last executing test programs: 3.354663221s ago: executing program 0 (id=1): r0 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/mpls/conf/lo/input\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') unshare(0x20000400) sendfile(r1, r1, 0x0, 0x7) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x4, 0xd0c, 0x1000, 0x8, 0x6, 0x6, 0x20000001002, 0xf64, 0xbffffffd}) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) socket$inet6(0xa, 0x3, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fchown(r2, 0xee00, 0xee01) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) sendmsg$rds(r0, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000001940)=[{&(0x7f0000000140)=""/188, 0xbc}], 0x1, &(0x7f0000001c00)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x7}], 0x18}, 0x20000000) 3.173522748s ago: executing program 0 (id=6): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4840) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = epoll_create1(0x0) r6 = fcntl$dupfd(r4, 0x0, r5) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r7, &(0x7f0000000580)={0xa0002000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0xb2a4, 0x20, 0x2, 0x139}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2c38, 0x8, 0x1, 0x3ba}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd330, 0x100, 0x0, 0x17f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d58, 0x80, 0x0, 0x27b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68f8, 0x20, 0x0, 0x25d}, 0xffffffffffffffff}], 0x4, &(0x7f0000001600)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, '\x00', {0x3, 0x3d5, 0x0, &(0x7f0000000600)=@buf_512="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"}}, &(0x7f0000001680)) io_uring_setup(0x7f9, &(0x7f00000016c0)={0x0, 0x52c, 0x40000, 0x3, 0x2cf, 0x0, r8}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r10 = syz_open_dev$video(&(0x7f0000000100), 0x8, 0x0) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f0000000140)=@mmap={0x8, 0x8, 0x4, 0x100, 0x0, {0x77359400}, {0x4, 0x2, 0x4, 0x9, 0xcf, 0x9, "0bd7163c"}, 0x8001, 0x1, {}, 0x1}) r11 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$binfmt_script(r11, &(0x7f0000000a40)={'#! ', './file0', [{0x20, 'RWBr'}, {0x20, 'RWBr'}], 0xa, "2aba47b09cfa57d758feec9497804e57d7e215668699d070f2c8f7e3c98690451d3d8c7da91a7a708f11168d457843b06512516efb30c95be7961241368c8ebc3ca8b51f44a9e3ac0fff1c3e69cf1aa4c1012a633605e261e9b67bea2f94795b727e54a057"}, 0x7a) preadv(r11, &(0x7f0000000300)=[{&(0x7f0000000000)=""/79, 0x4f}], 0x1, 0x3d, 0x3) ioctl$VHOST_GET_FEATURES(r9, 0x8008af00, &(0x7f0000000100)) 3.152883253s ago: executing program 1 (id=2): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = socket(0x1e, 0x5, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x437, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4009004}, 0x4040004) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_extract_tcp_res(&(0x7f00000001c0)={0x41424344}, 0x7, 0x9) syz_emit_ethernet(0x52, &(0x7f0000000b40)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0x5, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @ssrr={0x89, 0xb, 0x77, [@local, @loopback]}, @generic={0x7, 0x2}]}}, {{0x4, 0x0, r2, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r5 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x0) setresuid(0xee01, 0xee00, 0x0) fchdir(r6) r7 = socket(0x10, 0x803, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) tee(r7, r8, 0x9, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x1b, 0x800003e, r0, 0x0) readv(r9, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) setns(r11, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x70, 0x80000}, 0x20) 2.938018531s ago: executing program 4 (id=8): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, &(0x7f0000000100)={0x0, 0xffff, 0x70, &(0x7f0000000080)={0x70, 0x1, {0x8, 0xb, 0xc, 0x96, 0x5, 0x3, 0x4, 0xffff, 0x1}, {0x596, 0xffff, 0x200, 0x10, 0xd52}, {0x5, 0x0, 0xe}, {0x76, 0x7, 0x5}}}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={r1, 0xffff, 0x0, 0x0, 0x0}) r3 = syz_open_procfs$namespace(r2, &(0x7f00000002c0)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r3, 0x8008b705, 0x0) r4 = epoll_create1(0x0) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000640)=@ieee802154={0x24, @long={0xa}}, 0x80, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r4, 0x2, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000001c0)={@private0, 0x0}, &(0x7f0000000300)=0x14) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000900)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x9, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r10 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r11, 0x0) setresuid(0x0, r11, 0x0) r12 = getegid() read$FUSE(r4, &(0x7f0000002b80)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004bc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r15 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) r16 = socket(0x10, 0x3, 0x4) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) fchown(r15, r17, 0x0) statx(0xffffffffffffff9c, &(0x7f0000006c00)='./file0\x00', 0x2000, 0x8, &(0x7f0000006c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000006e00)={&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002b00)=[{&(0x7f00000004c0)="2c97ddd3645b0675359b6d03ed31e14c523e67d6fe0532e5e74a749a", 0x1c}, {&(0x7f00000008c0)="473347df7f4e05a8a20539c675c722be81ae7064b06768c3f50eff43429e68c1d3eeda54b01fb68d62513ca9bde65443d3b6ec87999f5f6184f84b85590ab1a8e754143cf16e2546382e574bdda80470ddb6059d4b76f590393626083f3868f5db9557b1112119434d43b8d11b353935966f4d1b62b680a28e070df67d3a9a51e99068beaea4f164678dcc8629b38eebc630e21408", 0x95}, {&(0x7f0000000980)="7b088e53903868ee40a64adab4f95b4b3582d2cfe10cb0670744b589037b23c88389bbbe362b35e7b4f7ec45e8f7dffd4a71d8ec37012c0d84bfcc4f68bf2d97459131bdd46c35d74749f187f02f010715ba6befcc3a8aec8cfbb7ff8151343a3fa3bed3d0361e2302d6b8b53d3d5ce77d1c031669ecf5f21b6eb931b20af824d2c34b6ae6e2d7b56fffb5bcf2e8d6ff58002c41341250dff9ef14cc59ae88844b1e1d6c3ed244dc43adc3c93bad7cbb5e2b264f51c297c9f25cb6f45f29b0c0d4d4b209726263a4d014d0c3c7ea0d4bedede9269b3dc9d7a3a87087b252a3dfd10af212cf9775687b0d3030c2355907e5e0e18f9feed4", 0xf7}, {&(0x7f0000000c80)="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", 0x10b}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)}], 0x6, &(0x7f0000006d40)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r8, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001c0000000000000c2800000000000000", @ANYRES32=r2, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB='\x00\x00\x00\x00'], 0xa8, 0x4800}, 0x8080) sendmsg$nl_route_sched_retired(r6, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)=@delqdisc={0x178, 0x25, 0x1, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x3, 0xc7856ab85fbcdfa4}, {0x0, 0xe}, {0x4, 0x10}}, [@q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x54, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x3b}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x37}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6829}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4ed9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ff}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x29}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x32}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.228473604s ago: executing program 1 (id=12): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c220000208004500003000000020142f90781c101001e00003000306907800fa000945f4fff600650005010400030a0101027f000001be2e2e97dfb0a354b11820512e9fa0e5647c40cfdf9e9471647664ff651bcc23b08a24d3ec4c43bc9972b3490a49a65b0a104e6376a06ad6eabe958d168ca817524cf7b18c8c3a3018c3ea681e7ac2738544675acdaf"], 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaa8caaaaaaaaaaaabb08004500003000000020fc0190781c1010020b0003000306903800fa000945f402f600650005010400030a0101027f000001a8e9e29925738c23d40fafb0c17c679b93be3bca529006215a4da7c87f5777cd60ec27645e43e1fdb2c28a2b52ce58e3882d73fa9e2ff7279957edf2ce9d0e6cea66bbfa06e7e4294cf760d4d79907"], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r1, &(0x7f0000000100)=""/253, 0xfd, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000057c0)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4001) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007380)={0x0, 0x2, {0x0}, {0xffffffffffffffff}, 0x7, 