last executing test programs: 31.816686216s ago: executing program 1 (id=41): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r3, 0x15, 0x0, @void}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) 31.813956148s ago: executing program 1 (id=43): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) 31.786992727s ago: executing program 1 (id=44): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="880000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000005c000380580000800800034000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) (async, rerun: 64) r4 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x0, 0x236, &(0x7f0000000300)="$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") (async, rerun: 64) r5 = getpid() kcmp(r5, r5, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40e8662e, 0xffffffffffffffff) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) (async) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x5, @loopback}, 0x1c) (async) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x30, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x841) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030328bd7000000000000a"], 0x1c}}, 0x0) 31.694787611s ago: executing program 1 (id=48): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) inotify_init1(0x40800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x42, 0x1, 0x539e09df839dfe94, "d3fa5b89042b7205fe7bafe9e6415dbf6b34944d164ce8cd4e0d4c7b546787a7", 0x3631564e}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002bbd7000fedbdf25020000000500060000080000000700000007000000000000000300"/62], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008001) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 31.660233904s ago: executing program 1 (id=49): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x10000}, 0xffffff15, 0x10, &(0x7f0000000040)={0x0, 0xd}, 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x0, 'team_slave_1\x00', 0x4}, 0x18) 30.490370595s ago: executing program 1 (id=67): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r3, 0x15, 0x0, @void}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) 30.467368054s ago: executing program 32 (id=67): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup(r1, &(0x7f0000000340)='syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r2, r3, 0x15, 0x0, @void}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x56) 11.418226745s ago: executing program 5 (id=383): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19) sendfile(r0, r0, 0x0, 0x400) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x0, 0x10}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$setflags(r1, 0x2, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {}, 0xa}}, 0x26) getsockname(r3, 0x0, &(0x7f0000000680)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1974}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xbce}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x4c}}, 0x0) 11.306216794s ago: executing program 5 (id=386): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04000c0400c9005e4291123c950877d8c7fe"], 0xf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r3, 0x40384708, &(0x7f00000003c0)={0x8, 0x5, 0x10, 0xce, 0x1a, "3eccd2fff200000000008500"}) ioctl$MEMREADOOB64(r2, 0x1269, &(0x7f0000000140)={0x5, 0x0, 0xfffffffffffffffc}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r1, 0x8, 0x0, @void}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r4}, 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd4}, [@call={0x85, 0x0, 0x0, 0x23}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 11.263607542s ago: executing program 5 (id=389): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000034c0)=0x9, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, 0x8) sendto$inet6(r0, &(0x7f0000000000)='\a', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="200000001a00010a02000000000000000a000020"], 0x20}}, 0x0) 11.173201469s ago: executing program 5 (id=391): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpid}]}, 0x3, 0x480, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTLsFBGxF/MEPtYrGBrWlgMrBgxpNPGBiogeMp6YtBCnU0JoIIQrG4MkYE+/Go/+CJ70YoxcTr3o3JMT0AnhxzezOtLtld8u2225lP59k4L2dmX3f78683TfzdhtAzxrO/kkidkTEHxExWK3WbzBc/e/mwqXJWwuXJpMol9/+O6lsd2Ph0mSxabHf9rwykkaknyWxr0G7cxcunpmYmZk+n9fH5s9+MDZ34eJzp89OnJo+NX3u8LFjR4+Mv/jC4ecbBz7QXp5ZTDf2fjy7f88b73715vEv6vJflkeHDLda+VS53OHmumtnTTnp72IgtKUvIrLDVar0/8Hoi6WDNxivf9rV4IB1VS6Xy9ubr75cBu5iSdTXdXnoFcUHfXb9WyzLBwEvr9/wo+uuv1K9AMryvpkv1TX9kebblJZd33bScEScuPzPN9kSbd+HaPMmCABARPyQjX+ebTT+S+PBmu3uzeeGhiLivojYFRH3R8TuiHggorLtQxHxcGXPWBw7rWT5JMnt45/02poSXEE2/nspn9uqH/8tZjDUl9d2VvIvJSdPz0wfyl+TkShtyerjLdr48bXfv2y2rnb8ly1Z+8VYMI/jWv+W+n2mJuYn1pJzretXIvb2F7nW5p8szgQkEbEnIvauso3TB7/b32zdyvm30IF5pvK3EU9Xj//lWKjPv5C0np8c2xoz04fGirPidr/8dvWtJs1XXvgTB1eZfwdkx/+ehuf/Yv5DSe187Vz7bVz98/Om1zSrPf8Hkncq5eIK6KOJ+fnz4xEDyfFq0LWPH17at6gX22f5jxxo3P93xdIrsS8ispP4kYh4NCIey2N/PCKeiIgDLfL/+dUn32+4Il3j+d8BWf5TbR3/pcJALH+kcaHvzE/f1zU6tFTM87/V+vgfrZRG8kfu5P3vTuJa3dkMAAAA/z9pROyIJB1dLKfp6Gj1+/K7I9KZ2bn5Z07OfnhuqvobgaEopcWdrsGa+6Hj+WV9tX4lIqpfLSjWH8nvG3/dt61SH52cnZnqdvLQ47Y36f+Zv/q6HR2w7vxeC3qX/g+9q1H/39qFOICN5/MfeleD/r+tG3EAG6/R5/8nrXf5d71iATbWsv5v2g96SPvX/7++ty6BABuuaf+/m//yD1Dh/j/0pLltsfKP5FsWimda5e6bpZBEREefMEqbIq+1F8pJw4MbaVYobYYIFdah0N33JQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgE75LwAA//8YzNth") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff2, 0x6}}}, 0x24}}, 0x8040) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000"], 0x74}, 0x1, 0x0, 0x0, 0x884}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', './file1'}, 0xb) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, &(0x7f0000000280)=0xab) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) setpgid(r3, r3) setpgid(0x0, r3) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x3, 0xffff}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x2}}]}, 0x2c}}, 0x20000880) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtfilter={0x3c, 0x2c, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0x19, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file1\x00'}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 11.014801679s ago: executing program 5 (id=395): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x16) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x18b341, 0x84) 10.282693757s ago: executing program 5 (id=407): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x9, 0x0) capset(&(0x7f0000000500)={0x19980330}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) 10.147543896s ago: executing program 33 (id=407): r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000440)=ANY=[@ANYRESDEC=r0], 0x9, 0x0) capset(&(0x7f0000000500)={0x19980330}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0/file1\x00', 0x200810, 0x0, 0x0, 0x0, 0x0) 1.742355318s ago: executing program 4 (id=547): mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f737761702c75730d00000000000000f8ad41704dac9a38a535c8a6746ed9b30d5fd20514d4eb045b14bec3b2597b48a5fcd872680c6c073131a859ca3735889b7ad09d70037a2e0a8031fe2bbc8cc307b27422a4f06a67e99e2f8736829946a687c019401f1e8a601a300da7f6664b52690d5ed7418457d97cfc5b2b9b40f4dee140bfa5de77c5f9251991b60c34ee20f1e4bad342c36d02839022970ba53d70"]) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000018c0), 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f737761702c75730d00000000000000f8ad41704dac9a38a535c8a6746ed9b30d5fd20514d4eb045b14bec3b2597b48a5fcd872680c6c073131a859ca3735889b7ad09d70037a2e0a8031fe2bbc8cc307b27422a4f06a67e99e2f8736829946a687c019401f1e8a601a300da7f6664b52690d5ed7418457d97cfc5b2b9b40f4dee140bfa5de77c5f9251991b60c34ee20f1e4bad342c36d02839022970ba53d70"]) (async) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async) read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) 1.722462733s ago: executing program 3 (id=548): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000a40), 0x1, 0x771, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005c40)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0x1}}]}}]}, 0x38}}, 0x2000c800) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.694848872s ago: executing program 4 (id=549): syz_emit_ethernet(0x2e, &(0x7f0000000100)={@multicast, @random="6a2ddcf6177a", @val={@void, {0x806, 0x1, 0x1, 0x1}}, {@generic={0x6006, "baa054cea2ea8b22280c0f9570fa2ac815f05d3cdc6742eb6a58608e"}}}, 0x0) pipe2$9p(&(0x7f00000000c0), 0x800) socket$l2tp(0x2, 0x2, 0x73) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0)={0x8, 0x8}, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r7, r5, 0x1, 0x0, @val=@iter={0x0}}, 0x20) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x1}) r8 = syz_clone(0x2000880, &(0x7f0000000500)="3e61d8b2cb629e78981e7a65297390aca9f20d8b3606e072f14e9b31371896f03c3fd3fdf8df7b89449d22f9e41152317592f7124b5a62da6910204d8e65f435bbf718fd0bb22c2b0ae949aaf4200ad5503a3fb32f6eeb801d94f995db2125beee0ab84ab4105a3281b862bc44a750b74ce1ed08facd42de1d43cb7a6b52d61eb27872e597244606a56250a70b978ed5b95f6646ba878e74dd26c246691eb0b3c1be711da9ab4c2b3d07085ebb065f63f931d3ba13d8ab476e81f54dfd802efdb5ecf16b6d7f128848a7203c7b17cf65b3e5726097", 0xd5, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="0dbaa6adb64fbe5e280aedcd5eed41c95d1a335f0fb813de45b424245783abba96f6e0db7963c91e079b9e89427dcb9c2e7a6a0941fc46a00543be5491717a8fd07470d429dba3f2f37e90775082fada7ed45baafa956689e0de6734cb0964bd156024aafd4cfc21604f70e416c5024e7e448f675fd7cc1a195b71db") r9 = syz_open_dev$vcsn(&(0x7f0000000040), 0x7fffffff, 0x8000) r10 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0xc0040) ioctl$VHOST_NET_SET_BACKEND(r9, 0x4008af30, &(0x7f0000000140)={0x2, r10}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xad1, 0x0, 0x0, 0x1000, 0xffffffff, r8, 0x0, 0x108}}}, 0x0) 1.549234999s ago: executing program 3 (id=551): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x2) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x300) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000100)={0x4, 0x0, "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"}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffe}]}}}]}, 0x44}}, 0x0) 1.510100883s ago: executing program 6 (id=552): clock_adjtime(0x5, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c000000090605000000000000000000060000000900020073797a300000000014000780060004404e20000006000540362100000500010007"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl(r2, 0xfffff000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x8004) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRK(r5, 0x5409, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x20, r7, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="f9bbc194022e727b1a00421abd62bab4a684cb30a3f251fab3c19f2633b4ec52e3ae8052", 0x24}, {&(0x7f0000000240)="3e3315d448d5e04e06e1e2bebec709434555b6365792b645c6822c469ef7fb87353028c5da65", 0x26}, {&(0x7f0000000280)="7b9d702163eba82bb35d850072453d0dd0c4f0cd069a201e5fa50f38334bff8c48a6b5750d37b0d03dd3dc04023c12d2fadb028d1bb3663945a3c49e94130f74332110e099e726ccd98cb29a89adb57869fee79eaadc7918190a8ca52119643d1d77b231fbb9b50ee821d9f1d6b840f9e708bec4ac97a524eb02e0c6a179a2692ef0994f8caa422438953456cfc01c8bb606b9", 0x93}], 0x3, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x3c}, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xb}}], 0x98}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) 1.36625079s ago: executing program 0 (id=555): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x200000000000000, 0x0, 0x8005}, 0x40084) 1.348254537s ago: executing program 0 (id=556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250600000008000900020000000800"], 0x24}}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c84c}, 0x400c000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000001dc0), 0xffffffffffffffff) (async) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf250600000008000900020000000800"], 0x24}}, 0x80) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) (async) 1.336934365s ago: executing program 3 (id=557): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f01c, 0x2}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x80, 0x7, 0x846, 0x6, {{0x1f, 0x4, 0x2, 0x9, 0x7c, 0x64, 0x0, 0x40, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @generic={0x83, 0xe, "8b3ddb031d639151babfda93"}, @rr={0x7, 0x23, 0x4d, [@multicast2, @remote, @loopback, @remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x10, 0x3, 0x3, [{@empty, 0x1}]}, @rr={0x7, 0x23, 0xc3, [@empty, @rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @multicast2, @rand_addr=0x64010100, @local, @empty]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@ipv4_newroute={0x2c, 0x18, 0x100, 0x70bd2d, 0x0, {0x2, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_OIF={0x8, 0x4, r1}]}, 0x2c}}, 0x20000400) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e0000001b000000080000003c00000042000000", @ANYRES32=0x1, @ANYBLOB="990000000000000000000000000000000000000038909ce69e87cf0c45300644edca9af5bc53a854dd3c486f7cc7c544dde9bf15ec92354a4e1da74d3c7389eaa016afd428a963a3430e1113b3ce168eb4e1527514ab0c8eb59b85e6350df99215b02ae924f7bd9ad285f77266922bd14a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001300050026bd7000ffdbdf25070fef93", @ANYRES32=r3, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) timer_getoverrun(0x0) 1.298238475s ago: executing program 3 (id=558): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000100001"], 0x20}}, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x20802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) userfaultfd(0xc0801) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f00000002c0)=0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000feffffff01000000000000000c41000000030014"], 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="30170004", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf25010000000000000008410000001400180000000269623a766c616e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x8000) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, &(0x7f0000000040)={0x3, 0x2, 0x3, 0x4, 0x6}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000100), 0x12) listen(r5, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x88) 1.254802693s ago: executing program 6 (id=559): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/156, 0x9c}], 0x1, &(0x7f0000000500)=""/31, 0x1f}, 0x8000}], 0x400000000000387, 0x2102, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x3008000, &(0x7f0000000040)={[{@min_batch_time}]}, 0x30, 0x527, &(0x7f0000000200)="$eJzs3cFvI1cZAPBvvJu1dzfb3UIPBQFdSmFBq7UTbxtVvVAuSKiqilQ4IbSNEm8UxY6j2ClNiER65opEJU7wJ3BA4oC0J+7c4MalHJAKrEANAiGjGY+ziRMnVjaO2/j3k0Z+783E33uW5j37TWZeABPrdkTsRMSViHgnIm7m5Um+xevdLT3u48fbC7uPtxeS6HTe/vvl/Mjthd7xPdfz9yxFvJXmi0fEbW1urczX67X1PF9pN9Yqrc2te8uN+aXaUm21Wp2bnZt59f4r1TNr6wuNX3/07eU3vv+7337xwz/sfOPHaZ2/me9L23Zmgfbpfi5TMb2vLP3k3hhFsDG4lLfnyrgrwqkUIuIzEfFint5TGl+dAIDR6nRuRufm/vxgyRDHAACffOlv/ulICuX89/90FArlcjaHV3ourhXqzVb77sPmxupiZHNYt2Kq8HC5XpvJ5wpvxVSS5mez9JN8tS9/PyKejYifFa9m+fJCs744ri89ADDhrveN//8qdsf/IbhCAACfZkZyAJg8h8f/qbHUAwA4P37/A8Dk2Tf+H3WvLgBwAZX67v3PHC4BAC6QE+f/n4+f/PB8qgIAnBPX/wFgonz3zTfTrbObP/968d3NjZXmu/cWa62VcmNjobzQXF8rLzWbS9kzexonvV+92VybfTk23qu0a612pbW59aDR3FhtP8ie6/2g5sYCABi/Z1949KckInZeu5pt0VvLweV/uPCc5jC5Lo27AsDYXB53BYCxMR8PJCfsH/gvQh8M/purT1EfYPTufG7A/P/x3w3+1zmf6gEjZP4fJteT+f/T9ASPfA2ATzHz/zC5Op3Eev4AMGGGuP7vXwThgjv19X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYYNPZlhTK+QrA01EolMsRNyLiVkwlD5frtZmIeCYi/licKqb52XFXGgB4SoW/Jvn6X3duvjTdv/dK8u9i9hoRP/rF2z9/b77dXp9Ny/+xV97+IC+vHhmgOPo2AAD7XO4v6I3TvXG8t77vx4+3F3rbeVbwo291FxdN4+7mW6/q3cqXYioirv0zOdCY5IwWJt55PyKe729/YW//rXzl0/74aewbI4sfWQunD8QvHIhfyPZ1X9PP4rNnUBeYNI/S/uf1o86/QtzOXvPzLznYmZbip4c711Po9X+7nf7+r3u+v3WjlPU1R/V/t4eN8fLvvzNw3/uXOp+/HLF7qP/trQhdylJHxX9pyPh//sKXXhy0r/PLiDtxXPxuqtJurFVam1v3lhvzS7Wl2mq1Ojc7N/Pq/VeqlWyOutKbqT7sb6/dfWZw+yOuDYhfOqH9Xx2y/b/67zs/+PIx8b/+laPiF+K5Y+LvRMTXhow/f+03A5fvTuMvHmr/fzqdTrI3/nbjXznwd2nZ3SHjf/iXrcUhDwUAzkFrc2tlvl6vrUs8baI0qne+/glpoMQxiUtR781HjThWcfQh0sSYOyZg5J6c9OOuCQAAAAAAAAAAAAAAMEjre/kj/0Z4M9y42wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF9f8AAAD//z4Ozi4=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x8e, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x4000022, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0x7, 0xffffff01, 0x6, 0x3, 0x1, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3c, 0x8f, 0x6, 0x10000008, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1009, 0x6, 0x3, 0x1, 0x4, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x1, 0x8000, 0x400c, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x7, 0xe24, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x0, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x444, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x8, 0x0, 0x7, 0xce7, 0x1f7, 0x2, 0xf58, 0x5, 0x80000002, 0x101, 0x10000, 0x3ff, 0x7ffe, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x1, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0x10001, 0x8, 0x7ff, 0x2, 0x3, 0x4, 0x4, 0x100005, 0xdd81, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r6, 0x29, 0x8, 0x0, &(0x7f0000000800)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2910081, &(0x7f0000000840)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7}}, {@default_permissions}]}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x4, 0x3, 0x4, 0x4, 0x0, 0x0, 0x10, 0xffffffff}}, 0xfffffffffffffd35) syz_fuse_handle_req(r5, &(0x7f00000083c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf8700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x8, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f000000af80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0xb0, 0x0, 0x3, [{{0x2, 0x3, 0x5, 0x0, 0x1, 0xe67f, {0x1, 0x1000, 0x8, 0x2, 0x8, 0x1, 0x2, 0x7ff, 0x81, 0x1000, 0x1, r8, r9, 0x1, 0x9e96}}, {0x6, 0x3, 0x2, 0x8, '..'