last executing test programs: 1m38.212073449s ago: executing program 32 (id=62): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) fchown(r0, 0xee00, 0xee01) (async) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd0, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004800}, 0x20008884) 1m33.932969835s ago: executing program 33 (id=104): syz_clone(0x3004000, &(0x7f0000000080)="1b85a38d3ade2cd4a10f9a9375bd9783f11db65660e556785b8bf0a09b68d7f63d72a047b8da1d4895964f4ce2e764eff1cf61b318ee8ce516e5bfbc598ff027d953441285210b9c77b107987947ae85d8acbc1c01b8bbbadaadb6b2215c77c350", 0x61, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x7c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x44, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0xc, 0x5, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'Z'}]}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "8a95"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x118}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f00000000c0)={0x2, 0x4, 0x0, 0x0}) 1m26.172595188s ago: executing program 34 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x5) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r0, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m24.588079417s ago: executing program 35 (id=213): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006d"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000100)=0xfffffff3, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, 0x0, &(0x7f0000000400)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map, 0x4, 0x1, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x3) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYRES16=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000000000000000000000000000000001ffffffffffffe500"/108], 0xb8}, 0x1, 0x0, 0x0, 0x28000}, 0x2c000010) r4 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f00007d7000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x1, 0x6f6ecd3b}) capget(&(0x7f0000000200)={0x19980330, 0xffffffffffffffff}, &(0x7f00000002c0)={0x7fffffff, 0x8, 0x4, 0xd80, 0x800, 0xfffff9b4}) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40003400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000100000100000000001d0000000000453ef1c3635d652100000000000000"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m14.946359639s ago: executing program 36 (id=293): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) r1 = socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x9c, &(0x7f0000001440)=ANY=[@ANYBLOB="e7a3213b000000002b9827c1001101aa003dc1eb80f35012f89a10e6371e5f33b7a5ed0f29784cc75a10cec5eb5bbb358bf52ed02178a1e9a7eceae2a9e70ed60917ea4f3799e31f01ed8ef34e1a8a09b7d251cb2c18abc039adcd859de99bc3659b3a9356f94c5612a7014c7782fd385d6748acb314948ac2d79e0af9ce8c552ad534ca49bd00de732a07544fc3dabb0aa0b4771175"], 0x0) recvfrom(r1, 0x0, 0x0, 0x10041, 0x0, 0x0) ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000800)={0x3, 0x0, 0x16, 0x15, 0x131, &(0x7f0000000400)}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fallocate(r4, 0x29, 0x9, 0x7) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000005f80)={0x0, 0x0, 0x0, 0xa, 0x16a}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001500)=@newtfilter={0x8d0, 0x2c, 0x400, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x9, 0xffe0}, {0xe, 0xc}, {0x10, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x884, 0x2, [@TCA_BPF_POLICE={0x874, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1f, 0x8, 0x3, 0xfffffff8, 0x0, 0x10000, 0x1, 0xbc, 0x3, 0x1, 0x7b4, 0x8, 0xffffff81, 0x1, 0xd, 0x6, 0x0, 0x8, 0xfff, 0x1b, 0x39, 0x81, 0xef99, 0x8652, 0x46f0e73e, 0x6, 0x6, 0xff, 0x1, 0xb, 0x1, 0xfffffffc, 0x0, 0x856a, 0x6, 0x8, 0x3, 0x3d, 0xc61, 0x0, 0x5, 0x7d8, 0x551, 0x1, 0x7, 0xf, 0xfffff001, 0x500, 0xdd, 0xc0000000, 0x5, 0x1, 0x0, 0x7fffffff, 0x8, 0x2, 0x81, 0x401, 0x0, 0x0, 0x30, 0x9, 0x5, 0xfffffff8, 0x4, 0xffffffff, 0x8, 0x2, 0x7, 0x7, 0x390, 0x6, 0x9, 0x1, 0x400, 0x1, 0x800, 0x1, 0x1000, 0x824, 0xc9e9, 0x3, 0x9, 0xe, 0x6, 0x2, 0x3, 0x28c1e269, 0x7ff, 0xf322, 0xe09, 0x6, 0x8, 0x54fe, 0x1000, 0x5, 0xdd, 0x35, 0x6489, 0x7146, 0x8, 0xa, 0x3, 0x3, 0x0, 0x7fff, 0x7, 0xc24, 0x9, 0x2, 0x3, 0x6e, 0x5c6, 0x6, 0x8, 0x8, 0x100, 0x6a4, 0x80000001, 0x7, 0x5, 0x0, 0xd2dca456, 0x97, 0x7398, 0xfffffff9, 0x2, 0xfffffffd, 0x400, 0x1000, 0x6, 0x80000000, 0x8, 0x6, 0x2, 0x4, 0x32c6, 0x6, 0x8000, 0x10000, 0x0, 0x9f, 0xffff, 0xa08e, 0xffffffff, 0x80000001, 0x2, 0x0, 0x8, 0x7fffffff, 0x8, 0x6, 0x6, 0xe, 0x7, 0x5, 0x1, 0x1, 0x7, 0xc00000, 0x0, 0x7, 0x40, 0xe, 0x5, 0xfffffc00, 0x40, 0x7, 0xff, 0x3ff, 0x43e, 0xebd6, 0x3ef3, 0x9, 0x8, 0xffff1fba, 0x2, 0x1, 0x8, 0x2, 0x8, 0x6, 0x8, 0x2, 0x9, 0x8, 0x1, 0x5, 0x3, 0x4, 0x3, 0xb, 0x8, 0x3, 0x40, 0x7, 0x2, 0x7, 0x9, 0x2, 0x554, 0x3, 0xd4c, 0x4, 0x4, 0x2, 0x7, 0x8, 0x6, 0xfa, 0x3, 0x2, 0x7, 0x1ff, 0x7, 0x5, 0x6, 0x1, 0x6, 0x2, 0x9, 0x401, 0x2eb, 0xb, 0x6, 0x1ff, 0x8001, 0x5, 0x38f, 0x8, 0x5, 0x401, 0x9, 0xc7, 0x9, 0xffffffff, 0xf, 0x2, 0x1a9, 0x7, 0x2, 0x9, 0x5, 0x2, 0x400, 0x5, 0x0, 0x80, 0xe, 0x2, 0x7, 0x8, 0x3d, 0x2, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4d2c}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x3, 0x1ff, 0x1, 0x3, 0x2, 0x4, 0x7, 0x8, 0x4, 0x5, 0x3, 0x21871c3a, 0x9, 0xfffffff8, 0x7fffffff, 0x3, 0xf9, 0x9, 0x5, 0x9, 0xc, 0x1, 0x9, 0x8, 0x58, 0x8, 0x7fffffff, 0x3, 0x9, 0x0, 0x5, 0x4, 0x2, 0x7fae, 0x10000, 0x3, 0x1, 0x7, 0xffffffb8, 0x100, 0x5, 0x7, 0x8, 0x5, 0x4, 0x1, 0x7, 0x9, 0x9, 0x3, 0xfffffffc, 0x4, 0x5, 0x64, 0x7, 0x80000000, 0x10000, 0x0, 0x2, 0x4, 0x0, 0x9, 0xe018, 0x4, 0x2, 0xc91f, 0x81, 0x8001, 0x7f, 0x7, 0x8, 0x9, 0x8, 0x81, 0x9, 0x155, 0xc, 0x9, 0x6, 0x7fff, 0xffffffff, 0x800, 0x2, 0x4, 0xdc41198, 0x8, 0x0, 0x7, 0x1, 0x3, 0x22aa101d, 0xf91, 0x0, 0xc, 0x10, 0x5, 0xa1, 0x6, 0xc4fd, 0x5, 0x2, 0x24, 0x9, 0xbb39, 0x49, 0x40, 0x1, 0x8, 0x80, 0xd941, 0x0, 0x5, 0xc1, 0x4, 0x2, 0x1, 0x4, 0x6, 0x0, 0x2, 0x5, 0x1, 0x7, 0xe, 0x0, 0x5, 0x4, 0x2, 0x3, 0xed, 0x5, 0x6, 0x884f, 0x10000, 0x4, 0x9, 0x3, 0xf, 0x9, 0xfffff2f3, 0x7, 0x10000, 0x2, 0x4, 0x1, 0xfffffe00, 0x3c29, 0x5, 0x2, 0x2, 0x8, 0x80, 0x5, 0xa, 0x2, 0xfcc, 0x6, 0x8, 0x6, 0x8000, 0x7, 0x8, 0xb, 0xa9, 0x91, 0x41, 0xc, 0x7, 0x5, 0x10001, 0x7, 0xd0d7, 0x2114d141, 0x80000001, 0x180, 0x0, 0x1, 0x7, 0x0, 0x8001, 0x6, 0x40, 0x0, 0x4, 0x100, 0x5, 0x6, 0xb6, 0x7, 0x7, 0x9, 0x9, 0x1, 0x7, 0x7, 0x7, 0x80, 0xd8ba, 0x6, 0x8c0f, 0x9, 0x10000, 0x8001, 0x1b8, 0x8, 0x52, 0xfffffff7, 0x766e, 0xd5, 0x2, 0x9, 0x101, 0x80000001, 0x7, 0x33d, 0xffffffc2, 0x7, 0x9, 0x87, 0x8, 0x2, 0x80000001, 0x8, 0x6, 0xe, 0x31c, 0x1, 0xe, 0x5, 0xffffffff, 0xfff, 0x4, 0x18000000, 0x10000, 0x8, 0x6, 0x10000, 0xfffffffc, 0xffffffff, 0x8, 0x8, 0x7, 0xd6, 0x7fff, 0x5, 0x4, 0x7fffffff, 0x0, 0x3, 0x6, 0x660, 0x311a, 0x800, 0x400, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x4, 0xb689, 0x0, 0x6, {0x7, 0x2, 0x8000, 0x6, 0xc6, 0x401}, {0x82, 0x2, 0x8, 0x3, 0x9422, 0x101}, 0x200, 0xfffffffe}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x5}}, @TCA_RATE={0x6, 0x5, {0x80, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21891d, &(0x7f0000000500)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@resgid}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e8, &(0x7f0000000f40)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000600", @ANYRES16=r12, @ANYBLOB="05000000000000000000220000000a0001007770616e31000000"], 0x20}}, 0x4000000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={r6}, &(0x7f0000000240)=0x8) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 1m3.18503814s ago: executing program 8 (id=371): r0 = fsopen(&(0x7f0000000540)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xbf, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0x7ee, 0x0, &(0x7f0000000e80)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = userfaultfd(0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000040)="0503", 0x2, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x720e, 0x4000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(r6, 0x0, 0x10122) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001b00)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000700)={{}, 0x0, 0x10, @unused=[0x7, 0x800, 0xfffffffffffffff7], @devid=r8}) r9 = socket(0x2d, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$802154_raw(r9, &(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) 1m2.397461102s ago: executing program 37 (id=268): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8, &(0x7f00000000c0)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c0000000100000002"], 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000034, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], 0x0}, 0x20) 1m2.289777902s ago: executing program 8 (id=376): mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) (async) r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0xa4, 0x4) (async) listen(r1, 0x2) (async) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x8, &(0x7f0000000000)="fdffffffffffffff"}) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r3 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000032140)=""/102360, 0x18fd8, 0x800000001c) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x138, 0x3d, 0x200, 0x70bd25, 0x25dfdbfc, {0xb}, [@nested={0x13, 0x2c, 0x0, 0x1, [@nested={0x4, 0x6a}, @generic="a030d1", @nested={0x4, 0xa}, @nested={0x4, 0xa3}]}, @generic="ea751d232706688685c2cee68d7c1255f6e28d7b86312bccf7e0aea2460a854a03df55972bd5e8671cad47bdb69e3b947083a502654210", @generic="445784bc9b40d65325da0de3f4367cb496099b0295563770b0ace5a3ef5331943c9360c2467bb67ee783d5063390e3b901093326daba83df9d264884b0abdb89ab61059806d30063e0d38d648fcd05c11c57fca5a1c5febb34825714f8116565167a1353fef4abe8164bb7edd09c5b90c8774d0e0275f5094020eee329c3c3cf29666da3077920fadc6223b334f805aa7e745be1916a5b792a739187add45acd0199aefafaca09d6e00197fb067474753c58f1dc7352bd8e56d381a40cddccd127344e700ef8a8c94e8a03e3734ea4a7d3439dde60fa36bfc4"]}, 0x138}}, 0x840) (async) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x1402, 0xc23, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4800}, 0x0) syz_read_part_table(0x1052, &(0x7f0000001080)="$eJzsz9FpwzAYBOCT6xqLPrQb1Et0lI4TTNYxGTDkxUHGBC8QQuD7EEL36xAovFQtye/3Hq6XpHSH24+MnzVdTo/JMM01X/XQGdq29j97nJakL0n+bi2WbWVt53krnEubjNvz/8uTvwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb+EeAAD//2ykCV4=") 1m2.096366125s ago: executing program 8 (id=378): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x100}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x884) socket(0x10, 0x803, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BLKRASET(r2, 0x1262, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r8 = socket(0x1e, 0x4, 0x0) write$nci(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r5, @ANYRES16=r8], 0x14) 58.900424032s ago: executing program 8 (id=398): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x4, &(0x7f0000000300)={[{@utf8no}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '857'}}, {@utf8}, {@utf8no}, {@fat=@gid}, {@shortname_mixed}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-14'}}]}, 0x1, 0x21d, &(0x7f00000024c0)="$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") mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x127) 58.55269784s ago: executing program 8 (id=400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x89b0, &(0x7f0000000040)={'macvtap0\x00', 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7"], 0x0, 0x4}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = dup(r2) r4 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x3681, 0x0, 0x23b}) io_uring_enter(r4, 0x0, 0x0, 0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3818744, &(0x7f0000000580)={[{@nomblk_io_submit}, {@nobh}, {@prjquota}, {@bsdgroups}, {@nodiscard}, {@sysvgroups}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@discard}, {@bh}, {@nodelalloc}, {@noinit_itable}, {@jqfmt_vfsv1}]}, 0x1, 0x4cd, &(0x7f0000000b40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd28, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x8, 0xffffffff}, @TCA_PIE_BYTEMODE={0xfffffffffffffce6, 0x7, 0xfffffffc}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 58.460318878s ago: executing program 8 (id=402): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x6, 0x3, &(0x7f00000002c0)=""/100, &(0x7f0000000200)=0x64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000040)={0x0, 0xfffffffa, 0x91f, 0x3ff}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x801, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3121, 0x8a04}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c801}, 0x400c040) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a74000000030a01010000000000000000020000060b00070066696c74657200000c00024000000000000000050a000700726f7574650000000c0002400000000000935e000001000000000004280004800800014000000004140003006272696467655f736c6176655f310000080002405cbfe34d38000000080a01010000000000000000020000060c00064000000000000000020900020073797a32000000000900010073797a3000"], 0xd4}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xfffffffffffffee0}, {0xc, 0x8002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24040088) 56.252344028s ago: executing program 9 (id=420): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x100}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}}, 0x884) socket(0x10, 0x803, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000004c900500020000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000009000000000000ffffffffffffffff00000000000000000a00000000000000000000000000000000000000000000000000000000000000ffffffff"]) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r3, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r7 = socket(0x1e, 0x4, 0x0) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r4, @ANYRES16=r7], 0x14) 56.034211155s ago: executing program 9 (id=424): r0 = syz_open_dev$video4linux(&(0x7f00000015c0), 0x1000, 0x2) ioctl$VIDIOC_ENUMAUDIO(r0, 0xc0345641, &(0x7f0000000600)={0x4, "6d24b95c35a25b3e0e68146cdaec9cdc4929439562dbf4fbaab65f88a81e0643", 0x3, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private2, @multicast2, 0xd, 0x11}}) r2 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000580)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '9p\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x61, 0xb, 0x62, 0x35, 0x32, 0x38, 0x38], 0x2d, [0x6, 0x32, 0x34, 0x61], 0x2d, [0x33, 0x50, 0x31, 0x54], 0x2d, [0x61, 0x0, 0x35, 0x31], 0x2d, [0x61, 0x35, 0x37, 0x66, 0x39, 0x39, 0x62, 0x36]}}}, {@fowner_lt}]}, 0x1, 0x79e, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm0xAzyZTMpDQhixYR3ChaXAi66dpq3bn1x1b/CxfSUjUtVlxI5E5m2kkzk07a+VHI5wM3c8695+ac75z748zcy9wA9q3x9E8m4nBEfJREjFbnJxExUEn1R5zcKnd3Yz2XTklsbr75W1Ipc2djPRd166QOVjP/j4jv34s4ktlZb2l1bWGmUMgvV/OT5cXzk6XVtaPzizNz+bn80vGp6eljJ144cbx9sf7x09qhmx+/9uxXJ/9693/XP/ghiZNxqLqsPo52GY/x6nsykL6F27za7sp6LOl1A3gk6a7Zt7WXx+EYjb5KqonhbrYMAOiUTQBgH0qMAQBgn6l9D3BnYz1Xm3r7jUR33XolIg5sxV+7vrm1pL96ze5A5TroyJ1k25WRJCLG2lD/eMSHVyKuff7N29ei2g+upQHdcOlyRJwdG995/E923LOwV8/ttnBzqPIy/sDs/Xb+gV76Nh3/vNho/Je5N/6JBuOfoQb77qN4+P6fudGGappKx38v193bdrcu/qqxvmruX5Ux30Bybr6QT49t/46IiRgYSvNTlaKNR24Tt/++3az+NP507JdOv19554u0/vT1fonMjf6h7evMzpRnHjfumluXI57qbxR/cq//kybj39Mt1vH6S+9/1mxZGn8ab23aGX9nbV6NeKZh/9/vy2TX+xMnK5vDZG2jaODrnz8daVZ/ff+nU1p/7bNAN6T9P7J7/GNJ/f2apb3X8ePV0e+aLXt4/I23/8HkrUp6sDrv4ky5vDwVMZi8sXP+sfvr1vK18mn8E0833v+3qm28/aefCc+2GH//zV+/fPT4OyuNf3ZP/b/3xPW7C33N6m+t/6crqYnqnFaOf6028HHeOwAAAAAAAAAAAAAAAAAAAAAAAABoVSYiDkWSyd5LZzLZ7NYzvP8bI5lCsVQ+cq64sjQblWdlj8VApvZTl6N1v4c6Vf09/Ep+oJA/Vp+fL+Sfj4j/RMQnQ8OVfDZXLMz2OngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDrY5Pn/qV+Get06AKBjDvS6AQBA1zn/A8D+s7fz/3DH2gEAdI/P/wCw/7R8/j/b2XYAAN3z4Pm/r1GhhjMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgJadPnUqnzT831nNpfvbC6spC8cLR2XxpIbu4ksvmisvns3PF4lwhn80VF7etnKlLX9p6KRSL56djaeXiZDlfKk+WVtfOLBZXlspn5hdn5vJn8gNdjQ4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWlNaXVuYKRTyyxK7Jobb8X8Gex1F+xL98UQ0Q6JjifqjxHDvDlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT7h/AgAA///wSSzL") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000f80)=""/113, 0x10b, 0x71, 0x1, 0x8, 0x10000}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x6, 0xffff}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="e5", 0x1}], 0x1}], 0x1, 0x40800) openat(0xffffffffffffffff, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x569882, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40084}, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_clone(0x22000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x402, &(0x7f0000000000)={0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000010c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0], 0x0, 0x54, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001400)=@o_path={&(0x7f00000013c0)='./file0\x00', 0x0, 0x18, r2}, 0x18) syz_read_part_table(0x5ed, &(0x7f0000000000)="$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") mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x48480, 0x8) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, r2, r2, r3, r0, r0, r0, r3], 0x8) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40081271, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') getdents64(r7, 0xffffffffffffffff, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000014c0)=@generic={&(0x7f0000001440)='./sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500), 0x4) 55.830895668s ago: executing program 9 (id=427): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x14, &(0x7f00000002c0)=@raw=[@ldst={0x0, 0x3, 0x4, 0x0, 0xa, 0x50, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}], &(0x7f0000000380)='GPL\x00', 0x3, 0x8e, &(0x7f00000003c0)=""/142, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r0, 0xffffffffffffffff, r0, r0, r0], &(0x7f0000000500)=[{0x4, 0x1, 0xd, 0x8}, {0x4, 0x2, 0x5, 0x5}], 0x10, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x17, 0x5, &(0x7f0000000600)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x4, 0x6, 0x2, 0x3, 0x4}], &(0x7f0000000640)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0xe, 0x2, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000740)=[r0, r0, r0, r0, r0], &(0x7f00000009c0)=[{0x4, 0x4, 0x1, 0x2}, {0x3, 0x1, 0x3, 0x9}]}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c00)={'gretap0\x00', &(0x7f0000000b00)={'sit0\x00', 0x0, 0x7800, 0x10, 0x9, 0x4, {{0x2d, 0x4, 0x2, 0x2e, 0xb4, 0x64, 0x0, 0xb0, 0x4, 0x0, @broadcast, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x1f, 0x3, 0xa, [{@loopback, 0x6e04}, {@rand_addr=0x64010102, 0x4}]}, @ssrr={0x89, 0x17, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @remote, @broadcast, @remote]}, @timestamp_addr={0x44, 0x4c, 0xfc, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7c91}, {@multicast2, 0x6}, {@loopback, 0x3}, {@multicast1, 0xff}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@rand_addr=0x64010100, 0xf6}, {@loopback, 0x296}, {@private=0xa010101, 0x4}, {@rand_addr=0x64010102, 0x1}]}, @ssrr={0x89, 0x1b, 0x5b, [@remote, @rand_addr=0x64010100, @local, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp={0x44, 0xc, 0xff, 0x0, 0xe, [0xfff, 0x80]}]}}}}}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x11, &(0x7f0000000c40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x582, 0x0, 0x0, 0x0, 0xd62}, {}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000d00)='GPL\x00', 0x22d, 0xa9, &(0x7f0000000e40)=""/169, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000f40)={0x0, 0x7, 0x400, 0xd64a5af2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000f80)=[0x1], &(0x7f0000000fc0)=[{0x3, 0x3, 0x0, 0x5}, {0x5, 0x1, 0xd, 0x3}, {0x1, 0x2, 0x5, 0x1}, {0x2, 0x3}, {0x2, 0x4, 0x6, 0x6}], 0x10, 0x8000}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ac0)={@ifindex=r3, r1, 0x21, 0x0, r2, @void, @value=r4}, 0x20) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0xdc, 0xffffff9c}}, './file0\x00'}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x5, 0x3, 0x7, 0x0, 0xffffffffffffffff, 0x1ffffe, '\x00', 0x0, r6}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r10, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20000050) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0xf0b, 0x70bd25, 0xfffffffd, {0x0, 0x0, 0x0, r13, {0x0, 0x5}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0xffe5, 0x3, 0x1f0923a2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1, 0x40000005, 0x8, 0x1f, 0x3, 0x0, 0x2}}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x45}, 0xc880) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 55.153071516s ago: executing program 9 (id=432): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r3, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) write$tun(r2, 0x0, 0x141) 55.032758554s ago: executing program 38 (id=432): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)={0x20, r3, 