0x8}) geteuid() mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x87) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f00000000c0)={0x8, 0x7}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8032, 0xffffffffffffffff, 0x68ce7000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 2.18906902s ago: executing program 3 (id=13): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "001b01", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0x3, 0x1, 0xc45, [{0x5, 0x1, "c89600000500"}]}}}}}}, 0x0) 2.15085889s ago: executing program 3 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) getsockname(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x17, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0x3, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffc99a3b00000000, 0x40000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x20007ff, 0x3ff, 0x0, 0x59, 0xb}) syncfs(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000640)={[{@nojournal_checksum}, {@noblock_validity}, {@nolazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@nodiscard}, {@nouid32}, {@noauto_da_alloc}]}, 0x4, 0x61f, &(0x7f0000000b00)="$eJzs3c9rXNUeAPDvncmkSZv30j4ej9fyHi/wFi1I00wtVt3Y1oVdFCzYhYiLhiapodMfNCmYWGgKLhQURNyKdOM/4F66dyeCunMtVJGKikpH7syddDKZSdIkM9Pmfj5wM/ece2fO+c6dM/fce3PmBpBbY+mfQsT+iAfnk4jRpmUjUV84lq13/6ebF9IpiWr1lR+TSLK8xvpJ9rgnSwxFxJenIv5RXF3u3MLipclKte5WxJH5y9eOzC0sHp69PHlx+uL0lfLRZ48dn3iufKy8LXHuyR5Pn3n5P++//cYzM19VDidxIs6V3pqKlji2y1iMxYMsxOb8gYg4ns60eV+eNDsghFwrZp/HUkT8K0ajWEvVjcbse32tHNBV1WJEFcipRPuHnGr0AxrH9hs7Dj7X5V5J79w7WT8AWh3/QP3cSAzVjo1230+ajowGauc29m5D+WkZf9488HE6xYrzEL8ub52BbSink6XbEfHvdvEntbrtrUWaxl9YUY8kIiYiYjCr34tbqEPSNN+N8zBr2Wz8hYg4kT2m+ac2Wf5YS7rX8QOQT3dPZjvypTT1cP+X9j0a/Z9Y1f+pXxtq3XdtRr/3f537f439/VDtHHmhpR+W9lnOtn/JUmvGd++e/rBT+c39v3RKy2/0BXvh3u2IAy3xv5MGm/V/0viTNts/XeX8iY2V8dLXP5zutKzf8VfvRBxse/zzsFeazrVenxzOlpWPlY/MzFamJ+p/25bx+Revf9qp/H7Hn27/3R3ib9r+hdbnpe/JtQ2W8dnZO5c7LRtZN/7C94NJ/XhzMMt5c3J+/no5YjA5k61Sv5BVyz+6dl0a6zReI43/0P/bt/8Vn//bK19nuPGVuQHXXr10v9OyzWz/povJD6obrEMnafxT62//Ve0/zftgOXVrzTJ+ee3GfzstWyv+4S3GBgAAAAAAAHlTqF2DTQrjy/OFwvh4fbzsP2N3oXJ1bv6pmas3rkxFHKr9P2Sp0LjSPVpPJ2m6nP0/bCN9tCX9dETsi4iPisO19PiFq5WpfgcPAAAAAAAAAAAAAAAAAAAAj4k92fj/xn2qfy7Wx/8DOdHNG8wBjzftH/Kr1v5X3eIJyAP7f8gv7R/yS/uH/NL+Ib+0f8gv7R/yS/uH/NL+AQAAAGBH2ve/u98mEbH0/HBtSg1my4wIgp2t1O8KAH1T7HcFgL5ZvvSvsw+5s6H+/+/ZjwN2vzpAHyTtMmudg+rajf9u22cCAAAAAAAAAAAAAF1wcH/78f+JscGw4xn2B/m1hfH/fjoAnnB++h/yyzE+sN4o/qFOC4z/BwAAAAAAAAAAAICeGalNSWE8Gws8EoXC+HjE3yJib5SSmdnK9ERE/D0ivimWdqXpcr8rDQAAAAAAAAAAAAAAAAAAADvM3MLipclKZfp688wfq3J29kzjLqg9KOuFeMRnRdL7t2U4IpZzShGPWufuzezKPrZbeZ2BuYXF5LdqTRKxFI9PgFuKa5tn1v3qGOzqFxMAAAAAAAAAAAAAAAAAAORQ09jj9g580uMaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvPbz/f/dm+h0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBk+isAAP//GjM9YA==") ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[], 0x14}}, 0x0) 2.013313537s ago: executing program 2 (id=15): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000001000390400000000d04e0d00f9000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000300fc02000000000000000000000000000014000200fc0200000000000000000000000000000400130008000100", @ANYRES32=r1, @ANYBLOB], 0x68}}, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x2000000000000245, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000100000000000000000000085000000c500000095", @ANYRESDEC=r0, @ANYRES64=0x0], &(0x7f00000000c0)='GPL\x00', 0x57, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x13, r8, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), 0xffffffffffffffff) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/pid\x00') sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_LINK={0x8}]}, 0x2c}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x1c, r10, 0x300, 0x70bd27, 0x25dfdbff, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) ioctl$SIOCX25GCALLUSERDATA(r6, 0x89e4, &(0x7f0000000340)={0x24, "d1f3d35c0b19b564447fa9e326954c1666a58cf42d41e2fd16149aea3541b449a5a9b8904ec9678e5f9103bfca0043f0803d0204739d69c99878c4bce807bacc48ad89d39cdcafb26f1008051035057551423a15a05c1d49fd89d385205c1a3e47dade0c956e5ece7ceec40d2a27e10402faf4f17c3ed3a843b526fd26ff880c"}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000003480)=@newtfilter={0x5c, 0x2c, 0x800, 0x0, 0x25dfdbed, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0x9, 0x6, 0x1, 0x1, 0x0, 0x2, 0x7, 0x5, [{0x2, 0x1, 0x4103, 0xd8}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0xfff3, 0x3}}]}}]}, 0x5c}}, 0x844) close(0x3) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) 1.715025722s ago: executing program 4 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/202, 0xca}], 0x1) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00022bbd7000bddbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a0006000802110000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}]}, &(0x7f0000000780)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000080)={r7, 0xcc8c, 0x8000, 0x8, 0x5, 0xfffffffc}, 0x14) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r8) write$cgroup_devices(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd"], 0xa) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)={@local, 0x0}, &(0x7f0000000380)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000400)={'syztnl2\x00', r9, 0x1, 0x700, 0x3, 0xe0d7, {{0xf, 0x4, 0x3, 0x2e, 0x3c, 0x66, 0x0, 0x8, 0x2f, 0x0, @loopback, @loopback, {[@noop, @noop, @ra={0x94, 0x1, 0x1}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x66, [@loopback, @empty, @multicast1, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 1.575243547s ago: executing program 2 (id=17): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000057c0)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044800}, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r4, 0x1d, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x2c, r1, 0x1, 0x70bd26, 0x1, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24d41b6036a153c7}, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4001) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) listen(0xffffffffffffffff, 0x6) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000007380)={0x0, 0x2, {}, {0xffffffffffffffff}, 0x7, 0x8}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) geteuid() r7 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x8) munmap$binder(r7, 0x1) 1.555237386s ago: executing program 2 (id=18): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x2000000, 0x8, 0x0, &(0x7f0000000200)={0x0}, &(0x7f0000000300)={&(0x7f0000002000)="000000000000000000410000000000000000000200"/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) 1.536037823s ago: executing program 2 (id=19): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = dup(r0) readv(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/150, 0x96}, {&(0x7f0000000580)=""/240, 0xf0}], 0x6) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4115, 0x1013}], 0x1, 0x7fff, 0xfffffffc) fsetxattr$security_capability(r2, &(0x7f0000000380), &(0x7f00000003c0)=@v1={0x1000000, [{0x5, 0x2}]}, 0xc, 0x0) 1.386568548s ago: executing program 0 (id=20): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c8001, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0400000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xdaa02, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0xff8e}, {0x0, 0xfffffda8}], 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = inotify_init1(0x80800) inotify_add_watch(r6, &(0x7f0000000540)='./file0\x00', 0x200) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r7, 0x16, 0x0, @void}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000480)={0x800, 0x400, 0x60, 0x240, 0x9, 0xc, 0x20, 0x0, {0x2, 0xa, 0x1}, {0x1, 0xd11d, 0x1}, {0xacff, 0x7, 0x1}, {0xd163, 0x2, 0x1}, 0x4, 0x100, 0x4495, 0x33c1, 0x1, 0x9, 0x10, 0x414, 0x4c4, 0xaa, 0x1, 0xfffffffe, 0x2, 0x6, 0x2}) futex(0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x1) ptrace$setregset(0x4205, r3, 0x403, &(0x7f0000000000)={0x0, 0x4c}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 1.384713251s ago: executing program 32 (id=20): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c8001, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000fbdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0400000014000100ff"], 0x30}, 0x1, 0x0, 0x0, 0x24040800}, 