}}]}, 0x0, 0x0, 0x0}) sendto$llc(r3, &(0x7f0000000340)="6015b5b6747d99e053614186eea7addfe5f3c9a1658a28635b8a8a3e4fdfa7ca486384949a2863783cf3728a3493060bcec475905f0e65542c2bd821a29478982ebeadc18b00a581fc3630ca83a815c2028a5f56498e1717807b4cb643b33a78a687a09979b3b2878b621b207b28486d17da72825ea77232806e9d18c837b4a179a109a9fe91fc4d58a42bf6c656bcb7b7fb4a403d6f72c0443fc6551dc4d73b2ac24a241dde5e066fec8ea14143e93430a2e8877407e1dde7d8e1a847d413d4c2aebf125704", 0xc6, 0x4000, &(0x7f0000000440)={0x1a, 0x3a, 0xb, 0x1, 0x7f, 0xd3, @broadcast}, 0x10) quotactl_fd$Q_GETFMT(r3, 0xffffffff80000402, r8, &(0x7f0000000100)) write$binfmt_script(r3, &(0x7f0000000740)={'#! ', './file1', [{0x20, 'fd'}, {0x20, 'memory.events\x00'}, {0x20, 'fuse\x00'}], 0xa, "50bcd34b5eeb78936ab54075953f01a1ac6d9ca2789f902491f46938aecce28909b4d1031de947b63067fbdfd094462cc2d301d33a1327503e6473637a1d13cf626975fe0060f8ea064feaa13764e43eca7a2bcf713e9181e258a83ebeedebc7602b76fee0abe1c9d6a91e458f50692ef7c51dbdfa6851cf01779c2eff554c2580087031dd0657e392b2a6a62fd32e7d3faa2935"}, 0xb7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.194197366s ago: executing program 0 (id=560): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x40f, &(0x7f0000000000)={0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000703000000000000cd440000000000006b0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e890b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eace875caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000b2ff7e278df025cdfd307f0731ba08ee6c19442b5d5fdc0a1f70f9245a483fddfe4bf77dcc82c56b8364d9b26e87812a557541605cab2046f2ade76ee4b84957e126598f5851306f854e9452a60a81abd368b5024a354d8bbef0d8d07531fcb8e66552748d784ca7858a14a143f393437580ee05a1d622bb689f6aff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.18821866s ago: executing program 0 (id=561): r0 = memfd_secret(0x80000) readahead(r0, 0x7, 0x0) write$binfmt_format(r0, &(0x7f0000000000)='1\x00', 0x2) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x189001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000900)=0x15) ppoll(&(0x7f0000000100)=[{r1, 0x4040}], 0x1, 0x0, 0x0, 0x0) 1.171971348s ago: executing program 2 (id=562): r0 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24040010}, 0x44000) (rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x7fffffff}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r11, {}, {0xffe0, 0xa}, {0xfff3, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x7, 0x197, 0x5, 0x4, 0x0, 0x2}, [@TCA_NETEM_RATE64={0xc, 0x8, 0xa09e88ab5b3a8c48}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) r14 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'gretap0\x00', &(0x7f0000000400)={'syztnl1\x00', r8, 0x8, 0x700, 0x8, 0x7ff, {{0x19, 0x4, 0x0, 0x24, 0x64, 0x66, 0x0, 0x59, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x82, 0x12, "95f0d78416cebb8fcf509e5e6136eb8a"}, @timestamp_addr={0x44, 0x14, 0xa5, 0x1, 0x8, [{@remote, 0x8}, {@remote, 0x91}]}, @timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0x9, [{@local, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}]}, @lsrr={0x83, 0xf, 0x53, [@local, @local, @rand_addr=0x64010101]}, @ra={0x94, 0x4}]}}}}}) (rerun: 32) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf25170000000c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000300020000005c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020073797a6b616c6c657230000000000000080003000000000008000100", @ANYRES32=r11, @ANYBLOB="080003000000000014000200766c616e300000000000000000000000540001801400020073797a6b616c6c657231000000000000080003000300000008000100", @ANYRES32=r8, @ANYBLOB="1400020070696d7265670000000000000000000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="000000000000f0fffd95c9c84f62bac815c24540c18ac9ccd01575adfb682869bebd8947b5c2b395f451902b94bb5e5e409255136dc3a37c6fcad64b4e333ffa7df337a775389736e00ace910bb8692b11e588bd772b2fc8c3b08ae661e84f00862f6ff5f90871c0ebead2ab05b1da26d6a6a03baab463d819a785513ac8663708c8ea9bb5859f2c7219c8b2280a6f9bc080bf4cf41c46e162a0168800cfa9b9697eb7c876aaa7858dd6b85c901e3bdcb56da67d0396fedf16729f7152420f998b2a03", @ANYRES32=r8, @ANYBLOB="0800030002000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="140002007767310000000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000200000038000180140002006970366772657461703000000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="080003000000000008000300000000003000018008000100", @ANYRES32=r16, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300010000001400020070696d36726567310000000000000000"], 0x194}}, 0x8854) (async, rerun: 32) r17 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$inet_int(r17, 0x0, 0x6, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="4616090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 1.165983763s ago: executing program 3 (id=563): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x2c, 0x0, 0x2, 0x3, 0x11, 0x0, @empty, @empty}, {0x3, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x7}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_MAP={0x24, 0xe, {0x7fffffff, 0x8, 0x1, 0x5, 0xbe, 0xc}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x8000) r7 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x3f, &(0x7f0000000140), &(0x7f00000001c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.056697618s ago: executing program 0 (id=564): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@noblock_validity}, {}, {@test_dummy_encryption_v1}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0xfffffffd}}, 0x10) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) setrlimit(0xd, &(0x7f0000000040)={0x9, 0x4}) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) (async) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x5}}, 0x10) (async) bind$tipc(r1, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x60, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x60}}, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff000000070581020002001201000200000040341278560001fffffdfb", 0x48) (async) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r7, 0x0, 0x0) (async) write$FUSE_DIRENTPLUS(r7, 0x0, 0xb0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 1.055834597s ago: executing program 6 (id=565): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$FUSE(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r0, r3, 0x25, 0x0, @val=@tracing}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000200)={0xc, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) read$FUSE(r1, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000bc0)={r0, r3, 0x25, 0x0, @val=@tracing}, 0x20) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @multicast, @private=0x2}}}}, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000200)={0xc, r5}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x0, r5, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7fffffffffffffff}) (async) 968.455933ms ago: executing program 3 (id=566): r0 = socket(0x1d, 0x2, 0x6) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r1 = mmap$IORING_OFF_CQ_RING(0x0, 0x84e7, 0x3000004, 0x810, 0xffffffffffffffff, 0x8000000) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r3 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x7c, 0x2000009, 0x810, r2, 0x20000000) syz_ublk_setup_queues(r2, 0x0, &(0x7f00000001c0)={0x0, 0x3970, 0x8000, 0x0, 0x191, 0x0, r2}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5774, 0x80, 0x1, 0x3dc, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x79e8, 0x10, 0x2, 0x5e, 0x0, r2}, 0xffffffffffffffff, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc3c, 0x80, 0x2, 0x3f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x65f8, 0x8000, 0x0, 0x170, 0x0, r2}}], 0x4, &(0x7f0000001fc0)={0x2e, 0x0, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x101}, 0x0, 0x0, '\x00', {0x0, 0xa90, 0x0, &(0x7f0000000fc0)=@buf_1k="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"}}, &(0x7f0000002040)) syz_ublk_add_dev(r2, r3, r1, r4, &(0x7f0000000140)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000280)) r5 = syz_open_dev$evdev(&(0x7f0000000f80), 0x0, 0x0) ioctl$EVIOCGVERSION(r5, 0x40044582, 0x0) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) socket(0x1d, 0x2, 0x6) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r7, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x204000, 0x0) close(r8) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 889.408459ms ago: executing program 6 (id=567): r0 = socket(0x1d, 0x2, 0x6) r1 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000040)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000280)) setsockopt$ALG_SET_KEY(r0, 0x6a, 0x1, 0x0, 0xc) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x500000000000000, 0x0, 0x8005}, 0x40084) 833.828297ms ago: executing program 0 (id=568): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000600)={r2, r3, 0x8, 0x0, 0x0, 0x6, 0x3, 0x10d0, 0x7, 0x5, 0x4, 0x4, 'syz0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}}, 0x0) 820.208186ms ago: executing program 4 (id=569): munmap$binder(0x0, 0xffffffff) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x4}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e24, 0xf94, @mcast2, 0x6}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e27, 0x8, @dev={0xfe, 0x80, '\x00', 0x15}, 0xfffeffff}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0xfd, @empty, 0x47}], 0xa0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x30, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_KEYS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x7040}, 0x20004800) 793.334485ms ago: executing program 4 (id=570): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000180)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) (async) syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) (async) socket(0x2, 0x80805, 0x0) (async) syz_open_dev$video(&(0x7f0000000240), 0x8, 0x8000) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x91, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000000c0)={0x3fe, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x4, 0x401}, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000002400)="$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") (async) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000300)='./file0\x00') (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1c0) (async) setxattr$security_evm(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000009c0), &(0x7f0000000a00)=@v1={0x2, "804c00d7180f6d8f89b2ca"}, 0xc, 0x1) (async) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x2) (async) add_key(&(0x7f00000006c0)='rxrpc\x00', 0x0, &(0x7f0000000740)="62d8807f308718c849aa269a4cac3a3eddbac9862ad7934166dab2cedcecefd1ba94916be8ba1137c205a4647932cd17d10f221849cf90dfde776da88a55d060377d0b8197e7ae92", 0x48, 0xffffffffffffffff) (async) r1 = syz_open_dev$loop(&(0x7f00000022c0), 0x400, 0x800) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000002300)) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='openpromfs\x00', 0x0, &(0x7f0000000200)='lowerdir') (async) r2 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000400000085000000c80000116eba737ef58af1727205000000000000000000000000c25a70e541aeaae1f697a885ddaf420eded5859bc6ad42a470587a3ef979b8fac4ae0062aa3794f2e9f5a4a6e11411af6b655499c6f9be3a3e64f3b6b075788937be150b0c2ede05f968ce"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) write$ublk_bdev(r3, &(0x7f0000000340)="d8d6153d660d5158e837e0338c5d538922086f3a3c5cd4b7815088262e60efab648c8132f7501bd349e8f36a012120f47a7fd23d804e82e1d8f1b0da0df99a317ce359f283d387f869c65d9531515bfd1b6c219c8c822bf5b2cfb3ae544ebc0e40800554d6190d4e3af3413ba1c7405e6b5afbbdede4aa325a033599a464756f40f0bcb131eae55c4acb9252bcaf5d691c09e04e208fa1fb34259b6f70116146146532b602727401e7fcb090332a5ccbdcf4d6b192f1470751dedc537c84f1796518bab982b233a5c1159bc15c79997573584255320aa23f73b74570e0a6", 0xde) (async) ioctl$MEMWRITEOOB(r2, 0xc0104d03, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) 754.478533ms ago: executing program 6 (id=571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000300)={[{@oldalloc}, {@errors_remount}, {@norecovery}, {@noload}, {@noquota}, {@grpquota}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0xc0ed0040, &(0x7f0000000300)={[{@oldalloc}, {@errors_remount}, {@norecovery}, {@noload}, {@noquota}, {@grpquota}]}, 0xfe, 0x490, &(0x7f0000001280)="$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") 706.316859ms ago: executing program 2 (id=572): socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async, rerun: 32) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) (async, rerun: 32) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) syz_emit_ethernet(0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbc2bbbbbbbb"], 0x0) io_uring_enter(r2, 0x4000012a, 0xe909, 0x17, 0x0, 0x0) 703.92597ms ago: executing program 4 (id=573): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000000000)=0x1) (async) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd2e}}, './file0\x00'}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000000000000, 0x748ed0be, &(0x7f0000000140)=0x1) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x7}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r3}, &(0x7f00000003c0)=0x8) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000500)={&(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x7, 0x5, 0xa}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000580)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={&(0x7f0000000540)=[r5], 0x1, 0x0, r6, 0x9, 0x4, 0xfffffffc, 0x7ff, {0x7, 0x3, 0x0, 0x8, 0x2d80, 0x7, 0x6, 0x622c, 0x7, 0xd, 0x2, 0x7, 0x80000001, 0x10001, "427a2afcb288f0b0fae31c218095ebaca20d653a38e90ebb063d2c1922e662a0"}}) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x3, &(0x7f0000000680)=0x1) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x6, &(0x7f00000006c0)) recvfrom(r0, &(0x7f0000000700)=""/185, 0xb9, 0x20000000, &(0x7f00000007c0)=@xdp={0x2c, 0x1, 0x0, 0x2b}, 0x80) (async) r7 = dup(r2) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a00)={r1, &(0x7f0000000840)="06951a1b83914c77f04b81448a9ee7cb939f8df44350639299417d54638b8239ffa958a6b707a91e3a157aa6f6629f3b1c4e8d513c60ea49baba7174a5debac02ecbdc1807ec77fea5b0c9bd45a06119883e8a6a96f70585e8df65e7c3ec2b99b5c07a98e189ff540dce9701769f9679c346af565f1d707c6d93f7c1c70cb7f32857557e6f876d815fb033fdd0f06b802adae40471", &(0x7f0000000900)=""/195, 0x4}, 0x20) (async) ioctl$int_in(r7, 0x5421, &(0x7f0000000a40)) (async, rerun: 64) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000ac0), r0) (rerun: 64) sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000b00)={0x180, r8, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x108, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x32, 0x3, "99ee93353962deacd4fbd98a7e9f79a85ba249809e465cc41532ff9c376f8b06fce52c108538455a9b33dd791fbf"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "74f74e1021052faf921f8fce298ee377a37011178a4367fcdce7a120a55ae0d94912"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ID={0x60, 