last executing test programs: 311.559895ms ago: executing program 1 (id=2): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r3, 0x7, &(0x7f0000000680)={0x1, 0x1, 0x200000000000007, 0x4}) fcntl$lock(r3, 0x6, &(0x7f0000000140)={0x2, 0x2, 0x7fff800000001, 0xf05}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601020000000a000000000000000014000780080006400000060008000840000000300500010006000000050005000a00000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x60000000}, 0x8010) clock_settime(0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCGICOUNT(r8, 0x541e, 0xff4f370c567f0000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000280)=[{{}, 0x12, 0x4, 0x401}, {{0x0, 0xea60}, 0x17, 0x400, 0x7fffffff}, {{0x0, 0x2710}, 0x15, 0x6, 0x2}, {{}, 0x15, 0x4, 0x7}, {{0x0, 0xea60}, 0x14, 0x9, 0xff}, {{}, 0x3, 0xb, 0x3}], 0x90) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r9, &(0x7f0000003700)=ANY=[@ANYBLOB="000086dd00011100040000dda50c6e02006400000000000000000000000000000000000000aaff02"], 0x82) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000480)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\x1b\xfe\xe0\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87f\xac\x06\x14\xf7\xc2\xd6iPN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000180)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000094000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000007ff9000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 179.48784ms ago: executing program 1 (id=6): r0 = socket(0x10, 0x803, 0x0) connect$l2tp(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2, 0x2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x3, 0x4) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0x3, 0x4) recvmmsg(r0, &(0x7f0000002300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/33, 0x21}, 0x3b}], 0x1, 0x12000, 0x0) 109.831711ms ago: executing program 1 (id=7): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x86, 0x3, &(0x7f0000000600)="1a0000000200000000e97a7aed680c868823949c448683033c82714638791558616ec25208f431a7d9ba51f202873d7d0717bd05e6e624850437aafe96f80568dfa7a29a65dbf8f50c6fc7873d60d1c440c9c8872174720904dc29d1ff5c1b54f35e28a3a19d01f8bb57bcc2bb53c646522a1672366a17f7687f8896bfefb3e1df9147dc8f4d19dd25c90d3c9328caee920710c81db71823fd173c75a8b9477f2c767acdb0869dc9428657f2cbea7676b4e2b9579620e943799ee1f78b3e9720883539b94d187bf2819f404a340b65db8fb70b129d67cc701d85cee8cef5a4a8616a4837375332f28d8013d321321eab718504971a6eba5a", 0xf8) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async) r2 = accept4$llc(r1, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000240)={'pimreg\x00', {0x2, 0x4e21, @empty}}) sendto(r0, &(0x7f0000000140)="700d1fff2d41c7b544e5b9c32eb9826115e9ec41a9aa99cf3f97b025cbd5f3315ee202ae10dee4738f476f9e421701139230283674a9ba4bb3093347a215f7d947a77a5dc5ed46ae870f6130a7ba0995f3d219ded255ae12199def4ec58d65966d1c60a98c63d85edbe96a2a2486369fb21d1dfdd10128890c46eea166bab230637b5da19c630702569fbacf840a0949115048e566b9b98b46c595d6727b1d6a5f86d81212b72241", 0xa8, 0x8084, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaae6a4ed0da6bc41ef003000000020fc029078000000f4fff600650005010400030a010102ac1414aa00"/59], 0x0) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000140)={0x2001, 0x1, 0x3, 0x9, 0x4}) (async) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f0000000040)=0x2001) (async) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r4, 0x40026f34, &(0x7f00000001c0)=0x80) (async) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000080)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd100526c41efcd3a4a422", 0x55457d03, 0xfff, 0x84, 0x7}, 0x3c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 107.999518ms ago: executing program 1 (id=8): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x48840, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async', 0x103302, 0x150) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r3, &(0x7f0000001fc0)=ANY=[@ANYBLOB="4500000006000000000000000000000000000000000000000000000000000000fa55"], 0x45) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001140)={r0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xb, 0x8, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7b55cd0a5d81cd4a524bd3ffe70c7f2a04002f7b6aa54cc50a1fcaed1e1508374800", "7161f79e76d2000000000000008000", [0x9, 0x26]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r4 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5], 0x128) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000079c25375ff23b50be70000000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000000000000000000000600ff0901a10185107508950609018102090191028511750895130901810209019102c006c00071889bccd5d28a5bab3efbc22a1b41b8187c8aba2e81ed802976437bebdd65d47110035576278992c2"], 0x13c) write$UHID_INPUT2(r7, &(0x7f00000002c0)=ANY=[@ANYBLOB="00020000000000000000000000eb7d23a8f22a198d254ff6259d7873e55ba2577aa697c9dccb8f60974c0bd4ef4c3f3ed8b163cd8a0693fcbc25e8e20923fd93f3e08e34a621d8071ea3a6b731dffe10d2b04072ae085631565d168ba35f"], 0xd) fsopen(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @empty, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r9, 0x2) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000000000)={r12, 0x400}, 0x8) ioctl$VIDIOC_SUBDEV_S_CROP(r8, 0xc038563c, &(0x7f0000000140)={0x0, 0x0, {0x1, 0xfff, 0x8001}}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000000180)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0x6, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8035}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x2400c051}, 