0x40) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xdaa02, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0xff8e}, {0x0, 0xfffffda8}], 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r6 = inotify_init1(0x80800) inotify_add_watch(r6, &(0x7f0000000540)='./file0\x00', 0x200) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r4, r7, 0x16, 0x0, @void}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000480)={0x800, 0x400, 0x60, 0x240, 0x9, 0xc, 0x20, 0x0, {0x2, 0xa, 0x1}, {0x1, 0xd11d, 0x1}, {0xacff, 0x7, 0x1}, {0xd163, 0x2, 0x1}, 0x4, 0x100, 0x4495, 0x33c1, 0x1, 0x9, 0x10, 0x414, 0x4c4, 0xaa, 0x1, 0xfffffffe, 0x2, 0x6, 0x2}) futex(0x0, 0x7, 0xfffffffe, 0x0, 0x0, 0x1) ptrace$setregset(0x4205, r3, 0x403, &(0x7f0000000000)={0x0, 0x4c}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000280)={{&(0x7f0000ff0000/0xd000)=nil, 0xd000}}) 1.253922127s ago: executing program 3 (id=22): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r0, 0xffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x20040880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000005fc0)={@remote, @mcast2, @mcast2, 0x4, 0x8000, 0x40, 0x0, 0x1000, 0x10c0014}) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e22, @local}, 0x10) sendmsg$netlink(r1, 0x0, 0x40000) fcntl$addseals(r0, 0x409, 0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x111, 0x3}}, 0x20) 831.31611ms ago: executing program 4 (id=23): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x3fc, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x3, &(0x7f0000000040)={0xfe, "9989c68556dd9d6197a0cb7ca9cb879a05000000000000004f9fce1ac272a7ca2d"}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$video4linux(&(0x7f0000000300), 0x4, 0x80) semget$private(0x0, 0x1, 0x494) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @start={0x4, 0x1}}) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x7fffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys/devices/system/node/node0/reclaim\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/devices/system/node/node0/reclaim\x00', 0x129602, 0x0) write(r5, &(0x7f0000000800)='1', 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000481100fe8000000000000000000000000000bbff020000000000000000000000000001489078030000000200000088c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28e13808ca72381f41e5fff9620915b6f78628dfaf9a2038083179cf6b7931c9b40000000000"], 0x0) r6 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/fail_make_request/times\x00', 0x1, 0x0) memfd_create(&(0x7f0000000200)='\'(%\x00', 0x5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYBLOB="7ab160554b4be1ad6e5e1f0d9426d94bc16be4ab8cb3affdf1772b7af1027de9ba33f0c27e845070d4b748fbf84a1361925cf21314996ec24337ceb75508b455021f0cd5cd8059dda18aaab969079d61730f4951a8518e05273dd441177bdbb2a69acb050dc0bf71763f2e528f0e80b2066b2a4aa6537f70ee9814dd2d7b4e3495c79ba34a5f14a22e45b3d2053e1f12befc4e8f83739072b10a22e5ea2dd8304c53e28b0b046da87402cc67fea85a6aab2f2c2c668cd5eef115af5b9e97c9752ea794f05075d2cdb1959b72612134b889bbd4e9ea338f4283d637a9dc2aeaa2d5eb30930ccb2272ad10ceb8103771ce2ff4d9dc", @ANYRESOCT=r0]) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GPU_INFO(r3, 0xc0106440, &(0x7f0000000180)={0x0, 0x8, &(0x7f0000000440)}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net/snmp6\x00') r9 = syz_open_dev$vivid(&(0x7f0000000400), 0x0, 0x2) pwritev2(r6, &(0x7f0000000a80)=[{&(0x7f0000000740)="410421c4c0e56d10f2d263dda1d16b7edd462c6e2c3b2095c95fe814054ba35de62fb0c8a11695901cc8ac505765174f954b77250342eec0ee2a16dd483332b81134083072e4f978b4f42e47103a3d5026e2258ef4bdd87b1ad82c6ef4740636ca7105aa2ea462fd3b4f9c571a22c2c60a3f6bb26d9c0c1d428b2a7443f123b7408d0ad050e9", 0x86}, {&(0x7f0000000840)="265c05cdfd79b65432e66b4da29f22a56c26ad79f8dd4c4ed2d21ac7cb733862156d83eac060ccf9175820c8b00bc11e982af4d513c36c460d4ac2644e3baaae6a7688411d5f6c6d7676dc2f93227bc09e0f61f989fa821105764b1f4af1b90f", 0x60}, {&(0x7f00000008c0)="1691200410ea68ca01988d203b10db0c3632728c1e75aaa54f3e9d578297b75e93bf1ebdd6b2d9d80dbbddb8235364bfd0b5e604eca08a633de491284a1f620820db1823b6c3d13b735a7f9c2d7d3cbb9aa80e68de9b72b4fa44596a9ba0d1b0a94d41f27782ab485ec47307f867fb9a715be191d097d0bea2d1eb54ca4e6df40997bf654a6c9f4b5e01a9a11d4d0e99a5a9a636577df076d5528739f572d87e57cffd2725e8010c9db8e8f7afcad28c32fa63068b4224fb1ba94136eb1a9bce426a48521f1c8467b5392c946c1a9f2857d3ab945b3b9a2e58728d35abc16e1625681f8f8eb9bb5a901c5e721b7c", 0xee}, {&(0x7f00000009c0)="1e74387aff111c169dccf281377c3bb7bd217d9514f7da8dee2c0ca0a8e4cb305ed8c22bdeff902c47fba7d4cec6968a10539073648970e19f388a4e4b36a77bf910c99412bc57b9f05bb9473073d763b997a08a69f5c546dab906be87d59edcd90a", 0x62}, {&(0x7f0000000a40)="a55c346ebc44b7cecfc3a1731886200cbe365f4e4a0767c644cf51e1d382f798466b", 0x22}], 0x5, 0x1, 0x0, 0x4) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000240)={0x2, 0xb, 0x4, {0xa, @vbi={0x9, 0x4, 0x400, 0x47524247, [0x771, 0x401], [0x8000, 0x7ff], 0x1}}, 0x9}) fcntl$setstatus(r8, 0x4, 0x400) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x20010, r0, 0x20730000) preadv(r8, &(0x7f0000001300)=[{&(0x7f0000002240)=""/4104, 0x717143b9175242a6}], 0x1000000000000295, 0x142, 0xfffffffc) 788.843203ms ago: executing program 4 (id=24): unshare(0x2c020400) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc400, &(0x7f0000000000)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@errors_continue}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, r0, 0x91c6b000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0xc21c2, 0x9c37611dc13d0d3f) syz_io_uring_setup(0x795e, &(0x7f0000000440)={0x0, 0x800069ea, 0x3000, 0x2, 0x8000d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000280)=@IORING_OP_FTRUNCATE={0x37, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000700004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 682.588678ms ago: executing program 4 (id=25): r0 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r4, &(0x7f0000000100)="653de841f0", 0x5, 0x8000, 0x1000000}]) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000200)=0x4) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 669.314212ms ago: executing program 2 (id=26): syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x8) fchown(r0, 0xee00, 0xee01) 647.600213ms ago: executing program 2 (id=27): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') fchdir(r0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xbb9b, 0x800, 0xfffffffe, 0x1e5}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r1, 0x7f0231da, 0x7d, 0x4, 0xe, 0x1, {0x0, 0x0, r1}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0xb, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x10}}}, 0x0) exit(0xfffffffffffffffd) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x15) ioctl(r6, 0x40204706, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r8, &(0x7f0000000000)="05031600d3fc1484850000004788", 0xe, 0x4000484, &(0x7f0000000140)={0x11, 0x8100, r9}, 0x14) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_virt_wifi\x00', 0x0}) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000740)={r11, r10, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aa00aaaaaaaa000000000008000000122d9200083a0000000000000000000000ffffac1414aafe801000000100907800"/62], 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) recvfrom$inet_nvme(r0, &(0x7f0000000380)=""/67, 0x43, 0x2101, &(0x7f00000004c0)=@l2tp6={0xa, 0x0, 0x59db, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x401, 0x4}, 0x80) 578.427759ms ago: executing program 4 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x210080, &(0x7f0000000400)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@minixdf}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x13}}, {@abort}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) ioctl$SIOCGSTAMP(r3, 0x8906, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001c40)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20050800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) close_range(r6, 0xffffffffffffffff, 0x0) 338.62ms ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x2b8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, 0x0}, 0x94) bind$unix(0xffffffffffffffff, 0x0, 0x0) getsockname(0xffffffffffffffff, 0x0, 0x0) clock_adjtime(0x17, &(0x7f0000000340)={0x2925, 0x0, 0x0, 0xbd9a, 0x41, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffc99a3b00000000, 0x40000000, 0x0, 0x0, 0x4, 0x400000000000, 0x0, 0x2, 0x4, 0xffffffffffffffff, 0x20007ff, 