008000100657468001c00038008000200345a000008000100ff00000008000100030000000000000000000000000307b436d111951fbbfe82af0a971fc33d3fa97d2db60d4de1a4c4cdb90dee9e0afc44ee3117ab5ba990e0c178fbf83b3f9d74cdc1c6f35a37b30d89c17a08820b0894fdbcc4e7f9196debaa6bcf8a1a119d"], 0x130}}, 0x4048804) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x1, 0x40, 0x1db, 0xfffffff7, {{0x14, 0x4, 0x0, 0x38, 0x50, 0x67, 0x0, 0x8, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0xec, 0x0, 0x8, [0x7fff, 0x0, 0x4, 0x0, 0x7f, 0x5, 0x2]}, @timestamp={0x44, 0x10, 0x28, 0x0, 0x7, [0x0, 0x7f, 0x800]}, @end]}}}}}) connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={0x2c, r6, 0x801, 0x70bd24, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x2400c000) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f00000007c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x254, r6, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x656a9994}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2281}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7871}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x70, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000000}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a5}]}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r11, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/dynamic_debug/control\x00', 0x10002, 0x0) 1.037659619s ago: executing program 1 (id=176): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) 1.035608081s ago: executing program 1 (id=177): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@dioread_nolock}, {@lazytime}, {@norecovery}, {@nodioread_nolock}]}, 0x4, 0x4e9, &(0x7f0000001140)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x428}}}, 0x7) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mtd(0x0, 0xa, 0x2000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x332}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x2}, 0x18) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x1c, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa190163081efd19f}}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x53}, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000140)=@v1={0x2, @adiantum, 0x3, @auto="0900012000"}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x402, &(0x7f00000001c0)={[{@xino_off}, {@xino_on}, {@uuid_on}], [{@euid_gt={'euid>', r7}}, {@subj_user={'subj_user', 0x3d, 'nodioread_nolock'}}, {@smackfsdef={'smackfsdef', 0x3d, 'dioread_nolock'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@permit_directio}, {@seclabel}, {@smackfshat={'smackfshat', 0x3d, '!'}}, {@obj_type={'obj_type', 0x3d, '}'}}, {@pcr={'pcr', 0x3d, 0x15}}]}) 591.625347ms ago: executing program 3 (id=185): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='&+@\\\x00', &(0x7f0000000100)='\':\xb2-!(\x00', 0x0) syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x3, 0x3}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x800000000000002, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x80, 0x2, 0x204}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x68, r8, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x100001}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x200000000000004}]}, 0x68}, 0x1, 0x620b}, 0x0) syz_io_uring_submit(r5, r6, r7, 0x0) syz_io_uring_submit(r2, r6, 0x0, &(0x7f00000005c0)=@IORING_OP_TIMEOUT={0xb, 0x30, 0x0, 0x0, 0xa, &(0x7f0000000080)={0x77359400}, 0x1, 0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/node/node0/reclaim\x00', 0x1, 0x0) write(r11, &(0x7f0000000500)='1', 0x1) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000440), 0x10) listen(r12, 0xb7) r13 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r13, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) writev(r13, &(0x7f00000002c0), 0x100000000000001b) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1100000004000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000005cb4752d8fc1414974ea8620ac92a43bde48a62f5eac70464ac41fbf4b1e707e14823b27f556fb546c891f0064ed8a0413a961c86cd4"], 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r15, 0x4048587b, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x15, &(0x7f0000000140)=ANY=[@ANYBLOB="b4b6806bb329774e2300000043dd000018510000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000008500000065000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x200, 0x2b, &(0x7f0000000380)=""/43, 0x41100, 0x40, '\x00', r10, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0xa, 0xa2, 0x60c4e6b6}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[r1, r11, r1, r1, r15], &(0x7f00000004c0)=[{0x10000, 0x2, 0x0, 0x4}, {0x4, 0x3, 0x3, 0x9}, {0x1, 0x2, 0xd, 0xb}, {0x4, 0x3, 0x8, 0x1}], 0x10, 0x47a4}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) 540.02283ms ago: executing program 0 (id=186): memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0xd) (async) r0 = memfd_create(&(0x7f00000002c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0xd) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={r0, &(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x809c0, &(0x7f0000000140)={@_ha_fsid={[0x6, 0x8]}, {0xff, 0x6, 0x0, 0x4}}, 0xc, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x6}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = fcntl$dupfd(r1, 0x0, r1) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}], 0x1, 0x40000042, 0x0) (async) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}], 0x1, 0x40000042, 0x0) io_uring_setup(0x3814, &(0x7f0000000240)={0x0, 0xae6, 0x4000, 0x3, 0x1c2, 0x0, r2}) (async) io_uring_setup(0x3814, &(0x7f0000000240)={0x0, 0xae6, 0x4000, 0x3, 0x1c2, 0x0, r2}) dup(r0) (async) r3 = dup(r0) write$binfmt_elf64(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff7aa33e0200000400000002003e00cd000000b866a45c7d907a3fb137c0010000000000004000000000000000ea020000000000100000010005000000810200007000000000000000f50f00000000000002ffffffffffffff9700000000001727a09f5a44ac000007000000000000000000e2"], 0x78) r4 = fanotify_init(0x200, 0x1000) rseq(0x0, 0x0, 0x20000001, 0x0) r5 = dup(r3) r6 = syz_open_dev$mtd(&(0x7f0000000040), 0x48a99fbe, 0x10b240) ioctl$MEMSETBADBLOCK(r6, 0x40084d0c, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) lseek(r7, 0xffffffffffffffff, 0x0) fanotify_mark(r4, 0x1, 0x48001028, r5, 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 534.707135ms ago: executing program 2 (id=187): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) 463.879496ms ago: executing program 2 (id=188): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "49d50c", 0x30, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, '\x00fP', 0x6, 0x11, 0x0, @mcast1, @private2}}}}}}}, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0xfe, 0x7, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x700, 0x85, 0x2}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6e, 0x6e, 0xb, [@struct={0xe, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x10, 0x2, 0x2}, {0x6, 0x5}]}, @fwd={0x9}, @datasec={0x8, 0x3, 0x0, 0xf, 0x2, [{0x2, 0x5, 0xe}, {0x4, 0x5, 0x4}, {0x8, 0xff, 0xfffffffc}], "a94f"}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x18, 0x30, 0x5f, 0x61, 0x30, 0x2e, 0x30, 0x2e, 0x61]}}, &(0x7f0000000480)=""/101, 0x93, 0x65, 0x0, 0x6}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x8, 0x4, 0xe, 0x22160, r1, 0x27, '\x00', r2, r3, 0x1, 0x2, 0x0, 0xc}, 0x50) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000001980)=0x1) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) r5 = socket$rxrpc(0x21, 0x2, 0xa) listen(r5, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r4, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/178, 0xb2}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe000000000000040001"], 0x80}}, 0x8000) socket$netlink(0x10, 0x3, 0x8) 463.201857ms ago: executing program 0 (id=189): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x88}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="1400000054000100000000000000000007"], 0x48}}, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r4, 0x10, 0x2000, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000200000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x300, 0x0, 0x2, 0x0, @private=0xa010101, @multicast1}, {0x22, 0xc0, 0x0, @local}}}}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="114353012008ba00000037510800", 0x59f, 0x4008015, &(0x7f00000000c0)={0x11, 0xe5, r7, 0x1, 0x7}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 462.243292ms ago: executing program 2 (id=190): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000002c0)=[{&(0x7f0000001740)=""/12, 0xc}], 0x1, 0x0, 0xfffffffe) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070529bd7000fcdbdf251b00000010002e800c0005000201aaaaaaaaaaaa0c00060001"], 0x30}}, 0x40) 424.978857ms ago: executing program 2 (id=191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x8000}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r3, 0x1, 0xd8, 0x6, @remote}, 0x14) io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x50c}) io_setup(0x2ae1, &(0x7f0000000180)=0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c4100000", @ANYRES16=0x0, @ANYBLOB="01002dbd7000ffdbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="06001a010200000008001400", @ANYRES32=0x0, @ANYBLOB="06003600ffff00001800bd00a85f01000b000600ff000f001d0002000900008006001201090000000500e400000000000400118006001200010000000800a400020000005400ac00a12dbcf2377f258dbff51655e0a04c0a176c31c5b653de16a4202be84ec5bab0166e1086c13d90d213791bdaf7f53bef29cd60f674fd7af6bf52ce830d7099463f55af3f9bff78211ac408521faea7c7"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x4004004) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r13, 0x1, 0x70bd2d, 0x25dfdbfb, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x2c, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbf8, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r11}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2c76}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r14}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x44) r15 = eventfd2(0x6, 0x81801) io_submit(r8, 0x1, &(0x7f0000000000)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x40, r7, &(0x7f0000000040)="20f59694db520fdd26bf4a7ce6cdcbc4af395590c42900eee3a1669387719013b2b2a3b4", 0xfffffffffffffd81, 0x20000, 0x0, 0x3, r15}]) 329.54153ms ago: executing program 0 (id=192): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg(r0, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000780)='5', 0x1}], 0x1, &(0x7f0000002c00)=[{0x10, 0x1, 0x7ff}], 0x10}}], 0x2, 0x404c044) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x92, 0x4) (async) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x5}, 0x1c) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) (async) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) 236.197715ms ago: executing program 0 (id=193): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@dioread_nolock}, {@lazytime}, {@norecovery}, {@nodioread_nolock}]}, 0x4, 0x4e9, &(0x7f0000001140)="$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") r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x2}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000140)=@v1={0x2, @adiantum, 0x3, @auto="090001200000c000"}) 