0x3, 0x70bd27, 0x25dbdbfb, {}, [{{0x8, 0x1, r6}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004044) write$tun(r2, 0x0, 0x141) 43.278151021s ago: executing program 39 (id=402): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r0, 0x6, 0x3, &(0x7f00000002c0)=""/100, &(0x7f0000000200)=0x64) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000040)={0x0, 0xfffffffa, 0x91f, 0x3ff}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x801, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x3121, 0x8a04}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c801}, 0x400c040) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r2) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a74000000030a01010000000000000000020000060b00070066696c74657200000c00024000000000000000050a000700726f7574650000000c0002400000000000935e000001000000000004280004800800014000000004140003006272696467655f736c6176655f310000080002405cbfe34d38000000080a01010000000000000000020000060c00064000000000000000020900020073797a32000000000900010073797a3000"], 0xd4}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @rand_addr=' \x01\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x80) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000280)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000000c0), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xfffffffffffffee0}, {0xc, 0x8002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x24040088) 43.19711694s ago: executing program 1 (id=497): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_512="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"}}, &(0x7f0000000b00)=0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f00"}}, 0x0) 43.124721078s ago: executing program 1 (id=499): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000640)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 0x4, 0x4, {@mac=@remote, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x3, 0x8, 0x7, 0x9, 0x6, 0x4, 'veth0_to_batadv\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x2}, 0xc0, 0x111}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty, 0xa}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0x1000, 0x0, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x2d, 0x1001, r1, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) 42.909304266s ago: executing program 1 (id=502): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) futex_waitv(&(0x7f0000001b00)=[{0x3, &(0x7f0000000940)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) (fail_nth: 3) 42.782901423s ago: executing program 1 (id=504): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000080)) (async) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x400, 0x0, 0x3c9}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x0, 0x0, r4, 0x1c, &(0x7f00000001c0)={{0xa, 0x4ea2, 0x7, @remote, 0x2}}}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000c16, &(0x7f0000000280), 0x1, 0x260, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) (async) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x65) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) syz_open_dev$vim2m(&(0x7f0000000300), 0x400000000000003, 0x2) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r8, 0x0, 0x12, &(0x7f0000000000)=0xff, 0x4) setsockopt$inet_int(r8, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) (async) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) write$smackfs_label(0xffffffffffffffff, 0x0, 0x2) (async) write$smackfs_label(0xffffffffffffffff, 0x0, 0x2) syz_usbip_server_init(0x1) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) getegid() syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x190807a, &(0x7f0000000540), 0x1, 0xbfa, &(0x7f0000003800)="$eJzs3E9oHF8dAPDvTDb/2vzc/ETEn5dGRFoQt2klxRbBVCpePAh6FRrSTQnZ/iGJ1KQ5bBQ8i3oUwYugFqUHe+5FwYsHL1qvFg9CkdgoFKkrszub5NfsJtsmmwnJ5wMv89682Xnf775uZh7dSQCn1kT2I434ICJuJhHlfH8aEUPN2khEvXXc5sba7H821maTaDS+8c8kkoh4ubE22z5Xkm/P5o2RiPjTl5P46Pd2j7u0srowU6tVF/P2xeU79y8urax+bv7OzO3q7erdS1e+MHV56srk1amDJZhsV1/9bfrJvz/11b/X//vL14/+9aOfJzEdY3nfzjyaXh9s2Gi+txM7h99SioiZg5/+WBjI89mZZ1La50Vpn4MCAKCrdMc93MejHAOxffNWjt/9udDgAAAAgEPRGIhoNBqN9WhtAQAAgJMose4HAACAE679PYCXG2uz7VLsNxKO1ovrETHeyn8zL62eUtSb25EYjIgzL5PY+Vhr0nrZgU1ExPO/Xv1NVqLTc8h9Vl+PiE+05/+970e0x0+a+Y83n+LenX8aEZOHMP7EG+1i89/573///KcPYfyt/PMHqE/b5w+AYjy93rqQ7b7+pVv3P9Hh+lfqcO1+F0Vf/9v3f5u77v+28x/ocv/39R7HePiLnz7o1pfl/8UnX/l1u2TjZ9tOxw6+TWI9erEe8clSp/yTrfyTLvnf7HGM8v8eVLv17Zf/q3dNrEeNn0Wcj875tyV7/32ii3Pztepk62fHMdb/MPWrbuO/zfz3Qzb/Z7rkv9/83+9xjG/duPG4W9/++af/GEq+2awN5Xu+M7O8vHgpYij52u79l/eOpX1M+xxZ/hc+3cy/FF0+/53yz34n1PP3IVsLrOfbrP3dN8b80qOHv90r/2ztV+T833rH+f9Bj2N85vc/vNCtb+f6NyvZ+M+T1loYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrSiBiLJK1s1dO0Uok4GxEfizNp7d7S8mfn7n377q2sL2I8BtO5+Vp1MiLKrXaStS8169vty2+0Px8R70fEj8ujzXZl9l7tVqNcdPoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkzkbEWCRpJSLSiNgsp2mlUnRUAAAAwKEbLzoAAAAAoO+a6/9S0VEAAAAA/eT//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiz9889fZZERP3aaLNkhvK+wUIjA/otLToAoDADRQcAFKZUdABAYd5yje92AU6gZJ/+ka49w4ceCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADH1/kPnj5LIqJ+bbRZMkN532DHV5w7wuiAfkqLDgAozMBenaWjiwM4ej7icHp1XuMDp0myT//I9jH1D/cM9y0mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6fsWZZ/uN2O00rlYj3ImI8BpO5+Vp1MiI+EhF/KQ8OZ+3hYkMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgD5ZWVhdmarXqospxq4zFQc/TyCf5cANL87MW/f6cvEpyPMJoVbIpHi3uFxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIVYWlldmKnVqotLXQ6Y/skRRwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUZWlldWGmVqsu9lB53PPBaX721p6CUwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoED/DwAA//8VOQG/") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/16/smp_affinity\x00', 0x1, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/16/smp_affinity\x00', 0x1, 0x0) 42.59109607s ago: executing program 1 (id=506): r0 = socket$inet6(0xa, 0x800, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f00000034c0)=0x9, 0x4) sendto$inet6(r1, &(0x7f0000000000)='\a', 0xffc0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) waitid(0x1, 0x0, 0x0, 0x40000000, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1346, &(0x7f0000001dc0)=ANY=[], 0x0) sendmmsg$inet6(r0, &(0x7f0000004200)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x38a0, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x20002040) 41.611704743s ago: executing program 1 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='active', 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) fanotify_init(0x20, 0x80000) 41.515746364s ago: executing program 40 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='active', 0x6) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) fanotify_init(0x20, 0x80000) 40.768713677s ago: executing program 3 (id=522): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x0, 0x8, 0x8000) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000180)={0x0, 0x847b, 0x800, 0x0, 0x2e8, 0x0, r1}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf99, 0x1, 0x40, 0x10a, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb399, 0x1, 0x3, 0x99, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7118, 0x4, 0x3, 0x394, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe14, 0x1000, 0x0, 0x3c1, 0x0, r1}, 0xffffffffffffffff}], 0x4, &(0x7f0000001dc0)={0x2e, 0x48, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x2}, 0x0, r5, '\x00', {0x3, 0xb8, 0x0, 0x0}}, &(0x7f0000001e40)) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000005) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r8 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) write$smackfs_load(r8, 0x0, 0x19) syz_create_resource$binfmt(&(0x7f00000002c0)='./bus\x00') r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r7, {0x0}}, './file1\x00'}) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0xa42000, &(0x7f0000000540)={[{@redirect_dir_follow}, {@uuid_auto}], [{@euid_lt={'euid<', r10}}, {@flag='mand'}, {@subj_type={'subj_type', 0x3d, 'noinit_itable'}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}]}) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000000)=0x3f7, 0x4) setsockopt$inet_int(r9, 0x0, 0x17, &(0x7f0000000100)=0x2, 0x4) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_on}]}) chdir(&(0x7f0000000300)='./file0\x00') socket$kcm(0x11, 0x0, 0x300) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x0) 40.576751707s ago: executing program 3 (id=527): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.51873185s ago: executing program 3 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x400, &(0x7f0000000300), 0x2, 0x786, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) socket$netlink(0x10, 0x3, 0x14) listen(0xffffffffffffffff, 0x3) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_continue}]}, 0x1, 0x4be, &(0x7f0000000a00)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x1740) writev(r6, &(0x7f00000002c0)=[{&(0x7f00000000c0)="709f8bfb", 0x4}], 0x1) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_DPORT={0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0) sendto$inet_nvme_of_msg(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = accept4$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x800) bind(r7, &(0x7f0000000100)=@xdp={0x2c, 0x19, 0x0, 0x12}, 0x80) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x0, 0x4, 0x14, 0xa}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x1a, 0x65, 0x64, 0x0, 0xb, 0x6, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x4, 0x89, 0x0, 0x8}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x105, 0x0, 0xffff}, {"beb364c192856cee524db8dc98457f10be9f89eff700d83130f1a13ce829e55086d65862fe3868cc03a052af5da38b62af0ae89aea61070000"}}}}, 0x73) 40.308741076s ago: executing program 3 (id=531): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) write$UHID_INPUT(r0, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0xfffffe69) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 40.179131963s ago: executing program 3 (id=533): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x25dfdbfc, {{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x3, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 39.713049167s ago: executing program 3 (id=535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000801800071115b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3c44aadc539c6433, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x90, 0x0, 0x8, 0x1, 0x9, 