0x3ff, 0x0, 0x1, 0xb}) syncfs(0xffffffffffffffff) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000440), 0x801, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100)="d6752912", 0xffffffffffffff77, 0x10, 0x0, 0xffffffffffffffc8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00001a3000/0x2000)=nil], 0x0, &(0x7f0000000100), 0x2) 139.691858ms ago: executing program 3 (id=30): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10002, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x808c10, &(0x7f0000000780)=ANY=[@ANYBLOB="d0bec10e1f51ca5849606d4dda3dbfe6f0da0463fe729b546bb9d9ed15cdcdc3e64e99e323190df6dbb72db6f8165f0c54735a6356fc36f8a7a51efde3b81fce0742b18695179171f685fd", @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r0], 0x3, 0x1cf, &(0x7f0000000280)="$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") sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x814}, 0x20005080) 2.487172ms ago: executing program 3 (id=31): socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x84) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r2, &(0x7f0000000100)="653de841f0", 0x5, 0x8000, 0x100000000000000}]) 0s ago: executing program 5 (id=21): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x200}}, './file0\x00'}) r1 = accept$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x60) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000300000085000000410000001800000001000000000000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = socket(0x2d, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000004fa000000000000825b440018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000018000007b8a08ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000a6000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x48}, 0x10) r8 = socket(0x2d, 0x2, 0x0) bind$xdp(r8, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x97, 0x0, &(0x7f0000000680)="54eb010000002b2b0000642d921c6e2ac8356abd472c2076e820d9569596cb0700000000000000ef7c15646890592baac2d7497f79c49f6987e17d35a17a79b2fa11d048c680a7cb2d9d6358967517cd0c9325a229688ad34975f2d49c2fc3b67c229380ab086cf2f428466a192fdb3f8dda18f7d1d47900000000b08a9d8d1c6a726852e34d6b5d27c4a92d331031a8c369ebe18fb9b1", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x9, 0x18}, 0x50) accept4$nfc_llcp(r1, &(0x7f0000000200), &(0x7f0000000080)=0xffffff25, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x0, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x11e}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x50) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r10, &(0x7f0000006e80)={0x2020}, 0x2082) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) 0s ago: executing program 3 (id=35): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000f110000000b00000003000000110001000000002e0061"], 0x0, 0x37, 0x0, 0x9, 0x1000}, 0x28) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002540)=ANY=[@ANYBLOB="3800000001010102000000000000000002000002180001801400018008000100ac1e00e507000200640101010c0019800800010052"], 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4044004) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x880, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000000500)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x6c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4a, 0x3, "fd02b21edf8b721e23f25f47a7af48fbb07c400f2ffd8d27130601205b56f46dc2de1fa3d7afb2f185d0371736af66032ae4eed98dbb95537f4f247aa2bc4978345407669db4"}]}], {0x14}}, 0xb4}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000003c0)={0x1f, 0x0, @any, 0x6, 0x2}, 0xe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r7, 0xa0bc) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESOCT=r7]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a30000000000900030000000000000003000c000240000000000000000114000000110001"], 0x60}}, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r3, 0x2f2e7000) syz_open_dev$usbfs(&(0x7f0000000000), 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 21.006442][ T4680] cgroup: Unknown subsys name 'net' [ 21.126277][ T4680] cgroup: Unknown subsys name 'cpuset' [ 21.128328][ T4680] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.287954][ T4680] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 22.079422][ T4709] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 22.081898][ T4709] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 22.083537][ T4709] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 22.087792][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 22.089489][ T4712] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 22.091898][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 22.094650][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 22.096811][ T4712] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 22.099520][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 22.102252][ T4708] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 22.108162][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 22.123544][ T4712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 22.125840][ T4712] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 22.127966][ T4712] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 22.128143][ T4709] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 22.128496][ T4709] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 22.130420][ T4709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 22.130577][ T4709] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 22.130972][ T4709] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 22.131756][ T4712] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 22.132616][ T4708] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 22.132842][ T4708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 22.133214][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 22.133431][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 22.139580][ T4724] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 22.484653][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.486121][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.486188][ T4705] bridge_slave_0: entered allmulticast mode [ 22.486682][ T4705] bridge_slave_0: entered promiscuous mode [ 22.498161][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.498235][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.498291][ T4705] bridge_slave_1: entered allmulticast mode [ 22.498700][ T4705] bridge_slave_1: entered promiscuous mode [ 22.520886][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.539505][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.555834][ T4705] team0: Port device team_slave_0 added [ 22.568552][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.569954][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.570050][ T4715] bridge_slave_0: entered allmulticast mode [ 22.570582][ T4715] bridge_slave_0: entered promiscuous mode [ 22.576252][ T4705] team0: Port device team_slave_1 added [ 22.579115][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.579167][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.579286][ T4714] bridge_slave_0: entered allmulticast mode [ 22.579719][ T4714] bridge_slave_0: entered promiscuous mode [ 22.580881][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.580929][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.580977][ T4714] bridge_slave_1: entered allmulticast mode [ 22.581404][ T4714] bridge_slave_1: entered promiscuous mode [ 22.586800][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.586830][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.586929][ T4715] bridge_slave_1: entered allmulticast mode [ 22.587353][ T4715] bridge_slave_1: entered promiscuous mode [ 22.600215][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.611176][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.612738][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.614261][ T4706] bridge_slave_0: entered allmulticast mode [ 22.615585][ T4706] bridge_slave_0: entered promiscuous mode [ 22.617742][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.620425][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.620465][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.620539][ T4706] bridge_slave_1: entered allmulticast mode [ 22.620970][ T4706] bridge_slave_1: entered promiscuous mode [ 