0x3, "87f6e873f84abce2768a331173bbf7c38582b31b2edc86d23f3d28263c43286100af466f085662e2510447ae0e8c5eef9d9fc00d8ef875d6750e971d177d78d9a5365067da9a66e6aeffc1241b3c603d176e33ec5af2630ccff31385"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x594e}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x70}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x10}, 0xc00) (async) sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x20, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x27, 0x11}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x80) (async, rerun: 32) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000e00)=@assoc_value={r4, 0x1000}, &(0x7f0000000e40)=0x8) (async, rerun: 32) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000ec0)={0x1, &(0x7f0000000e80)=[{0x5, 0x8, 0xe9, 0x2}]}, 0x10) (async) sendto$inet(r7, &(0x7f0000000f00)="ef84e042aa09b5427b6b42b38c9f788ce217a222f736f880b7e0253629c56263a568875c3343cb36", 0x28, 0x4000, 0x0, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_SIOCBRDELBR(r9, 0x89a1, &(0x7f0000000f40)='macsec0\x00') r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r10, &(0x7f0000001140)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000000fc0)=@del={0x110, 0x11, 0x100, 0x70bd2c, 0x25dfdbfc, {{'crct10dif\x00'}, '\x00', '\x00', 0x2000, 0x400}, [{0x8}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1000}, {0x8, 0x1, 0x94}]}, 0x110}, 0x1, 0x0, 0x0, 0x24044080}, 0x4000880) (async) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000001180)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9, 0xe45, 0x9, 0x0, 0x7bd, 0x104}) (async) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000001200)={0x800, 0x1}) 639.72572ms ago: executing program 2 (id=574): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x12, &(0x7f00000003c0)=@raw=[@call={0x85, 0x0, 0x0, 0x70}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}], &(0x7f00000000c0)='GPL\x00', 0x400002}, 0x94) setreuid(0x0, 0xee00) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x0, 0x0}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r2, 0x541b, 0xffefff1f00000000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)={0xd, 0xff}) 628.899888ms ago: executing program 4 (id=575): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="984682a696439608b1dfae1714000008007db67e4d48db000000000004000080"], 0x14}], 0x1}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x2142, 0x0, 0x5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002900)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0xe, 0xa002a0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x4000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r3}, 0x38) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8a3de3cc8367d4454b4b896a0a6820f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000340)="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", 0x801}, {0x0}], 0x2) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xe, 0x300, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32,nr_inodes,\x00']) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="050427bd7000ffdbdf250100000008000100", @ANYRES32=r11, @ANYBLOB="4800028040000100240001006de594745e000000000000002f4b000000000000000000000000000000100000000003000e00"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44094) 302.075849ms ago: executing program 2 (id=576): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1ff, 0x1}) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0xc, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201081e, &(0x7f00000005c0)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x459, &(0x7f0000000600)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r11, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r12, &(0x7f0000000140)='2', 0x1, 0x8080c61) pwrite64(r10, &(0x7f0000000300)='E', 0x1, 0x47ecf) ioctl$EXT4_IOC_MOVE_EXT(r10, 0x40305829, &(0x7f0000000240)={0x17c04, r10, 0x6, 0x100000001}) syz_ublk_setup_queues(r9, r8, &(0x7f0000000540)={0x0, 0xc808, 0x0, 0x2, 0x28e}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1000, 0x3, 0x1af, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c35, 0x2, 0x0, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x10000, 0x1, 0x2db}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x0, 0x2b7}}], 0x4, &(0x7f0000001f40)={0x2e, 0x5c, 0x0, r9, 0xc0107523, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r7, '\x00', {0x5, 0xb55, 0x100104, 0x0}}, &(0x7f0000000180)) pread64$ublk_ch(r13, 0x0, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000000000000000006301c07f0000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 259.231581ms ago: executing program 6 (id=577): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_setup_io_uring(0x6b46, 0x0, &(0x7f0000000180), &(0x7f00000002c0), 0x0) r6 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x11, 0x0, 0x0) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000100)={0x21, 0x2}) sendfile(r1, r0, 0x0, 0x1000000000007) 96.603958ms ago: executing program 2 (id=578): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x82, &(0x7f00000000c0)={[{@usrjquota_path={'usrjquota', 0x3d, './bus'}}, {@noinit_itable}]}, 0x0, 0x470, &(0x7f00000005c0)="$eJzs3M9vFFUcAPDvTLdFftmVoIYfKhGNxB8FCiIHLxpNPGhiogc81nYhlYUaWhMhRIoxeDQk3o1HE/4CT3ox6snEq3o2JMRwAT2tmd0Zut1uV/pj2cp8PsnAezNv+9533rztmzcMAZTWvuyPJGJbRPwWEaOt7OIC+1p/3b55cfLvmxcnk2g03vkraZa7dfPiZFG0+NzWIlOJSD9LYk+XemfPXzg9Ua/XzuX5g3NnPjw4e/7CC9NnJk7VTtXOjh8/fvTI4ZeOjb+4LnFmcd3a/cnM3l1vvHf1rckTV9//6VpSxN8Rx9pVou1Hd/V0o7F+1W0A29vSSWWADWFFhvKrdbg5/kdjKBY6bzRe/3SgjQP6qtFoNB5Z/vB8A7iPJTHoFgCDUfyiz+5/i+0eTT02hBuvtG6Asrhv51vrSCXSvMxwx/3tetoXESfm//kq26JzHWJznyoFAErtu2z+83y3+V8a7etCD+bPUKoR8VBE7IiIYxGxMyIejmiWfTRixSv/nQ9Jls4/0+urietuZfO/l/NnW4vnf8XsL6pDeW57M/7h5OR0vXYoPycHYnhTlj/co47vX/v1i1ZqZMmx9vlftmX1F3PBvB3XK5sWf2ZqYm5irXEXblyO2F3pFn9ypzOTiNgVEbtXWcf0s9/sXe7YMvEvPVHdrMNzpsbXEc+0+n8+OuIvJL2fTx58IOq1Q5sivyqW+vmXK28vV/9/939/Zf2/pev1X8T/RzVpf147u/I6rvz++bL3lKu9/keSdxft+3hibu7c4YiR5M1mvtq+f7yj3PhC+Sz+A/u7j/8dsXAm9kREdhE/FhGPR8QTbd9dT0bE/h7x//jqUx+sPv7+yuKf6tn/0dH/C4mR6NzTPTF0+odvF1VaXUn8Wf8fbaYO5Hvu5vuvXqssaU4RUXsD13LuAAAA4P8ijYhtkaRjd9JpOjbW+jf8O2NLWp+ZnXvu5MxHZ6da7whUYzgt1j9Hk/nWD8nXP6v5+ujIdL023pbPyh/J142/HNrczI9NztSnBh08lNzWZcZ/5s+hQbcO6Dvva0F5Gf9QXsY/lFfX8e/lEyiFLuPf6IeS6Pb7/9IA2gHcex3jv+djPxMDuL9Y/4PyMv6hvIx/KKXLEb1f3u9r4lreirv9VP6fFl5aVaVpRKy6qRG9yxTLpX0/dbGWKNYzEemGaEYpEpcGUOngvpMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW078BAAD//6wu3E0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000500)=@newtaction={0x5c, 0x31, 0x12f, 0x0, 0x0, {}, [{0x48, 0x1, [@m_police={0x44, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x15, 0x6, "ae63401acd4eafc98107a9e33223b35457"}, {0xc, 0xb, {0x1}}, {0xc, 0xa, {0x5, 0x1}}}}]}]}, 0x5c}}, 0x8080) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)={0x2, 'vlan1\x00', {0x6}, 0x2}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './bus\x00'}, 0x6e) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12012, r0, 0x0) 0s ago: executing program 2 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x1, 0x6}, {0xa, 0xe}, {0xe, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) io_setup(0x4, &(0x7f00000013c0)=0x0) io_submit(r2, 0x1, &(0x7f0000002c00)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x22, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@exit, @jmp={0x5, 0x1, 0x0, 0x0, 0x7, 0x8}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfad}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f00000006c0)='syzkaller\x00', 0x5, 0x9b, &(0x7f0000000700)=""/155, 0x41100, 0x45, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xc, 0xdb, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)=[0x1, 0x1, 0x1], 0x0, 0x10, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r3, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r4, &(0x7f00000002c0)='\n', 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000300)=@fd={0x7, 0x3, 0x4, 0x10000, 0x7, {0x77359400}, {0x4, 0x0, 0x7, 0xd, 0x5, 0x8, "a9eb5d93"}, 0x3ff8, 0x4, {}, 0x80, 0x0, r4}) (async) ioctl$vim2m_VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000300)=@fd={0x7, 0x3, 0x4, 0x10000, 0x7, {0x77359400}, {0x4, 0x0, 0x7, 0xd, 0x5, 0x8, "a9eb5d93"}, 0x3ff8, 0x4, {}, 0x80, 0x0, r4}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r6, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x59, 0xa8, @random="a3f7b62131d5ac07eab09ca81e32967326ad9afe1a7e7f32d835fd37437b5c57a242e7c636230fbdf0daf4af8f09ae96e5e299cc432e7f7d81cb2c80f25b7cdf378c29c235119c543de84aaf0ffd3d4549b3f0e8f9"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) (async) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r6, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x59, 0xa8, @random="a3f7b62131d5ac07eab09ca81e32967326ad9afe1a7e7f32d835fd37437b5c57a242e7c636230fbdf0daf4af8f09ae96e5e299cc432e7f7d81cb2c80f25b7cdf378c29c235119c543de84aaf0ffd3d4549b3f0e8f9"}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.177' (ED25519) to the list of known hosts. [ 28.341049][ T4700] cgroup: Unknown subsys name 'net' [ 28.472158][ T4700] cgroup: Unknown subsys name 'cpuset' [ 28.474094][ T4700] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.640591][ T4700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.346554][ T4721] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.359007][ T4724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.360501][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.360801][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.361737][ T4719] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.362113][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.362317][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.362449][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.362760][ T4719] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.362991][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.363125][ T4727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.363474][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.363894][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.364199][ T4728] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.364437][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.365284][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.366766][ T4728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.368673][ T4728] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.369533][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.370927][ T4728] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.371082][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.380104][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.399974][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.405820][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.407864][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.682404][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.684038][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.685757][ T4715] bridge_slave_0: entered allmulticast mode [ 30.687560][ T4715] bridge_slave_0: entered promiscuous mode [ 30.688985][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689026][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.689353][ T4715] bridge_slave_1: entered allmulticast mode [ 30.690032][ T4715] bridge_slave_1: entered promiscuous mode [ 30.705454][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.706438][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.752062][ T4715] team0: Port device team_slave_0 added [ 30.752912][ T4715] team0: Port device team_slave_1 added [ 30.781790][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.781823][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.781854][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.788719][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.788728][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.788741][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.791536][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.791601][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.791690][ T4713] bridge_slave_0: entered allmulticast mode [ 30.792127][ T4713] bridge_slave_0: entered promiscuous mode [ 30.793261][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.793282][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.793374][ T4713] bridge_slave_1: entered allmulticast mode [ 30.793775][ T4713] bridge_slave_1: entered promiscuous mode [ 30.806653][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.807531][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.816139][ T4715] hsr_slave_0: entered promiscuous mode [ 30.816501][ T4715] hsr_slave_1: entered promiscuous mode [ 30.824202][ T4713] team0: Port device team_slave_0 added [ 30.824961][ T4713] team0: Port device team_slave_1 added [ 30.831269][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.831293][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.831531][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.832153][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.832160][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.832173][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.843254][ T4713] hsr_slave_0: entered promiscuous mode [ 30.843531][ T4713] hsr_slave_1: entered promiscuous mode [ 30.843730][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.843768][ T4713] Cannot create hsr debugfs directory [ 30.941544][ T4725] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.943020][ T4725] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.944432][ T4725] bridge_slave_0: entered allmulticast mode [ 30.946175][ T4725] bridge_slave_0: entered promiscuous mode [ 30.958659][ T4725] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.959643][ T4725] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.959742][ T4725] bridge_slave_1: entered allmulticast mode [ 30.960174][ T4725] bridge_slave_1: entered promiscuous mode [ 30.976970][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.978489][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.979695][ T4714] bridge_slave_0: entered allmulticast mode [ 30.980165][ T4714] bridge_slave_0: entered promiscuous mode [ 30.986206][ T4725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.994737][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.994815][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.994920][ T4714] bridge_slave_1: entered allmulticast mode [ 30.995370][ T4714] bridge_slave_1: entered promiscuous mode [ 31.001854][ T4725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.013185][ T4725] team0: Port device team_slave_0 added [ 31.017136][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.017850][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.017953][ T4712] bridge_slave_0: entered allmulticast mode [ 31.018422][ T4712] bridge_slave_0: entered promiscuous mode [ 31.022660][ T4725] team0: Port device team_slave_1 added [ 31.029956][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.030064][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.030101][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.030154][ T4712] bridge_slave_1: entered allmulticast mode [ 31.030603][ T4712] bridge_slave_1: entered promiscuous mode [ 31.037405][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.038777][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.043137][ T4725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.044666][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.047915][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.051491][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.053276][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.055376][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.057189][ T4725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.057212][ T4725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.057226][ T4725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.065505][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.066890][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.070243][ T4714] team0: Port device team_slave_0 added [ 31.073449][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.075848][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.083853][ T4714] team0: Port device team_slave_1 added [ 