0x9, 0x6, 0x9, 0x1, 0x3, 0x0, 0xe, 0x6, 0x101, 0x7, 0x401, 0x180000, 0xffffff7f, 0x27e, 0xffffffff}}) r3 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x34, 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10840b2, &(0x7f0000000080)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x37]}}]}) (async) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="9e0073b6d7c51df9045c9a10e4d763582a2ebd1aa282d286f79b3e7ed829798462cdf85e4c35a1e55e6a010757cdda35484a5a80f67aebc49da89faca4e1897f08be7791e4ac8cac7435e205c905bd0b5ee213c39ed0e5ac496ee392ea09ebf1a4245113662e599e9098a3df2c0a44c5ee6a9f88411bfa769017ac45fc798bb907edffd816643b9591f3cb85e4f5ba8b057f", 0x92}], 0x1}, 0x80) 39.672862233s ago: executing program 41 (id=535): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000801800071115b000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x3c44aadc539c6433, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @address_request={0x11, 0x0, 0x0, 0x90b6}}}}}, 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'team0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xf, 0x841e, 0xa04f, 0x90, 0x0, 0x8, 0x1, 0x9, 0x9, 0x6, 0x9, 0x1, 0x3, 0x0, 0xe, 0x6, 0x101, 0x7, 0x401, 0x180000, 0xffffff7f, 0x27e, 0xffffffff}}) r3 = memfd_create(&(0x7f0000000080)='%\x00', 0x3) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x4}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x34, 0x2) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10840b2, &(0x7f0000000080)={[{@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x37]}}]}) (async) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="9e0073b6d7c51df9045c9a10e4d763582a2ebd1aa282d286f79b3e7ed829798462cdf85e4c35a1e55e6a010757cdda35484a5a80f67aebc49da89faca4e1897f08be7791e4ac8cac7435e205c905bd0b5ee213c39ed0e5ac496ee392ea09ebf1a4245113662e599e9098a3df2c0a44c5ee6a9f88411bfa769017ac45fc798bb907edffd816643b9591f3cb85e4f5ba8b057f", 0x92}], 0x1}, 0x80) 35.577126925s ago: executing program 0 (id=561): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x6000)=nil, 0x6000, &(0x7f0000000140)='\x00') (async) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r2, r1, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000004c0)={'security\x00', 0x0, [0x7, 0x0, 0x9, 0xa, 0x20001]}, &(0x7f0000000100)=0x54) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)='fou\x00') (async) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) (async) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x2, 0xffffffffffffffff, &(0x7f0000000080)) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000180)=0x8, 0x4) 35.510336478s ago: executing program 0 (id=564): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone3(&(0x7f0000000900)={0x2b800080, &(0x7f0000000000), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x6, 0x9}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4c850) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x110, 0x150, 0x150, 0x0, 0xf8010000, 0x1d8, 0x238, 0x238, 0x1d8, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [0xff], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x204) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0x78) recvmmsg(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) r3 = syz_mount_image$ext4(&(0x7f00000002c0)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000003c0), 0x2, 0x459, &(0x7f0000000980)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, &(0x7f00000002c0)) openat2(r3, &(0x7f0000001e00)='./bus\x00', &(0x7f0000001e40)={0x14001, 0x1b4, 0x20}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r5, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r6, 0x1}, 0x20) eventfd2(0x1, 0x800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, 0x0, 0x0) 35.381229397s ago: executing program 0 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02"], 0x5) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(r0, 0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.425063017s ago: executing program 0 (id=570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(0xffffffffffffffff, 0xfe) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$nfs4(&(0x7f0000000180)='/', &(0x7f00000001c0)='./file1\x00', 0x0, 0x2085008, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) (async) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x8000, &(0x7f0000000240)={0x0, 0x0, 0x40000}, 0x20) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@delchain={0x34, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002780)=@delchain={0x34, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000000010000205eeb552a869da208000000000000007a310eb6fd538824435ed400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000000010000205eeb552a869da208000000000000007a310eb6fd538824435ed400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r3, 0x25, 0x0, @val=@tracing={0xffffffffffffffff, 0xfff}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000540), 0x400080, 0x0) close(r6) close_range(r5, 0xffffffffffffffff, 0x0) 34.026087771s ago: executing program 0 (id=575): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a80180004"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f00000100000000000000005e367feffc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a01010100000000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 32.438953528s ago: executing program 0 (id=579): recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) r1 = io_uring_setup(0x74ff, &(0x7f0000000100)={0x0, 0xe850, 0x40, 0x2, 0x77, 0x0, r0}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000200)={r0, 0x1, 0x6, 0xcec, 0xfffffff7}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x43) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0fff3ff000000000800000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 32.320564012s ago: executing program 42 (id=579): recvmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES64], 0x3, 0x232, &(0x7f0000000500)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x47, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x80008, 0xc1}) r1 = io_uring_setup(0x74ff, &(0x7f0000000100)={0x0, 0xe850, 0x40, 0x2, 0x77, 0x0, r0}) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, &(0x7f0000000200)={r0, 0x1, 0x6, 0xcec, 0xfffffff7}, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x1) getdents64(r2, 0x0, 0x43) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000002b272081364ccb816213dce03be8ddde5477db0b5899010188242c11464c15f2f3058f2fb949e926a6ace9fa83f11d33aae1e3c12c169dabe6296ecd11b4a0940b19385336e8ddaf8dcd3822def32caace3f35acda18766588f078107611c9c31c41c52b8491f515e507336c2b71cad4c8d9769c8c2534d7b5aca21deac5a1c36c42afd66ada17318c4ba43b046ec30e3b748753d9d59fd7f21a27ab203388bfc90f29cd31a1490fac27dc4ab69d4259f4b4e16268fc5e1720a9629f0b344538930eba893a6f8666c650bc454765f2c1c2790e79e37c0625d1da04c69379914fc1d55ed70efb998be73eabe8028687beacbdfac21e9170c042b534458de59877d23dfac418bbd57", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0fff3ff000000000800000018190000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.276347527s ago: executing program 4 (id=821): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000000), 0x0, 0x40004) fsync(r0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) mlock(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$LINK_DETACH(0x22, 0x0, 0x0) 4.27609936s ago: executing program 4 (id=822): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000140)=[{{&(0x7f0000000040)=@can={0x1d, r1}, 0x80, 0x0}}], 0x1, 0xf5) 4.275787269s ago: executing program 4 (id=823): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_512="fa7cbc5c5cbb61bd1212e23c6fcc0f10e0d5e9226bc1945064682218f00586974f10bc08a0c04f61b1c423783f5b73a46ed4325b39196245b1a90b8e11af5981d9178532d2630c8908ef7a3ff57c983b98ee80b2ee8bbeb8d04710522ae2634a70a45179ff80f8015692e081cc556960ec8d6598de990d66a6cae5e19b6bff884b6f575a31e59103645f6474acf2e9aed215443df223856978161488b2be184f8ed38c53f804cfd51d046c989a7fc0e9d1cd395e7d5e52ccdb396cffd05f2c787addacd6887ba92d534d1d248032947098ab45107fda2c3d0702dd4b1f3e3f05aa146503622fde9105bb1b6858e4436a4c1ce7de980e8009aded3ceea9c7fd05fa5a1894e0d378424a18905a2a462382066362fda58379c325b3b14a36919c53fe131932b5b1f94842c3339cc3e0a1df9381ce13768c6fe9b63a7d63deb7ba04b4eee9d4fc94a9809f828b3029c0cb76ae4111c33668f49e1272e04a4840ef694d8464b709cf1e646cdcabca15358f5cd7098aad7ce6b8a10b6cdca87133139d95c977ffdcfe5d570235550a4692139ce0d6e580776c1631cb621ed5179e4dda5fd16069689d5fb9d63958a1c5f994d9134a218a2b10d97ac61ea56891cb3bc77540302e6f5eab01ce79c856f7d19d1ab4604277e897a66b2aeea0f545907faf46bd91c5712505a1e41e4b114414cc3bf44d2373d884b6a7b2cd605407f97509"}}, &(0x7f0000000b00)=0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffff00"}}, 0x0) 4.213107518s ago: executing program 4 (id=824): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000003240)='./bus\x00', 0xe, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}]}, 0x43, 0x47a, &(0x7f00000028c0)="$eJzs28tvFdUfAPDvTF/0Bz97RXzwUKtobHy0FHyQ6EKJJi4wMdGF26YtBCnU0JoIIQrG4Mq4cW9057/gSjfGuDJxq3tDQgwbwNU1c+9M2/ukvdz2Fu7nkww9Z+YM53zvzLlzZs7cAPrWePZPErErIv6MiLFqtrbAePXPzesXZ29dvzibRLn83j9JpdyN6xdni6LFfjvzzEQakX6RxP4m9S6dv3B6ZmFh/lyen1o+89HU0vkLL5w6M3Ny/uT82cNHj754ZPqVlw+/1JU4szbd2Pfp4oG9byeD7xz/KluXFvHXxdEl4+02Pl0ud7m63vr/mnQy2MOGsCEDEZEdrqFK/x+LgVg9eGPx1uc9bRywqcrlcrlyva58AzS4VAbuYUnU5nV56BfFhT67/y2W+kHA65s7BOmpa29Ub4CyuG/mS3XLYKQxWkkN1d3fdtN4RHxw6d9vsyU25zkEAECNn7Lxz/PNxn9pPLSm3H353FApIu6PiN0R8UBE7ImIByMqZR+OiEfy8qPrrL9+kqRx/JNe7Ti4dcjGf6/lc1u147+0KFIaqORGKmPAUgwlJ04tzB/KP5OJGBrJ8tNt6vj5zT++brVt7fgvW7L6i7Fg3o6rgyO1+8zNLM9UUyMdx124djli32Cz+JOVmYAkIvZGxL4O6zj17A8HWm27ffxtdGGeqfxdxDPV438p6uIvJO3nJ6d2xML8oanirGj02+9X3m1V/x3F3wXXShH/a3r+r8RfStbO1y5tvI4rf33Z8p6m0/N/OHm/kh7O130ys7x8bjpiODlebfTa9YdX9y3yRfns/J842Lz/747VT2J/RGQn8aMR8VhEPJ63/YmIeDIiDraJ/9djT33YefybK4t/bkPHfzUxHPVrmicGTv/yY02lpYb4b7U5/iupifzv6vdfYaAhrvW0q7OzGQAAAO4+2d31rkjSyZV0mk5OVt+X3xORLiwuLT93YvHjs3PV3wiUItLiSdfYmueh0/ltfTV/OSKqrxYU24/kz42/GRit5CdnFxfmeh089LmdLfp/5u/Gx2rAvcbvtaB/te//O7asHcDWu931/7Mtagew9TY6/v/+1SJ1bL3veQLbVJP+r19DXxhpev035of+UNf/TftBH6nr/x74Qx/pfP5/uKvtALae93+gLy2Nxu1/JN82UfxPHe5+zyZiqNWm4W3Swjs87um2aMa2TQzd5f2id99JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fRfAAAA//8Nkdx1") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='xhci-hcd\x00', 0x9) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000002700)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x100000, 