22.625605][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.625614][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.625627][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.626357][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.626365][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.626377][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.644521][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.645566][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.654648][ T4715] team0: Port device team_slave_0 added [ 22.670012][ T4715] team0: Port device team_slave_1 added [ 22.673413][ T4714] team0: Port device team_slave_0 added [ 22.677528][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.680316][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.689237][ T4705] hsr_slave_0: entered promiscuous mode [ 22.691131][ T4705] hsr_slave_1: entered promiscuous mode [ 22.693246][ T4714] team0: Port device team_slave_1 added [ 22.696928][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.697002][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.697096][ T4713] bridge_slave_0: entered allmulticast mode [ 22.697502][ T4713] bridge_slave_0: entered promiscuous mode [ 22.698303][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.698325][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.698371][ T4713] bridge_slave_1: entered allmulticast mode [ 22.698758][ T4713] bridge_slave_1: entered promiscuous mode [ 22.708546][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.708569][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.708582][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.709140][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.709147][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.709161][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.722951][ T4715] hsr_slave_0: entered promiscuous mode [ 22.723227][ T4715] hsr_slave_1: entered promiscuous mode [ 22.723402][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 22.723433][ T4715] Cannot create hsr debugfs directory [ 22.731363][ T4706] team0: Port device team_slave_0 added [ 22.732158][ T4706] team0: Port device team_slave_1 added [ 22.736587][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 22.739560][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 22.744396][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.744422][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.744439][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.745397][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.745404][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.745417][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.767433][ T4714] hsr_slave_0: entered promiscuous mode [ 22.767752][ T4714] hsr_slave_1: entered promiscuous mode [ 22.768203][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 22.768211][ T4714] Cannot create hsr debugfs directory [ 22.772136][ T4713] team0: Port device team_slave_0 added [ 22.777032][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.777054][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.777071][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.777938][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.777952][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.777963][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.781868][ T4713] team0: Port device team_slave_1 added [ 22.789780][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 22.789788][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.789801][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 22.790333][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 22.790340][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 22.790352][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 22.809974][ T4713] hsr_slave_0: entered promiscuous mode [ 22.810302][ T4713] hsr_slave_1: entered promiscuous mode [ 22.810498][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 22.810507][ T4713] Cannot create hsr debugfs directory [ 22.819879][ T4706] hsr_slave_0: entered promiscuous mode [ 22.821355][ T4706] hsr_slave_1: entered promiscuous mode [ 22.821557][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 22.821573][ T4706] Cannot create hsr debugfs directory [ 22.944226][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 22.947377][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.947730][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 22.949832][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.957736][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 22.960679][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.966630][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 22.968875][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 22.979513][ T4705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 22.982655][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 22.983328][ T4705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 22.985596][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 22.992529][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.992591][ T4715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.992750][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.992788][ T4715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.995239][ T4705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 22.997906][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 22.998197][ T4705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 23.000354][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.017116][ T4713] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.019753][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.022231][ T4713] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.024569][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.026955][ T4713] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 23.029592][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.031393][ T4713] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 23.033539][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.040414][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.040462][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.040548][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.040586][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.059972][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.060015][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.060086][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.060118][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.079874][ T4714] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 23.082332][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.084841][ T4714] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 23.088141][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.092118][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.094127][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.096625][ T4714] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 23.098903][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.099724][ T4714] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 23.101568][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.119572][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.119614][ T4714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.119711][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.119757][ T4714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.127733][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.130659][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.132236][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.135556][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.137681][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.139453][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.141128][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.146506][ T121] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.148449][ T121] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.155631][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.161460][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.166735][ T4706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 23.169464][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.169765][ T4706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 23.173614][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.177243][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.177286][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.177653][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.177672][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.195331][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.198327][ T4706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 23.200490][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 23.201913][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.201937][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.202250][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.202267][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.208977][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.217452][ T4706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 23.219614][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 23.221174][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.221208][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.228438][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.228475][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.232027][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.232063][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.240511][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.252203][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.252233][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.279199][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.279243][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.300158][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 23.309704][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.309748][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.322213][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 23.331846][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.331892][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.332651][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.332671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.342104][ T4714] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.342117][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.383048][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 23.383081][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 23.459833][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.480188][ T4705] veth0_vlan: entered promiscuous mode [ 23.482388][ T4705] veth1_vlan: entered promiscuous mode [ 23.490917][ T4705] veth0_macvtap: entered promiscuous mode [ 23.492775][ T4705] veth1_macvtap: entered promiscuous mode [ 23.499387][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.500675][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.520451][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.530078][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.555404][ T121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.555495][ T121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.555517][ T121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.555534][ T121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.581213][ T4715] veth0_vlan: entered promiscuous mode [ 23.586527][ T4715] veth1_vlan: entered promiscuous mode [ 23.598074][ T4715] veth0_macvtap: entered promiscuous mode [ 23.598877][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.598886][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.613037][ T4715] veth1_macvtap: entered promiscuous mode [ 23.619272][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.624746][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.653106][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.653133][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.660407][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.670040][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.675108][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.675504][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.675613][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.692743][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 23.706117][ T3766] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.706141][ T3766] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.707992][ T4713] veth0_vlan: entered promiscuous mode [ 23.718843][ T4705] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 23.724404][ T4713] veth1_vlan: entered promiscuous mode [ 23.730365][ T4706] veth0_vlan: entered promiscuous mode [ 23.738708][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.738734][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.742281][ T4713] veth0_macvtap: entered promiscuous mode [ 23.743223][ T4706] veth1_vlan: entered promiscuous mode [ 23.747716][ T4714] veth0_vlan: entered promiscuous mode [ 23.749504][ T4714] veth1_vlan: entered promiscuous mode [ 23.763058][ T4713] veth1_macvtap: entered promiscuous mode [ 23.780327][ T4714] veth0_macvtap: entered promiscuous mode [ 23.781382][ T4714] veth1_macvtap: entered promiscuous mode [ 23.787120][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.788181][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.791194][ T4706] veth0_macvtap: entered promiscuous mode [ 23.801825][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.802880][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.809302][ T4706] veth1_macvtap: entered promiscuous mode [ 23.812644][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 23.840689][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 23.855879][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856166][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856195][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856217][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856238][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856258][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856278][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.856297][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.866375][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.866642][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.866661][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.866677][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 23.893311][ T4888] loop3: detected capacity change from 0 to 1024 [ 23.893736][ T4888] ======================================================= [ 23.893736][ T4888] WARNING: The mand mount option has been deprecated and [ 23.893736][ T4888] and is ignored by this kernel. Remove the mand [ 23.893736][ T4888] option from the mount to silence this warning. [ 23.893736][ T4888] ======================================================= [ 23.893821][ T4888] ext4: Unknown parameter 'fscontext' [ 23.894669][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.894694][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.935385][ T4890] loop0: detected capacity change from 0 to 512 [ 23.942058][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.942089][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.953990][ T4890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 23.962060][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.962086][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 23.979938][ T121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 23.979969][ T121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.003311][ T4890] FAULT_INJECTION: forcing a failure. [ 24.003311][ T4890] name failslab, interval 1, probability 0, space 0, times 1 [ 24.006878][ T4890] CPU: 0 UID: 0 PID: 4890 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT [ 24.006900][ T4890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 24.006907][ T4890] Call trace: [ 24.006911][ T4890] show_stack+0x2c/0x3c (C) [ 24.006936][ T4890] __dump_stack+0x30/0x40 [ 24.006950][ T4890] dump_stack_lvl+0xd8/0x12c [ 24.006962][ T4890] dump_stack+0x1c/0x28 [ 24.006975][ T4890] should_fail_ex+0x41c/0x590 [ 24.006988][ T4890] should_failslab+0xc4/0x120 [ 24.007002][ T4890] __kmalloc_noprof+0x108/0x6c8 [ 24.007011][ T4890] do_insert_tree+0x7c/0x94c [ 24.007021][ T4890] qtree_write_dquot+0x3d4/0x4e4 [ 24.007031][ T4890] v2_write_dquot+0x124/0x1f0 [ 24.007040][ T4890] dquot_acquire+0x2ac/0x570 [ 24.007048][ T4890] ext4_acquire_dquot+0x274/0x420 [ 24.007057][ T4890] dqget+0x658/0xa90 [ 24.007064][ T4890] dquot_transfer+0x248/0x580 [ 24.007073][ T4890] ext4_setattr+0x75c/0x18f4 [ 24.007083][ T4890] notify_change+0x928/0xb7c [ 24.007096][ T4890] chown_common+0x39c/0x548 [ 24.007107][ T4890] vfs_fchown+0xb4/0x108 [ 24.007117][ T4890] ksys_fchown+0x50/0x9c [ 24.007128][ T4890] __arm64_sys_fchown+0x84/0x9c [ 24.007139][ T4890] invoke_syscall+0x98/0x244 [ 24.007151][ T4890] el0_svc_common+0xec/0x23c [ 24.007162][ T4890] do_el0_svc+0x4c/0x5c [ 24.007173][ T4890] el0_svc+0x64/0x260 [ 24.007184][ T4890] el0t_64_sync_handler+0x44/0x104 [ 24.007194][ T4890] el0t_64_sync+0x198/0x19c [ 24.013279][ T121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.013291][ T121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.016450][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.016464][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.017746][ T4890] Quota error (device loop0): qtree_write_dquot: Error -12 occurred while creating quota [ 24.017791][ T4890] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.1: Failed to acquire dquot type 0 [ 24.068601][ T4715] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 24.073285][ T4715] EXT4-fs error (device loop0): ext4_lookup:1787: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 24.165208][ T51] Bluetooth: hci4: command tx timeout [ 24.165213][ T4712] Bluetooth: hci1: command tx timeout [ 24.165437][ T4712] Bluetooth: hci2: command tx timeout [ 24.165440][ T51] Bluetooth: hci0: command tx timeout [ 24.352967][ T4906] loop2: detected capacity change from 0 to 512 [ 24.363070][ T4906] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 24.389833][ T4906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 24.840454][ T4913] netlink: 252 bytes leftover after parsing attributes in process `syz.3.10'. [ 24.865728][ T4915] loop3: detected capacity change from 0 to 128 [ 24.880639][ T4915] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 24.999110][ T4915] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 25.235584][ T4714] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.318087][ T4922] loop3: detected capacity change from 0 to 1024 [ 25.329042][ T4922] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 25.418699][ T4922] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 2: comm syz.3.14: lblock 2 mapped to illegal pblock 2 (length 1) [ 25.418921][ T4922] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 25.422161][ T4922] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 25.422279][ T4922] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 48: comm syz.3.14: lblock 0 mapped to illegal pblock 48 (length 1) [ 25.422332][ T4922] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 25.426004][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 25.426017][ C0] EXT4-fs (loop3): initial error at time 25: ext4_map_blocks:790: inode 3: block 2 [ 25.426040][ C0] EXT4-fs (loop3): last error at time 25: ext4_map_blocks:790: inode 3: block 48 [ 25.436775][ T4922] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 25.436891][ T4922] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.14: Failed to acquire dquot type 0 [ 25.436977][ T4922] loop3: lost filesystem error report for type 5 error -117 [ 25.441955][ T4922] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 25.442060][ T4922] loop3: lost filesystem error report for type 5 error -117 [ 25.447464][ T4922] EXT4-fs error (device loop3): ext4_evict_inode:269: inode #11: comm syz.3.14: mark_inode_dirty error [ 25.447528][ T4922] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 25.453676][ T4922] EXT4-fs warning (device loop3): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 25.454113][ T4922] EXT4-fs (loop3): 1 orphan inode deleted [ 25.456405][ T4922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 25.463363][ T1186] EXT4-fs error (device loop3): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 25.463380][ T1186] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 25.490394][ T1186] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 25.490443][ T1186] EXT4-fs error (device loop3): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 25.799578][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.822613][ T121] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 25.885746][ T4712] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.887287][ T4712] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.887592][ T4712] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.888045][ T4712] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.888353][ T4712] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.985421][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 25.988347][ T4705] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 25.988363][ T4705] loop3: lost filesystem error report for type 5 error -117 [ 25.989521][ T4705] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 25.989560][ T4705] loop3: lost filesystem error report for type 5 error -117 [ 25.989779][ T4705] EXT4-fs error (device loop3): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 25.989793][ T4705] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 25.989890][ T4705] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 25.989900][ T4705] loop3: lost filesystem error report for type 5 error -117 [ 26.066257][ T4941] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.069853][ T4941] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.071728][ T4941] bridge_slave_0: entered allmulticast mode [ 26.073844][ T4941] bridge_slave_0: entered promiscuous mode [ 26.076847][ T4941] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.078162][ T4941] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.078244][ T4941] bridge_slave_1: entered allmulticast mode [ 26.078689][ T4941] bridge_slave_1: entered promiscuous mode [ 26.089218][ T4941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.090423][ T4941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.100531][ T4941] team0: Port device team_slave_0 added [ 26.101433][ T4941] team0: Port device team_slave_1 added [ 26.109223][ T4941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.110127][ T4941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.110154][ T4941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.110876][ T4941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.110886][ T4941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.110898][ T4941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.127556][ T4941] hsr_slave_0: entered promiscuous mode [ 26.127915][ T4941] hsr_slave_1: entered promiscuous mode [ 26.128104][ T4941] debugfs: 'hsr0' already exists in 'hsr' [ 26.128114][ T4941] Cannot create hsr debugfs directory [ 26.285095][ T4724] Bluetooth: hci2: command tx timeout [ 26.285244][ T4724] Bluetooth: hci0: command tx timeout [ 26.285465][ T4724] Bluetooth: hci4: command tx timeout [ 26.434472][ T4941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 26.438136][ T4941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.438587][ T4941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 26.441662][ T4941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.443603][ T4941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 26.446573][ T4941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.449079][ T4941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 26.451833][ T4941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.467608][ T4941] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.467649][ T4941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.467757][ T4941] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.467799][ T4941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.469785][ T4970] loop4: detected capacity change from 0 to 128 [ 26.476925][ T4970] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 26.503808][ T4970] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 26.509511][ T4941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.519203][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.521135][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.532412][ T4941] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.536272][ T3766] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.536308][ T3766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.541034][ T3766] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.541080][ T3766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.680868][ T4941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.752811][ T4995] loop4: detected capacity change from 0 to 1024 [ 26.806577][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 26.809285][ T4995] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 26.810438][ T4995] EXT4-fs (loop4): Remounting filesystem read-only [ 26.929825][ T4941] veth0_vlan: entered promiscuous mode [ 26.944606][ T4941] veth1_vlan: entered promiscuous mode [ 26.959354][ T5008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 26.974221][ T4941] veth0_macvtap: entered promiscuous mode [ 26.977718][ T4941] veth1_macvtap: entered promiscuous mode [ 26.984473][ T4941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.989810][ T4941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.104307][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.104335][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.109297][ T1208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109473][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109620][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109636][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.148453][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.148479][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.163961][ T5011] loop3: detected capacity change from 0 to 8 [ 27.167251][ T5011] squashfs: Unknown parameter 'оÁQÊXI`mMÚ' [ 27.616030][ T4713] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.686702][ T5023] loop4: detected capacity change from 0 to 128 [ 27.691597][ T5023] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 27.6 ** replaying previous printk message ** [ 27.694547][ T5027] ================================================================== [ 27.694559][ T5027] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x16b4/0x1aac [ 27.694578][ T5027] Write of size 8 at addr ffff8000940f9000 by task syz.3.35/5027 [ 27.694588][ T5027] [ 27.694592][ T5027] CPU: 0 UID: 0 PID: 5027 Comm: syz.3.35 Not tainted syzkaller #0 PREEMPT SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 27.694602][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 27.694607][ T5027] Call trace: [ 27.694610][ T5027] show_stack+0x2c/0x3c (C) [ 27.694624][ T5027] __dump_stack+0x30/0x40 [ 27.694636][ T5027] dump_stack_lvl+0xd8/0x12c [ 27.694647][ T5027] print_address_description+0xb0/0x238 [ 27.694656][ T5027] print_report+0x68/0x84 [ 27.694663][ T5027] kasan_report+0x8c/0xc4 [ 27.694673][ T5027] __asan_report_store8_noabort+0x20/0x2c [ 27.694688][ T5027] sys_fillrect+0x16b4/0x1aac [ 27.694700][ T5027] drm_fbdev_shmem_defio_fillrect+0x38/0x144 [ 27.694711][ T5027] bit_clear+0x134/0x1cc [ 27.694720][ T5027] __fbcon_clear+0x38c/0x648 [ 27.694728][ T5027] fbcon_scroll+0x270/0x464 [ 27.694735][ T5027] con_scroll+0x18c/0x330 [ 27.694745][ T5027] csi_ECMA+0xea8/0x3074 [ 27.694754][ T5027] do_con_write+0x315c/0x4264 [ 27.694763][ T5027] con_write+0x34/0x58 [ 27.694772][ T5027] n_tty_write+0x994/0xd90 [ 27.694781][ T5027] file_tty_write+0x3dc/0x66c [ 27.694789][ T5027] tty_write+0x44/0x54 [ 27.694796][ T5027] vfs_write+0x51c/0xa0c [ 27.694808][ T5027] ksys_write+0x12c/0x228 [ 27.694819][ T5027] __arm64_sys_write+0x84/0x98 [ 27.694831][ T5027] invoke_syscall+0x98/0x244 [ 27.694842][ T5027] el0_svc_common+0xec/0x23c [ 27.694853][ T5027] do_el0_svc+0x4c/0x5c [ 27.694864][ T5027] el0_svc+0x64/0x260 [ 27.694875][ T5027] el0t_64_sync_handler+0x44/0x104 [ 27.694887][ T5027] el0t_64_sync+0x198/0x19c [ 27.694896][ T5027] [ 27.694898][ T5027] The buggy address belongs to a vmalloc virtual mapping [ 27.694906][ T5027] Memory state around the buggy address: [ 27.694911][ T5027] ffff8000940f8f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 27.694917][ T5027] ffff8000940f8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 27.694922][ T5027] >ffff8000940f9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 27.694926][ T5027] ^ [ 27.694930][ T5027] ffff8000940f9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 27.694935][ T5027] ffff8000940f9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 27.694939][ T5027] ================================================================== [ 27.696417][ T5027] Disabling lock debugging due to kernel taint [ 27.696451][ T5027] Unable to handle kernel paging request at virtual address ffff8000940f9000 [ 27.696462][ T5027] KASAN: probably user-memory-access in range [0x00000004a07c8000-0x00000004a07c8007] [ 27.696470][ T5027] Mem abort info: [ 27.696473][ T5027] ESR = 0x0000000096000047 [ 27.696477][ T5027] EC = 0x25: DABT (current EL), IL = 32 bits [ 27.696483][ T5027] SET = 0, FnV = 0 [ 27.696487][ T5027] EA = 0, S1PTW = 0 [ 27.696490][ T5027] FSC = 0x07: level 3 translation fault [ 27.696495][ T5027] Data abort info: [ 27.696498][ T5027] ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000 [ 27.696502][ T5027] CM = 0, WnR = 1, TnD = 0, TagAccess = 0 [ 27.696507][ T5027] GCS = 0, Overlay = 0, DirtyBit = 0 [ 27.696512][ T5027] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000021ad03000 [ 27.696518][ T5027] [ffff8000940f9000] pgd=0000000000000000, p4d=1000000221011003, pud=1000000221012003, pmd=1000000106f38403, pte=0000000000000000 [ 27.696541][ T5027] Internal error: Oops: 0000000096000047 [#1] SMP [ 27.761545][ T5027] Modules linked in: [ 27.762262][ T5027] CPU: 0 UID: 0 PID: 5027 Comm: syz.3.35 Tainted: G B syzkaller #0 PREEMPT [ 27.764181][ T5027] Tainted: [B]=BAD_PAGE [ 27.764945][ T5027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 27.766832][ T5027] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 27.768189][ T5027] pc : sys_fillrect+0x16b8/0x1aac [ 27.769093][ T5027] lr : sys_fillrect+0x16b4/0x1aac [ 27.770007][ T5027] sp : ffff80009abd7140 [ 27.770760][ T5027] x29: ffff80009abd7180 x28: ffffffffffffffff x27: ffff8000940f9000 [ 27.772229][ T5027] x26: 0000000000000004 x25: 0000000000000180 x24: 0000000000000004 [ 27.773669][ T5027] x23: 0000000000000030 x22: 0000000000000000 x21: 0000000000000000 [ 27.775113][ T5027] x20: ffff8000940f9000 x19: dfff800000000000 x18: 1fffe00035b9ec28 [ 27.776557][ T5027] x17: 0000000000000003 x16: ffff800088bf7000 x15: ffff800088ca7ee0 [ 27.777913][ T5027] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 27.779343][ T5027] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 27.780789][ T5027] x8 : ffff0000c644d880 x7 : 0000000000000000 x6 : ffff80008048e314 [ 27.782315][ T5027] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f8c58 [ 27.783866][ T5027] x2 : 0000000000000000 x1 : ffff0000c644d880 x0 : ffff8000940f9000 [ 27.785392][ T5027] Call trace: [ 27.786014][ T5027] sys_fillrect+0x16b8/0x1aac (P) [ 27.786940][ T5027] drm_fbdev_shmem_defio_fillrect+0x38/0x144 [ 27.788064][ T5027] bit_clear+0x134/0x1cc [ 27.788861][ T5027] __fbcon_clear+0x38c/0x648 [ 27.789704][ T5027] fbcon_scroll+0x270/0x464 [ 27.790536][ T5027] con_scroll+0x18c/0x330 [ 27.791317][ T5027] csi_ECMA+0xea8/0x3074 [ 27.792080][ T5027] do_con_write+0x315c/0x4264 [ 27.792914][ T5027] con_write+0x34/0x58 [ 27.793653][ T5027] n_tty_write+0x994/0xd90 [ 27.794461][ T5027] file_tty_write+0x3dc/0x66c [ 27.795333][ T5027] tty_write+0x44/0x54 [ 27.796062][ T5027] vfs_write+0x51c/0xa0c [ 27.796816][ T5027] ksys_write+0x12c/0x228 [ 27.797601][ T5027] __arm64_sys_write+0x84/0x98 [ 27.798524][ T5027] invoke_syscall+0x98/0x244 [ 27.799407][ T5027] el0_svc_common+0xec/0x23c [ 27.800233][ T5027] do_el0_svc+0x4c/0x5c [ 27.800996][ T5027] el0_svc+0x64/0x260 [ 27.801721][ T5027] el0t_64_sync_handler+0x44/0x104 [ 27.802663][ T5027] el0t_64_sync+0x198/0x19c [ 27.803521][ T5027] Code: 34000068 aa1b03e0 97b6c32f aa1b03e0 (f8008415) [ 27.804824][ T5027] ---[ end trace 0000000000000000 ]--- [ 27.925293][ T4712] Bluetooth: hci1: command tx timeout [ 28.073557][ T5027] Kernel panic - not syncing: Oops: Fatal exception [ 28.075734][ T5027] SMP: stopping secondary CPUs [ 28.076563][ T5027] Kernel Offset: disabled [ 28.077321][ T5027] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 28.078532][ T5027] Memory Limit: none [ 28.324740][ T5027] Rebooting in 86400 seconds..