0x2810) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0f000000040000000800000001", @ANYRES64=r6, @ANYRESHEX=r2, @ANYBLOB="7338036f82d1e4ade55af038d3e4c951689cdf4d1b2ee2d30a98582843ec325cb192f6276310495d62b64931a7f861b34da9a02c26e860eac7ce78798927c6aa25d9ba937683b94175a394b19164721584615d4d4b5ef4d93a651ca14dd6bcd7fa60fd6b3ede4719750045a2751566792c7d3f2453ed7e681942c8ba511562a5e9e80ee6bb0f4891a0dd8eca7b5c5dfd7a01cd598152186b3a0dfdd7d5dc1a41ee94cc2b48777d3160b4fbbb609955122e7f11954ddb21fd459463c007568aa835fd7b9ce9ed97c09cd7ab86397df430959bb31b8809d97a62f066ec39c7a080214abce2df81a7ff321fcc380b31645ae2b6f6dbd03a4074bcfa4a3a47a0e6bce538c12f7c9e5b52175807fbff81066d354ae2d8ea1f9c8964872b6804709720cfaf13f3f4ee3d669aeac04483b6ddda00bbd6d17cd1daa791cc31f69dd1a4090dfc1b37f8e813eb3ec5d007ad6491e41b69eeb20504ab5032bdc5f97e31fdd676d68d61efd060840cca795151f94da928b6631290c0b7a892f6a6dc90169653897196816a370066bae59cde48d97673da7eadff4ef49063dd97786a9c7abb13ba42af38c827f890b30444f71aa6aee4f9436f4330410c46e0ca0b846d8eb7579cbe7848c4a90b16167849584a12fbb70a6344aee8e294341b3bde12548b13b79fd9a1bcaa313e5df072a8ee8e3b7989c3c91aa08b6e3c9244a4dc1be0991101d666bddf1956ba481b75baaa7fa9acfe9e201ca04a4ee01aae72373eae22ba60d19206908b5781efae008686f052b65463b10c426e0bfa58251083be6ed60f93d52d12f5b606a5049fc4e4983ae67e61b5e25167cfdc1c45c86458e9073cc9051d1fd97084e9b191aa23f698dd478265735624a88fd2a46b1d65f3bc3d8456fe3b1edec623da1e1a5edc284dd4f1cae4fd299ebc69ca22c834325f25050e849c4c9511248207360507724809ce0e904075188ffb96bd0132f5cfa692cdd67da945f6aead22775b8246256d8199d307e4d4dbe3cc3643112558de329a6dadb7e59f194900be30743412a905596fb2888eb96d32230ec29d786aed4a7dcaa97c681d90f56217099f9d4640603cb435ac4080e8fb0aba3a5400dd7f35c1000a52e1fb1abc058ee20e7df159f871bca3524ffc85ad8f9965d2e3df15ecbf4e91d3d89e2093ebc3160a2c77f2498fefd331f14acb09e22ff77b62ffe9fe2b3921a2649a7611ce052b2e349ecf60586b0eaafe4ffff7c49021731519d58cfa097468521586491997cd383f55ddaa76731b5e56b911ef5b97fe81afe690d2c61e79fbd8e1186196a47db5608d053a0c8a96f39f063b4816282d5768c3cd6bc73bcce50616027a7fcbf6420dfd6e21f78c1a7fa660a8093f6ed91fed79ec01fe97302790556b5d4e0437a9cc0af4bc7a74e42192634d1897f44e9452cc8b14a2d42ac643d169a5fb4b0752507dafe56423798d76ab8dd325a4244f7f6752c5cdca6c8d48fff931c0b3c5506a7926d780d4fcc15d4540c9a5e822162ab8cf6c4dfcd05af2299d4158c1d7c2c25688037bfac71a97a1b9c01f59ffa84fd1530d292800d4075707ab2239ea4096d7b9947ed5e5204185b7175c1ce645dca6d60e0e7a256e7c905690831c121021169f5c7c4dbfc9cc0321c9b82591255e4fd99c184d82ae3383cc07a6623d032073cb290dac9ddbb1ba32803172c1c27ec5e6ef4248539c10bfdfabcd00d9bf018cb966490fbe31585c3baa095270615f72f12b5f7be219bac53e6f2d198cf37ec9a23ad6f0621424b9f327c71826ffdefe691ac289f8806e2775719a9e2a539cc51595e2b0656a3b5b60643cb94c3a481f2342b23aa122d26d593af69cffa796a5d5d35ea1d1506124e2c56803c5eaa949abc1452e8ce161768e4087d55d5729d4be29db00845f145f5cc1501a5e502dafa005cd24772f3827961cd829f99def903190c25ed54154f05312655d8deb1d150d7b948827c71c5b42bda53e2b6337369f47cab2cd756a013ee629e8eef5f037025faa0e219768ed970d8ccf30be9d5099688ceb7e74f9ff8dae369edda0020a71f7622f4f027527cc01855ca1f5614d263f5a50f352eb10b6a43cee74efd8d718b46fbe781047dfa65441d68ab0b73d1c679e7ada38d3ccb59a072b9a3cda0e9c685950eb3af53d1a89cc44ce878de43976a4597c9887a96f8c99c8f693176930dcd0ae966b813dd5df3032fb5938b7401bcecdba48827b7699a9cfbced2083a7d36b8ec961a5cd8130c99fad92f59d05263629501e45ae8f2634d56aaf23b4e860fe06c6c7307d05580d586dafcedc95052846b2eedac5fbbcc1fc7878044155ff5a2eec1d404d2213c62aaef86444ed8e4f9149850d5c24e7a6c755551c07a3ec439b0cc09e084396a701abb04c783a7e5a7129b83921adb6678c777f90f15ec2918cbf86cc00aab0e821de7377bc9ef0cc484f90872c3f291d6ca27d9c375c35b97fbf6fe342a039c04efe9605773395022f87441368a85f79d3fce90091da34b521290ebc9fd35bfc442fbbb0a637a914f72b9cf528bd4bfc8e074c4d73d37bbff8f58d5767553d8d7387f71fd1cf7aeb8ee0efc8bce7df31a0945bcc29e29f97b1e7740dc1eaa4b235c33bb6c3bd7ec3cda3ee1b98f54949f09e8c905fb7c8b02eaabe46bb202ac45f280675394acb116371012390e141115993b6cff21e473fca69855b3400f158c0a30f1eda15b4a12c7e4d4222138a178c155741100533bddb72abfc9b9cabbd031e7f2ada307fecc8fa2120fbca94b10652d960ed7d07a3d2a161dfd03e85e060296710c181202166ce14771f130f0d760dfb8985373378f4106bebc9eae46749cfdab43b7f27e787f42a712228ca22ae44eecd08d6dda323c7f032ab76352ea991993a99f966203495220d4a4e0af9d9e431c5229d9ad964f9a1c4c12943a89d84689a73b22dccb24ae19d0d0b912b01635fcf37853f38649f27cf6f1129b6bc504c99e891811a71eaba41c25cf1d04d729e49522b17ceae08982b3522c28d18772b70cad55c212cc73268b647baf2bbf24070a6151a7aa7cff33ff87011740cb3cb6d0f0eed14f912ec00d1cea9c115aec492c5ad80436a8d241bc353dc29c51e0bf547373b5c0dfab8598bc1d18027b34234133a2f86b2902a9f2553d7ec1eb521b5f5f2a64e55c07c26da8cff8259d92ea866c1db4f0d840e629a33d93abc6e713f771387c5c2791dc80fb190acbd9febe15727c2c2f4479332b5b8cfccce5f91660787314fccdb0111df62ddc1a629218a985b8af3e0bb6223b8fa362bd84d5ced64126ae328f481cd03ea47af4b1b21a0f6a96cad8b222e233d47cce0299868d702cc876fc0a9b39077cf8afcb2a551dd731d47a2447fa659141e5836ff08224481fc400efa4bfdc1e9811f509564c59f4345945416ba1e99bdf3d52d7ab311113f2001a95b9698af26d8a1b2096880f450afa59efc6e20aeeb7580de845064875043704ee658a8bc100d9dccc851af6aad0fe76a07cc407379b58630a92d287b7ede4b93f7b4b3ba806765317fd48414d43d3170b8da1bb126cce5c02668f708be1b6208ce5bc63175244b655013af8245aad063376d75b964bb6e94cb3cc9c612d7148bbc15678ffd4969d51fa7bf7ee40f2a03f12dbad15065423dea0e3ae30bb97df1c1f4338236c808ad38d3d7e125988a5ef394df4bb8e852907f25d05c1f1d90f4a2b593504b086a7b24186571aee06faa36b0db5e07adfe348e4cdfead7d93e7b38668df1a81f18321b30ce44e11bd5a4079b10bfea2c29bdd5fdff39527112479ff7572ca54f1ed790da8249967f596548836508c0508e5e0355016985d1ca1788b6afe20adc46ce51239ab7b367121f567f84dedfd29ab544f4c27940093014313934f6bb33a84222e99dcf919859f362eaf3ac2a92db72e54b429422c1522b83a4dbed7fcf8dfb6eeafbbcb53e5ecd95f2768a84524e10835b09f6b98107de5eefc6017b363b95480d70dc00425dc71be6b48de2d436888b405db5708a5e7fc36d54955e4fe89b1618b7a1a5e7098a75cf56cdb60f03c41baa134ef5ad5d4cd8115ceffc4894102f6b062884e2df843b35e849081bd439dab57e6df8df303c8537c2bac0e46ea55eafd6784662cc1e379a8a45ecdf4bf07f771e32564bfffe98896913aa31dc74d8f69df5e2be1e9d69cd1b9573712f486ff9b184161eee190efb14ddd84b4c410354337487cc730e972f10c401631345d673671bb4f4760c6b54406e5ffe232f1a099306bfd55e47ce50d3f1ea906122f534faddef9342b589fb9a1a84cc45e5da653f9244c85f4e99a352c66300ae124bd3724c00258c45263eaf8797221e166232c6b605a1ec0faa9e6340b60166e5c37189efbb4cd5557bcfa135f44805b65d105432f2a2fb165adf1f7