0x35, &(0x7f00000026c0)=""/53}]}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000180)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='pcspkr\x00', 0x7) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x15, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000700)=0xdfffffff, 0x4) ppoll(&(0x7f0000000000)=[{r4, 0x1200}], 0x1, &(0x7f00000002c0), 0x0, 0x0) mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r0, 0x0) 4.040858527s ago: executing program 4 (id=825): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) r2 = dup(r0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.508596783s ago: executing program 4 (id=831): socket(0x10, 0x3, 0x0) unshare(0x20000400) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x10000}, {0x7, 0x1}, {0x7, 0x2}, {0x8, 0x1}]}]}, {0x0, [0x60, 0x0]}}, &(0x7f0000000480)=""/220, 0x48, 0xdc, 0x1, 0x131}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0xfffffffc, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000440)="0cd9"}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a0002", 0x1b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210009000401a8001600a400014020", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000b4b6000025000000ffffff809500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000080)=""/163}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.290154386s ago: executing program 43 (id=831): socket(0x10, 0x3, 0x0) unshare(0x20000400) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4, 0x10000}, {0x7, 0x1}, {0x7, 0x2}, {0x8, 0x1}]}]}, {0x0, [0x60, 0x0]}}, &(0x7f0000000480)=""/220, 0x48, 0xdc, 0x1, 0x131}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0xfffffffc, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r1, &(0x7f0000000440)="0cd9"}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90624fc60100005000a0002", 0x1b}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210009000401a8001600a400014020", 0x39}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x9, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180a000000000000000000000000000085000000b4b6000025000000ffffff809500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa3, &(0x7f0000000080)=""/163}, 0x80) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.581232761s ago: executing program 7 (id=840): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) r0 = fsopen(&(0x7f0000000100)='efivarfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 2.579626967s ago: executing program 7 (id=841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) r2 = dup(r0) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, &(0x7f00000002c0)) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.70925331s ago: executing program 7 (id=858): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xfe}, 0xff}, 0x18) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) 1.669470542s ago: executing program 7 (id=859): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="bdcd1a9a3fc36e961eabd631bf0cb995d1b4b08d80c054965743839e35460251df8e", 0x22) r2 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000200)) io_uring_enter(r2, 0x0, 0x235c, 0x3, 0x0, 0x0) io_uring_enter(r2, 0x47fa, 0xe30, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0xcf, 0x1], 0x2) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) 1.385055008s ago: executing program 6 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000100)='debugfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,prot\x1a=tcp,vers=3\x1a\xa7\xe47Y\xae\xaaA`\xf3,mountport=2049,mountproo=tcp,nolock,rsize=1024,w\f\xefA\xc99\xa2\xae\x1e\xcbj\x8cV\xa2\x96\xfa\x8b ig\xcc\x1d\bK\xebj') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket(0x2b, 0x80801, 0x1) r1 = socket(0xa, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000200)={0x1, 0x5, {0x3a, 0x26, 0xb, 0x15, 0xffff7fff, 0x1000, 0x6, 0x43}}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8682e222) sendto$inet6(r1, 0x0, 0x0, 0x44004, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) 1.355377147s ago: executing program 6 (id=870): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x2, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f0000001400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001440)={0x2d0, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x16f, 0x2a, [@tim={0x5, 0x51, {0x0, 0xff, 0x4, "babd09c37433553a108c40d2bbc8879f2bf8c9a407b0e5a14553262778897d0191bc529ebb9779e5cc423e98f90158ec07d9c45463055a9d990e6f69ac77128f0a9b966769264e313ef98e22e02f"}}, @tim={0x5, 0xda, {0x3, 0xca, 0x4, "45ae20706da2b50e9025bee0ec760d98cb3ae375c099bd347915d44b05a7aea1fbed8fb655f463bfc16d4310563c3c0f044991631fa2137072ad6067bf89fee7649fe139202b8845ca655cdd4c835089e028e75f9411b6492c5f9cbf96955af487cffc5aed9d727fe96e43480054ef9107af91f47f9f8fde719203a98801e17425fccc04573a82555fe9c7b2719ac90d63d41240255188c1ccbf6dfbc7f7f133048b5e167448ed7b316e514fa1dcab551c46b50da49ab72886048096c36ea77c76a4ee69d0c0d2fa32eb6c6fd665cd84657e4acd108ece"}}, @ht={0x2d, 0x1a, {0x1000, 0x1, 0x3, 0x0, {0x834, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1}, 0x300, 0x3, 0x80}}, @channel_switch={0x25, 0x3, {0x1, 0x6, 0x4}}, @chsw_timing={0x68, 0x4, {0x4, 0x1}}, @erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0x10, "1f1b4b82886a7feb60343f0c9d85e9ae"}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xcb48}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x33}, @NL80211_ATTR_IE={0x139, 0x2a, [@rann={0x7e, 0x15, {{0x0, 0x4c}, 0x2, 0x1, @device_b, 0x2, 0x2, 0x10001}}, @challenge={0x10, 0x1, 0x8}, @ssid={0x0, 0x6, @default_ap_ssid}, @challenge={0x10, 0x1, 0x39}, @ibss={0x6, 0x2, 0xf576}, @perr={0x84, 0xf6, {0x8, 0x10, [{{}, @broadcast, 0xb, @void, 0xe}, {{}, @broadcast, 0x3ff, @void, 0x42}, {{}, @device_a, 0xfffffff8, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0x10}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x32}, {{}, @device_a, 0x600000, @void, 0x33}, {{0x0, 0x1}, @broadcast, 0x5, @value=@broadcast, 0x33}, {{}, @device_a, 0x2, @void, 0xc}, {{}, @device_a, 0xa4, @void, 0xd}, {{}, @device_b, 0xc5fb, @void, 0x4}, {{}, @broadcast, 0x6, @void, 0x3d}, {{0x0, 0x1}, @device_a, 0x1, @value, 0x19}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x39}, {{0x0, 0x1}, @broadcast, 0x3, @value=@device_b, 0x12}, {{}, @device_a, 0x4, @void, 0x17}, {{}, @device_a, 0x800, @void, 0x13}]}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast, @device_b}}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x40000}, 0x44) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1.308342158s ago: executing program 5 (id=871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) 1.196999412s ago: executing program 5 (id=872): syz_emit_ethernet(0x13, &(0x7f0000000480)={@multicast, @local, @void, {@llc={0x4, {@llc={0xaa, 0x42, "83", "2ecf"}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) getdents64(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x40, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x1}, 0x50) io_setup(0x66, &(0x7f0000000400)=0x0) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xe, r7, &(0x7f00000000c0)='-', 0x1, 0x0, 0x0, 0x4}]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r10, 0xc01064c7, &(0x7f0000000080)={0x28, 0x0, 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) sendmsg$unix(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x702, 0x86, 0x0, &(0x7f0000000380)="e46033c470d8d400eb00c15286dd11e6d2e4153f87564c0fa142a42b83f3eb460d0dcc2dda42dfb56499d49722cee4ce23d90b80fa2a3f132fcbd09f9da372a29284d19ead07854be71a9bb62b981b0e30f24a3996df91bcfe68c57f31ec1bfcf9d61fb1ad4d74d1fbd8940188b0c0a3a7170e1836ea5d15d202a9b01c742934d2fd9fa7c21e", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pselect6(0xf8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9000000}, &(0x7f0000000140), &(0x7f00000003c0), &(0x7f00000001c0)={0x77359400}, &(0x7f0000000240)={&(0x7f0000000200), 0x8}) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 1.16398701s ago: executing program 6 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x2}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa8e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x2d5}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa89}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x11c9}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd9a}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) r3 = socket$packet(0x11, 0x1, 0x300) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)={0x3cc, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xfffffffc}, @WGDEVICE_A_PEERS={0x384, 0x8, 0x0, 0x1, [{0x288, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @mcast1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @rand_addr=0x64010100}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0947ffceddb864c99d5d118b2cb9609cafb5656d41a8bf528318459fb93c1801"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @broadcast}}, @WGPEER_A_ALLOWEDIPS={0x1b0, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xa0d, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0xf8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xd6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f0000003100)=[{{&(0x7f0000000780)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/253, 0xfd}, {&(0x7f0000000900)=""/123, 0x7b}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/60, 0x3c}, {&(0x7f00000019c0)=""/79, 0x4f}, {&(0x7f0000001a40)=""/90, 0x5a}], 0x6}, 0x4}, {{&(0x7f0000001b40)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000002c80)=[{&(0x7f0000001bc0)=""/170, 0xaa}, {&(0x7f0000001c80)=""/4096, 0x1000}], 0x2}, 0x8}, {{&(0x7f0000002cc0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d40)=""/233, 0xe9}, {&(0x7f0000002e40)=""/139, 0x8b}, {&(0x7f0000002f00)=""/238, 0xee}, {&(0x7f0000003000)=""/98, 0x62}], 0x4, &(0x7f00000030c0)=""/59, 0x3b}, 0x5}], 0x3, 0x2, &(0x7f00000031c0)) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000003480)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f0000003240)={0x1e8, 0x0, 0x108, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xad7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9d}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfee}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x134, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4d00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfebc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x40004}, 