213.486258ms ago: executing program 2 (id=194): unshare(0x28000600) msgget$private(0x0, 0x80) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32, @ANYBLOB="56060800000000002400128009000100626f6e640000000014000280050022"], 0x44}}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) migrate_pages(0x0, 0xd1, &(0x7f0000000000), &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r3, 0x8004af70, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf092000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f00000003c0)={0x1}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}, @IFLA_BRPORT_BCAST_FLOOD={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x200088c2) r7 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$smackfs_ptrace(r7, &(0x7f00000001c0)=0x41, 0x14) r8 = msgget(0x1, 0x411) msgsnd(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x1008, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={&(0x7f0000000000)="a4927f831f599a9892acad07295821cacbf1f1c0b05370782c9d29712a9f6a", &(0x7f0000000200)=""/119, &(0x7f00000004c0)="2053c6c74bdd06b08984cd18a9d64f7231c914cb7df0cb029139459342768b47db4840aed4f8ad290cd46a4079cb423119f444376984bb4a22ec03e326f84ca0e1e45cd4f47fa7b6a7c9bed516ec91ba7e323cd3539e9fb83f76b96e02e6b12c26a766f8a866da03155876b7919afed9e74dafded9a4fd7bd72e2f6b16ff82b3c6b074fa9f2265036ddf53aa8e363eb47801d79da69c1a5439314a91ecc82b9f13d7a70c705bc18d7d5e6f87083eddac", &(0x7f00000006c0)="ee3ac75bd4429402507ffe3edff0c0c170e0ae896de26a3648f607568086566fef5ddea6c44b99efbcf0169aec9d8fa83752883939af4af4d1f8e28de2362bc584b1ced7d5ba2c8901a9200fe36c6333b0d37c8f7b7d5fe25eb1fedfb60e269f2e46bbca16996916cff5e114bf555139dc3df0b44519ac996fdb368dbe8599ad6bc63a5ef19594cb1ef02a6305be7230320b55b8a43ad290e6252cbe264945fa8b0b6ce1a6a0b1906f09be68cceac1994dafffa46a05b0cb6a791902c2ff26e903e575d754182bce96b6d161cfdb389ae9f13d857f013b046737e419a9863bbd5b7a5430ee5230cb093cbae3089c83308b159b556aa47f0567950f746f", 0x4e17ed87, r5, 0x4}, 0x38) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000800)=""/243, 0x8000, 0x0, 0x1, 0x4}, 0x20) 198.642134ms ago: executing program 0 (id=195): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b02b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e52e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02d7147f667ec516545366cc56018bc1b563b100a2e4c51c06546a25a2005847c9fcede77362f54890e96075086110ee9cec7a20b139d819c94dc4c36c0b9ae55721f33f037cf92f2c4941a4bc36eb6c79859a1e120eb2c9ff5210b7cf35bf5d1d0b61a8fc3c5f55888eca4c844ed0436afaa9e9ca1a8fa1ffbbdf0fd03a6263fc21bcaaeae592a90fd64085944d4b5de552f49e2ff3a09de62f85d0c6020cdb7ef052a53afe", @ANYRESOCT=0x0], 0x3, 0x26f, &(0x7f0000000680)="$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") (async, rerun: 64) r1 = socket(0x6, 0x1, 0xff) (rerun: 64) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) dup(0xffffffffffffffff) (async) fchown(r3, 0x0, r2) (async) write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"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", 0x1000}}, 0x375) (async) unshare(0x22020600) (async, rerun: 64) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) (rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x303}, "288df0f24a731545", "d81a8b0bb2184490d0a49c6f526121265e5ac7e71afe009d8308e32e309364ef", "edb83d49", "24f99acadf9e60af"}, 0x38) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="48000000140001002dbd7000fbdbdf250a01b9fd", @ANYRES32=0x0, @ANYBLOB="14000600da0f0000f5ffffff01081008005406000014000100fc000000000000000000000000000001"], 0x48}}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCGFEATURE(r7, 0xc0404807, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) (async) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001600), 0x740, 0x0) ioctl$BLKSECTGET(r9, 0x1267, &(0x7f0000001640)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYRESDEC=r8, @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000400000000000000010000008500000041000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000008400)={r10, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000008340)="ff08000000d9cb4608008cdd8af4", 0x0, 0x7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 76.809567ms ago: executing program 1 (id=196): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x17c, r0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0xc810}, 0x8000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x4c, 0x14, 0x1, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, {0x0, 0x0, [], [0x0, 0x0, 0xfffffffd]}}}, 0x4c}}, 0x0) 76.653026ms ago: executing program 0 (id=197): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000050000000000000000000071183a000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 12.098293ms ago: executing program 2 (id=198): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file1/file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f000043e000/0x1000)=nil, 0x1000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) pselect6(0x40, &(0x7f0000000000)={0x3, 0x4, 0x7, 0x4, 0x4, 0x2, 0x0, 0x4}, &(0x7f0000000040)={0x8, 0x3, 0xf9c5, 0xffff, 0x8, 0x5, 0x73a, 0x1}, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x7, @loopback, 0xf854}}, [0x8, 0x2, 0x5, 0x74, 0x5, 0x4, 0x10000, 0x10000, 0x4, 0xffffffffffffffae, 0x7fffffff, 0x10000, 0x2, 0x2]}, &(0x7f0000000540)=0x100) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000080208000fd0400050000000008000100e000000208"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000580)={r2, 0xfffffffc, 0xfff, 0x3}, &(0x7f00000005c0)=0x10) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) 0s ago: executing program 1 (id=199): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x0, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xd, 0xf, 0x4, 0xffff, 0x2, 0x3, 0x10007f, 0x20000026, 0x4d, 0x6, 0x3, 0x9, 0x2, 0x100, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0xffffffa8, 0x7, 0x3, 0x9, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x201, 0x3e, 0x10000, 0x6, 0x6, 0x9, 0x5, 0x4, 0x8, 0xe, 0x80, 0x1, 0xd, 0x6, 0x8, 0x4, 0x1, 0x2], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e4, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x4, 0x1, 0xff, 0x7fff, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4001, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0x3ff, 0xffff, 0x46, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x6, 0x103], [0x3, 0xa, 0x4, 0x5, 0xffffffff, 0x100, 0x8d2, 0x9, 0x7, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x1ff, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x800006, 0x38, 0x800003, 0x6000, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0x9, 0x7, 0xa9, 0x5, 0x3, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0xff, 0x4, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0x10000, 0xfffffff7, 0x2, 0x5, 0x1, 0xfffff800, 0x7, 0xe0a7, 0x6, 0x96, 0x381f, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0x6, 0x10080, 0x3, 0x80, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x40000006, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) (async) shutdown(r1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) recvfrom(r1, &(0x7f00000014c0)=""/4074, 0xffa, 0x40010060, 0x0, 0xfffffffffffffe5d) (async) recvfrom(r1, &(0x7f00000014c0)=""/4074, 0xffa, 0x40010060, 0x0, 0xfffffffffffffe5d) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_setup(0x401, &(0x7f0000000200)=0x0) io_destroy(r4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 27.776068][ T4699] cgroup: Unknown subsys name 'net' [ 27.915692][ T4699] cgroup: Unknown subsys name 'cpuset' [ 27.917722][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.087019][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.837461][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.839101][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.851828][ T4716] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.852122][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.854897][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.857375][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.869313][ T4724] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.870830][ T4724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.870950][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.871045][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.871353][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.872194][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.872463][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.872907][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.873178][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.873757][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.874118][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.874737][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.875802][ T4724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.875978][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.876992][ T4716] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.877311][ T4724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.877467][ T4724] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.880217][ T4724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.880345][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.185809][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.186083][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.186151][ T4720] bridge_slave_0: entered allmulticast mode [ 29.186622][ T4720] bridge_slave_0: entered promiscuous mode [ 29.207406][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.207465][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.207538][ T4720] bridge_slave_1: entered allmulticast mode [ 29.207994][ T4720] bridge_slave_1: entered promiscuous mode [ 29.232762][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.247800][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.288310][ T4720] team0: Port device team_slave_0 added [ 29.298542][ T4720] team0: Port device team_slave_1 added [ 29.328718][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.330012][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.334370][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.342624][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.342668][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.342867][ T4718] bridge_slave_0: entered allmulticast mode [ 29.343304][ T4718] bridge_slave_0: entered promiscuous mode [ 29.349147][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.350609][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.354765][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.357826][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.359269][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.360618][ T4718] bridge_slave_1: entered allmulticast mode [ 29.362293][ T4718] bridge_slave_1: entered promiscuous mode [ 29.363830][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.363883][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.363951][ T4711] bridge_slave_0: entered allmulticast mode [ 29.364454][ T4711] bridge_slave_0: entered promiscuous mode [ 29.371750][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.373188][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.374589][ T4711] bridge_slave_1: entered allmulticast mode [ 29.375068][ T4711] bridge_slave_1: entered promiscuous mode [ 29.402264][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.407499][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.408939][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.410383][ T4721] bridge_slave_0: entered allmulticast mode [ 29.412003][ T4721] bridge_slave_0: entered promiscuous mode [ 29.414745][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.415684][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.418525][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.418580][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.418674][ T4712] bridge_slave_0: entered allmulticast mode [ 29.419095][ T4712] bridge_slave_0: entered promiscuous mode [ 29.420305][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.420327][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.420379][ T4712] bridge_slave_1: entered allmulticast mode [ 29.420763][ T4712] bridge_slave_1: entered promiscuous mode [ 29.427892][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.436629][ T4720] hsr_slave_0: entered promiscuous mode [ 29.436995][ T4720] hsr_slave_1: entered promiscuous mode [ 29.437364][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.437390][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.437446][ T4721] bridge_slave_1: entered allmulticast mode [ 29.437900][ T4721] bridge_slave_1: entered promiscuous mode [ 29.442536][ T4718] team0: Port device team_slave_0 added [ 29.443285][ T4718] team0: Port device team_slave_1 added [ 29.450392][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.452716][ T4711] team0: Port device team_slave_0 added [ 29.462000][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.462033][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.462051][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.462665][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.462673][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.462687][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.465826][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.469820][ T4711] team0: Port device team_slave_1 added [ 29.490539][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.490570][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.490581][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.492821][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.501310][ T4712] team0: Port device team_slave_0 added [ 29.501899][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.501906][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.501916][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.503157][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.509009][ T4718] hsr_slave_0: entered promiscuous mode [ 29.509355][ T4718] hsr_slave_1: entered promiscuous mode [ 29.509576][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 29.509615][ T4718] Cannot create hsr debugfs directory [ 29.511149][ T4712] team0: Port device team_slave_1 added [ 29.533609][ T4721] team0: Port device team_slave_0 added [ 29.535113][ T4721] team0: Port device team_slave_1 added [ 29.539951][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.540080][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.540098][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.541077][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.541088][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.541099][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.557196][ T4711] hsr_slave_0: entered promiscuous mode [ 29.557542][ T4711] hsr_slave_1: entered promiscuous mode [ 29.557746][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 29.557757][ T4711] Cannot create hsr debugfs directory [ 29.569770][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.569797][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.569813][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.570562][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.570569][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.570581][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.606286][ T4712] hsr_slave_0: entered promiscuous mode [ 29.607884][ T4712] hsr_slave_1: entered promiscuous mode [ 29.609105][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.610158][ T4712] Cannot create hsr debugfs directory [ 29.629925][ T4721] hsr_slave_0: entered promiscuous mode [ 29.630249][ T4721] hsr_slave_1: entered promiscuous mode [ 29.630440][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 29.630450][ T4721] Cannot create hsr debugfs directory [ 29.710721][ T4720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.713948][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.715272][ T4720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.716663][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.729089][ T4720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.731407][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.731782][ T4720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.733642][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.753258][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.756440][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.759062][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.761706][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.762542][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.765188][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.769109][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.771533][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.775738][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.775791][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.775954][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.775995][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.790929][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.790980][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.791094][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.791127][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.811086][ T4711] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.814893][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.819199][ T4711] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.821734][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.822402][ T4711] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.823795][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.827100][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.832897][ T4711] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.835708][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.838822][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.840579][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.843395][ T1320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.845533][ T1320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.853607][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.860012][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.860068][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.869560][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.869603][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.889580][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.892062][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.893675][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.896466][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.909028][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.911417][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.913492][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.915965][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.931975][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.940927][ T4721] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.943699][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.945953][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.948593][ T4721] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.953715][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.954106][ T4721] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.957909][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.958297][ T4721] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.961711][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.973180][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.979428][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.988677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.988716][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.992216][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.992257][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.006170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.006221][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.014229][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.017050][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.030153][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.030205][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.059990][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.065350][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.075328][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.078469][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.078518][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.078855][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.078876][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.127087][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.129152][ T1221] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.129205][ T1221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.141710][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.144713][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.144760][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.171032][ T4720] veth0_vlan: entered promiscuous mode [ 30.184695][ T4720] veth1_vlan: entered promiscuous mode [ 30.202859][ T4720] veth0_macvtap: entered promiscuous mode [ 30.207035][ T4720] veth1_macvtap: entered promiscuous mode [ 30.221733][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.225776][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.241750][ T1429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.241968][ T1429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.241997][ T1429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.242014][ T1429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.294224][ T3622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.294266][ T3622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.324065][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.324107][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.328900][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.359476][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.378537][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.387529][ T4718] veth0_vlan: entered promiscuous mode [ 30.398309][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.407050][ T4718] veth1_vlan: entered promiscuous mode [ 30.412164][ T4711] veth0_vlan: entered promiscuous mode [ 30.418530][ T4711] veth1_vlan: entered promiscuous mode [ 30.436626][ T4718] veth0_macvtap: entered promiscuous mode [ 30.438009][ T4718] veth1_macvtap: entered promiscuous mode [ 30.452180][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.470258][ T4890] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 30.474718][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.482814][ T4711] veth0_macvtap: entered promiscuous mode [ 30.485825][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.498145][ T4711] veth1_macvtap: entered promiscuous mode [ 30.505632][ T4712] veth0_vlan: entered promiscuous mode [ 30.507149][ T1320] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.507253][ T1320] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.507276][ T1320] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.507293][ T1320] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.521178][ T4890] loop0: detected capacity change from 0 to 128 [ 30.533001][ T4712] veth1_vlan: entered promiscuous mode [ 30.540183][ T4712] veth0_macvtap: entered promiscuous mode [ 30.540779][ T4890] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.554689][ T4890] fscrypt (loop0, inode 12): Unsupported encryption flags (0x08) [ 30.560485][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.563575][ T4712] veth1_macvtap: entered promiscuous mode [ 30.570284][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.572750][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.588412][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.588477][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.588510][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.588532][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.598404][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.624505][ T1221] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.624641][ T1221] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.624721][ T1221] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.624865][ T1221] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.651267][ T4721] veth0_vlan: entered promiscuous mode [ 30.662096][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.662124][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.666074][ T4721] veth1_vlan: entered promiscuous mode [ 30.686385][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.686421][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.914550][ T4727] Bluetooth: hci1: command tx timeout [ 30.916115][ T4727] Bluetooth: hci3: command tx timeout [ 30.917620][ T4727] Bluetooth: hci2: command tx timeout [ 30.919010][ T4727] Bluetooth: hci4: command tx timeout [ 30.920410][ T4727] Bluetooth: hci0: command tx timeout [ 31.447540][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.447573][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.481339][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.481375][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.493052][ T4721] veth0_macvtap: entered promiscuous mode [ 31.512637][ T4721] veth1_macvtap: entered promiscuous mode [ 31.519682][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.519710][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.561282][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.561318][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.569356][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.575543][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.589461][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.591467][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.593261][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.593304][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.610425][ T4720] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.647228][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.647259][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.658042][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.658069][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.728708][ T4901] loop1: detected capacity change from 0 to 512 [ 31.731091][ T4901] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 31.747516][ T4901] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.2: bad orphan inode 13 [ 31.749507][ T4901] loop1: lost filesystem error report for type 5 error -117 [ 31.750947][ T4901] ext4_test_bit(bit=12, block=18) = 1 [ 31.753706][ T4901] is_bad_inode(inode)=0 [ 31.754585][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 31.754598][ C0] EXT4-fs (loop1): last error at time 31: ext4_orphan_get:1425 [ 31.755373][ T4905] qrtr: Invalid version 8 [ 31.988705][ T4901] NEXT_ORPHAN(inode)=0 [ 31.988749][ T4901] max_ino=32 [ 31.988777][ T4901] i_nlink=1 [ 32.700160][ T4901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 32.765311][ T4901] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 32.792212][ T4901] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set [ 32.799141][ T4901] Quota error (device loop1): write_blk: dquota write failed [ 32.799193][ T4901] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 32.799223][ T4901] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.2: Failed to acquire dquot type 1 [ 33.495943][ T4715] Bluetooth: hci0: command tx timeout [ 33.496056][ T4715] Bluetooth: hci4: command tx timeout [ 33.496162][ T4715] Bluetooth: hci2: command tx timeout [ 33.496228][ T4715] Bluetooth: hci3: command tx timeout [ 33.496289][ T4715] Bluetooth: hci1: command tx timeout [ 33.986585][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 34.201831][ T4922] loop2: detected capacity change from 0 to 512 [ 34.308991][ T4922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.793687][ T39] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-5 [ 34.793755][ T39] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 34.793789][ T39] loop1: lost filesystem error report for type 5 error -117 [ 34.820209][ T4922] fs-verity (loop2, inode 15): Unrecognized descriptor size: 0 bytes [ 35.243530][ T4935] syz.0.13 uses obsolete (PF_INET,SOCK_PACKET) [ 35.544421][ T4715] Bluetooth: hci3: command tx timeout [ 35.544465][ T4715] Bluetooth: hci2: command tx timeout [ 35.544493][ T4715] Bluetooth: hci4: command tx timeout [ 35.544513][ T4715] Bluetooth: hci0: command tx timeout [ 35.556091][ T4727] Bluetooth: hci1: command tx timeout [ 35.897750][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.204142][ T4940] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 36.204191][ T4940] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 36.414189][ T4944] FAULT_INJECTION: forcing a failure. [ 36.414189][ T4944] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 36.446410][ T4944] CPU: 0 UID: 0 PID: 4944 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT [ 36.446445][ T4944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.446454][ T4944] Call trace: [ 36.446460][ T4944] show_stack+0x2c/0x3c (C) [ 36.446480][ T4944] __dump_stack+0x30/0x40 [ 36.446493][ T4944] dump_stack_lvl+0xd8/0x12c [ 36.446504][ T4944] dump_stack+0x1c/0x28 [ 36.446514][ T4944] should_fail_ex+0x41c/0x590 [ 36.446526][ T4944] should_fail_alloc_page+0xec/0x10c [ 36.446535][ T4944] prepare_alloc_pages+0x194/0x4a4 [ 36.446545][ T4944] __alloc_frozen_pages_noprof+0x134/0x320 [ 36.446553][ T4944] alloc_pages_mpol+0x1ec/0x3c0 [ 36.446562][ T4944] alloc_frozen_pages_noprof+0xc4/0x10c [ 36.446571][ T4944] alloc_pages_noprof+0x30/0x148 [ 36.446579][ T4944] __pmd_alloc+0x54/0x77c [ 36.446587][ T4944] handle_mm_fault+0x18b8/0x253c [ 36.446594][ T4944] do_page_fault+0x4b0/0xb88 [ 36.446603][ T4944] do_translation_fault+0xc4/0x114 [ 36.446612][ T4944] do_mem_abort+0x70/0x194 [ 36.446621][ T4944] el1_abort+0x50/0x74 [ 36.446631][ T4944] el1h_64_sync_handler+0xdc/0x130 [ 36.446641][ T4944] el1h_64_sync+0x6c/0x70 [ 36.446648][ T4944] __arch_copy_to_user+0xd0/0x240 (P) [ 36.446656][ T4944] invoke_syscall+0x98/0x244 [ 36.446666][ T4944] el0_svc_common+0xec/0x23c [ 36.446675][ T4944] do_el0_svc+0x4c/0x5c [ 36.446685][ T4944] el0_svc+0x64/0x260 [ 36.446694][ T4944] el0t_64_sync_handler+0x48/0x148 [ 36.446703][ T4944] el0t_64_sync+0x198/0x19c [ 36.489611][ T30] audit: type=1326 audit(36.460:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4947 comm="syz.4.17" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9337a168 code=0x0 [ 36.609920][ T4958] netlink: 40 bytes leftover after parsing attributes in process `syz.4.17'. [ 36.616230][ T4958] loop4: detected capacity change from 0 to 128 [ 36.625544][ T4958] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.677316][ T4964] Zero length message leads to an empty skb [ 36.679009][ T4964] capability: warning: `syz.2.21' uses deprecated v2 capabilities in a way that may be insecure [ 37.624587][ T4715] Bluetooth: hci4: command tx timeout [ 37.624683][ T4715] Bluetooth: hci2: command tx timeout [ 37.624743][ T4715] Bluetooth: hci3: command tx timeout [ 37.628477][ T4714] Bluetooth: hci0: command tx timeout [ 37.629678][ T4727] Bluetooth: hci1: command tx timeout [ 37.708006][ T4972] netlink: 300 bytes leftover after parsing attributes in process `syz.2.22'. [ 37.824891][ T4721] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.838911][ T5000] loop2: detected capacity change from 0 to 256 [ 38.839215][ T5000] ======================================================= [ 38.839215][ T5000] WARNING: The mand mount option has been deprecated and [ 38.839215][ T5000] and is ignored by this kernel. Remove the mand [ 38.839215][ T5000] option from the mount to silence this warning. [ 38.839215][ T5000] ======================================================= [ 38.849828][ T4998] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 38.858452][ T4998] macvtap1: entered allmulticast mode [ 38.865892][ T4998] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 38.879207][ T4985] loop3: detected capacity change from 0 to 1024 [ 38.887337][ T5000] syz.2.28: attempt to access beyond end of device [ 38.887337][ T5000] loop2: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 38.902412][ T4985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.058894][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.073556][ T5018] loop0: detected capacity change from 0 to 1024 [ 39.140846][ T5018] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.161844][ T5030] netlink: 300 bytes leftover after parsing attributes in process `syz.2.38'. [ 39.171132][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.190104][ T5043] netlink: 'syz.3.42': attribute type 10 has an invalid length. [ 40.196530][ T5043] team0: Port device dummy0 added [ 40.203226][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.203438][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.203964][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.228278][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.228322][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.228346][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.286106][ T5043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.42'. [ 40.552422][ T5056] xt_hashlimit: max too large, truncated to 1048576 [ 40.575679][ T5062] warning: `syz.1.46' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 40.597823][ T5060] loop1: detected capacity change from 0 to 8192 [ 40.601560][ T5060] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.679853][ T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.747889][ T4727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 40.748550][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 40.748779][ T4727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 40.749114][ T4727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 40.749331][ T4727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.770955][ T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.843050][ T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.902775][ T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.948730][ T5066] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.948809][ T5066] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.948893][ T5066] bridge_slave_0: entered allmulticast mode [ 40.949341][ T5066] bridge_slave_0: entered promiscuous mode [ 40.950885][ T5066] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.950937][ T5066] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.950994][ T5066] bridge_slave_1: entered allmulticast mode [ 40.951583][ T5066] bridge_slave_1: entered promiscuous mode [ 40.960221][ T5066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.961355][ T5066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.970136][ T5066] team0: Port device team_slave_0 added [ 40.973025][ T5066] team0: Port device team_slave_1 added [ 40.980788][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.980811][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.980837][ T5066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.981364][ T5066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.981378][ T5066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.981397][ T5066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.993912][ T5066] hsr_slave_0: entered promiscuous mode [ 40.994229][ T5066] hsr_slave_1: entered promiscuous mode [ 40.994538][ T5066] debugfs: 'hsr0' already exists in 'hsr' [ 40.994554][ T5066] Cannot create hsr debugfs directory [ 41.091479][ T39] bridge_slave_1: left allmulticast mode [ 41.091530][ T39] bridge_slave_1: left promiscuous mode [ 41.091948][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.095611][ T39] bridge_slave_0: left allmulticast mode [ 41.095655][ T39] bridge_slave_0: left promiscuous mode [ 41.095725][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.227956][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.245405][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.348446][ T39] bond0 (unregistering): Released all slaves [ 42.272911][ T5093] FAULT_INJECTION: forcing a failure. [ 42.272911][ T5093] name failslab, interval 1, probability 0, space 0, times 1 [ 42.272946][ T5093] CPU: 0 UID: 0 PID: 5093 Comm: syz.3.50 Not tainted syzkaller #0 PREEMPT [ 42.272961][ T5093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 42.272967][ T5093] Call trace: [ 42.272970][ T5093] show_stack+0x2c/0x3c (C) [ 42.272988][ T5093] __dump_stack+0x30/0x40 [ 42.272999][ T5093] dump_stack_lvl+0xd8/0x12c [ 42.273009][ T5093] dump_stack+0x1c/0x28 [ 42.273018][ T5093] should_fail_ex+0x41c/0x590 [ 42.273030][ T5093] should_failslab+0xc4/0x120 [ 42.273038][ T5093] __kmalloc_noprof+0x108/0x6b8 [ 42.273048][ T5093] tomoyo_encode2+0x10c/0x330 [ 42.273056][ T5093] tomoyo_encode+0x34/0x50 [ 42.273064][ T5093] tomoyo_realpath_from_path+0x488/0x4dc [ 42.273072][ T5093] tomoyo_check_open_permission+0x1c4/0x394 [ 42.273079][ T5093] tomoyo_file_open+0x78/0xcc [ 42.273087][ T5093] security_file_open+0xbc/0x258 [ 42.273095][ T5093] do_dentry_open+0x2a8/0xfc0 [ 42.273105][ T5093] vfs_open+0x44/0x2dc [ 42.273114][ T5093] path_openat+0x21fc/0x2a60 [ 42.273122][ T5093] do_file_open+0x1c8/0x2e8 [ 42.273130][ T5093] do_sys_openat2+0x114/0x1e8 [ 42.273139][ T5093] do_sys_open+0xb0/0xe0 [ 42.273148][ T5093] __arm64_sys_openat+0xa8/0xc4 [ 42.273158][ T5093] invoke_syscall+0x98/0x244 [ 42.273168][ T5093] el0_svc_common+0xec/0x23c [ 42.273177][ T5093] do_el0_svc+0x4c/0x5c [ 42.273187][ T5093] el0_svc+0x64/0x260 [ 42.273197][ T5093] el0t_64_sync_handler+0x48/0x148 [ 42.273207][ T5093] el0t_64_sync+0x198/0x19c [ 42.273229][ T5093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 42.370466][ T1221] Bluetooth: hci5: Frame reassembly failed (-84) [ 42.370622][ T1320] Bluetooth: hci5: Frame reassembly failed (-84) [ 42.395771][ T1429] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 42.654132][ T5111] loop0: detected capacity change from 0 to 512 [ 42.655647][ T5111] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.655689][ T5111] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.667798][ T5111] EXT4-fs (loop0): 1 truncate cleaned up [ 42.668272][ T5111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.701847][ T4399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.799883][ T39] hsr_slave_0: left promiscuous mode [ 42.801893][ T39] hsr_slave_1: left promiscuous mode [ 42.802249][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.802267][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.803393][ T4724] Bluetooth: hci4: command tx timeout [ 42.806275][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.806287][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.815562][ T39] veth1_macvtap: left promiscuous mode [ 42.815612][ T39] veth0_macvtap: left promiscuous mode [ 42.815668][ T39] veth1_vlan: left promiscuous mode [ 42.815709][ T39] veth0_vlan: left promiscuous mode [ 42.956908][ T5143] loop2: detected capacity change from 0 to 8 [ 42.957340][ T5143] squashfs: Unknown parameter ' ' [ 42.985567][ T39] team0 (unregistering): Port device team_slave_1 removed [ 42.995332][ T39] team0 (unregistering): Port device team_slave_0 removed [ 43.127843][ T5066] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 43.131220][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.132077][ T5066] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 43.135901][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.137826][ T5066] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 43.142174][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.144104][ T5066] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 43.148197][ T5066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.190692][ T5066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.235971][ T5066] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.238420][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.238456][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.240488][ T1429] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.240519][ T1429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.246854][ T5152] __nla_validate_parse: 2 callbacks suppressed [ 43.246869][ T5152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 43.262525][ T5066] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 43.262565][ T5066] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.398631][ T5066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.459298][ T5066] veth0_vlan: entered promiscuous mode [ 43.461825][ T5066] veth1_vlan: entered promiscuous mode [ 43.469694][ T5066] veth0_macvtap: entered promiscuous mode [ 43.471764][ T5066] veth1_macvtap: entered promiscuous mode [ 43.481259][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.483728][ T5066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.486486][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.486540][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.486566][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.486585][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.516034][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.516061][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.531889][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.531921][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.543077][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.595820][ T5173] tipc: Started in network mode [ 43.595851][ T5173] tipc: Node identity 4, cluster identity 4711 [ 43.595879][ T5173] tipc: Node number set to 4 [ 44.121008][ T5185] netlink: 43 bytes leftover after parsing attributes in process `syz.3.60'. [ 44.122795][ T5186] loop3: detected capacity change from 0 to 512 [ 44.124190][ T5185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.60'. [ 44.126370][ T5186] EXT4-fs (loop3): Test dummy encryption mode enabled [ 44.132928][ T5186] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.60: inode has both inline data and extents flags [ 44.133022][ T5186] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.134107][ T5186] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.60: couldn't read orphan inode 15 (err -117) [ 44.134126][ T5186] loop3: lost filesystem error report for type 5 error -117 [ 44.134662][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.146858][ T5186] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 44.157605][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.467354][ T4727] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 44.486470][ T5199] loop0: detected capacity change from 0 to 512 [ 44.503632][ T5199] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.62: bg 0: block 5: invalid block bitmap [ 44.510521][ T5199] loop0: lost filesystem error report for type 5 error -117 [ 44.513698][ T5199] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.513733][ T5199] loop0: lost filesystem error report for type 5 error -117 [ 44.517417][ T5199] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.62: invalid indirect mapped block 3 (level 2) [ 44.517977][ T5199] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.519788][ C1] EXT4-fs (loop0): error count since last fsck: 2 [ 44.519802][ C1] EXT4-fs (loop0): initial error at time 44: ext4_validate_block_bitmap:432 [ 44.519815][ C1] EXT4-fs (loop0): last error at time 44: ext4_mb_clear_bb:6679 [ 44.528728][ T5199] EXT4-fs (loop0): 2 truncates cleaned up [ 44.529216][ T5199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.552495][ T5199] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 7: comm syz.0.62: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 44.561889][ T5199] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 44.571523][ T5202] loop1: detected capacity change from 0 to 512 [ 44.587023][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.598623][ T5202] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.616645][ T5202] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.64: corrupted xattr block 33: invalid header [ 44.618138][ T5202] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.64: corrupted xattr block 33: invalid header [ 44.618345][ T5202] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.64: corrupted xattr block 33: invalid header [ 44.634685][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 44.662660][ T1429] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.662967][ T1429] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.663005][ T1429] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.663026][ T1429] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.675541][ T5206] netlink: 4 bytes leftover after parsing attributes in process `syz.4.63'. [ 44.678977][ T5208] loop0: detected capacity change from 0 to 512 [ 44.742007][ T5211] loop4: detected capacity change from 0 to 512 [ 44.744948][ T5202] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 44.747212][ T5202] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 44.747234][ T5202] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.747234][ T5202] [ 44.747243][ T5202] EXT4-fs (loop1): Total free blocks count 0 [ 44.747251][ T5202] EXT4-fs (loop1): Free/Dirty block details [ 44.747263][ T5202] EXT4-fs (loop1): free_blocks=65280 [ 44.747274][ T5202] EXT4-fs (loop1): dirty_blocks=1 [ 44.747281][ T5202] EXT4-fs (loop1): Block reservation details [ 44.747287][ T5202] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 44.756442][ T5211] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.66: bg 0: block 5: invalid block bitmap [ 44.756475][ T5211] loop4: lost filesystem error report for type 5 error -117 [ 44.756854][ T5211] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 44.756871][ T5211] loop4: lost filesystem error report for type 5 error -117 [ 44.757007][ T5211] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.66: invalid indirect mapped block 3 (level 2) [ 44.757027][ T5211] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 44.757267][ T5211] EXT4-fs (loop4): 2 truncates cleaned up [ 44.757694][ T5211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.775968][ T5211] EXT4-fs error (device loop4): empty_inline_dir:1778: inode #12: block 7: comm syz.4.66: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 44.780007][ T5211] EXT4-fs warning (device loop4): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 44.792377][ T5066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.906189][ T5222] loop4: detected capacity change from 0 to 512 [ 44.918380][ T5222] EXT4-fs (loop4): Test dummy encryption mode enabled [ 44.918421][ T5222] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.923974][ T5222] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 44.925795][ T5222] EXT4-fs (loop4): 1 truncate cleaned up [ 44.926251][ T5222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.957030][ T5228] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.973796][ T4727] Bluetooth: hci4: command tx timeout [ 45.042038][ T5066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.629072][ T1221] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 45.629843][ T4712] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.710392][ T5250] loop1: detected capacity change from 0 to 512 [ 45.716068][ T5250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.726674][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.814314][ T5257] loop2: detected capacity change from 0 to 512 [ 45.818068][ T5257] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.77: bg 0: block 5: invalid block bitmap [ 45.818102][ T5257] loop2: lost filesystem error report for type 5 error -117 [ 45.818233][ T5257] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 45.818243][ T5257] loop2: lost filesystem error report for type 5 error -117 [ 45.818439][ T5257] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.77: invalid indirect mapped block 3 (level 2) [ 45.818460][ T5257] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 45.818605][ T5257] EXT4-fs (loop2): 2 truncates cleaned up [ 45.819029][ T5257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.821240][ T5257] FAULT_INJECTION: forcing a failure. [ 45.821240][ T5257] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 45.821254][ T5257] CPU: 1 UID: 0 PID: 5257 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT [ 45.821263][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 45.821268][ T5257] Call trace: [ 45.821271][ T5257] show_stack+0x2c/0x3c (C) [ 45.821290][ T5257] __dump_stack+0x30/0x40 [ 45.821301][ T5257] dump_stack_lvl+0xd8/0x12c [ 45.821310][ T5257] dump_stack+0x1c/0x28 [ 45.821320][ T5257] should_fail_ex+0x41c/0x590 [ 45.821331][ T5257] should_fail+0x14/0x24 [ 45.821340][ T5257] should_fail_usercopy+0x20/0x30 [ 45.821350][ T5257] _inline_copy_from_user+0x3c/0x174 [ 45.821359][ T5257] fscrypt_ioctl_set_policy+0x1d4/0x498 [ 45.821369][ T5257] ext4_ioctl+0x19bc/0x4430 [ 45.821378][ T5257] __arm64_sys_ioctl+0x154/0x1cc [ 45.821389][ T5257] invoke_syscall+0x98/0x244 [ 45.821399][ T5257] el0_svc_common+0xec/0x23c [ 45.821408][ T5257] do_el0_svc+0x4c/0x5c [ 45.821418][ T5257] el0_svc+0x64/0x260 [ 45.821428][ T5257] el0t_64_sync_handler+0x48/0x148 [ 45.821438][ T5257] el0t_64_sync+0x198/0x19c [ 45.892175][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.895956][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.943256][ T5262] tap0: tun_chr_ioctl cmd 1074025677 [ 45.943418][ T5262] tap0: linktype set to 6 [ 45.956498][ T5266] dummy_hcd dummy_hcd.0: remove, state 4 [ 45.956570][ T5266] usb usb1: USB disconnect, device number 1 [ 45.973838][ T5266] dummy_hcd dummy_hcd.0: stopped [ 45.973888][ T5266] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 46.191986][ T5289] netlink: 'syz.1.89': attribute type 21 has an invalid length. [ 46.192025][ T5289] netlink: 128 bytes leftover after parsing attributes in process `syz.1.89'. [ 46.192061][ T5289] netlink: 'syz.1.89': attribute type 4 has an invalid length. [ 46.192071][ T5289] netlink: 'syz.1.89': attribute type 3 has an invalid length. [ 46.192079][ T5289] netlink: 3 bytes leftover after parsing attributes in process `syz.1.89'. [ 46.201522][ T5297] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 46.201550][ T5297] unable to read xattr id index table [ 46.204302][ T5297] squashfs image failed sanity check [ 46.214423][ T5297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.216355][ T5297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.296570][ T5312] syzkaller0: entered promiscuous mode [ 46.297754][ T5312] syzkaller0: entered allmulticast mode [ 46.316346][ T5314] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.95: bg 0: block 5: invalid block bitmap [ 46.322732][ T5314] loop2: lost filesystem error report for type 5 error -117 [ 46.323810][ T5314] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 46.326966][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 46.326979][ C1] EXT4-fs (loop2): initial error at time 46: ext4_validate_block_bitmap:432 [ 46.326992][ C1] EXT4-fs (loop2): last error at time 46: ext4_validate_block_bitmap:432 [ 46.334419][ T5314] loop2: lost filesystem error report for type 5 error -117 [ 46.335692][ T5314] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.95: invalid indirect mapped block 3 (level 2) [ 46.335732][ T5314] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.340592][ T5314] EXT4-fs (loop2): 2 truncates cleaned up [ 46.341072][ T5314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.354183][ T5314] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 7: comm syz.2.95: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 46.358407][ T5314] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 46.372994][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.683227][ T5332] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 46.930620][ T5336] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.936486][ T5336] EXT4-fs (loop0): 1 truncate cleaned up [ 46.936979][ T5336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.973944][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.050183][ T5347] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.051424][ T5347] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.104: bad orphan inode 131083 [ 47.051441][ T5347] loop4: lost filesystem error report for type 5 error -117 [ 47.052298][ T5347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.078645][ T5352] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.106: bg 0: block 5: invalid block bitmap [ 47.085143][ T5352] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 47.086949][ T5352] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.106: invalid indirect mapped block 3 (level 2) [ 47.086975][ T5352] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.087191][ T5352] EXT4-fs (loop0): 2 truncates cleaned up [ 47.087680][ T5352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.096715][ T5066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.102521][ T5352] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 7: comm syz.0.106: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 47.114928][ T5352] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 47.141709][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.143853][ T5355] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.177411][ T4724] Bluetooth: hci4: command tx timeout [ 47.180595][ T5360] Soft offlining pfn 0x219250 at process virtual address 0x20ffa000 [ 47.187326][ T5360] Memory failure: 0x219250: unhandlable page. [ 47.197960][ T5362] vfat: Bad value for 'shortname' [ 47.591186][ T5372] FAULT_INJECTION: forcing a failure. [ 47.591186][ T5372] name failslab, interval 1, probability 0, space 0, times 0 [ 47.591226][ T5372] CPU: 0 UID: 0 PID: 5372 Comm: syz.2.112 Not tainted syzkaller #0 PREEMPT [ 47.591240][ T5372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 47.591247][ T5372] Call trace: [ 47.591251][ T5372] show_stack+0x2c/0x3c (C) [ 47.591270][ T5372] __dump_stack+0x30/0x40 [ 47.591283][ T5372] dump_stack_lvl+0xd8/0x12c [ 47.591293][ T5372] dump_stack+0x1c/0x28 [ 47.591303][ T5372] should_fail_ex+0x41c/0x590 [ 47.591315][ T5372] should_failslab+0xc4/0x120 [ 47.591324][ T5372] kmem_cache_alloc_noprof+0x94/0x5d8 [ 47.591334][ T5372] alloc_empty_file+0x6c/0x1cc [ 47.591342][ T5372] alloc_file+0x58/0x98 [ 47.591349][ T5372] alloc_file_pseudo+0xe0/0x198 [ 47.591356][ T5372] sock_alloc_file+0xb4/0x1ac [ 47.591365][ T5372] __sys_socket+0x90/0xec [ 47.591373][ T5372] __arm64_sys_socket+0x84/0x9c [ 47.591381][ T5372] invoke_syscall+0x98/0x244 [ 47.591391][ T5372] el0_svc_common+0xec/0x23c [ 47.591401][ T5372] do_el0_svc+0x4c/0x5c [ 47.591410][ T5372] el0_svc+0x64/0x260 [ 47.591421][ T5372] el0t_64_sync_handler+0x48/0x148 [ 47.591431][ T5372] el0t_64_sync+0x198/0x19c [ 47.636186][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.113'. [ 47.652769][ T1429] Bluetooth: hci6: Frame reassembly failed (-84) [ 47.654323][ T5376] Bluetooth: hci6: Frame reassembly failed (-84) [ 47.657813][ T5376] mmap: syz.2.114 (5376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.870383][ T5383] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.870927][ T5383] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.940099][ T5385] set_capacity_and_notify: 9 callbacks suppressed [ 47.940302][ T5385] loop3: detected capacity change from 0 to 512 [ 47.943811][ T5385] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.118: bg 0: block 5: invalid block bitmap [ 47.946582][ T5385] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 47.946830][ T5385] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.118: invalid indirect mapped block 3 (level 2) [ 47.946852][ T5385] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.947006][ C0] EXT4-fs (loop3): error count since last fsck: 3 [ 47.947016][ C0] EXT4-fs (loop3): initial error at time 47: ext4_validate_block_bitmap:432 [ 47.947027][ C0] EXT4-fs (loop3): last error at time 47: ext4_free_branches:1023: inode 11 [ 47.950752][ T5385] EXT4-fs (loop3): 2 truncates cleaned up [ 47.951279][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.956668][ T5385] EXT4-fs error (device loop3): empty_inline_dir:1778: inode #12: block 7: comm syz.3.118: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 47.959831][ T5385] EXT4-fs warning (device loop3): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 47.972628][ T4711] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.995752][ T5388] loop3: detected capacity change from 0 to 512 [ 48.070185][ T5398] loop3: detected capacity change from 0 to 8 [ 48.079195][ T5398] netlink: 64 bytes leftover after parsing attributes in process `syz.3.121'. [ 48.079226][ T5398] netlink: 72 bytes leftover after parsing attributes in process `syz.3.121'. [ 48.103822][ T5400] loop0: detected capacity change from 0 to 512 [ 48.178128][ T5400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.187126][ T5410] loop4: detected capacity change from 0 to 512 [ 48.197455][ T5410] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.126: bg 0: block 5: invalid block bitmap [ 48.199842][ T5410] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 48.201582][ T5410] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.126: invalid indirect mapped block 3 (level 2) [ 48.201610][ T5410] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 48.204095][ C1] EXT4-fs (loop4): error count since last fsck: 3 [ 48.204109][ C1] EXT4-fs (loop4): initial error at time 47: ext4_validate_block_bitmap:432 [ 48.204121][ C1] EXT4-fs (loop4): last error at time 47: ext4_free_branches:1023: inode 11 [ 48.211351][ T5410] EXT4-fs (loop4): 2 truncates cleaned up [ 48.211803][ T5410] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.216431][ T5410] EXT4-fs error (device loop4): empty_inline_dir:1778: inode #12: block 7: comm syz.4.126: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 48.220713][ T5410] EXT4-fs warning (device loop4): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 48.250305][ T5066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.279805][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.346137][ T5423] sit1: entered promiscuous mode [ 48.346174][ T5423] sit1: entered allmulticast mode [ 48.489147][ T5433] trusted_key: encrypted_key: insufficient parameters specified [ 48.491021][ T5433] trusted_key: encrypted_key: insufficient parameters specified [ 48.690434][ T5435] FAULT_INJECTION: forcing a failure. [ 48.690434][ T5435] name failslab, interval 1, probability 0, space 0, times 0 [ 48.693200][ T5435] CPU: 0 UID: 0 PID: 5435 Comm: syz.3.133 Not tainted syzkaller #0 PREEMPT [ 48.693220][ T5435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 48.693226][ T5435] Call trace: [ 48.693230][ T5435] show_stack+0x2c/0x3c (C) [ 48.693254][ T5435] __dump_stack+0x30/0x40 [ 48.693265][ T5435] dump_stack_lvl+0xd8/0x12c [ 48.693275][ T5435] dump_stack+0x1c/0x28 [ 48.693285][ T5435] should_fail_ex+0x41c/0x590 [ 48.693297][ T5435] should_failslab+0xc4/0x120 [ 48.693305][ T5435] kmem_cache_alloc_noprof+0x94/0x5d8 [ 48.693314][ T5435] create_new_namespaces+0x48/0x50c [ 48.693323][ T5435] __arm64_sys_setns+0x274/0x18d8 [ 48.693332][ T5435] invoke_syscall+0x98/0x244 [ 48.693342][ T5435] el0_svc_common+0xec/0x23c [ 48.693352][ T5435] do_el0_svc+0x4c/0x5c [ 48.693361][ T5435] el0_svc+0x64/0x260 [ 48.693372][ T5435] el0t_64_sync_handler+0x48/0x148 [ 48.693381][ T5435] el0t_64_sync+0x198/0x19c [ 49.061698][ T4727] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 49.062502][ T4714] Bluetooth: hci5: command 0x1003 tx timeout [ 49.293678][ T5448] loop0: detected capacity change from 0 to 512 [ 49.299121][ T5448] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.138: bg 0: block 5: invalid block bitmap [ 49.299430][ T5448] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 49.299585][ T5448] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.138: invalid indirect mapped block 3 (level 2) [ 49.299599][ T5448] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.299742][ T5448] EXT4-fs (loop0): 2 truncates cleaned up [ 49.301362][ T5448] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.302816][ T5448] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 7: comm syz.0.138: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 49.303768][ T5448] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 49.303801][ T5448] FAULT_INJECTION: forcing a failure. [ 49.303801][ T5448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.303815][ T5448] CPU: 0 UID: 0 PID: 5448 Comm: syz.0.138 Not tainted syzkaller #0 PREEMPT [ 49.303827][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.303834][ T5448] Call trace: [ 49.303838][ T5448] show_stack+0x2c/0x3c (C) [ 49.303861][ T5448] __dump_stack+0x30/0x40 [ 49.303873][ T5448] dump_stack_lvl+0xd8/0x12c [ 49.303884][ T5448] dump_stack+0x1c/0x28 [ 49.303895][ T5448] should_fail_ex+0x41c/0x590 [ 49.303907][ T5448] should_fail+0x14/0x24 [ 49.303917][ T5448] should_fail_usercopy+0x20/0x30 [ 49.303928][ T5448] simple_read_from_buffer+0xc4/0x238 [ 49.303938][ T5448] proc_fail_nth_read+0x1a8/0x248 [ 49.303946][ T5448] vfs_read+0x230/0x8c8 [ 49.303957][ T5448] ksys_read+0x12c/0x228 [ 49.303963][ T5448] __arm64_sys_read+0x84/0x98 [ 49.303970][ T5448] invoke_syscall+0x98/0x244 [ 49.303980][ T5448] el0_svc_common+0xec/0x23c [ 49.303989][ T5448] do_el0_svc+0x4c/0x5c [ 49.303999][ T5448] el0_svc+0x64/0x260 [ 49.304009][ T5448] el0t_64_sync_handler+0x48/0x148 [ 49.304019][ T5448] el0t_64_sync+0x198/0x19c [ 49.341419][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.415978][ T4727] Bluetooth: hci4: command tx timeout [ 49.456880][ T5460] : renamed from virt_wifi0 [ 49.499825][ T5465] netlink: 96 bytes leftover after parsing attributes in process `syz.0.143'. [ 49.502028][ T5465] netlink: 68 bytes leftover after parsing attributes in process `syz.0.143'. [ 49.526441][ T5465] loop0: detected capacity change from 0 to 512 [ 49.527965][ T5465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 49.533156][ T5465] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.143: invalid indirect mapped block 32768 (level 2) [ 49.533199][ T5465] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 49.533996][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 49.534014][ C0] EXT4-fs (loop0): initial error at time 49: ext4_free_branches:1023: inode 16 [ 49.534030][ C0] EXT4-fs (loop0): last error at time 49: ext4_free_branches:1023: inode 16 [ 49.542492][ T5465] EXT4-fs (loop0): Remounting filesystem read-only [ 49.543147][ T5465] EXT4-fs (loop0): 1 orphan inode deleted [ 49.543158][ T5465] EXT4-fs (loop0): 1 truncate cleaned up [ 49.543741][ T5465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.546956][ T5465] EXT4-fs (loop0): shut down requested (1) [ 49.566932][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.651700][ T5476] loop0: detected capacity change from 0 to 256 [ 49.655051][ T5476] vfat: Unknown parameter 'shortnam¢½e' [ 49.661706][ T5476] veth1_macvtap: left promiscuous mode [ 49.711794][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.148'. [ 49.835223][ T4724] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 50.100201][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.155'. [ 50.139150][ T4399] veth1_macvtap: entered promiscuous mode [ 50.245438][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 50.287795][ T5540] FAULT_INJECTION: forcing a failure. [ 50.287795][ T5540] name failslab, interval 1, probability 0, space 0, times 0 [ 50.287838][ T5540] CPU: 0 UID: 0 PID: 5540 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT [ 50.287858][ T5540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 50.287865][ T5540] Call trace: [ 50.287869][ T5540] show_stack+0x2c/0x3c (C) [ 50.287886][ T5540] __dump_stack+0x30/0x40 [ 50.287897][ T5540] dump_stack_lvl+0xd8/0x12c [ 50.287907][ T5540] dump_stack+0x1c/0x28 [ 50.287916][ T5540] should_fail_ex+0x41c/0x590 [ 50.287927][ T5540] should_failslab+0xc4/0x120 [ 50.287936][ T5540] __kmalloc_noprof+0x108/0x6b8 [ 50.287944][ T5540] load_msg+0xbc/0x270 [ 50.287955][ T5540] do_msgsnd+0x15c/0xee4 [ 50.287964][ T5540] ksys_msgsnd+0xfc/0x13c [ 50.287974][ T5540] __arm64_sys_msgsnd+0xa8/0xc0 [ 50.287984][ T5540] invoke_syscall+0x98/0x244 [ 50.287994][ T5540] el0_svc_common+0xec/0x23c [ 50.288003][ T5540] do_el0_svc+0x4c/0x5c [ 50.288012][ T5540] el0_svc+0x64/0x260 [ 50.288023][ T5540] el0t_64_sync_handler+0x48/0x148 [ 50.288032][ T5540] el0t_64_sync+0x198/0x19c [ 50.381606][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz.3.161'. [ 50.388768][ T5546] loop1: detected capacity change from 0 to 256 [ 50.403046][ T5546] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.619441][ T5568] loop1: detected capacity change from 0 to 512 [ 50.643525][ T5568] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.166: bg 0: block 5: invalid block bitmap [ 50.648250][ T5568] fserror_report: 8 callbacks suppressed [ 50.648295][ T5568] loop1: lost filesystem error report for type 5 error -117 [ 50.652959][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 50.652990][ C0] EXT4-fs (loop1): initial error at time 50: ext4_validate_block_bitmap:432 [ 50.653020][ C0] EXT4-fs (loop1): last error at time 50: ext4_validate_block_bitmap:432 [ 50.653254][ T5568] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 50.654340][ T5568] loop1: lost filesystem error report for type 5 error -117 [ 50.664503][ T5568] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.166: invalid indirect mapped block 3 (level 2) [ 50.664546][ T5568] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.668909][ T5568] EXT4-fs (loop1): 2 truncates cleaned up [ 50.669432][ T5568] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.676147][ T4727] Bluetooth: hci3: command tx timeout [ 50.723400][ T5568] EXT4-fs error (device loop1): empty_inline_dir:1778: inode #12: block 7: comm syz.1.166: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 50.727985][ T5568] EXT4-fs warning (device loop1): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 50.780842][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.790215][ T5577] 9p: Bad value for 'wfdno' [ 50.855930][ T5583] FAULT_INJECTION: forcing a failure. [ 50.855930][ T5583] name failslab, interval 1, probability 0, space 0, times 0 [ 50.855974][ T5583] CPU: 1 UID: 0 PID: 5583 Comm: syz.2.171 Not tainted syzkaller #0 PREEMPT [ 50.855994][ T5583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 50.856001][ T5583] Call trace: [ 50.856004][ T5583] show_stack+0x2c/0x3c (C) [ 50.856022][ T5583] __dump_stack+0x30/0x40 [ 50.856034][ T5583] dump_stack_lvl+0xd8/0x12c [ 50.856044][ T5583] dump_stack+0x1c/0x28 [ 50.856054][ T5583] should_fail_ex+0x41c/0x590 [ 50.856065][ T5583] should_failslab+0xc4/0x120 [ 50.856074][ T5583] __kmalloc_noprof+0x108/0x6b8 [ 50.856082][ T5583] load_msg+0xbc/0x270 [ 50.856093][ T5583] do_msgsnd+0x15c/0xee4 [ 50.856103][ T5583] ksys_msgsnd+0xfc/0x13c [ 50.856112][ T5583] __arm64_sys_msgsnd+0xa8/0xc0 [ 50.856122][ T5583] invoke_syscall+0x98/0x244 [ 50.856132][ T5583] el0_svc_common+0xec/0x23c [ 50.856141][ T5583] do_el0_svc+0x4c/0x5c [ 50.856151][ T5583] el0_svc+0x64/0x260 [ 50.856161][ T5583] el0t_64_sync_handler+0x48/0x148 [ 50.856171][ T5583] el0t_64_sync+0x198/0x19c [ 50.891611][ T5588] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 50.903070][ T5588] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.169: lblock 2 mapped to illegal pblock 2 (length 1) [ 50.906185][ T5588] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.909548][ T5588] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 50.909609][ T5588] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.169: lblock 0 mapped to illegal pblock 48 (length 1) [ 50.909634][ T5588] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 50.913289][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 50.913302][ C0] EXT4-fs (loop1): initial error at time 50: ext4_map_blocks:791: inode 3: block 2 [ 50.913327][ C0] EXT4-fs (loop1): last error at time 50: ext4_map_blocks:791: inode 3: block 48 [ 50.983949][ T5595] overlayfs: overlapping lowerdir path [ 51.002103][ T5595] overlayfs: overlapping lowerdir path [ 51.023414][ T5588] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 51.030632][ T5588] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.169: Failed to acquire dquot type 0 [ 51.030659][ T5588] loop1: lost filesystem error report for type 5 error -117 [ 51.334239][ T5588] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 51.336165][ T5588] loop1: lost filesystem error report for type 5 error -117 [ 51.374625][ T5588] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.169: mark_inode_dirty error [ 51.374732][ T5588] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.404463][ T5588] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 51.405574][ T5588] EXT4-fs (loop1): 1 orphan inode deleted [ 51.407310][ T5588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.489333][ T5588] netlink: 60 bytes leftover after parsing attributes in process `syz.1.169'. [ 51.491885][ T5598] netlink: 60 bytes leftover after parsing attributes in process `syz.1.169'. [ 51.510489][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.513259][ T3622] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.513296][ T3622] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.515930][ T3622] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 51.515951][ T3622] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 0 [ 51.515963][ T3622] loop1: lost filesystem error report for type 5 error -117 [ 51.526226][ T4712] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 51.526259][ T4712] loop1: lost filesystem error report for type 5 error -117 [ 51.527098][ T4712] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 51.527120][ T4712] loop1: lost filesystem error report for type 5 error -117 [ 51.527232][ T4712] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 51.527245][ T4712] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 51.552243][ T5600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.571539][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.646524][ T5614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.177: bg 0: block 5: invalid block bitmap [ 51.646564][ T5614] loop1: lost filesystem error report for type 5 error -117 [ 51.649578][ T5614] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 51.649622][ T5614] loop1: lost filesystem error report for type 5 error -117 [ 51.649896][ T5614] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.177: invalid indirect mapped block 3 (level 2) [ 51.649921][ T5614] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.650104][ T5614] EXT4-fs (loop1): 2 truncates cleaned up [ 51.650565][ T5614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.800501][ T5620] EXT4-fs error (device loop1): empty_inline_dir:1778: inode #12: block 7: comm syz.1.177: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 51.804269][ T5620] EXT4-fs warning (device loop1): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 51.804718][ T5620] overlay: Unknown parameter 'euid>00000000000000000000' [ 51.876179][ T5627] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.181: bg 0: block 5: invalid block bitmap [ 51.876215][ T5627] loop0: lost filesystem error report for type 5 error -117 [ 51.876362][ T5627] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 51.876481][ T5627] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.181: invalid indirect mapped block 3 (level 2) [ 51.876494][ T5627] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 51.876637][ T5627] EXT4-fs (loop0): 2 truncates cleaned up [ 51.877099][ T5627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.879027][ T5627] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 7: comm syz.0.181: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 51.879229][ T5627] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 51.895202][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.064896][ T5637] EXT4-fs: inline encryption not supported [ 52.084429][ T5637] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.121726][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.166991][ T5652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.188'. [ 52.218294][ T5658] netlink: 'syz.2.190': attribute type 5 has an invalid length. [ 52.232068][ T5656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.242897][ T5656] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.189: bg 0: block 112: padding at end of block bitmap is not set [ 52.253203][ T5656] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 52.253241][ T5656] EXT4-fs (loop0): This should not happen!! Data will be lost [ 52.253241][ T5656] [ 52.253267][ T5656] EXT4-fs (loop0): Total free blocks count 0 [ 52.253283][ T5656] EXT4-fs (loop0): Free/Dirty block details [ 52.253302][ T5656] EXT4-fs (loop0): free_blocks=0 [ 52.253318][ T5656] EXT4-fs (loop0): dirty_blocks=64 [ 52.253331][ T5656] EXT4-fs (loop0): Block reservation details [ 52.253343][ T5656] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 52.333022][ T4720] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 52.333817][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.417290][ T5669] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.193: bg 0: block 5: invalid block bitmap [ 52.417527][ T5669] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 52.417668][ T5669] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.193: invalid indirect mapped block 3 (level 2) [ 52.417682][ T5669] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 52.417827][ T5669] EXT4-fs (loop0): 2 truncates cleaned up [ 52.418355][ T5669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.435194][ T5669] EXT4-fs error (device loop0): empty_inline_dir:1778: inode #12: block 7: comm syz.0.193: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 52.439578][ T5669] EXT4-fs warning (device loop0): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 52.461894][ T4720] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.476795][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 52.524330][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.570844][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.651434][ T5685] gadgetfs: bound to dummy_udc driver [ ** replaying previous printk message ** [ 52.659435][ T5685] Unable to handle kernel paging request at virtual address dfff800000000000 [ 52.659470][ T5685] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 52.659485][ T5685] Mem abort info: [ 52.659495][ T5685] ESR = 0x0000000096000005 [ 52.659506][ T5685] EC = 0x25: DABT (current EL), IL = 32 bits [ 52.659519][ T5685] SET = 0, FnV = 0 [ 52.659528][ T5685] EA = 0, S1PTW = 0 [ 52.659537][ T5685] FSC = 0x05: level 1 translation fault [ 52.659543][ T5685] Data abort info: [ 52.659546][ T5685] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 52.659551][ T5685] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 52.659556][ T5685] GCS = 0, Overlay = 0, DirtyBit = 0 [ 52.659562][ T5685] [dfff800000000000] address between user and kernel address ranges [ 52.659593][ T5685] Internal error: Oops: 0000000096000005 [#1] SMP [ 52.674319][ T5685] Modules linked in: [ 52.674962][ T5685] CPU: 0 UID: 0 PID: 5685 Comm: syz.2.198 Not tainted syzkaller #0 PREEMPT [ 52.676447][ T5685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 52.678101][ T5685] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 52.679455][ T5685] pc : dummy_udc_start+0xdc/0x1d8 [ 52.680328][ T5685] lr : dummy_udc_start+0xb0/0x1d8 [ 52.681226][ T5685] sp : ffff800099dd76a0 [ 52.681961][ T5685] x29: ffff800099dd76a0 x28: 1fffe000195aa601 x27: 1ffff000112ebc7d [ 52.683374][ T5685] x26: dfff800000000000 x25: 1fffe000195aa600 x24: ffff8000835b7d98 [ 52.684842][ T5685] x23: ffff0000c6920c00 x22: dfff800000000000 x21: 0000000000000002 [ 52.686320][ T5685] x20: 0000000000000000 x19: ffff80008975e300 x18: 00000000ffffffff [ 52.687736][ T5685] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff80008a31ada0 [ 52.689203][ T5685] x14: ffff80008a590e28 x13: 0000000000000001 x12: 0000000000000000 [ 52.690622][ T5685] x11: 0000000000000000 x10: 0000000000080000 x9 : 000000000000d6a5 [ 52.692009][ T5685] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [ 52.693416][ T5685] x5 : ffff80008aa0b3d8 x4 : 0000000000000002 x3 : ffff8000835b7e2c [ 52.694831][ T5685] x2 : 0000000000000002 x1 : ffff0000cd3d3a80 x0 : 0000000000000001 [ 52.696262][ T5685] Call trace: [ 52.696803][ T5685] dummy_udc_start+0xdc/0x1d8 (P) [ 52.697702][ T5685] gadget_bind_driver+0x328/0x834 [ 52.698641][ T5685] really_probe+0x29c/0x800 [ 52.699439][ T5685] __driver_probe_device+0x1e0/0x350 [ 52.700347][ T5685] driver_probe_device+0x6c/0x19c [ 52.701211][ T5685] __driver_attach+0x168/0x384 [ 52.702022][ T5685] bus_for_each_dev+0x128/0x1b4 [ 52.702890][ T5685] driver_attach+0x50/0x60 [ 52.703687][ T5685] bus_add_driver+0x208/0x500 [ 52.704521][ T5685] driver_register+0x220/0x310 [ 52.705343][ T5685] usb_gadget_register_driver_owner+0xf0/0x25c [ 52.706428][ T5685] dev_config+0x91c/0xcc0 [ 52.707338][ T5685] vfs_write+0x2a4/0xa0c [ 52.708089][ T5685] ksys_write+0x12c/0x228 [ 52.708878][ T5685] __arm64_sys_write+0x84/0x98 [ 52.709758][ T5685] invoke_syscall+0x98/0x244 [ 52.710622][ T5685] el0_svc_common+0xec/0x23c [ 52.711475][ T5685] do_el0_svc+0x4c/0x5c [ 52.712218][ T5685] el0_svc+0x64/0x260 [ 52.712931][ T5685] el0t_64_sync_handler+0x48/0x148 [ 52.713843][ T5685] el0t_64_sync+0x198/0x19c [ 52.714639][ T5685] Code: 97427b72 14000002 97427b70 d343fe88 (38766908) [ 52.715821][ T5685] ---[ end trace 0000000000000000 ]--- [ 52.990948][ T5685] Kernel panic - not syncing: Oops: Fatal exception [ 52.992133][ T5685] SMP: stopping secondary CPUs [ 52.992931][ T5685] Kernel Offset: disabled [ 52.993637][ T5685] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 52.994829][ T5685] Memory Limit: none [ 53.241137][ T5685] Rebooting in 86400 seconds..