b6144100e030d2075bc07efd7e63b00ccf2017453d8ca2d59f9c61095ba4ecac1aa6adc5f4df93119ff996d9c9aa3c5e59272f1f3e19a34637d22e3216a40091220022259b39893e232c3538d126a1dc00ef48c84c4575944cbe1aaf29378d421fbfdc25b99a953bc1372b2c053fd1d669ddeec5460d56a606586c824c9ea591b8ad680da8de33e0b4dc548ab752420b8e319952e75a4b8483789997ea77b132b9b89bbf92d1942e577d11cfd3f257c78410867f1fd777e915c48f98a38ef035b6a122a483bdbcec5630ee0e70449865ca3a9ce0035e58a25b41345e3c4ab1d8e5a31d8620a24ab06c036b51d49de951e745f4389ce61401b88153f373f6f7bccc8d0baeb019fa477f344cd7fbb35cc9f4bef3f7ef8fecad6b31ad485c95dc5851e4012f8afe1c0e7da01a46f85815045f7e600256cbed6325b5c6089834f31a7bac8fb7c343e4fa4eddba2a68fbed66762089d38716a3938c93b4ec95c6937d3cf11b9a72fd8a54ef1282e8304ef68d1698f0df2c7a0d1d89ff3f7eef63b4626827217c60adf43633f95c24e5c8ba51a00f97cde8a635b846d19e37f46ff6a0c982f0a15a594d70e9436883107108ebd5c77fd94f0cb0f24a4956e86cb5abbf0e97150d7ebaefc94b04b6208864cccdba7b7532e9c6e505592d71d7717140e87bfb6eea5739c013e1a2a1fb03705197c8d7d61f26c9e2b6bdb1f7d846e1cd080aed58139bec93e2fafcacac932da89ff980db594504132e940539267220dfc2f9ffa018a516b4bcbfc4060fac478e45da73d57752a7698c688c7104f0de8c106475ecbc396f6ad917f30b2dc58258525efbf7f588d89714147e9f1fc85af3a38ab7217a14692e0f540b91234045c362ad4446591725c319f1502bee8d1ceb1123b46ef5aebf8bad1710c909292bb20d9987365f8603f42c08623b72c8f659ec51c225230771e468e48c1a7f6ea63bf780124b3cf6cffd9a2f03e291baadb328aba1fd3973e448823975756c283e8c159ced6c6b0ac560f611a786f2bf2e06857b22791e112db799d1bdb83929c37cdf2a155e464492ce538c8b3a8c72b4b30b50649778f0cae84a23cf81dbcaaea94128816c77fb03c5b9b78a85502b83636f411c355f0701f0795f8203b96b1a86a9fd86efa3770dc91ffde412424a5e1073e8f7f9f629ad67c58fc3ee5592ea30735658be79a24d61135a7bf68f24bd3f14df6aaaa80f7320064861568ac32524e8527ebf110a011689310153fdc91cae2556be73d147333430ca0ba7143692114a9f93c6b5c19c12b162ed19613e2c363daa193f09a37b0e32f9b28c947eb65cd01ceb95bc49ab05610c9968a036022368f"], 0x50) fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) 104.77724ms ago: executing program 4 (id=5): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8605, &(0x7f0000000100)={[{@grpjquota}, {@abort}, {@journal_checksum}, {@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200}}], [{@obj_role={'obj_role', 0x3d, 'grpjquota='}}, {@subj_user={'subj_user', 0x3d, '[$'}}]}, 0x81, 0x645, &(0x7f0000000180)="$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") (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff}) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') setns(r0, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000900)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x4, 0x3, 0x4, 0x3}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x6}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, 0x24, 0x301, 0x70bd26, 0x8000, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x44004) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x25, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @fd, @flat=@weak_handle={0x77682a85, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 100.764785ms ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$eJzs3d9vU1UcAPDv7X4wB8pICFEfDAkPYpCObf7AxER8NErE6Ds0W1nIOkrWjrBJIjzIiy+GF2MkMf4BvvtI/Af8K0iUhBgy9cEfqbndLXTrum61c4N+PsmFc+6PnvvtuefsnN42N4C+dTT9JxfxQkR8mUQcbNo2GNnGo6v7rTy8Pp0uSdRqH/+aRJKta+yfZP/vzzLPR8SPn0ecyLWWW1laniuUSsWFLD9enb8yXllaPnlpvjBbnC1enpyaOv361ORbb77Rs1hfOffH1x/efe/0F8dWvvr+/qHbSZyJA9m25jj+gxvNmaOFv7PUUJxZt+NEDwrbS5LdPgG6MpC186FI+4CDMZC1euDp91lE1IA+lWj/0Kca44DG3L5H8+AnxoN3VydA9diHm+MfXP1sJEbqc6PRlWTNzCid7471oPy0jB9+uXM7XWLzzyGe6ZAH2JYbNyPi1OBga/+fZP1f907VPzze3Poy+u3vD+ymu+n459WNxn+5R+Of2GD8s3+DttuNzu0/d78HxbSVjv/e3nD8+6jrGhvIcs/Wx3xDycVLpeKpiHguIo5HreOtj9Mr92rttjWP/9IlLb8xFszO4/7gvrXHzBSqhYgY7jLkNR7cjHixMf5NK7il/x+pj3XX13/6fpzbYhlHindeal1b+yu2FP/Oqn0X8fKG9f+4WpPN70+O16+H8cZV0er3W0d+alf+bsef1v/o5vGPJc33ayvbL+PbkT+L7bZ1e/0PJ5/U041GcK1QrS5MRAwnH7Sun3x8bCPf2D+N//ixzfu/ja7/dPJ1IUvX9m0e/63Dty50H//OSuOf2Vb9bz9x7/1Pv2lX/tbq/7V66ni2Juv/IuKfkZYXzOpiqyfYkzcRAAAAAAAA9ohcRByIJJd/lM7l8vnV73ccjtFcqVypnrhYXrw8E/Xfyo7FUK5xp/tg0/chJrLvwzbyk+vyUxFxKOK3rNhifrpcmtnl2AEAAAAAAAAAAAAAAAAAAGCv2N/m9/+pnwd2++yAHVd/sEGHhxiEh7zDU6njI/978aQnYE/q2P6Bp5b2D/1L+4f+pf1D/9L+oX9p/9C/tH/oX9o/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NS5s2fTpbby8Pp0mp+5urQ4V756cqZYmcvPL07np8sLV/Kz5fJsqZifLs93er1SuXxlYjIWr41Xi5XqeGVp+fx8efFy9fyl+cJs8Xxx6H+JCgAAAAAAAAAAAAAAAAAAAJ4slaXluUKpVFyQaJt4J/bEaexkgKu6OnwwS3w0ulfCkVibuJlV7/aO2sVOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+TcAAP//CskxYQ==") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000240)='\xab*b\x17,\xad\xa9\xd6%+\x93\x8d\x01w\xa8\xb2n\xb4g\xeb\x91\xbd\xd7') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r2, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) chdir(&(0x7f0000000080)='./file1\x00') r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xe03}, {0x6, 0x1, 0x0, 0x6}]}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0xfe2, 0x81, @dev={0xfe, 0x80, '\x00', 0x23}, 0x6, 0x0, 0xe, 0x3}}}}}}, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) preadv(r6, 0x0, 0x0, 0xe, 0x2) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r5, r5) open$dir(&(0x7f00000001c0)='./file0\x00', 0x20, 0x41) r7 = syz_io_uring_setup(0xd3a, &(0x7f0000000080)={0x0, 0x2, 0x3010, 0x3, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f00000006c0)=@IORING_OP_TIMEOUT={0xb, 0x50, 0x0, 0x0, 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x6516, 0x6d93, 0x8, 0x0, 0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f00000002c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad0, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x8}}}, &(0x7f0000000340)) setpgid(0x0, r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) 96.339366ms ago: executing program 0 (id=1): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000440)={[{}, {@rodir}, {@numtail}, {@uni_xlate}, {@utf8no}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_win95}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@uni_xlate}, {@fat=@nfs}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@numtail}]}, 