0x20000001) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003500), r0) sendmsg$TIPC_NL_BEARER_ADD(r8, &(0x7f00000037c0)={&(0x7f00000034c0)={0x10, 0x0, 0x0, 0xb032a6da52aeb66b}, 0xc, &(0x7f0000003780)={&(0x7f0000003540)={0x214, r9, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x466}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x20008010}, 0x4881) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003a00)={&(0x7f0000003880)={0x170, r10, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x8090}, 0x24000000) vmsplice(r7, &(0x7f0000004a80)=[{&(0x7f0000003a80)="ba9896a69d7846fa6b5f688ebf6e27249677564f6bf35f8093c47f3ad3d8ebc060a5085c2d1c90e369d6bfb98b28aeec8723d24bf533a7dc84ba61930081ab899d3f404206d8ba8192f20e31f108196d483499f06ff67fed6f1f3a5d2de0175913d2afdb6dc4f64c130dc71a8fcdc2027f6ffdef1d3923841fc9e828c19b6b79ccb9fb67040f5f148c1013f88ea5629aa68aade7fbae30ae2a7d5283c1d308e5cf584087611111cdc2f6c354877c7c55939199efd298701a0f03645723fb80a0ff4d9144ef7ea6d169e37cdcbf726a77ae138d09d6aa590a0009d7b42e2f18c9b59b9d244e3f1c8d1611d03f3af8e1db4c4ec7cb2c9ea4bf8deb6b14fedbbc884ccee357e2253503d67fa607287b76813129d4a503a396d7b50bbfc3bd8cc2d414c8b839fcd2553f6e5f238bdf32f759eeed88ac7aea77fe4d11619b255eaa529a142b9c2212ce2a3637bae36ede699f47eb57b73ccd83fe8d217a9809c8817966c25522b069ec5528f9745b3cd368420ffcddd70376248f4b6e5a2acc34c3132159c3f7e69e41180814553aa47392fe832950a727efeecbbe9d1f41ee82e71359d9460300972a420be4d17f680d250bae29039dd0eb809a31382b046bab7fbb75ecb55a950fb0e3948bfc6f92b3c4ef07aecff94b69d7d9159b775f42508c577fae348e28a81ecef1ec9a3b086f828c802b623922abf5e8f504234ea7d10a9903b7becca983a29844a44af5db1f546d7b6a269188094338e81fae6ee165c1ff85aeecd48a985bb15a4a96aeb183cd3685080e52fc9c8dd174c45aaf6fa0d64362071da5854c5eba8b48b16a032246979cee1dd0685627678436db482905aa2438dd91f52f82c7ef5ef5b0390730ed17f0bd11c11510e9801aa83347342894c9e717580af493598d650b28e6537a204b36f3a5b92b8e7ac6d269a756bb4ffd2f3dc46c577fe17181becdce104908ef2f47f3cab5fa808499614541fe5f806639dd5e057062c73793a8f953bbd22dadfe2a72dcd293b993cfad7cb4be0afe2c90a90215d308aa7e63e929930505a4eb33e22d95303c5856484b436f5c0e105451e4c0b3c44a3378b8deb958aaca23279e2a9da691641a9eb29ca9fb6df05cbf53bb0daf150f2edaad1b65fc6ee04cdc701312b8c27ee3a35bbb32fec4ddca4c83d2222c5d911829a4e2440395a7507c23922ad24944290beba5f65caf46c0ab92657f4600f59d59fee72a3e04c39f86db4d0c839599c6597cfa1db96dc5c90502dfa9f70e936b4f58df3d34137a2c8182b670c3d3f56b92a69fc7a64e45fecdbb5f6290c7ccf9b8b1fd8c4d163425ef441b957ba82402e0ffa33865d7d9ca8156f19d157b1ee7d5ad92d6a17ed2c8c27636ba3509e78656820202231fef9641cf57ed6ac270d5d19ce402b758319cfcafb9f9a93cc3f7753c00096a8188ecb7440c283096c7669b622c1cc3d869341b037be75e84afcbceaaf109bec3564adf9c8be0f73ca015fd323d98188e20b44bc6028a06fa7ee707f04892c43ebe6da35b1e48a1e06b9db19448566d07345f56ccae355b4f0887011fa80592aa66b2e980da50f67ccde6c25090f0ec38cf9a2e26fc8b10ce0939d5421d95991f69859f0c8a3ae00d2df478b4c791cb6af193008a0bedfbf3ab213cc31c3aeda3b3516fe48ad415491f54261eef5031aa718b9569aa7d33f81ef3603de8d9d5761bde492722ac8aab2aebf13ef453726d08c7e27213035e2b8b0867f055c61ed5a66691aa8d8ec5299d4014bc8e2ae9779910e177c2fda69551eb9ba4058c5873a82fcc3a742550281e35783309cf1ab48a771cff38d6de2b164c00fda86e1b2258d06ef9618158c04be65f76a344c590f10448090f67b28bf534e5abaff256238d4d44f5c8175e0fa4fc4af119db98cae2a9a08588b478dd39c1e5fcd8b7b27c1789b03a8d62f9a682803fdfd901b05dce8e50141d81e25b966b985ef98c5ddc958eeee933aba120fce4e6f0a719037a6b46f5b31f43fc5ff0d04f33e7c656a9343e16d2ad374a8d0cd4c51e0720cf95f33074020f5c1d59732a40cb154c00786a1c1efae8f07d299578f1476726dd9916a2ba9734a54223718468ec5caec137370dcac11c0a12f297da60462d89d9980128e9471a5161bb952fe7b38334782e7566cb40da53c4738f0a9c983053a28d989874e7cfefcd742bff341b6c6fa7f47f0ccd0e9c4d52fc12ecf993d449ecedeb1b46a4b4978a3f47a1696179c764b42632d3a0f7792a2360c7d0caad664b88c08afdfeee725421061a394bfa845d20b79aeeadaeb94a3f44d52412199b8f1bb1338c2c21ece6a871512a30e997c506a7ae2adcf414be8271949ed5f7121b7e91e155f0733aa6200704d52e836c57c2e70fa113fbc02467fca264978954cd8a088a0bc508088752140df46e249acb3647ddb04e5305d9eb3f367ad0bc0184cf1299431b86f9be87626aba0fdd0146471eb5ae45d115b36f17e9382f7e2818b2cb3798d5af18febd13d39e7d811b2c8de9710c731c309b810fbb4dd604b4dee9ba0ad076be0e4be366ef47847106c9be6ce1c096945a9af8601d3e286fdeddafbc617ee111fa79dd0479dc4e59f21f93537cc5d3337ac127805b5df78b623efec408aa969d9e0f7b0efb6bd65606d9f4b78dc471243f9a73567f4e431a1538e798d39926848ce4618c44d2cc8134bee8eb1f2cedad7aac318fd0c8ce74ae28b70befb73943a79fb4b7563f4ec84d35a8ccd6d61e08d2494b1d51f6ee091c363a6b88952ac7739e5e29e29f3d4f3cd1e513b9c4992701ae09d353edcd70d4f79ac498f1ced035617056d795745d1add195e018276c62719bb6c485b6228e07bb28d1369ce88ce74a340671d1ff6d4d14cf1e10a450df9a50b92d9f2a69e50b020bd5e741bcf39890fab4f876222042d4906d805b8663b37e15b5837afaa4f9fdf602679f43cd67d0c7dc80a9bd7301614bd86229bec23ed10b865c00ad7338b21bb3cc4e02595355656670fe02b0491b4648f4985e962119e86ab949b29f993718c2c759361f2b3c6738a9bbbb3c209b7f366e23674d688f74e85d8a6156e21a90331c4e18537baf3d2f8314195d9624fe9df8faeb36dca007b8720edb413d6f632c9d4c4905df35065569cf172663deed55a3643e412b3e2334df5b8d9df578218a0e5e6850daa205bfe84d76535db9e48ee75e6e28eb8d205f5ad8c8679986efbb3f1f6b16d4720c04177dece80a363c12f27648fac367146a5ffa774c45ed9d7fca6124e944cba19864716406986f8fd6eadc721a925c94526204463a7d33fe249f38bb125c29a4c166814b1f197be950f6b4a09ef4695f6b5f888c3efe2e14b565cd2b3eae000e456e2412604c07492c8afe010c1164412a43d13950aee4bbe350507933545788ece2f06a2f3b700534cc209eefbeb13e3b2b30a999072c5187248f331eeb48d702bd3319934017526c905f75b465e3a4f30efbda4d4d7275794752c4cc2e9d9fbe65e77f48e088e83f73af9032bd04ad0b49ab706ab4ed5c26f80bad0c9743f27061976ed98c743a2458e9261313e39f023ccf8858dede68e0028b88d82426f29454375dabc216444d1d1fac8fbb86472b63080fa05bb0eec575aefd82d0a5f53e5e24ee345a972939c95cd14fc9e200d0654b8eb37044a91ef3c7dfd831a7ca0da9a7e5e41c0324165c0bab3cbe02fe3a77891f52ca325d1ffddf4187e9386fd13d5ef5c943cd3c2559b6acc59f673dad7fd8191d7247ed207e47f1a99d0c1949a066017c254f424c3ed6c42cb17a1d1c57dda5641d31827cc41fee06b0868dced4d8a3aafa5304c3b0d34171efe6cf33135ab642456bdb2eba92b8c909cb5a15e101bc235883bb6a0195f8f5e616f8590828771870094baf88a9bebb7f144d46b6f4e7a0f62413ca4a5f59159c0c2c5ffad2fe40f42cb75662713ca1b251131226562d1e8dcd6c51eaedb265882bef74a32f889b1b2542e19966257bc4b1ebb0fa7a3e737f39069229a3f028c103ead499ebb2e3bc8c21279831adabe1cfa1f92ddbaeec6d64c3906d51f0cb5561f714e6720f7f7b0bbe5325c7127faeba1705a85461198906454f9646da14ef0d92bfcba4ab3bb6e13d06968e9ff19130ff922ee3dea18cf22ec7fce06293f6215e7b4de6a07eb02373e174f9f91056563b739da2ecbed00692793174bed2701fe1dd475107a1d91f086a80ec11ff81fe3c3d6725caf2599e88662cbb9eca2d5af59df72a626b0814671bca7ad95d4d6ef3eb496247a298853e17d027897d6cbd4f6887609dfecd57bb38497d6e345e731ed99314664e68468947b5e82592956744120df0936a80f336b3b4bfb9d0f327ea455c22686913f364b6812998d28061cd356c7ae4e360db500e9dd6b0876cc3744c6bf8c53f67e6b08a10be44b19f70d1dec8a6347dbad654d61bf63a14f257f64b5c342dc195cf58db72c256cdf5f5e57a0db804ccda77cbbafe83c9aabae43bf0e4a9e905c2d01b065377ce69d3921154edad975ef62611129fdcb8943bb03f082323cacc81d439cfed2026a7234490a30cacf5b6f12d168058730c980aefe11f3c3d2a5b6f154462112da1a156bf9bac0570433d4a36bef6ae2e653bc646a49603f89697aa5a50a5e29ea79ac75a7b5bb8fed664e41af20237be3e49f3ea7c24313b0b9841c21b7c1b9aff5e2b2da622344966abaa437533da7eb13f6def7d3523ca23fbfe4c6d4859bda59ff7fb70f26dd33ae8626fa2fd604fe517e6cdb8742a441bdb0774959a5df6ec4c9389137f1f6a49b96c1f4d22fb4d600712a292f824e5c4b24b17383fb3ce5bb240d1cca97ad4df38f6d8a0f231984e1b8fe1b6dff43c2b73f5e109f56eeeac9aaea5b8c5eca79d9581f407a337f123b039758b3f308c8a04c3c9b67e6480981df632d5158a22a345d830376f86ff9fd5613a5a39077dc68ecd467cbcc72287fb95ad9facc3d778d13cac1bdae0b11f32d24641ba9fd411c03f690ebbe700b25b5d24c1e28cb46756bb1e3bd59febaf0df102de08fea5bda66b76842376e690be69e5c7c38548dce4a74a2cac582d8a714c575b0d47ff4bc03a32b991ff7938ee9a538d745f86253c10656837c3330ae30eebd6ca64a585c36da0877324f9cd41c536264fd4c842d932c2bcef17cc2b4abfa262b69385a8b20fe566f30b10dff56e56c4a0f8c85055b581daecff7daf4eea3b1728cbe33df33c6b9f321bda6ace8d4d17134ad91f8c4f45efa7cc2f76195e22f224cea1e6f58c427e18618cb2b3210b5453e5650a34eb189fc2749ea59a65fc8e2159a7f43905211baa31ddcd95cb46b467e10c3a910689016b4090cd42dfd1ae8456bcdd4bb147a27f52bf1af2d4f3ab3f58373317e6407b9e98afa4fe1b9c2ce5165770e93af4ee28f5c692d25281b5dab5f46caed381f6dc96838eab9e4b050400af944c09ebbc4dc9f9cee120d803607d8b2c8606f93967b054a50f353ef9816cf61ddf96710b4ac67acdd24d7a379fb93b1a69ee6fa2bf315343c13c416a677ae05084ab4e3ec87a072a466855d4970ffa3152f585294161cc403de4eb9be86b1cc44ea212ca24aa951d974a5b2d84fc06db9052df58ff7200e2518c35c1416756b42700e4e03d9eb86c09927192118f086b4314c9656965c183d565c4038939ba27455c13585390c050e66c229608f628e0fb11a6134d427ff95d778226a8941c802072008e7059fd2b7be898a78b2bf4526f3fb8faea70766f44786022ebcbd23bf6d1accee01f30b", 0x1000}], 0x1, 0xb) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000004ac0)={0x0, 0xffff, 0x0, 0x0, 0x0}) sched_setscheduler(r11, 0x3, &(0x7f0000004b40)=0x5) recvmmsg(r8, &(0x7f0000008900)=[{{&(0x7f0000004b80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004c00)=""/251, 0xfb}, {&(0x7f0000004d00)=""/80, 0x50}, {&(0x7f0000004d80)=""/126, 0x7e}, {&(0x7f0000004e00)=""/95, 0x5f}, {&(0x7f0000004e80)=""/106, 0x6a}], 0x5}, 0x8}, {{&(0x7f0000004f80)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000005000)=""/174, 0xae}], 0x1, &(0x7f0000005100)=""/254, 0xfe}, 0x100}, {{0x0, 0x0, &(0x7f00000055c0)=[{&(0x7f0000005200)=""/129, 0x81}, {&(0x7f00000052c0)=""/17, 0x11}, {&(0x7f0000005300)=""/167, 0xa7}, {&(0x7f00000053c0)=""/147, 0x93}, {&(0x7f0000005480)=""/40, 0x28}, {&(0x7f00000054c0)=""/245, 0xf5}], 0x6, &(0x7f0000005640)=""/4096, 0x1000}, 0xa}, {{&(0x7f0000006640)=@qipcrtr, 0x80, &(0x7f0000007780)=[{&(0x7f00000066c0)=""/187, 0xbb}, {&(0x7f0000006780)=""/4096, 0x1000}], 0x2, &(0x7f00000077c0)=""/167, 0xa7}, 0x7fff}, {{&(0x7f0000007880)=@tipc, 0x80, &(0x7f0000007ec0)=[{&(0x7f0000007900)=""/161, 0xa1}, {&(0x7f00000079c0)=""/114, 0x72}, {&(0x7f0000007a40)=""/124, 0x7c}, {&(0x7f0000007ac0)=""/243, 0xf3}, {&(0x7f0000007bc0)=""/52, 0x34}, {&(0x7f0000007c00)=""/194, 0xc2}, {&(0x7f0000007d00)=""/214, 0xd6}, {&(0x7f0000007e00)=""/131, 0x83}], 0x8, &(0x7f0000007f40)=""/231, 0xe7}, 0x5}, {{&(0x7f0000008040)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000008680)=[{&(0x7f00000080c0)=""/169, 0xa9}, {&(0x7f0000008180)=""/104, 0x68}, {&(0x7f0000008200)}, {&(0x7f0000008240)=""/208, 0xd0}, {&(0x7f0000008340)=""/234, 