31.087189][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.088608][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.089718][ T4712] team0: Port device team_slave_0 added [ 31.097720][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.097747][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.097763][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.098687][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.098695][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.098710][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.108898][ T4714] hsr_slave_0: entered promiscuous mode [ 31.109213][ T4714] hsr_slave_1: entered promiscuous mode [ 31.109399][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.109409][ T4714] Cannot create hsr debugfs directory [ 31.118603][ T4712] team0: Port device team_slave_1 added [ 31.141405][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.142824][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.147416][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.153735][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.155932][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.157889][ T4725] hsr_slave_0: entered promiscuous mode [ 31.158247][ T4725] hsr_slave_1: entered promiscuous mode [ 31.158442][ T4725] debugfs: 'hsr0' already exists in 'hsr' [ 31.158452][ T4725] Cannot create hsr debugfs directory [ 31.163055][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.164437][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.164473][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.167304][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.167334][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.167471][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.167499][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.171547][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.173360][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.193734][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.196497][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.218742][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.221314][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.230728][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.235237][ T4712] hsr_slave_0: entered promiscuous mode [ 31.235577][ T4712] hsr_slave_1: entered promiscuous mode [ 31.235800][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 31.235810][ T4712] Cannot create hsr debugfs directory [ 31.258399][ T150] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.260597][ T150] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.268780][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.284777][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.284829][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.303507][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.303562][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.330303][ T4714] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.334073][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.335944][ T4714] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.338219][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.342767][ T4714] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.344998][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.346714][ T4714] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.348945][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.376772][ T4725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.379092][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.384091][ T4725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.386243][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.386776][ T4725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.390083][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.398163][ T4725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.400592][ T4725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.427252][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.434022][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.444920][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.444962][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.445359][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.445377][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.466928][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.468437][ T4712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.471362][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.478182][ T4712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.481326][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.482228][ T4712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.483594][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.487260][ T4712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.488668][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.497548][ T4725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.505011][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.522512][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.522859][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.524338][ T4725] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.535038][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.535094][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.535463][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.535481][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.536814][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.536833][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.574622][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.612595][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.623326][ T4713] veth0_vlan: entered promiscuous mode [ 31.634768][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.637850][ T4713] veth1_vlan: entered promiscuous mode [ 31.642387][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.642434][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.656064][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.656111][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.688299][ T4713] veth0_macvtap: entered promiscuous mode [ 31.703861][ T4713] veth1_macvtap: entered promiscuous mode [ 31.712042][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.731729][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.732781][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.738289][ T3803] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.738598][ T3803] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.738656][ T3803] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.738708][ T3803] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.757379][ T4715] veth0_vlan: entered promiscuous mode [ 31.759500][ T4715] veth1_vlan: entered promiscuous mode [ 31.806633][ T4715] veth0_macvtap: entered promiscuous mode [ 31.816730][ T4725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.817384][ T4715] veth1_macvtap: entered promiscuous mode [ 31.830396][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.846766][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.848978][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.855868][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.856004][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.856014][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.861190][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.862344][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.863809][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.897411][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.897445][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.918717][ T4714] veth0_vlan: entered promiscuous mode [ 31.919515][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.948186][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.948216][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.949104][ T4713] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.952960][ T4714] veth1_vlan: entered promiscuous mode [ 31.980453][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.982072][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.990873][ T4712] veth0_vlan: entered promiscuous mode [ 31.995128][ T4712] veth1_vlan: entered promiscuous mode [ 32.002363][ T4712] veth0_macvtap: entered promiscuous mode [ 32.004778][ T4712] veth1_macvtap: entered promiscuous mode [ 32.009532][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.012222][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.031055][ T4725] veth0_vlan: entered promiscuous mode [ 32.035435][ T4725] veth1_vlan: entered promiscuous mode [ 32.039197][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.040912][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041368][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.041599][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073421][ T4714] veth0_macvtap: entered promiscuous mode [ 32.076439][ T4714] veth1_macvtap: entered promiscuous mode [ 32.087828][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.091517][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.099086][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.102387][ T4725] veth0_macvtap: entered promiscuous mode [ 32.260997][ T4725] veth1_macvtap: entered promiscuous mode [ 32.268825][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.270789][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281312][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281361][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.281394][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.285116][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.285130][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.302839][ T4899] syzkaller0: entered promiscuous mode [ 32.302878][ T4899] syzkaller0: entered allmulticast mode [ 32.306208][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.307276][ T4725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.316329][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.316374][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.316407][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.316429][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.352889][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.352922][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.381251][ T3682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.381281][ T3682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.396393][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.396427][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.410039][ T4718] Bluetooth: hci3: command tx timeout [ 32.410172][ T4720] Bluetooth: hci0: command tx timeout [ 32.410336][ T4724] Bluetooth: hci4: command tx timeout [ 32.410979][ T4720] Bluetooth: hci1: command tx timeout [ 32.419211][ T3682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.419242][ T3682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.490263][ T4718] Bluetooth: hci2: command tx timeout [ 32.495236][ T4904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.497274][ T4904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.607962][ T4914] loop1: detected capacity change from 0 to 512 [ 32.608574][ T4914] EXT4-fs: Ignoring removed nobh option [ 32.703755][ T4915] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.712299][ T4915] process 'syz.4.5' launched './file1' with NULL argv: empty string added [ 32.719686][ T4915] ======================================================= [ 32.719686][ T4915] WARNING: The mand mount option has been deprecated and [ 32.719686][ T4915] and is ignored by this kernel. Remove the mand [ 32.719686][ T4915] option from the mount to silence this warning. [ 32.719686][ T4915] ======================================================= [ 32.878242][ T4914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.882593][ T4920] loop0: detected capacity change from 0 to 512 [ 32.884547][ T4920] EXT4-fs: Ignoring removed nobh option [ 32.930361][ T4920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.042441][ T4928] loop3: detected capacity change from 0 to 512 [ 33.266244][ T4928] EXT4-fs: Ignoring removed nobh option [ 33.310896][ T4928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.387677][ T4934] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.391225][ T4934] dummy_hcd dummy_hcd.0: remove, state 1 [ 33.391283][ T4934] usb usb1: USB disconnect, device number 1 [ 33.417705][ T4934] dummy_hcd dummy_hcd.0: stopped [ 33.417743][ T4934] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 33.777236][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.812494][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.859027][ T4946] loop1: detected capacity change from 0 to 512 [ 33.861075][ T4946] EXT4-fs: Ignoring removed nobh option [ 33.931092][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.942890][ T4946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.299277][ T4957] mmap: syz.3.16 (4957): VmData 175906816 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 34.322663][ T4956] capability: warning: `syz.2.17' uses 32-bit capabilities (legacy support in use) [ 34.366337][ T4962] loop0: detected capacity change from 0 to 512 [ 34.372590][ T4963] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19'. [ 34.386057][ T4962] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.0.18: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 34.386119][ T4962] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.386818][ T4962] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.0.18: ea_inode dec ref err=-117 [ 34.386958][ T4962] EXT4-fs (loop0): 1 orphan inode deleted [ 34.387425][ T4962] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.450358][ T4962] team0: Device xfrm0 is of different type [ 34.492583][ T4718] Bluetooth: hci1: command tx timeout [ 34.500782][ T4718] Bluetooth: hci3: command tx timeout [ 34.500807][ T4720] Bluetooth: hci0: command tx timeout [ 34.500865][ T4719] Bluetooth: hci4: command tx timeout [ 34.518281][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.569734][ T4719] Bluetooth: hci2: command tx timeout [ 34.575556][ T4978] loop2: detected capacity change from 0 to 512 [ 34.577324][ T4978] EXT4-fs: Ignoring removed nobh option [ 34.604415][ T4978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.676358][ T4991] syz.3.28 uses obsolete (PF_INET,SOCK_PACKET) [ 34.732972][ T4714] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.801981][ T4990] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 34.919331][ T5002] loop4: detected capacity change from 0 to 512 [ 34.923704][ T5002] vfat: Unknown parameter '00000000000000000003ÿÿÿÿ' [ 34.931852][ T4719] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 34.931878][ T4719] CPU: 1 UID: 0 PID: 4719 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 34.931892][ T4719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 34.931899][ T4719] Workqueue: hci4 hci_rx_work [ 34.931920][ T4719] Call trace: [ 34.931924][ T4719] show_stack+0x2c/0x3c (C) [ 34.931942][ T4719] __dump_stack+0x30/0x40 [ 34.931955][ T4719] dump_stack_lvl+0xd8/0x12c [ 34.931966][ T4719] dump_stack+0x1c/0x28 [ 34.931978][ T4719] sysfs_warn_dup+0x9c/0xb8 [ 34.931990][ T4719] sysfs_create_dir_ns+0x190/0x1f4 [ 34.932001][ T4719] kobject_add_internal+0x290/0x6f0 [ 34.932011][ T4719] kobject_add_varg+0x9c/0xe8 [ 34.932023][ T4719] kobject_add+0x110/0x1c8 [ 34.932042][ T4719] device_add+0x394/0x9e0 [ 34.932055][ T4719] hci_conn_add_sysfs+0xbc/0x1e8 [ 34.932067][ T4719] le_conn_complete_evt+0xc68/0x10f8 [ 34.932076][ T4719] hci_le_conn_complete_evt+0x114/0x3d8 [ 34.932086][ T4719] hci_le_meta_evt+0x2b0/0x46c [ 34.932096][ T4719] hci_event_packet+0x4c0/0x9c8 [ 34.932106][ T4719] hci_rx_work+0x2f4/0xd78 [ 34.932118][ T4719] process_scheduled_works+0x788/0x10b8 [ 34.932129][ T4719] worker_thread+0x798/0xbd0 [ 34.932139][ T4719] kthread+0x304/0x3d4 [ 34.932148][ T4719] ret_from_fork+0x10/0x20 [ 34.932167][ T4719] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 34.932186][ T4719] Bluetooth: hci4: failed to register connection device [ 34.947485][ T30] audit: type=1400 audit(34.930:2): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="184467440" requested=x pid=5006 comm="syz.1.31" name="file0" dev="tmpfs" ino=35 [ 34.981228][ T5002] loop4: detected capacity change from 0 to 8 [ 34.984273][ T5002] /dev/loop4: Can't open blockdev [ 35.098322][ T5020] loop4: detected capacity change from 0 to 512 [ 35.124155][ T5020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.156803][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.179353][ T5028] loop4: detected capacity change from 0 to 256 [ 35.179933][ T5028] vfat: Unknown parameter 'nonuítail' [ 35.214759][ T5032] FAULT_INJECTION: forcing a failure. [ 35.214759][ T5032] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 35.214810][ T5032] CPU: 0 UID: 0 PID: 5032 Comm: syz.4.42 Not tainted syzkaller #0 PREEMPT [ 35.214823][ T5032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.214831][ T5032] Call trace: [ 35.214834][ T5032] show_stack+0x2c/0x3c (C) [ 35.214857][ T5032] __dump_stack+0x30/0x40 [ 35.214869][ T5032] dump_stack_lvl+0xd8/0x12c [ 35.214879][ T5032] dump_stack+0x1c/0x28 [ 35.214888][ T5032] should_fail_ex+0x41c/0x590 [ 35.214899][ T5032] should_fail+0x14/0x24 [ 35.214908][ T5032] should_fail_usercopy+0x20/0x30 [ 35.214918][ T5032] _inline_copy_from_user+0x3c/0x174 [ 35.214929][ T5032] do_sock_getsockopt+0x210/0x720 [ 35.214937][ T5032] __sys_getsockopt+0xfc/0x168 [ 35.214945][ T5032] __arm64_sys_getsockopt+0xc0/0xdc [ 35.214954][ T5032] invoke_syscall+0x98/0x244 [ 35.214964][ T5032] el0_svc_common+0xec/0x23c [ 35.214974][ T5032] do_el0_svc+0x4c/0x5c [ 35.214983][ T5032] el0_svc+0x64/0x260 [ 35.214993][ T5032] el0t_64_sync_handler+0x48/0x148 [ 35.215003][ T5032] el0t_64_sync+0x198/0x19c [ 35.267884][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.1.44'. [ 35.268450][ T5038] netlink: 76 bytes leftover after parsing attributes in process `syz.1.44'. [ 35.365228][ T5047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 35.428358][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.486713][ T4719] Bluetooth: hci4: adv larger than maximum supported [ 35.486747][ T4719] Bluetooth: hci4: Malformed LE Event: 0x0d [ 35.516687][ T5055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.53'. [ 35.614510][ T5065] FAULT_INJECTION: forcing a failure. [ 35.614510][ T5065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.614543][ T5065] CPU: 0 UID: 0 PID: 5065 Comm: syz.3.58 Not tainted syzkaller #0 PREEMPT [ 35.614557][ T5065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 35.614563][ T5065] Call trace: [ 35.614566][ T5065] show_stack+0x2c/0x3c (C) [ 35.614585][ T5065] __dump_stack+0x30/0x40 [ 35.614596][ T5065] dump_stack_lvl+0xd8/0x12c [ 35.614606][ T5065] dump_stack+0x1c/0x28 [ 35.614615][ T5065] should_fail_ex+0x41c/0x590 [ 35.614626][ T5065] should_fail+0x14/0x24 [ 35.614635][ T5065] should_fail_usercopy+0x20/0x30 [ 35.614645][ T5065] _inline_copy_from_user+0x3c/0x3a4 [ 35.614655][ T5065] sk_getsockopt+0x140/0x19b0 [ 35.614665][ T5065] do_sock_getsockopt+0x278/0x720 [ 35.614674][ T5065] __sys_getsockopt+0xfc/0x168 [ 35.614682][ T5065] __arm64_sys_getsockopt+0xc0/0xdc [ 35.614690][ T5065] invoke_syscall+0x98/0x244 [ 35.614700][ T5065] el0_svc_common+0xec/0x23c [ 35.614710][ T5065] do_el0_svc+0x4c/0x5c [ 35.614719][ T5065] el0_svc+0x64/0x260 [ 35.614729][ T5065] el0t_64_sync_handler+0x48/0x148 [ 35.614739][ T5065] el0t_64_sync+0x198/0x19c [ 35.701010][ T5070] EXT4-fs: Ignoring removed bh option [ 35.703608][ T5070] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 35.712165][ T5070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.721880][ T5070] EXT4-fs error (device loop3): ext4_read_inline_dir:1494: inode #12: block 7: comm syz.3.60: path /: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 35.726970][ T5070] EXT4-fs (loop3): Remounting filesystem read-only [ 35.813121][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.957560][ T5080] EXT4-fs: Ignoring removed nobh option [ 35.966455][ T5080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.401553][ T5086] Zero length message leads to an empty skb [ 36.463566][ T5093] fuse: Unknown parameter 'appraise' [ 36.506976][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.560742][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.570797][ T4720] Bluetooth: hci1: command tx timeout [ 36.570835][ T4720] Bluetooth: hci4: command tx timeout [ 36.570851][ T4720] Bluetooth: hci0: command tx timeout [ 36.570928][ T4719] Bluetooth: hci3: command tx timeout [ 36.583045][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 36.585136][ T4719] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 36.585560][ T5099] FAULT_INJECTION: forcing a failure. [ 36.585560][ T5099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.585574][ T5099] CPU: 1 UID: 0 PID: 5099 Comm: syz.3.70 Not tainted syzkaller #0 PREEMPT [ 36.585584][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 36.585588][ T5099] Call trace: [ 36.585591][ T5099] show_stack+0x2c/0x3c (C) [ 36.585611][ T5099] __dump_stack+0x30/0x40 [ 36.585624][ T5099] dump_stack_lvl+0xd8/0x12c [ 36.585633][ T5099] dump_stack+0x1c/0x28 [ 36.585643][ T5099] should_fail_ex+0x41c/0x590 [ 36.585654][ T5099] should_fail+0x14/0x24 [ 36.585663][ T5099] should_fail_usercopy+0x20/0x30 [ 36.585673][ T5099] copy_to_sockptr_offset+0x84/0x1b0 [ 36.585683][ T5099] sk_getsockopt+0x10c4/0x19b0 [ 36.585694][ T5099] do_sock_getsockopt+0x278/0x720 [ 36.585702][ T5099] __sys_getsockopt+0xfc/0x168 [ 36.585711][ T5099] __arm64_sys_getsockopt+0xc0/0xdc [ 36.585719][ T5099] invoke_syscall+0x98/0x244 [ 36.585729][ T5099] el0_svc_common+0xec/0x23c [ 36.585739][ T5099] do_el0_svc+0x4c/0x5c [ 36.585748][ T5099] el0_svc+0x64/0x260 [ 36.585759][ T5099] el0t_64_sync_handler+0x48/0x148 [ 36.585768][ T5099] el0t_64_sync+0x198/0x19c [ 36.587739][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.600267][ T4719] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.605695][ T4719] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.624581][ T5103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 36.636309][ T5103] team0: Port device team_slave_0 removed [ 36.644894][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.721125][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.783686][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.783728][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.783791][ T5100] bridge_slave_0: entered allmulticast mode [ 36.784232][ T5100] bridge_slave_0: entered promiscuous mode [ 36.785566][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.785613][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.785676][ T5100] bridge_slave_1: entered allmulticast mode [ 36.786130][ T5100] bridge_slave_1: entered promiscuous mode [ 36.802335][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.805321][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.814378][ T5100] team0: Port device team_slave_0 added [ 36.816474][ T5100] team0: Port device team_slave_1 added [ 36.824601][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.826081][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.828330][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.830009][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.830709][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.830716][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.830731][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.842177][ T5100] hsr_slave_0: entered promiscuous mode [ 36.842498][ T5100] hsr_slave_1: entered promiscuous mode [ 36.842714][ T5100] debugfs: 'hsr0' already exists in 'hsr' [ 36.842723][ T5100] Cannot create hsr debugfs directory [ 36.909288][ T12] bridge_slave_1: left allmulticast mode [ 36.909333][ T12] bridge_slave_1: left promiscuous mode [ 36.909718][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.918894][ T12] bridge_slave_0: left allmulticast mode [ 36.918930][ T12] bridge_slave_0: left promiscuous mode [ 36.919126][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.016528][ T5138] overlayfs: workdir and upperdir must reside under the same mount [ 37.047327][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.071236][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.081810][ T12] bond0 (unregistering): Released all slaves [ 37.096073][ T4402] 8021q: adding VLAN 0 to HW filter on device eth0 [ 37.127762][ T5100] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.133903][ T5100] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.134356][ T5100] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.136657][ T5100] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.137227][ T5100] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.138927][ T5100] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.139479][ T5100] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.143982][ T5100] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.237640][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.256396][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.263914][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.263954][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.269870][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.269906][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.276896][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.316384][ T12] hsr_slave_0: left promiscuous mode [ 37.317482][ T12] hsr_slave_1: left promiscuous mode [ 37.317874][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.317893][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.320079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.320093][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.326312][ T12] veth1_macvtap: left promiscuous mode [ 37.326365][ T12] veth0_macvtap: left promiscuous mode [ 37.326775][ T12] veth1_vlan: left promiscuous mode [ 37.326841][ T12] veth0_vlan: left promiscuous mode [ 37.444303][ T12] team0 (unregistering): Port device team_slave_1 removed [ 37.448413][ T12] team0 (unregistering): Port device team_slave_0 removed [ 37.510372][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.653863][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.727743][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 37.785921][ T5100] veth0_vlan: entered promiscuous mode [ 37.793125][ T5100] veth1_vlan: entered promiscuous mode [ 37.808169][ T5100] veth0_macvtap: entered promiscuous mode [ 37.821210][ T5100] veth1_macvtap: entered promiscuous mode [ 37.835130][ T5221] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 37.842850][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.869406][ T5221] capability: warning: `syz.2.79' uses deprecated v2 capabilities in a way that may be insecure [ 37.870764][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.874232][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.874428][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.874529][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.874593][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.885289][ T5226] FAULT_INJECTION: forcing a failure. [ 37.885289][ T5226] name failslab, interval 1, probability 0, space 0, times 1 [ 37.885322][ T5226] CPU: 1 UID: 0 PID: 5226 Comm: syz.0.81 Not tainted syzkaller #0 PREEMPT [ 37.885336][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 37.885343][ T5226] Call trace: [ 37.885347][ T5226] show_stack+0x2c/0x3c (C) [ 37.885367][ T5226] __dump_stack+0x30/0x40 [ 37.885378][ T5226] dump_stack_lvl+0xd8/0x12c [ 37.885388][ T5226] dump_stack+0x1c/0x28 [ 37.885397][ T5226] should_fail_ex+0x41c/0x590 [ 37.885408][ T5226] should_failslab+0xc4/0x120 [ 37.885417][ T5226] __kmalloc_noprof+0x108/0x6b8 [ 37.885425][ T5226] __cgroup_bpf_run_filter_getsockopt+0x1ac/0xa6c [ 37.885437][ T5226] do_sock_getsockopt+0x718/0x720 [ 37.885447][ T5226] __sys_getsockopt+0xfc/0x168 [ 37.885455][ T5226] __arm64_sys_getsockopt+0xc0/0xdc [ 37.885463][ T5226] invoke_syscall+0x98/0x244 [ 37.885473][ T5226] el0_svc_common+0xec/0x23c [ 37.885483][ T5226] do_el0_svc+0x4c/0x5c [ 37.885493][ T5226] el0_svc+0x64/0x260 [ 37.885503][ T5226] el0t_64_sync_handler+0x48/0x148 [ 37.885512][ T5226] el0t_64_sync+0x198/0x19c [ 37.945453][ T5230] set_capacity_and_notify: 2 callbacks suppressed [ 37.946957][ T5230] loop2: detected capacity change from 0 to 2048 [ 37.954603][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.954627][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.962597][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.962629][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.973197][ T5230] loop2: p1 < > p3 p4 < > [ 37.974380][ T5230] loop2: p3 size 861184 extends beyond EOD, truncated [ 38.474244][ T5250] loop0: detected capacity change from 0 to 1024 [ 38.476555][ T5250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.513256][ T5250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.561640][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.649813][ T4718] Bluetooth: hci3: command tx timeout [ 38.649855][ T4718] Bluetooth: hci0: command tx timeout [ 38.649882][ T4718] Bluetooth: hci4: command tx timeout [ 38.649903][ T4718] Bluetooth: hci1: command tx timeout [ 38.649930][ T4718] Bluetooth: hci2: command tx timeout [ 38.933890][ T5224] Set syz1 is full, maxelem 65536 reached [ 38.946746][ T5264] FAULT_INJECTION: forcing a failure. [ 38.946746][ T5264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.946781][ T5264] CPU: 1 UID: 0 PID: 5264 Comm: syz.4.92 Not tainted syzkaller #0 PREEMPT [ 38.946797][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 38.946805][ T5264] Call trace: [ 38.946808][ T5264] show_stack+0x2c/0x3c (C) [ 38.946829][ T5264] __dump_stack+0x30/0x40 [ 38.946840][ T5264] dump_stack_lvl+0xd8/0x12c [ 38.946849][ T5264] dump_stack+0x1c/0x28 [ 38.946859][ T5264] should_fail_ex+0x41c/0x590 [ 38.946870][ T5264] should_fail+0x14/0x24 [ 38.946879][ T5264] should_fail_usercopy+0x20/0x30 [ 38.946889][ T5264] _inline_copy_from_user+0x3c/0x174 [ 38.946898][ T5264] kstrtouint_from_user+0xcc/0x174 [ 38.946905][ T5264] proc_fail_nth_write+0x9c/0x234 [ 38.946913][ T5264] vfs_write+0x2a4/0xa0c [ 38.946924][ T5264] ksys_write+0x12c/0x228 [ 38.946930][ T5264] __arm64_sys_write+0x7c/0x90 [ 38.946937][ T5264] invoke_syscall+0x98/0x244 [ 38.946947][ T5264] el0_svc_common+0xec/0x23c [ 38.946957][ T5264] do_el0_svc+0x4c/0x5c [ 38.946966][ T5264] el0_svc+0x64/0x260 [ 38.946977][ T5264] el0t_64_sync_handler+0x48/0x148 [ 38.946986][ T5264] el0t_64_sync+0x198/0x19c [ 39.015691][ T5271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.95'. [ 39.072023][ T5274] loop4: detected capacity change from 0 to 1024 [ 39.074852][ T5274] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 39.081085][ T5274] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.95: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.081123][ T5274] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.081393][ T5274] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 39.081412][ T5274] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.95: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.081425][ T5274] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.081498][ T5274] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 39.081506][ T5274] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.95: Failed to acquire dquot type 0 [ 39.081559][ T5274] loop4: lost filesystem error report for type 5 error -117 [ 39.081683][ T5274] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 39.081692][ T5274] loop4: lost filesystem error report for type 5 error -117 [ 39.082371][ T5274] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.95: mark_inode_dirty error [ 39.082385][ T5274] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.082529][ T5274] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 39.082561][ T5274] EXT4-fs (loop4): 1 orphan inode deleted [ 39.083022][ T5274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.133271][ T30] audit: type=1400 audit(39.120:3): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="184467440" requested=x pid=5276 comm="syz.3.97" name="file0" dev="tmpfs" ino=140 [ 39.232503][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.234757][ T12] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 39.234785][ T12] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.235544][ T12] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 39.235582][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7077: comm kworker/u8:0: Failed to release dquot type 0 [ 39.235597][ T12] loop4: lost filesystem error report for type 5 error -117 [ 39.236335][ T4725] EXT4-fs error (device loop4): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 39.236351][ T4725] loop4: lost filesystem error report for type 5 error -117 [ 39.236782][ T4725] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 39.236793][ T4725] loop4: lost filesystem error report for type 5 error -117 [ 39.236866][ T4725] EXT4-fs error (device loop4): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 39.236876][ T4725] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 39.333458][ T5294] loop4: detected capacity change from 0 to 512 [ 39.340085][ T5294] EXT4-fs: Ignoring removed nobh option [ 39.359397][ T5296] loop3: detected capacity change from 0 to 4096 [ 39.374770][ T5296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.407628][ T5294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.461144][ T5308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.462997][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 39.464801][ T5308] netlink: 'syz.2.105': attribute type 14 has an invalid length. [ 39.486091][ T5308] loop2: detected capacity change from 0 to 512 [ 39.497850][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.515777][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.972148][ T30] audit: type=1400 audit(39.950:4): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="184467440" requested=x pid=5324 comm="syz.3.109" name="file0" dev="tmpfs" ino=181 [ 40.017022][ T5331] overlayfs: missing 'lowerdir' [ 40.021991][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'. [ 40.022025][ T5331] netlink: 20 bytes leftover after parsing attributes in process `syz.3.112'. [ 40.022046][ T5331] netlink: 3 bytes leftover after parsing attributes in process `syz.3.112'. [ 40.038144][ T5331] netlink: 48 bytes leftover after parsing attributes in process `syz.3.112'. [ 40.050498][ T5335] netlink: del zone limit has 8 unknown bytes [ 40.098568][ T5338] Injecting memory failure for pfn 0x219250 at process virtual address 0x20ffe000 [ 40.138024][ T5338] Memory failure: 0x219250: unhandlable page. [ 40.138075][ T5338] Memory failure: 0x219250: recovery action for get hwpoison page: Ignored [ 40.145881][ T5338] input: syz1 as /devices/virtual/input/input2 [ 40.212879][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.267675][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.270615][ T5346] loop4: detected capacity change from 0 to 4096 [ 40.273667][ T5346] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.273691][ T5346] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.283208][ T5346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.295949][ T5346] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 40.306959][ T5346] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 40.364530][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.403417][ T30] audit: type=1400 audit(40.390:5): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="184467440" requested=x pid=5357 comm="syz.3.123" name="file0" dev="tmpfs" ino=212 [ 40.528689][ T5376] loop4: detected capacity change from 0 to 512 [ 40.529057][ T5376] EXT4-fs: Ignoring removed nobh option [ 40.542122][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 40.542161][ T5377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.127'. [ 40.547796][ T5376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.779714][ T4719] Bluetooth: hci2: command tx timeout [ 41.393237][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.819725][ T4719] Bluetooth: hci2: command tx timeout [ 42.956690][ T5399] loop5: detected capacity change from 0 to 512 [ 42.983150][ T5399] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.004504][ T5399] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 43.016803][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.077297][ T5410] loop5: detected capacity change from 0 to 8 [ 43.082164][ T5410] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 43.082191][ T5410] unable to read xattr id index table [ 43.082623][ T5410] squashfs image failed sanity check [ 43.090421][ T30] audit: type=1400 audit(43.070:6): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="184467440" requested=x pid=5411 comm="syz.2.137" name="file0" dev="tmpfs" ino=162 [ 43.147528][ T5421] loop2: detected capacity change from 0 to 512 [ 43.148010][ T5421] EXT4-fs: Ignoring removed nobh option [ 43.173351][ T5421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.183986][ T5426] loop5: detected capacity change from 0 to 2048 [ 43.222055][ T5426] EXT4-fs (loop5): can't mount with journal_async_commit, fs mounted w/o journal [ 43.249281][ T5426] binder: 5425:5426 got transaction to invalid handle, 3 [ 43.251115][ T5426] binder: 5425:5426 cannot find target node [ 43.252493][ T5426] binder: 5425:5426 transaction call to 0:0 failed 2/29201/-22, code 0 size 72-24 line 3252 [ 43.520463][ T5368] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 43.566495][ T5432] tipc: Started in network mode [ 43.567721][ T5432] tipc: Node identity aaaaaaaaaa16, cluster identity 4711 [ 43.570263][ T5432] tipc: Enabled bearer , priority 10 [ 43.663139][ T4813] binder: undelivered TRANSACTION_ERROR: 29201 [ 43.715280][ T5446] netlink: 'syz.0.147': attribute type 13 has an invalid length. [ 43.717151][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 43.727567][ T5446] netlink: 'syz.0.147': attribute type 13 has an invalid length. [ 43.727591][ T3682] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.727619][ T3682] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.727636][ T3682] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.727651][ T3682] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.728885][ T5446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 43.733381][ T5446] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 43.737312][ T5446] bridge1: entered allmulticast mode [ 43.838132][ T5455] mmap: syz.5.151 (5455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.864190][ T5458] loop5: detected capacity change from 0 to 256 [ 43.873536][ T5458] FAT-fs (loop5): error, clusters badly computed (0 != 128) [ 43.873567][ T5458] FAT-fs (loop5): Filesystem has been set read-only [ 43.873613][ T5458] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 44.746607][ T5470] __nla_validate_parse: 3 callbacks suppressed [ 44.746839][ T5470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'. [ 44.748568][ T5470] veth1_to_team: entered promiscuous mode [ 44.752200][ T5470] gretap0: entered promiscuous mode [ 44.752707][ T5470] hsr1: entered promiscuous mode [ 44.782050][ T5474] loop0: detected capacity change from 0 to 8 [ 44.816379][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.835166][ T5473] SQUASHFS error: Unable to read directory block [631:72] [ 44.835217][ T5473] SQUASHFS error: Unable to read directory block [631:72] [ 44.911048][ T4719] Bluetooth: hci2: command tx timeout [ 44.931010][ T9] tipc: Node number set to 12364458 [ 44.987950][ T5477] loop3: detected capacity change from 0 to 1024 [ 45.024487][ T5477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.034221][ T5477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.124427][ T5505] loop5: detected capacity change from 0 to 512 [ 45.130865][ T5505] EXT4-fs: Ignoring removed nobh option [ 45.226458][ T5509] loop0: detected capacity change from 0 to 512 [ 45.436108][ T5505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.442377][ T5514] loop4: detected capacity change from 0 to 128 [ 45.453820][ T5514] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 45.453859][ T5514] FAT-fs (loop4): Can't find a valid FAT filesystem [ 45.549281][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.602621][ T5521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.602651][ T5521] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 45.614321][ T5521] EXT4-fs (loop5): 1 truncate cleaned up [ 45.614790][ T5521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.654978][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.731344][ T5526] macvlan0: entered promiscuous mode [ 46.027206][ T5526] psci: CPU1 killed (polled 0 ms) [ 46.058267][ T0] Detected PIPT I-cache on CPU1 [ 46.058312][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 46.058500][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 46.215429][ T5539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.218909][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.179'. [ 46.244235][ T5539] CUSE: unknown device info "" [ 46.244261][ T5539] CUSE: unknown device info "" [ 46.244279][ T5539] CUSE: unknown device info "ÿw" [ 46.244285][ T5539] CUSE: zero length info key specified [ 46.316245][ T5544] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.181: bg 0: block 127: padding at end of block bitmap is not set [ 46.316289][ T5544] loop5: lost filesystem error report for type 5 error -117 [ 46.317598][ T5542] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.321221][ T5544] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.181: iget: bad extra_isize 58 (inode size 256) [ 46.321241][ T5544] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.322068][ T5544] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.181: error while reading EA inode 11 err=-117 [ 46.322084][ T5544] loop5: lost filesystem error report for type 5 error -117 [ 46.323098][ T5544] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.181: iget: bad extra_isize 58 (inode size 256) [ 46.323120][ T5544] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.323325][ T5544] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.181: error while reading EA inode 11 err=-117 [ 46.323339][ T5544] loop5: lost filesystem error report for type 5 error -117 [ 46.324043][ T5544] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.324390][ T5544] EXT4-fs (loop5): 1 orphan inode deleted [ 46.324862][ T5544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.352281][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.436489][ T5554] EXT4-fs: Ignoring removed nobh option [ 46.470132][ T5554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.599814][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.814776][ T5621] EXT4-fs: Ignoring removed nobh option [ 46.835151][ T5622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.854704][ T5621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.956253][ T5622] evm: overlay not supported [ 46.979728][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.083781][ T5650] xt_TCPMSS: Only works on TCP SYN packets [ 47.089281][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.094641][ T5650] EXT4-fs: Ignoring removed bh option [ 47.162885][ T5650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.178684][ T5650] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #2: block 3: comm syz.0.210: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=2048, size=2048 fake=0 [ 47.180255][ T5650] EXT4-fs (loop0): Remounting filesystem read-only [ 47.205642][ T5659] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.212: bg 0: block 4: invalid block bitmap [ 47.205676][ T5659] loop4: lost filesystem error report for type 5 error -117 [ 47.207490][ T5659] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 47.207508][ T5659] loop4: lost filesystem error report for type 5 error -117 [ 47.208235][ T5659] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.212: invalid indirect mapped block 1 (level 1) [ 47.208253][ T5659] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.208725][ T5659] EXT4-fs (loop4): 1 truncate cleaned up [ 47.209187][ T5659] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.274302][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.304421][ T4713] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.407121][ T5667] ext3: Unknown parameter 'subj_type' [ 47.514263][ T5680] EXT4-fs: Ignoring removed nobh option [ 47.523030][ T5680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.596488][ T5683] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 47.643276][ T5683] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.650741][ T5683] team0: Port device netdevsim1 added [ 47.790161][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.923620][ T5705] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 47.926189][ T5705] netlink: 'syz.4.227': attribute type 25 has an invalid length. [ 47.926223][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 47.928814][ T39] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.928897][ T39] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.928922][ T39] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.928936][ T39] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.929077][ T5705] netlink: 'syz.4.227': attribute type 25 has an invalid length. [ 47.929087][ T5705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.227'. [ 48.123561][ T5722] set_capacity_and_notify: 12 callbacks suppressed [ 48.123600][ T5722] loop4: detected capacity change from 0 to 512 [ 48.128966][ T5722] EXT4-fs: Ignoring removed nobh option [ 48.152416][ T5722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.184443][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.422919][ T5759] 9p: Bad value for 'wfdno' [ 48.456743][ T5772] loop4: detected capacity change from 0 to 1024 [ 48.479026][ T5772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.531856][ T5782] loop3: detected capacity change from 0 to 512 [ 48.537458][ T5782] EXT4-fs: Ignoring removed nobh option [ 48.556480][ T5782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.615814][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.628450][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.719043][ T5804] loop2: detected capacity change from 0 to 512 [ 48.719444][ T5804] EXT4-fs: Ignoring removed i_version option [ 48.721296][ T5804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.748050][ T5804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.896731][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.157863][ T5852] loop4: detected capacity change from 0 to 512 [ 49.160898][ T5852] EXT4-fs: Ignoring removed nobh option [ 49.185488][ T5852] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.432118][ T5885] binder: 5883:5885 ioctl c0306201 0 returned -14 [ 49.435864][ T5885] binder: 5883:5885 ioctl c0306201 200003c0 returned -14 [ 49.646892][ T5906] loop2: detected capacity change from 0 to 512 [ 49.656914][ T5906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.741683][ T5918] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 49.741832][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.276'. [ 50.191388][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.3.282'. [ 50.358000][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.468576][ T5979] netlink: 'syz.4.287': attribute type 1 has an invalid length. [ 50.492050][ T5977] input: syz0 as /devices/virtual/input/input3 [ 50.501268][ T5981] netlink: 16 bytes leftover after parsing attributes in process `syz.3.289'. [ 50.526760][ T5977] loop5: detected capacity change from 0 to 512 [ 50.529540][ T5977] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 50.553364][ T5977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c840e018, mo2=0002] [ 50.553503][ T5977] EXT4-fs (loop5): orphan cleanup on readonly fs [ 50.554580][ T5977] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.288: bg 0: block 361: padding at end of block bitmap is not set [ 50.554597][ T5977] loop5: lost filesystem error report for type 5 error -117 [ 50.554889][ T5977] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 50.554901][ T5977] loop5: lost filesystem error report for type 5 error -117 [ 50.554972][ T5977] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #11: comm syz.5.288: attempt to clear invalid blocks 33619980 len 1 [ 50.554986][ T5977] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.555255][ T5977] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.288: invalid indirect mapped block 1811939328 (level 0) [ 50.555269][ T5977] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.555343][ T5977] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.288: invalid indirect mapped block 2185560079 (level 1) [ 50.555355][ T5977] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.555635][ T5977] EXT4-fs (loop5): 1 truncate cleaned