0xfd, 0x2a8, &(0x7f0000000580)="$eJzs3c9qK1UcB/DfpGkSdZEsXInigC5cXW7vE6RIL1zMSslCXah4b0GaILRQ8A/GrgRXblz6BILQnS/hxjfwAQR3dlE4MslMk9Q07UDT+ufz2fT0nPOd8zuTaUsXOfnw5fHB0zz2T778LTqdLBr96MdZFr1oROXrWNL/LgCAf7OzlOKPNFMnl0VEZ3NlAQAbVPvv/+nGSwIANuydd997a3cw2Hs7zzvxePzN8bD4z774Ohvf3Y9PYhTP4mF04zwiXZi1H6eUJs280IvXx5PjYZEcf/BLef3d3yOm+Z3oRm/atZx/MtjbyWcW8pOijufL9ftF/lF048UV6z8Z7D1akY9hK954baH+B9GNXz+OT2MUT6dFzPNf7eT5m+n7P794vyivyGeT42F7Om8ubd3xSwMAAAAAAAAAAAAAAAAAAAAAwH/Yg/LsnHZMz+8pusrzd7bOi2+2I6/0ls/nmeWz6kKXzgeapPihOl/nYZ7nqZw4zzfjpWY072fXAAAAAAAAAAAAAAAAAAAA8M9y9NnnBx+NRs8Ob6VRnQZQva2//nVOp6n+Qs+rsT7Vnq/VKJtrloitak4WsbaeYhO3dFuuazx3Vc0//lT3gp3r52wXa3VucRfVy73QE1VPtvoeti8md6qH5OeqJ6WUWnHD1VtXDaVaj19r5VC39t1ovTBtTNbMieyqwr59Zf5zWQ5ll3fRWrrPS43tsrEQv/Rs1Hqe//67InNaBwAAAAAAAAAAAAAAAAAAbNT8Tb8rBk/WRhupvbGyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBOzT//v0ZjUoZvMLkVh0f3vEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+B/4KAAD//+KpXP8=") r0 = socket(0x28, 0x5, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f00000000c0)=@framed={{0x76, 0xa, 0x0, 0x0, 0xfffffffc, 0x61, 0x11, 0x68}}, &(0x7f0000000000)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xc4206000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000401d6eaa68c8b1bcd038f09cce53860eb2958cc385b43e1386f1845b000000c300000050000000950000000000000000000000a6421dbf96afab78e7514ccec5dfbcca8212921a78fe99d0759cc1"], &(0x7f0000000180)='syzkaller\x00', 0x2}, 0x94) socket$unix(0x1, 0x5, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e23, @multicast1}, 0x118, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) shutdown(r0, 0x0) 0s ago: executing program 2 (id=9): r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000000)={[{@grpquota}, {@errors_remount}]}, 0x3, 0x7b5, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0xfffc, {[@fastopen={0x22, 0x2}, @fastopen={0x22, 0x6, "e72d650a"}]}}}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x507}, 0x94) setuid(0xee01) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61) ptrace(0x8, r0) get_robust_list(r0, &(0x7f00000001c0)=&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)}}, &(0x7f0000000200)=0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/auth_enable\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000140)="ff5d30", 0x3, 0x6) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001400020077673000000000000000000000000000000108802800002024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cd4000080200004000a004e2100000006fc00000000000000000000000000000057010000060005000400000008000980040000802400010000000000000000000000000000000000000000000000000000000000000000007c0009804c000080060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fc020000000000000000000000000000050003"], 0x128}, 0x1, 0x0, 0x0, 0x404c844}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 29.027140][ T4696] cgroup: Unknown subsys name 'net' [ 29.158076][ T4696] cgroup: Unknown subsys name 'cpuset' [ 29.159389][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.349985][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.144526][ T4709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.144978][ T4709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.145729][ T4709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.146132][ T4709] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.146347][ T4709] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.160496][ T4713] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.162646][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.163066][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.163236][ T4713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.164285][ T4709] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.165020][ T4709] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.175991][ T4713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.176774][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.179444][ T4710] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.180705][ T4723] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.181236][ T4723] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.181960][ T4723] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.182172][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.182593][ T4723] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.182935][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.183151][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.185771][ T4723] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.192374][ T4723] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.192951][ T4723] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.193170][ T4723] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.529186][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.529488][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.529575][ T4707] bridge_slave_0: entered allmulticast mode [ 30.530076][ T4707] bridge_slave_0: entered promiscuous mode [ 30.543333][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.543392][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.543450][ T4707] bridge_slave_1: entered allmulticast mode [ 30.543895][ T4707] bridge_slave_1: entered promiscuous mode [ 30.571257][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.572178][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.581836][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.581869][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.581922][ T4714] bridge_slave_0: entered allmulticast mode [ 30.582387][ T4714] bridge_slave_0: entered promiscuous mode [ 30.583649][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.583674][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.583725][ T4714] bridge_slave_1: entered allmulticast mode [ 30.584149][ T4714] bridge_slave_1: entered promiscuous mode [ 30.603234][ T4707] team0: Port device team_slave_0 added [ 30.608191][ T4707] team0: Port device team_slave_1 added [ 30.618380][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.618390][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.618402][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.635965][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.636284][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.636292][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.636307][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.645030][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.673637][ T4714] team0: Port device team_slave_0 added [ 30.675755][ T4707] hsr_slave_0: entered promiscuous mode [ 30.676139][ T4707] hsr_slave_1: entered promiscuous mode [ 30.679984][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.680039][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.680551][ T4708] bridge_slave_0: entered allmulticast mode [ 30.681008][ T4708] bridge_slave_0: entered promiscuous mode [ 30.688476][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.688498][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.688601][ T4708] bridge_slave_1: entered allmulticast mode [ 30.689039][ T4708] bridge_slave_1: entered promiscuous mode [ 30.696043][ T4714] team0: Port device team_slave_1 added [ 30.697170][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.698283][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.698360][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.698390][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.698442][ T4715] bridge_slave_0: entered allmulticast mode [ 30.698972][ T4715] bridge_slave_0: entered promiscuous mode [ 30.702522][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.702546][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.702718][ T4715] bridge_slave_1: entered allmulticast mode [ 30.703167][ T4715] bridge_slave_1: entered promiscuous mode [ 30.723927][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.723938][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.723950][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.741715][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.741727][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.741742][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.766060][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.767352][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.777686][ T4708] team0: Port device team_slave_0 added [ 30.778526][ T4708] team0: Port device team_slave_1 added [ 30.788487][ T4715] team0: Port device team_slave_0 added [ 30.791789][ T4715] team0: Port device team_slave_1 added [ 30.792041][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.792052][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.792064][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.795395][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.795403][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.795415][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.810336][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.810426][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.810515][ T4718] bridge_slave_0: entered allmulticast mode [ 30.810929][ T4718] bridge_slave_0: entered promiscuous mode [ 30.813372][ T4714] hsr_slave_0: entered promiscuous mode [ 30.813654][ T4714] hsr_slave_1: entered promiscuous mode [ 30.813863][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 30.813911][ T4714] Cannot create hsr debugfs directory [ 30.837565][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.837596][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.837664][ T4718] bridge_slave_1: entered allmulticast mode [ 30.838101][ T4718] bridge_slave_1: entered promiscuous mode [ 30.844931][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.850370][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.850380][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.850396][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.852655][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.852663][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.852677][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.856857][ T4708] hsr_slave_0: entered promiscuous mode [ 30.857155][ T4708] hsr_slave_1: entered promiscuous mode [ 30.857344][ T4708] debugfs: 'hsr0' already exists in 'hsr' [ 30.857354][ T4708] Cannot create hsr debugfs directory [ 30.861959][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.872407][ T4718] team0: Port device team_slave_0 added [ 30.873184][ T4718] team0: Port device team_slave_1 added [ 30.884935][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.884947][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.884961][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.897768][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.897781][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.897804][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.924456][ T4715] hsr_slave_0: entered promiscuous mode [ 30.924780][ T4715] hsr_slave_1: entered promiscuous mode [ 30.924990][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.924999][ T4715] Cannot create hsr debugfs directory [ 30.976605][ T4718] hsr_slave_0: entered promiscuous mode [ 30.976939][ T4718] hsr_slave_1: entered promiscuous mode [ 30.977132][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.977142][ T4718] Cannot create hsr debugfs directory [ 30.978772][ T4707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.981051][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.982749][ T4707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.984180][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.984511][ T4707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.985398][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.994918][ T4707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.997251][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.035177][ T4708] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.037202][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.037576][ T4708] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.038715][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.047961][ T4708] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.049195][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.049554][ T4708] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.051584][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.054480][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.054513][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.054665][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.054693][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.086355][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.086386][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.086451][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.086487][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.088070][ T4715] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.089525][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.091240][ T4715] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.092292][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.092638][ T4715] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.093619][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.098322][ T4715] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.107515][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.130561][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.130590][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.130654][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.130682][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.143820][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.148754][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.150233][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.150654][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.151525][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.151869][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.152879][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.162969][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.166383][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.167490][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.181476][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.182284][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.188814][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.189094][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.189355][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.189810][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.203402][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.209801][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.220069][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.220103][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.220502][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.220521][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.220870][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.220893][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.221238][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.221255][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.231530][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.231545][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.235720][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.237130][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.237419][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.238776][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.262638][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.263940][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.274252][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.279278][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.286248][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.298385][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.319492][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.319523][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.331248][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.331277][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.342660][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.342675][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.376066][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.381403][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.390430][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.398980][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.404743][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.404771][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.405177][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.405195][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.409125][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.409151][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.409584][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.409603][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.434341][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.434358][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.514946][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.519429][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.571421][ T4708] veth0_vlan: entered promiscuous mode [ 31.588284][ T4708] veth1_vlan: entered promiscuous mode [ 31.594619][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.608136][ T4708] veth0_macvtap: entered promiscuous mode [ 31.612120][ T4708] veth1_macvtap: entered promiscuous mode [ 31.630818][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.634964][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.656163][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.656224][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.656242][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.657870][ T4715] veth0_vlan: entered promiscuous mode [ 31.673741][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.675026][ T4715] veth1_vlan: entered promiscuous mode [ 31.704714][ T4715] veth0_macvtap: entered promiscuous mode [ 31.710110][ T4715] veth1_macvtap: entered promiscuous mode [ 31.712012][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.721212][ T3178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.721227][ T3178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.729882][ T4707] veth0_vlan: entered promiscuous mode [ 31.740202][ T4718] veth0_vlan: entered promiscuous mode [ 31.742356][ T4718] veth1_vlan: entered promiscuous mode [ 31.747872][ T4707] veth1_vlan: entered promiscuous mode [ 31.750541][ T4714] veth0_vlan: entered promiscuous mode [ 31.752876][ T4714] veth1_vlan: entered promiscuous mode [ 31.754751][ T4707] veth0_macvtap: entered promiscuous mode [ 31.755935][ T3178] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.762650][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.763757][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.774132][ T4707] veth1_macvtap: entered promiscuous mode [ 31.778316][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.778328][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.790956][ T4714] veth0_macvtap: entered promiscuous mode [ 31.794709][ T4714] veth1_macvtap: entered promiscuous mode [ 31.795672][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.795715][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.795723][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.795804][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.796117][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.814330][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.814342][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.820820][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.823251][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.824328][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.828651][ T4718] veth0_macvtap: entered promiscuous mode [ 31.831686][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.843556][ T4718] veth1_macvtap: entered promiscuous mode [ 31.844244][ T4708] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.861561][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.863404][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.916352][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916893][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916936][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916955][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916972][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.916988][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917003][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917018][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917033][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917048][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917063][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917078][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.917093][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.971370][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.971384][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.973201][ T3178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.973210][ T3178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.990724][ T3178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.990738][ T3178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.004733][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.004746][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.019972][ T3178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.019986][ T3178] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.044380][ T4895] syz_tun: entered allmulticast mode [ 32.049659][ T4895] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 32.050935][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.050945][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.060632][ T4893] syz_tun: left allmulticast mode [ 32.111364][ T4903] loop2: detected capacity change from 0 to 1024 [ 32.120100][ T4908] loop0: detected capacity change from 0 to 256 [ 32.134528][ T4910] binder: tried to use weak ref as strong ref [ 32.134540][ T4910] binder: 4899:4910 Acquire 1 refcount change on invalid ref 0 ret -22 [ 32.134684][ T4903] autofs: Unknown parameter '«*b' [ 32.138912][ T4911] binder: 4899:4911 got transaction to invalid handle, 1 [ 32.138967][ T4911] binder: 4899:4911 cannot find target node [ 32.138984][ T4911] binder: 4899:4911 transaction async to 0:0 failed 4/29201/-22, code 0 size 37-24 line 3252 [ 32.143796][ T4815] binder: undelivered TRANSACTION_ERROR: 29201 [ 32.166056][ T4713] Bluetooth: hci0: command tx timeout [ 32.214155][ T4902] [ 32.214663][ T4902] ====================================================== [ 32.216008][ T4902] WARNING: possible circular locking dependency detected [ 32.217402][ T4902] syzkaller #0 Not tainted [ 32.218255][ T4902] ------------------------------------------------------ [ 32.219543][ T4902] syz.1.8/4902 is trying to acquire lock: [ 32.220633][ T4902] ffff0000c1928a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x98/0xe0 [ 32.222596][ T4902] [ 32.222596][ T4902] but task is already holding lock: [ 32.223913][ T4902] ffff0000c71309a8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 32.224562][ T4915] loop2: detected capacity change from 0 to 2048 [ 32.227072][ T4902] [ 32.227072][ T4902] which lock already depends on the new lock. [ 32.227072][ T4902] [ 32.228917][ T4902] [ 32.228917][ T4902] the existing dependency chain (in reverse order) is: [ 32.230515][ T4902] [ 32.230515][ T4902] -> #2 (&q->q_usage_counter(io)#22){++++}-{0:0}: [ 32.232117][ T4902] blk_alloc_queue+0x488/0x590 [ 32.233109][ T4902] blk_mq_alloc_queue+0x148/0x284 [ 32.234139][ T4902] __blk_mq_alloc_disk+0x38/0x10c [ 32.235132][ T4902] loop_add+0x358/0x8e4 [ 32.236007][ T4902] loop_init+0xe8/0x10c [ 32.236854][ T4902] do_one_initcall+0x274/0xc38 [ 32.237845][ T4902] do_initcall_level+0x12c/0x1c4 [ 32.238850][ T4902] do_initcalls+0x70/0xd0 [ 32.239838][ T4902] do_basic_setup+0x7c/0x90 [ 32.240764][ T4902] kernel_init_freeable+0x258/0x398 [ 32.241815][ T4902] kernel_init+0x28/0x1e0 [ 32.242692][ T4902] ret_from_fork+0x10/0x20 [ 32.243566][ T4902] [ 32.243566][ T4902] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 32.244865][ T4902] fs_reclaim_acquire+0x90/0x110 [ 32.245527][ T4713] Bluetooth: hci1: command tx timeout [ 32.245546][ T4713] Bluetooth: hci4: command tx timeout [ 32.245560][ T4713] Bluetooth: hci3: command tx timeout [ 32.248472][ T4902] kmem_cache_alloc_noprof+0x60/0x5d4 [ 32.249471][ T4902] __kernfs_iattrs+0xd8/0x310 [ 32.250406][ T4902] __kernfs_setattr+0x48/0x2ac [ 32.251337][ T4902] kernfs_iop_setattr+0xc4/0x11c [ 32.252337][ T4902] notify_change+0x928/0xb7c [ 32.253221][ T4902] do_truncate+0x1a8/0x22c [ 32.254078][ T4902] path_openat+0x1204/0x18f4 [ 32.255038][ T4902] do_file_open+0x1c8/0x2e8 [ 32.255967][ T4902] do_sys_openat2+0x114/0x1e8 [ 32.256926][ T4902] do_sys_open+0xb0/0xe0 [ 32.257770][ T4902] __arm64_sys_openat+0xa8/0xc4 [ 32.258724][ T4902] invoke_syscall+0x98/0x244 [ 32.259628][ T4902] el0_svc_common+0xec/0x23c [ 32.260555][ T4902] do_el0_svc+0x4c/0x5c [ 32.261406][ T4902] el0_svc+0x64/0x260 [ 32.262185][ T4902] el0t_64_sync_handler+0x44/0x104 [ 32.263151][ T4902] el0t_64_sync+0x198/0x19c [ 32.264040][ T4902] [ 32.264040][ T4902] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 32.265597][ T4902] __lock_acquire+0x1660/0x2b48 [ 32.266540][ T4902] lock_acquire+0x150/0x370 [ 32.267434][ T4902] down_read+0x58/0x2bc [ 32.268256][ T4902] kernfs_iop_getattr+0x98/0xe0 [ 32.269196][ T4902] vfs_getattr_nosec+0x250/0x388 [ 32.270167][ T4902] vfs_getattr+0x60/0x88 [ 32.271051][ T4902] loop_assign_backing_file+0x200/0x4b8 [ 32.272151][ T4902] lo_ioctl+0x1204/0x1740 [ 32.273023][ T4902] blkdev_ioctl+0x574/0x904 [ 32.273969][ T4902] __arm64_sys_ioctl+0x154/0x1cc [ 32.274994][ T4902] invoke_syscall+0x98/0x244 [ 32.275887][ T4902] el0_svc_common+0xec/0x23c [ 32.276821][ T4902] do_el0_svc+0x4c/0x5c [ 32.277680][ T4902] el0_svc+0x64/0x260 [ 32.278540][ T4902] el0t_64_sync_handler+0x44/0x104 [ 32.279571][ T4902] el0t_64_sync+0x198/0x19c [ 32.280510][ T4902] [ 32.280510][ T4902] other info that might help us debug this: [ 32.280510][ T4902] [ 32.282376][ T4902] Chain exists of: [ 32.282376][ T4902] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#22 [ 32.282376][ T4902] [ 32.285105][ T4902] Possible unsafe locking scenario: [ 32.285105][ T4902] [ 32.286516][ T4902] CPU0 CPU1 [ 32.287517][ T4902] ---- ---- [ 32.288485][ T4902] lock(&q->q_usage_counter(io)#22); [ 32.289458][ T4902] lock(fs_reclaim); [ 32.290634][ T4902] lock(&q->q_usage_counter(io)#22); [ 32.292088][ T4902] rlock(&root->kernfs_iattr_rwsem); [ 32.293034][ T4902] [ 32.293034][ T4902] *** DEADLOCK *** [ 32.293034][ T4902] [ 32.294391][ T4902] locks held by syz.1.8/4902: 3, last CPU#1: [ 32.295441][ T4902] #0: ffff0000c6f9c430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x64/0xbc [ 32.297266][ T4902] #1: ffff0000c71309a8 (&q->q_usage_counter(io)#22){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 32.299385][ T4902] #2: ffff0000c71309e0 (&q->q_usage_counter(queue)#6){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x20/0x38 [ 32.301573][ T4902] [ 32.301573][ T4902] stack backtrace: [ 32.302533][ T4902] CPU: 1 UID: 0 PID: 4902 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT [ 32.304007][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.305658][ T4902] Call trace: [ 32.306201][ T4902] show_stack+0x2c/0x3c (C) [ 32.306994][ T4902] __dump_stack+0x30/0x40 [ 32.307808][ T4902] dump_stack_lvl+0xd8/0x12c [ 32.308651][ T4902] dump_stack+0x1c/0x28 [ 32.309433][ T4902] print_circular_bug+0x328/0x330 [ 32.310362][ T4902] check_noncircular+0x158/0x174 [ 32.311296][ T4902] __lock_acquire+0x1660/0x2b48 [ 32.312186][ T4902] lock_acquire+0x150/0x370 [ 32.313031][ T4902] down_read+0x58/0x2bc [ 32.313787][ T4902] kernfs_iop_getattr+0x98/0xe0 [ 32.314644][ T4902] vfs_getattr_nosec+0x250/0x388 [ 32.315507][ T4902] vfs_getattr+0x60/0x88 [ 32.316256][ T4902] loop_assign_backing_file+0x200/0x4b8 [ 32.317228][ T4902] lo_ioctl+0x1204/0x1740 [ 32.317994][ T4902] blkdev_ioctl+0x574/0x904 [ 32.318807][ T4902] __arm64_sys_ioctl+0x154/0x1cc [ 32.319684][ T4902] invoke_syscall+0x98/0x244 [ 32.320478][ T4902] el0_svc_common+0xec/0x23c [ 32.321264][ T4902] do_el0_svc+0x4c/0x5c [ 32.322009][ T4902] el0_svc+0x64/0x260 [ 32.322759][ T4902] el0t_64_sync_handler+0x44/0x104 [ 32.323697][ T4902] el0t_64_sync+0x198/0x19c [ 32.359046][ T4723] Bluetooth: hci2: command tx timeout [ 32.379271][ T4908] Bluetooth: MGMT ver 1.23 [ 32.455796][ T4915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.473693][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.245485][ T4723] Bluetooth: hci0: command tx timeout [ 34.325495][ T4713] Bluetooth: hci4: command tx timeout [ 34.325514][ T4713] Bluetooth: hci1: command tx timeout [ 34.325564][ T4723] Bluetooth: hci3: command tx timeout [ 34.405470][ T4723] Bluetooth: hci2: command tx timeout [ 36.325634][ T4723] Bluetooth: hci0: command tx timeout [ 36.405611][ T4709] Bluetooth: hci1: command tx timeout [ 36.405633][ T4709] Bluetooth: hci4: command tx timeout [ 36.406632][ T4723] Bluetooth: hci3: command tx timeout [ 36.485454][ T4723] Bluetooth: hci2: command tx timeout [ 38.405483][ T4723] Bluetooth: hci0: command tx timeout [ 38.485492][ T4723] Bluetooth: hci3: command tx timeout [ 38.485506][ T4709] Bluetooth: hci4: command tx timeout [ 38.485514][ T4723] Bluetooth: hci1: command tx timeout [ 38.575456][ T4713] Bluetooth: hci2: command tx timeout