0xea}, {&(0x7f0000008440)=""/22, 0x16}, {&(0x7f0000008480)=""/50, 0x32}, {&(0x7f00000084c0)=""/252, 0xfc}, {&(0x7f00000085c0)=""/133, 0x85}], 0x9}, 0x3}, {{&(0x7f0000008740)=@caif=@rfm, 0x80, &(0x7f00000088c0)=[{&(0x7f00000087c0)=""/241, 0xf1}], 0x1}, 0x2}], 0x7, 0x4041, &(0x7f0000008ac0)={0x77359400}) r13 = syz_genetlink_get_family_id$fou(&(0x7f0000008b40), r12) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000008c00)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x80200}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x30, r13, 0x2, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r12, 0x84, 0x20, &(0x7f0000008c40)=0x39, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r12, 0xc038943b, &(0x7f0000008cc0)={0x9, 0x18, '\x00', 0x1, &(0x7f0000008c80)=[0x0, 0x0, 0x0]}) getsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000008d00), &(0x7f0000008d40)=0x4) getsockopt$sock_int(r3, 0x1, 0x1, &(0x7f0000008d80), &(0x7f0000008dc0)=0x4) fcntl$F_GET_FILE_RW_HINT(r8, 0x40d, &(0x7f0000008e00)) setsockopt$bt_BT_CHANNEL_POLICY(r12, 0x112, 0xa, &(0x7f0000008e40)=0x7, 0x4) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000008e80)={'veth0_to_batadv\x00', 0x1}) 1.089128388s ago: executing program 5 (id=874): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x48) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@grpjquota}, {@norecovery}, {@nolazytime}]}, 0x5, 0x4be, &(0x7f0000000540)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r3 = openat(r1, &(0x7f0000000080)='./file2\x00', 0xa8000, 0xf0) r4 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x54) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, 0xfffffffffffffffe) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.oom.group\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r6, 0x0, 0x8, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, r3) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000564404204e080110f9339a04030109021b00010000000009040000014890c200090588df", @ANYRESHEX=r0, @ANYRESDEC, @ANYRES16=r8, @ANYRES16=r7], 0x0) 761.033182ms ago: executing program 7 (id=875): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b80)) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d8960000101"], 0x0) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000500)={0x3, 0x0, [{0x200000, 0x69, &(0x7f0000000280)=""/105}, {0x54000, 0x71, &(0x7f0000000380)=""/113}, {0x0, 0xe3, &(0x7f0000000400)=""/227}]}) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = dup(r1) r7 = fcntl$dupfd(r0, 0x406, r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 616.712457ms ago: executing program 7 (id=876): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0x5, 0x6, 0x3b, 0x28000, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x8}, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'ip6_vti0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x7, 0x0, 0x7, 0x0, 0x0, 0xfc, 0x0, 0xfc, 0x0, 0xfffffff9, 0x0, 0xff, 0x0, 0x45}}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000014c0)={'\x00', 0x0, 0x6, 0x7, 0x7, 0x7fffffff, r4}) prlimit64(r8, 0xe, &(0x7f0000001540)={0x12}, &(0x7f0000001580)) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r9, &(0x7f0000001c80)=[{&(0x7f0000000040)="ebfa0e81ceb3dc4c430515dc4dade38ff8c84ace9d15af003afa41b75fbebe5b76443645c1dc73113beef85ec94ed0415b042c498c3bb8f9e0c37b9b373b6d", 0x3f}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000013c0)={&(0x7f00000012c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001300)=[0x0, 0x0, 0x0], &(0x7f0000001340)=[0x0], &(0x7f0000001380)=[0x0, 0x0], 0x4, 0x3, 0x1, 0x2}) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000001400)={r11, 0x9, 0x3, 0x4, 0x2, [], [0x1, 0x80, 0xc0000, 0xffffffff], [0x3, 0x2, 0x7, 0xea], [0x2, 0x6, 0x2, 0x2]}) 496.814376ms ago: executing program 2 (id=879): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@i_version}, {@usrquota}, {@errors_remount}]}, 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250942, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) gettid() r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffffffff0b00000008000300", @ANYRES32=r4, @ANYBLOB="2c005080050002000600000009000a000000000000000000110001"], 0x54}}, 0x40) openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x12b41, 0x0) readv(r1, &(0x7f0000002600), 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000901, 0x0, 0x0) 466.697539ms ago: executing program 5 (id=880): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mremap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000000000/0x1000)=nil) mount$overlay(0x0, 0x0, 0x0, 0x42, &(0x7f0000000e00)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = accept$inet6(r0, 0x0, &(0x7f0000000080)=0xfffffe1b) recvfrom$l2tp6(r3, &(0x7f00000001c0)=""/1, 0x1, 0x10041, &(0x7f0000000200)={0xa, 0x0, 0x0, @local}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000d00)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r4}}, 0x18) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x3e, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 450.968519ms ago: executing program 2 (id=881): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) setns(0xc9, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xa60d, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}, 0x50) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000140)=[@ioring_restriction_register_op, @ioring_restriction_sqe_op={0x1, 0x19}, @ioring_restriction_sqe_op={0x1, 0xd}, @ioring_restriction_register_op={0x0, 0x19}, @ioring_restriction_register_op={0x0, 0x23}, @ioring_restriction_register_op={0x0, 0x5}, @ioring_restriction_register_op={0x0, 0x3}], 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_pressure(r0, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="540000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="8884010000000000340012800b00010067656e657665000024000280040006000500"/49], 0x54}, 0x1, 0x0, 0x0, 0x2000c870}, 0x4084) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xf, 0x0, &(0x7f0000000300)="e17d6b61471700d00eb6668065e566", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x204e011, &(0x7f0000000300)={[{@jqfmt_vfsv0}, {@resuid}, {@nogrpid}, {@sysvgroups}, {@prjquota}, {@mblk_io_submit}, {@mblk_io_submit}, {@nodelalloc}]}, 0x2, 0xbde, &(0x7f0000000880)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 365.006064ms ago: executing program 5 (id=882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x1fffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000006c0)={r0, &(0x7f00000004c0)="0bb58c7ace7a7b1639201a759d83fb24b169b5423ac76a10e57f224a88731071aa0c18b991849003bcd1d77123c228f21e5759e91df15f9b762eeaaa78061196ce533d77be4417c65199e0c322268e9f5b2f2ef13cf53e18b2aefbefb68e8de050441ff6b360776b106e32824801f913819840553114b4f1bc15dcf057d4c53ce2fe7f8a75ad00d90c36e204b600303d2930525ada542c405c0730abbffe0cc5b5c23d76d728e68fad4b1fd87068e2d330d8ce109f6f1bfef8b56f7598ffd670896b242f789acbed432fbf3cadd014a1a8e83ea023dca529ef030e711b57a52fa5679191166ba4cdbddda5", &(0x7f00000005c0)=""/222}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x400, 0x7, 0xfffffff7, 0x401, 0xffffffff, 0x3}, [@TCA_NETEM_RATE64={0xc, 0x8, 0x6acd51ee14383dd4}]}}}]}, 0x58}}, 0x30000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="3d7d1bce00000000000000020d0000000000000000000000b300000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 350.080627ms ago: executing program 5 (id=883): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000100)='debugfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,prot\x1a=tcp,vers=3\x1a\xa7\xe47Y\xae\xaaA`\xf3,mountport=2049,mountproo=tcp,nolock,rsize=1024,w\f\xefA\xc99\xa2\xae\x1e\xcbj\x8cV\xa2\x96\xfa\x8b ig\xcc\x1d\bK\xebj') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket(0x2b, 0x80801, 0x1) r1 = socket(0xa, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000200)={0x1, 0x5, {0x3a, 0x26, 0xb, 0x15, 0xffff7fff, 0x1000, 0x6, 0x43}}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000000c0), 0xfe, 0x263, &(0x7f0000000ac0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0xa20, 0x8000c65) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101002, 0x0) read$FUSE(r4, &(0x7f0000003b80)={0x2020}, 0x2020) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000500)=[{&(0x7f0000000540)=""/181, 0xfffffd5b}], 0x1, 0x7, 0x5, 0x1c) r6 = syz_open_dev$ndb(&(0x7f00000003c0), 0x0, 0xa000) ioctl$NBD_SET_BLKSIZE(r6, 0xab01, 0xfff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="8b2d0d22e0bc8ce80f207bbb00260090aedaf1e1ec052f74f91b0934644d84ace1841408176f82bd99c7a5f0dd46c3d9b56477b2e570d6ebf48684fae77cc8a4efdde76aeec74572605ecd8c252c52b159480c963199334194946f2b7c796a6e2a9419c7d131557ac785c4de2fc15b6961"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r12, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 309.730224ms ago: executing program 2 (id=884): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0xfe}, 0xff}, 0x18) sendmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0xf5) 196.963871ms ago: executing program 2 (id=885): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f0000000100)='debugfs\x00', 0x0, &(0x7f0000000140)='addr=127.0.0.1,port=2049,prot\x1a=tcp,vers=3\x1a\xa7\xe47Y\xae\xaaA`\xf3,mountport=2049,mountproo=tcp,nolock,rsize=1024,w\f\xefA\xc99\xa2\xae\x1e\xcbj\x8cV\xa2\x96\xfa\x8b ig\xcc\x1d\bK\xebj') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socket(0x2b, 0x80801, 0x1) r1 = socket(0xa, 0x5, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r2, &(0x7f0000000200), 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000200)={0x1, 0x5, {0x3a, 0x26, 0xb, 0x15, 0xffff7fff, 0x1000, 0x6, 0x43}}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r4, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) (fail_nth: 2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8682e222) sendto$inet6(r1, 0x0, 0x0, 0x44004, 0x0, 0x0) getrandom(0x0, 0x0, 0x0) 196.520878ms ago: executing program 6 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000280)={0x0, 0x0, 0x800}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 161.915926ms ago: executing program 9 (id=833): epoll_create1(0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb635773f04ebbee2, 0x8010, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0xb24901fded2b8657, 0x5004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readahead(r2, 0x81, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) close_range(r1, r1, 