up [ 50.556098][ T5977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 50.586010][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.612900][ T5977] warning: `syz.5.288' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 50.725386][ T6004] netlink: 64 bytes leftover after parsing attributes in process `syz.2.294'. [ 50.739121][ T6007] dlm: Unknown command passed to DLM device : 0 [ 50.739121][ T6007] [ 50.768177][ T6010] loop4: detected capacity change from 0 to 512 [ 50.769064][ T6010] EXT4-fs: Ignoring removed nobh option [ 50.794611][ T6010] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.960628][ T6027] block nbd0: server does not support multiple connections per device. [ 50.961460][ T6027] block nbd0: shutting down sockets [ 50.966092][ T6035] loop2: detected capacity change from 0 to 512 [ 51.063787][ T6029] loop3: detected capacity change from 0 to 32768 [ 51.103892][ T6029] loop3: p9 p11 p16 [ 51.249917][ T6029] netlink: 'syz.3.301': attribute type 34 has an invalid length. [ 51.249953][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 51.290457][ T5100] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 51.306117][ T6029] bond1: option lacp_strict: invalid value (6) [ 51.315764][ T6029] bond1 (unregistering): Released all slaves [ 51.343521][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 51.350757][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.3.301'. [ 51.371987][ T4702] udevd[4702]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 51.392728][ T5124] udevd[5124]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 51.936485][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 51.937494][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.318'. [ 52.006531][ T6126] EXT4-fs warning (device loop3): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 52.232307][ T6152] EXT4-fs: Ignoring removed nobh option [ 52.359096][ T6161] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.430689][ T6165] EXT4-fs: inline encryption not supported [ 52.433282][ T6165] EXT4-fs (loop2): Test dummy encryption mode enabled [ 52.434004][ T6165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.794406][ T6180] vfat: Unknown parameter 'iocmYrset' [ 52.925578][ T6186] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.933195][ T6186] EXT4-fs (loop3): 1 truncate cleaned up [ 53.264155][ T6204] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.265718][ T6204] overlayfs: failed to set xattr on upper [ 53.266734][ T6204] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.268121][ T6204] overlayfs: ...falling back to uuid=null. [ 53.272186][ T6204] set_capacity_and_notify: 8 callbacks suppressed [ 53.273378][ T6204] loop0: detected capacity change from 0 to 256 [ 53.371800][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'. [ 53.371837][ T6210] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'. [ 53.373138][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.349'. [ 53.556585][ T6223] loop2: detected capacity change from 0 to 512 [ 53.563171][ T6225] Illegal XDP return value 4294967274 on prog (id 125) dev N/A, expect packet loss! [ 53.618210][ T6227] loop2: detected capacity change from 0 to 512 [ 53.623009][ T6227] EXT4-fs: Ignoring removed nobh option [ 53.727768][ T6235] loop5: detected capacity change from 0 to 2048 [ 53.846227][ T6245] loop5: detected capacity change from 0 to 256 [ 54.400838][ T6271] FAULT_INJECTION: forcing a failure. [ 54.400838][ T6271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.400873][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.3.367 Not tainted syzkaller #0 PREEMPT [ 54.400886][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 54.400892][ T6271] Call trace: [ 54.400896][ T6271] show_stack+0x2c/0x3c (C) [ 54.400915][ T6271] __dump_stack+0x30/0x40 [ 54.400926][ T6271] dump_stack_lvl+0xd8/0x12c [ 54.400937][ T6271] dump_stack+0x1c/0x28 [ 54.400946][ T6271] should_fail_ex+0x41c/0x590 [ 54.400957][ T6271] should_fail+0x14/0x24 [ 54.400967][ T6271] should_fail_usercopy+0x20/0x30 [ 54.400977][ T6271] _inline_copy_from_user+0x3c/0x174 [ 54.400987][ T6271] copy_msghdr_from_user+0xb8/0x194 [ 54.400997][ T6271] ___sys_sendmsg+0x14c/0x224 [ 54.401005][ T6271] __sys_sendmsg+0x158/0x204 [ 54.401013][ T6271] __arm64_sys_sendmsg+0x80/0x94 [ 54.401022][ T6271] invoke_syscall+0x98/0x244 [ 54.401032][ T6271] el0_svc_common+0xec/0x23c [ 54.401048][ T6271] do_el0_svc+0x4c/0x5c [ 54.401058][ T6271] el0_svc+0x64/0x260 [ 54.401069][ T6271] el0t_64_sync_handler+0x48/0x148 [ 54.401078][ T6271] el0t_64_sync+0x198/0x19c [ 54.554218][ T6279] loop3: detected capacity change from 0 to 512 [ 54.624916][ T6279] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 54.629591][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 54.629617][ C0] EXT4-fs (loop3): initial error at time 54: ext4_mb_generate_buddy:1317 [ 54.629647][ C0] EXT4-fs (loop3): last error at time 54: ext4_mb_generate_buddy:1317 [ 54.631789][ T6279] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.370: attempt to clear invalid blocks 1024 len 1 [ 54.631811][ T6279] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.632074][ T6279] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.370: invalid indirect mapped block 1819239214 (level 0) [ 54.632091][ T6279] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.632214][ T6279] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.370: invalid indirect mapped block 33554432 (level 2) [ 54.632227][ T6279] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.632577][ T6279] EXT4-fs (loop3): 1 truncate cleaned up [ 54.923210][ T6289] loop2: detected capacity change from 0 to 4096 [ 55.441755][ T6308] loop0: detected capacity change from 0 to 512 [ 55.442125][ T6308] EXT4-fs: Ignoring removed nobh option [ 55.446932][ T6310] FAULT_INJECTION: forcing a failure. [ 55.446932][ T6310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.449514][ T6310] CPU: 1 UID: 0 PID: 6310 Comm: syz.5.380 Not tainted syzkaller #0 PREEMPT [ 55.449534][ T6310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 55.449540][ T6310] Call trace: [ 55.449544][ T6310] show_stack+0x2c/0x3c (C) [ 55.449571][ T6310] __dump_stack+0x30/0x40 [ 55.449585][ T6310] dump_stack_lvl+0xd8/0x12c [ 55.449596][ T6310] dump_stack+0x1c/0x28 [ 55.449605][ T6310] should_fail_ex+0x41c/0x590 [ 55.449617][ T6310] should_fail+0x14/0x24 [ 55.449626][ T6310] should_fail_usercopy+0x20/0x30 [ 55.449636][ T6310] _copy_from_iter+0x188/0x1064 [ 55.449644][ T6310] memcpy_from_msg+0x50/0xc0 [ 55.449654][ T6310] isotp_sendmsg+0x6b0/0x1284 [ 55.449662][ T6310] __sock_sendmsg+0xc8/0x17c [ 55.449671][ T6310] ____sys_sendmsg+0x3d0/0x6c8 [ 55.449679][ T6310] ___sys_sendmsg+0x198/0x224 [ 55.449688][ T6310] __sys_sendmsg+0x158/0x204 [ 55.449696][ T6310] __arm64_sys_sendmsg+0x80/0x94 [ 55.449705][ T6310] invoke_syscall+0x98/0x244 [ 55.449715][ T6310] el0_svc_common+0xec/0x23c [ 55.449724][ T6310] do_el0_svc+0x4c/0x5c [ 55.449734][ T6310] el0_svc+0x64/0x260 [ 55.449744][ T6310] el0t_64_sync_handler+0x48/0x148 [ 55.449753][ T6310] el0t_64_sync+0x198/0x19c [ 55.634920][ T6321] __nla_validate_parse: 5 callbacks suppressed [ 55.634961][ T6321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.384'. [ 55.683482][ T4719] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 55.847352][ T6337] loop5: detected capacity change from 0 to 512 [ 55.850278][ T6337] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 55.861449][ T6337] EXT4-fs error (device loop5): __ext4_iget:5533: inode #11: block 2: comm syz.5.391: invalid block [ 55.861483][ T6337] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 55.864457][ T6337] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.391: couldn't read orphan inode 11 (err -117) [ 55.868709][ T6337] loop5: lost filesystem error report for type 5 error -117 [ 55.988582][ T6350] FAULT_INJECTION: forcing a failure. [ 55.988582][ T6350] name failslab, interval 1, probability 0, space 0, times 0 [ 55.992533][ T6350] CPU: 1 UID: 0 PID: 6350 Comm: syz.2.393 Not tainted syzkaller #0 PREEMPT [ 55.992547][ T6350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 55.992552][ T6350] Call trace: [ 55.992556][ T6350] show_stack+0x2c/0x3c (C) [ 55.992580][ T6350] __dump_stack+0x30/0x40 [ 55.992596][ T6350] dump_stack_lvl+0xd8/0x12c [ 55.992606][ T6350] dump_stack+0x1c/0x28 [ 55.992616][ T6350] should_fail_ex+0x41c/0x590 [ 55.992629][ T6350] should_failslab+0xc4/0x120 [ 55.992637][ T6350] kmem_cache_alloc_node_noprof+0x98/0x5f8 [ 55.992646][ T6350] __alloc_skb+0x1f0/0x610 [ 55.992656][ T6350] alloc_skb_with_frags+0xb8/0x690 [ 55.992662][ T6350] sock_alloc_send_pskb+0x740/0x850 [ 55.992670][ T6350] isotp_sendmsg+0x750/0x1284 [ 55.992679][ T6350] __sock_sendmsg+0xc8/0x17c [ 55.992687][ T6350] ____sys_sendmsg+0x3d0/0x6c8 [ 55.992695][ T6350] ___sys_sendmsg+0x198/0x224 [ 55.992703][ T6350] __sys_sendmsg+0x158/0x204 [ 55.992712][ T6350] __arm64_sys_sendmsg+0x80/0x94 [ 55.992720][ T6350] invoke_syscall+0x98/0x244 [ 55.992730][ T6350] el0_svc_common+0xec/0x23c [ 55.992740][ T6350] do_el0_svc+0x4c/0x5c [ 55.992749][ T6350] el0_svc+0x64/0x260 [ 55.992759][ T6350] el0t_64_sync_handler+0x48/0x148 [ 55.992768][ T6350] el0t_64_sync+0x198/0x19c [ 56.310623][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.397'. [ 56.765741][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 56.823127][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.995194][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.997681][ T4718] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.000896][ T4718] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.021276][ T4718] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.026681][ T4718] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.030615][ T4718] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.226192][ T6429] x_tables: duplicate underflow at hook 2 [ 57.311268][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.358289][ T6451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.413'. [ 57.386152][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.431069][ T6461] loop3: detected capacity change from 0 to 512 [ 57.433227][ T6461] EXT4-fs: Ignoring removed nobh option [ 57.545776][ T6465] fuse: Bad value for 'fd' [ 57.599514][ T40] bridge_slave_1: left allmulticast mode [ 57.599544][ T40] bridge_slave_1: left promiscuous mode [ 57.599753][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.611425][ T40] bridge_slave_0: left allmulticast mode [ 57.611453][ T40] bridge_slave_0: left promiscuous mode [ 57.611537][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.763184][ T6473] loop4: p2 < > p3 < p5 > p4 [ 57.763215][ T6473] loop4: partition table partially beyond EOD, truncated [ 57.763320][ T6473] loop4: p2 start 4278190080 is beyond EOD, truncated [ 57.781426][ T6473] loop4: p4 size 8192 extends beyond EOD, truncated [ 57.784288][ T6473] loop4: p5 size 8192 extends beyond EOD, truncated [ 57.890397][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.136539][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.171567][ T40] bond0 (unregistering): Released all slaves [ 58.177626][ T40] bond1 (unregistering): Released all slaves [ 58.224333][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 58.387322][ T6500] bond0: entered promiscuous mode [ 58.388765][ T6500] bond_slave_0: entered promiscuous mode [ 58.390723][ T6500] bond_slave_1: entered promiscuous mode [ 58.393696][ T6500] batadv0: entered promiscuous mode [ 58.396069][ T6500] debugfs: 'hsr1' already exists in 'hsr' [ 58.398895][ T6500] Cannot create hsr debugfs directory [ 58.459329][ T6500] netlink: 'syz.2.421': attribute type 10 has an invalid length. [ 58.501626][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.506363][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.506472][ T6431] bridge_slave_0: entered allmulticast mode [ 58.506910][ T6431] bridge_slave_0: entered promiscuous mode [ 58.508079][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.508109][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.508169][ T6431] bridge_slave_1: entered allmulticast mode [ 58.508588][ T6431] bridge_slave_1: entered promiscuous mode [ 58.758026][ T6500] syz_tun: entered promiscuous mode [ 58.780452][ T6500] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 58.839496][ T6524] netlink: 56 bytes leftover after parsing attributes in process `syz.4.426'. [ 58.854165][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.857325][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.870524][ T6524] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 58.897231][ T6431] team0: Port device team_slave_0 added [ 58.898070][ T6431] team0: Port device team_slave_1 added [ 58.945510][ T40] hsr_slave_0: left promiscuous mode [ 58.950966][ T40] hsr_slave_1: left promiscuous mode [ 58.951303][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.951316][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.953823][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.953834][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.964448][ T6524] set_capacity_and_notify: 1 callbacks suppressed [ 58.970270][ T6524] loop4: detected capacity change from 0 to 8192 [ 58.971659][ T40] veth1_macvtap: left promiscuous mode [ 58.971687][ T40] veth0_macvtap: left promiscuous mode [ 58.971797][ T40] veth1_vlan: left promiscuous mode [ 58.971832][ T40] veth0_vlan: left promiscuous mode [ 58.972152][ T6524] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.986114][ T6532] loop2: detected capacity change from 0 to 512 [ 59.004267][ T6532] EXT4-fs (loop2): can't mount with both data=journal and dax [ 59.252102][ T40] team0 (unregistering): Port device team_slave_1 removed [ 59.264979][ T40] team0 (unregistering): Port device team_slave_0 removed [ 59.266605][ T6560] loop0: detected capacity change from 0 to 512 [ 59.270958][ T6560] EXT4-fs: Ignoring removed nobh option [ 59.291359][ T4718] Bluetooth: hci2: command tx timeout [ 59.601708][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 59.602872][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.602881][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.602895][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.613763][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.613789][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.613805][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.651959][ T6431] hsr_slave_0: entered promiscuous mode [ 59.653476][ T6431] hsr_slave_1: entered promiscuous mode [ 59.655003][ T6431] debugfs: 'hsr0' already exists in 'hsr' [ 59.656231][ T6431] Cannot create hsr debugfs directory [ 59.657155][ T4725] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 59.657167][ T4725] FAT-fs (loop4): Filesystem has been set read-only [ 59.763933][ T6431] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 59.797023][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 59.799203][ T6431] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 59.815786][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 59.823785][ T6431] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 59.836733][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 59.839160][ T6431] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 59.856388][ T6431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 59.943256][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.959122][ T6431] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.972630][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.972676][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.978639][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.978681][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.052912][ T6431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.108233][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 60.185734][ T6612] syzkaller0: entered promiscuous mode [ 60.186911][ T6612] syzkaller0: entered allmulticast mode [ 60.505822][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.541791][ T6621] overlayfs: failed to verify index (index/00fb21000106c41cc82c2f4007ae6a2ce805a54424a33214cf3d02000000000000, ftype=4000, err=-116) [ 60.648325][ T6647] sctp: [Deprecated]: syz.0.441 (pid 6647) Use of int in max_burst socket option. [ 60.648325][ T6647] Use struct sctp_assoc_value instead [ 60.672377][ T6431] veth0_vlan: entered promiscuous mode [ 60.675357][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 60.684315][ T6431] veth1_vlan: entered promiscuous mode [ 60.702323][ T6431] veth0_macvtap: entered promiscuous mode [ 60.706111][ T6431] veth1_macvtap: entered promiscuous mode [ 60.718173][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.723913][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.734734][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.734781][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.734800][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.734817][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.769653][ T3682] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.769764][ T3682] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.789585][ T3682] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.789612][ T3682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.002950][ T6681] loop6: detected capacity change from 0 to 512 [ 61.003347][ T6681] EXT4-fs: Ignoring removed nobh option [ 61.369908][ T4718] Bluetooth: hci2: command tx timeout [ 61.425157][ T6706] FAULT_INJECTION: forcing a failure. [ 61.425157][ T6706] name failslab, interval 1, probability 0, space 0, times 0 [ 61.425197][ T6706] CPU: 0 UID: 0 PID: 6706 Comm: syz.3.454 Not tainted syzkaller #0 PREEMPT [ 61.425212][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 61.425219][ T6706] Call trace: [ 61.425222][ T6706] show_stack+0x2c/0x3c (C) [ 61.425243][ T6706] __dump_stack+0x30/0x40 [ 61.425255][ T6706] dump_stack_lvl+0xd8/0x12c [ 61.425265][ T6706] dump_stack+0x1c/0x28 [ 61.425274][ T6706] should_fail_ex+0x41c/0x590 [ 61.425288][ T6706] should_failslab+0xc4/0x120 [ 61.425297][ T6706] kmem_cache_alloc_noprof+0x94/0x5d8 [ 61.425305][ T6706] skb_clone+0x1ac/0x320 [ 61.425316][ T6706] can_send+0x4d0/0xac0 [ 61.425326][ T6706] isotp_sendmsg+0xc00/0x1284 [ 61.425335][ T6706] __sock_sendmsg+0xc8/0x17c [ 61.425343][ T6706] ____sys_sendmsg+0x3d0/0x6c8 [ 61.425351][ T6706] ___sys_sendmsg+0x198/0x224 [ 61.425360][ T6706] __sys_sendmsg+0x158/0x204 [ 61.425368][ T6706] __arm64_sys_sendmsg+0x80/0x94 [ 61.425377][ T6706] invoke_syscall+0x98/0x244 [ 61.425387][ T6706] el0_svc_common+0xec/0x23c [ 61.425396][ T6706] do_el0_svc+0x4c/0x5c [ 61.425405][ T6706] el0_svc+0x64/0x260 [ 61.425416][ T6706] el0t_64_sync_handler+0x48/0x148 [ 61.425426][ T6706] el0t_64_sync+0x198/0x19c [ 61.425454][ T6706] can-isotp: isotp_sendmsg: can_send_ret -ENOMEM [ 61.465414][ T6705] loop4: detected capacity change from 0 to 128 [ 61.471767][ T6705] FAT-fs (loop4): bogus sectors per cluster 0 [ 61.473517][ T6705] FAT-fs (loop4): Can't find a valid FAT filesystem [ 61.499005][ T6712] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 61.543833][ T6715] tmpfs: Bad value for 'mpol' [ 61.546207][ T6715] 9p: Bad value for 'wfdno' [ 61.559245][ T6717] fuse: Unknown parameter '000000000000000000000010x0000000000000004' [ 61.645946][ T6729] loop2: detected capacity change from 0 to 128 [ 61.779350][ T6746] loop2: detected capacity change from 0 to 512 [ 61.935304][ T6746] ext2: Unknown parameter 'obj_user' [ 62.142183][ T6767] netlink: 64 bytes leftover after parsing attributes in process `syz.2.471'. [ 62.142217][ T6764] CUSE: DEVNAME unspecified [ 62.203202][ T6770] loop2: detected capacity change from 0 to 128 [ 62.203581][ T6770] vfat: Bad value for 'time_offset' [ 62.260969][ T6774] netlink: 'syz.6.473': attribute type 1 has an invalid length. [ 62.274652][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 62.285873][ T6781] loop3: detected capacity change from 0 to 512 [ 62.287484][ T6781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.312716][ T6781] EXT4-fs error (device loop3): __ext4_new_inode:1081: comm syz.3.475: reserved inode found cleared - inode=1 [ 62.378292][ T6789] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.475: Allocating blocks 64-65 which overlap fs metadata [ 62.378782][ T6789] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.475: Allocating blocks 64-65 which overlap fs metadata [ 62.423660][ T6780] EXT4-fs (loop3): pa 00000000d6432437: logic 1, phys. 44, len 84 [ 62.423697][ T6780] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5459: group 0, free 63, pa_free 64 [ 62.459106][ T6799] binder: 6798:6799 ioctl c018620b 0 returned -14 [ 62.468244][ T6799] binder: 6798:6799 got transaction to invalid handle, 1 [ 62.468275][ T6799] binder: 6798:6799 cannot find target node [ 62.468290][ T6799] binder: 6798:6799 transaction async to 0:0 failed 6/29201/-22, code 0 size 0-0 line 3252 [ 62.468730][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 62.547957][ T6806] loop3: detected capacity change from 0 to 512 [ 62.548661][ T6806] EXT4-fs: Ignoring removed nobh option [ 62.872119][ T6843] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 62.882542][ T6843] EXT4-fs (loop0): 1 truncate cleaned up [ 62.898055][ T6843] netlink: 72 bytes leftover after parsing attributes in process `syz.0.491'. [ 62.900155][ T6843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 62.900175][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 63.062311][ T6858] EXT4-fs (loop0): Test dummy encryption mode enabled [ 63.062351][ T6858] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.080664][ T6858] EXT4-fs (loop0): 1 truncate cleaned up [ 63.084328][ T6858] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 63.436191][ T6865] netlink: 68 bytes leftover after parsing attributes in process `syz.2.496'. [ 63.449881][ T4718] Bluetooth: hci2: command tx timeout [ 63.551783][ T6872] EXT4-fs: quotafile must be on filesystem root [ 63.596979][ T6875] overlay: Unknown parameter '' [ 63.618139][ T6880] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32) [ 63.624165][ T6880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 63.626069][ T6880] netlink: 'syz.3.501': attribute type 10 has an invalid length. [ 63.627920][ T6880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.501'. [ 63.632966][ T6880] geneve2: entered promiscuous mode [ 63.634199][ T6880] geneve2: entered allmulticast mode [ 63.715849][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.3.502'. [ 63.732591][ T6883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.502'. [ 63.835112][ T6889] x_tables: duplicate underflow at hook 1 [ 63.839819][ T6889] tc_dump_action: action bad kind [ 63.841292][ T6889] openvswitch: netlink: Message has 4 unknown bytes. [ 63.841324][ T6889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 63.844696][ T6890] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 63.844696][ T6890] [ 63.844744][ T6890] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 63.911915][ T6894] EXT4-fs: Ignoring removed nobh option [ 64.063908][ T6913] set_capacity_and_notify: 5 callbacks suppressed [ 64.063944][ T6913] loop4: detected capacity change from 0 to 1024 [ 64.264161][ T6931] loop4: detected capacity change from 0 to 2048 [ 64.336017][ T6931] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 64.336052][ T6931] loop4: partition table partially beyond EOD, truncated [ 64.336133][ T6931] loop4: p1 size 393216 extends beyond EOD, truncated [ 64.336914][ T6931] loop4: p3 start 4225 is beyond EOD, truncated [ 64.337374][ T6931] loop4: p5 size 393216 extends beyond EOD, truncated [ 64.492259][ T1592] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492310][ T1592] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.540811][ T6952] x_tables: duplicate underflow at hook 3 [ 64.545025][ T24] cfg80211: failed to load regulatory.db [ 64.601066][ T6957] binder: tried to use weak ref as strong ref [ 64.601101][ T6957] binder: 6956:6957 Acquire 1 refcount change on invalid ref 0 ret -22 [ 64.601222][ T6957] binder: 6956:6957 got transaction to invalid handle, 1 [ 64.601231][ T6957] binder: 6956:6957 cannot find target node [ 64.601243][ T6957] binder: 6956:6957 transaction call to 0:0 failed 9/29201/-22, code 0 size 72-24 line 3252 [ 64.602396][ T9] binder: undelivered TRANSACTION_ERROR: 29201 [ 64.841952][ T6977] fuse: Bad value for 'group_id' [ 64.843191][ T6977] fuse: Bad value for 'group_id' [ 64.846945][ T6977] overlayfs: overlapping lowerdir path [ 64.852901][ T4712] EXT4-fs unmount: 36 callbacks suppressed [ 64.852933][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.099808][ T7003] loop3: detected capacity change from 0 to 8 [ 65.167064][ T7009] loop4: detected capacity change from 0 to 512 [ 65.167395][ T7009] EXT4-fs: Ignoring removed nobh option [ 65.195714][ T7009] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #16: comm syz.4.543: iget: bad i_size value: 216172782113792808 [ 65.195753][ T7009] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 65.195888][ T7009] EXT4-fs (loop4): Remounting filesystem read-only [ 65.196328][ T7009] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.226182][ T4725] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.258555][ T7020] tmpfs: Unknown parameter 'us' [ 65.262941][ T7020] tmpfs: Unknown parameter 'us' [ 65.317586][ T7024] loop3: detected capacity change from 0 to 2048 [ 65.356935][ T7024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.387847][ T7024] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 5 vs 4156096517 free clusters [ 65.388669][ T7024] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1 with error 28 [ 65.388695][ T7024] EXT4-fs (loop3): This should not happen!! Data will be lost [ 65.388695][ T7024] [ 65.388710][ T7024] EXT4-fs (loop3): Total free blocks count 0 [ 65.388723][ T7024] EXT4-fs (loop3): Free/Dirty block details [ 65.388739][ T7024] EXT4-fs (loop3): free_blocks=66497544192 [ 65.388756][ T7024] EXT4-fs (loop3): dirty_blocks=16 [ 65.388766][ T7024] EXT4-fs (loop3): Block reservation details [ 65.388776][ T7024] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 65.438452][ T4712] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 65.439287][ T4712] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.533677][ T4718] Bluetooth: hci2: command tx timeout [ 65.592857][ T7038] 9p: Bad value for 'rfdno' [ 65.599164][ T7035] bond1: option min_links: invalid value (18446744073709551614) [ 65.599195][ T7035] bond1: option min_links: allowed values 0 - 2147483647 [ 65.605850][ T7035] bond1 (unregistering): Released all slaves [ 65.858987][ T7072] loop6: detected capacity change from 0 to 512 [ 65.861119][ T7072] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.861147][ T7072] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 65.862965][ T7072] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 65.863416][ T7072] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 65.863448][ T7072] System zones: 0-2, 18-18, 34-35 [ 65.873388][ T7072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.915466][ T7082] loop0: detected capacity change from 0 to 1024 [ 65.915804][ T7082] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.916121][ T7082] EXT4-fs: test_dummy_encryption requires encrypt feature [ 65.932775][ T7077] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.953615][ T7078] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 65.974060][ T6431] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.990083][ T7078] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.003638][ T7084] vlan3: entered allmulticast mode [ 66.009305][ T7084] macsec0: entered allmulticast mode [ 66.010752][ T7084] veth1_macvtap: entered allmulticast mode [ 66.010955][ T7084] bridge0: port 3(vlan3) entered blocking state [ 66.010995][ T7084] bridge0: port 3(vlan3) entered disabled state [ 66.011613][ T7084] vlan3: entered promiscuous mode [ 66.011629][ T7084] macsec0: entered promiscuous mode [ 66.033089][ T7091] 9p: Bad value for 'rfdno' [ 66.708297][ T7163] loop2: detected capacity change from 0 to 512 [ 66.713783][ T7163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.716085][ T7163] EXT4-fs (loop2): 1 truncate cleaned up [ 66.716528][ T7163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.743919][ T7169] tmpfs: Bad value for 'nr_inodes' [ 66.745776][ T7170] loop6: detected capacity change from 0 to 512 [ 66.746500][ T7170] EXT4-fs: Ignoring removed nobh option [ 66.769307][ T7170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.913561][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.971506][ T7184] loop2: detected capacity change from 0 to 512 [ 66.971867][ T7184] EXT4-fs: quotafile must be on filesystem root [ 67.077953][ T7193] Unable to handle kernel paging request at virtual address dff ** replaying previous printk message ** [ 67.077953][ T7193] Unable to handle kernel paging request at virtual address dfff800000000000 [ 67.077991][ T7193] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 67.078771][ T7193] Mem abort info: [ 67.079476][ T7193] ESR = 0x0000000096000005 [ 67.079492][ T7193] EC = 0x25: DABT (current EL), IL = 32 bits [ 67.079499][ T7193] SET = 0, FnV = 0 [ 67.079504][ T7193] EA = 0, S1PTW = 0 [ 67.079508][ T7193] FSC = 0x05: level 1 translation fault [ 67.079513][ T7193] Data abort info: [ 67.079515][ T7193] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 67.079520][ T7193] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 67.079525][ T7193] GCS = 0, Overlay = 0, DirtyBit = 0 [ 67.079529][ T7193] [dfff800000000000] address between user and kernel address ranges [ 67.079574][ T7193] Internal error: Oops: 0000000096000005 [#1] SMP [ 67.094569][ T7193] Modules linked in: [ 67.095282][ T7193] CPU: 1 UID: 0 PID: 7193 Comm: syz.2.579 Not tainted syzkaller #0 PREEMPT [ 67.096885][ T7193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 67.098664][ T7193] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 67.100048][ T7193] pc : dummy_set_selfpowered+0xb0/0x158 [ 67.100982][ T7193] lr : dummy_set_selfpowered+0x80/0x158 [ 67.101965][ T7193] sp : ffff800092f37570 [ 67.102636][ T7193] x29: ffff800092f37570 x28: 1fffe000194708a6 x27: 1fffe0001889a18b [ 67.104094][ T7193] x26: dfff800000000000 x25: ffff0000c256f010 x24: ffff0000c256f048 [ 67.105481][ T7193] x23: ffff0000ca3846a0 x22: dfff800000000000 x21: 0000000000000003 [ 67.106897][ T7193] x20: 0000000000000000 x19: 0000000000000001 x18: 00000000ffffffff [ 67.108207][ T7193] x17: ffff80008a791000 x16: 0000000000000007 x15: ffff800080c9cd8c [ 67.109534][ T7193] x14: ffff800080c9cc14 x13: 0000000000000001 x12: 0000000000000000 [ 67.111008][ T7193] x11: 0000000000000000 x10: 1fffe0001889a18e x9 : 00000000000006a8 [ 67.112463][ T7193] x8 : 0000000000000000 x7 : ffff800080ef9598 x6 : 0000000000000000 [ 67.113834][ T7193] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000835b50c0 [ 67.115270][ T7193] x2 : 0000000000000003 x1 : ffff0000cc811d40 x0 : 0000000000000000 [ 67.116688][ T7193] Call trace: [ 67.117264][ T7193] dummy_set_selfpowered+0xb0/0x158 (P) [ 67.118223][ T7193] usb_gadget_set_selfpowered+0x74/0x450 [ 67.119234][ T7193] composite_dev_prepare+0x284/0x2b4 [ 67.120126][ T7193] configfs_composite_bind+0xa0/0x10b8 [ 67.121095][ T7193] gadget_bind_driver+0x274/0x834 [ 67.121922][ T7193] really_probe+0x29c/0x800 [ 67.122651][ T7193] __driver_probe_device+0x1e0/0x350 [ 67.123528][ T7193] driver_probe_device+0x6c/0x19c [ 67.124385][ T7193] __driver_attach+0x168/0x384 [ 67.125226][ T7193] bus_for_each_dev+0x128/0x1b4 [ 67.126078][ T7193] driver_attach+0x50/0x60 [ 67.126855][ T7193] bus_add_driver+0x208/0x500 [ 67.127698][ T7193] driver_register+0x220/0x310 [ 67.128539][ T7193] usb_gadget_register_driver_owner+0xf0/0x25c [ 67.129564][ T7193] gadget_dev_desc_UDC_store+0x164/0x22c [ 67.130495][ T7193] configfs_write_iter+0x27c/0x354 [ 67.131357][ T7193] vfs_write+0x51c/0xa0c [ 67.132064][ T7193] ksys_write+0x12c/0x228 [ 67.132831][ T7193] __arm64_sys_write+0x7c/0x90 [ 67.133696][ T7193] invoke_syscall+0x98/0x244 [ 67.134470][ T7193] el0_svc_common+0xec/0x23c [ 67.135254][ T7193] do_el0_svc+0x4c/0x5c [ 67.135953][ T7193] el0_svc+0x64/0x260 [ 67.136624][ T7193] el0t_64_sync_handler+0x48/0x148 [ 67.137492][ T7193] el0t_64_sync+0x198/0x19c [ 67.138285][ T7193] Code: aa1403e0 97579d30 f9400294 d343fe88 (38766908) [ 67.139447][ T7193] ---[ end trace 0000000000000000 ]--- [ 67.389701][ T7193] Kernel panic - not syncing: Oops: Fatal exception [ 67.390938][ T7193] SMP: stopping secondary CPUs [ 67.391856][ T7193] Kernel Offset: disabled [ 67.392685][ T7193] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 67.393946][ T7193] Memory Limit: none [ 67.637646][ T7193] Rebooting in 86400 seconds..