0x2) 148.026645ms ago: executing program 6 (id=887): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800)=[{}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_512="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"}}, &(0x7f0000000b00)=0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00)=@ublk_io_fetch_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000000)=@buf_512="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060400"}}, 0x0) 146.893179ms ago: executing program 2 (id=888): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000120000000000100000000001c00090008"], 0x4c}}, 0x40000) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000080)={0x9b9c}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) 5.036956ms ago: executing program 6 (id=889): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00'], 0x48) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@jqfmt_vfsv1}, {@grpjquota}, {@norecovery}, {@nolazytime}]}, 0x5, 0x4be, &(0x7f0000000540)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) r3 = openat(r1, &(0x7f0000000080)='./file2\x00', 0xa8000, 0xf0) r4 = fspick(0xffffffffffffff9c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x54) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20001, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, 0xfffffffffffffffe) r6 = openat$cgroup_int(r3, &(0x7f0000000180)='memory.oom.group\x00', 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000280)={r6, 0x0, 0x8, 0x2}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, r3) syz_usb_connect(0x2, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000564404204e080110f9339a04030109021b00010000000009040000014890c200090588df", @ANYRESHEX=r0, @ANYRESDEC, @ANYRES16=r8, @ANYRES16=r7], 0x0) 4.482355ms ago: executing program 2 (id=890): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="00631dda01aef2b0bad477a11d13ec0c19456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d24c60c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e9000001001d0149e6d308cbe315789f4baffe39bbced9b1d4db174c6121d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac10222664bbc980b4e99027c53ae2c6cc05d3be246e5837cbf286225d43e8c1d2e3fda86b86906b79fdedae7f3bbe362e8ad7f2b370442013de1788be93a3d553c2e1f5b559393d964df51bf393f52ecbe6f832b222231fbb9fee9e0343c2d3d567f7cff6d0b25303bcbcc99c879d3bc"], 0x4, 0x279, &(0x7f0000000380)="$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") ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000600)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000040900010073797a300000000034000000030a01010000000000000000050000000900010073797a300000000009000300730900000000000000000a40000000042c000000050a05000000000000000000050000060c00024000000000000000010900010073797a300000000014000000110001"], 0xa8}}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) 0s ago: executing program 9 (id=891): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000280)=ANY=[@ANYBLOB="050000000000000071110400000000008510000002000000850000007600000095000000000000009500a50500dd00009a6b4a3f"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): 'syz.1.410': attribute type 1 has an invalid length. [ 78.707372][ T7232] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.410'. [ 78.738675][ T6436] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.800742][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.800780][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.857986][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.858024][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.901812][ T7243] vfat: Bad value for 'shortname' [ 78.991340][ T7253] netlink: 8 bytes leftover after parsing attributes in process `syz.9.417'. [ 78.991383][ T7253] netlink: 12 bytes leftover after parsing attributes in process `syz.9.417'. [ 79.128898][ T7257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.129098][ T7257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.144374][ T4727] Bluetooth: hci0: command tx timeout [ 79.315326][ T4727] Bluetooth: hci5: command tx timeout [ 79.315691][ T7284] set_capacity_and_notify: 4 callbacks suppressed [ 79.315863][ T7284] loop3: detected capacity change from 0 to 512 [ 79.317649][ T7284] ext4: Unknown parameter 'fsmagic' [ 79.392463][ T7291] loop9: detected capacity change from 0 to 2048 [ 79.446602][ T7291] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.472694][ T7302] netlink: 9 bytes leftover after parsing attributes in process `syz.7.425'. [ 79.475649][ T7302] gretap0: entered promiscuous mode [ 79.490022][ T7302] netlink: 5 bytes leftover after parsing attributes in process `syz.7.425'. [ 79.492166][ T7302] 0ªî{X¹¦: renamed from gretap0 [ 79.496402][ T7302] 0ªî{X¹¦: left promiscuous mode [ 79.497477][ T7302] 0ªî{X¹¦: entered allmulticast mode [ 79.501008][ T7302] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 79.568466][ T6436] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 79.576313][ T7310] netlink: 'syz.7.426': attribute type 1 has an invalid length. [ 79.585924][ T7310] bond2: entered promiscuous mode [ 79.585980][ T7310] bond2: entered allmulticast mode [ 79.586142][ T7310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.593774][ T7310] erspan1: entered allmulticast mode [ 79.597236][ T7310] bond2: (slave erspan1): making interface the new active one [ 79.597262][ T7310] erspan1: entered promiscuous mode [ 79.598643][ T7310] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 79.647917][ T7318] loop7: detected capacity change from 0 to 256 [ 79.657948][ T7318] vfat: Bad value for 'shortname' [ 79.710470][ T7323] loop1: detected capacity change from 0 to 512 [ 79.725369][ T7323] EXT4-fs (loop1): Test dummy encryption mode enabled [ 79.730691][ T7323] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.762511][ T7323] EXT4-fs (loop1): 1 truncate cleaned up [ 79.762991][ T7323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.888743][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 80.074483][ T7338] bond1: entered promiscuous mode [ 80.181442][ T7303] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.252316][ T39] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.318534][ T7344] loop3: detected capacity change from 0 to 8192 [ 80.336406][ T39] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.349609][ T7344] loop3: p1 p2 p3 p4[EZD] [ 80.349634][ T7344] loop3: partition table partially beyond EOD, truncated [ 80.349717][ T7344] loop3: p1 start 16384 is beyond EOD, truncated [ 80.349728][ T7344] loop3: p2 size 150994944 extends beyond EOD, truncated [ 80.353690][ T7344] loop3: p3 start 67108864 is beyond EOD, truncated [ 80.353705][ T7344] loop3: p4 size 33555584 extends beyond EOD, truncated [ 80.409115][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.410966][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.412831][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.424617][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.425424][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.429495][ T39] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.543862][ T4705] udevd[4705]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 80.546869][ T4704] udevd[4704]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 80.559789][ T39] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.750122][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.777024][ T7380] loop7: detected capacity change from 0 to 512 [ 80.786495][ T7380] EXT4-fs (loop7): Couldn't mount because of unsupported optional features (1) [ 80.816886][ T3652] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.838055][ T1262] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.878790][ T1262] netdevsim netdevsim9 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.878847][ T1262] netdevsim netdevsim9 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.892129][ T39] bridge_slave_1: left allmulticast mode [ 80.892157][ T39] bridge_slave_1: left promiscuous mode [ 80.892254][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.898115][ T39] bridge_slave_0: left allmulticast mode [ 80.901016][ T39] bridge_slave_0: left promiscuous mode [ 80.902401][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.161601][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.207135][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.245483][ T39] bond0 (unregistering): Released all slaves [ 81.388669][ T4719] Bluetooth: hci5: command tx timeout [ 81.418529][ T7405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'. [ 82.106923][ T7415] loop3: detected capacity change from 0 to 512 [ 82.111322][ T7415] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 82.299168][ T7415] syz.3.438: attempt to access beyond end of device [ 82.299168][ T7415] loop3: rw=8388608, sector=17179852721, nr_sectors = 1 limit=512 [ 82.299979][ T7415] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 82.300132][ T7415] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 82.508241][ T4719] Bluetooth: hci1: command tx timeout [ 82.699750][ T7430] loop1: detected capacity change from 0 to 512 [ 82.702561][ T7430] ext4: Unknown parameter 'fsmagic' [ 82.743038][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.745721][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.747327][ T7356] bridge_slave_0: entered allmulticast mode [ 82.749077][ T7356] bridge_slave_0: entered promiscuous mode [ 82.753917][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.758039][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.760068][ T7356] bridge_slave_1: entered allmulticast mode [ 82.796362][ T7356] bridge_slave_1: entered promiscuous mode [ 82.947832][ T39] hsr_slave_0: left promiscuous mode [ 82.949268][ T39] hsr_slave_1: left promiscuous mode [ 82.949781][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.949794][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.950634][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.950645][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.956349][ T39] veth1_macvtap: left promiscuous mode [ 82.956455][ T39] veth0_macvtap: left promiscuous mode [ 82.956529][ T39] veth1_vlan: left promiscuous mode [ 82.956606][ T39] veth0_vlan: left promiscuous mode [ 82.998830][ T7451] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[5762] was attempted by "ci-upstream-gce-arm64/syz-executor exec"[7451] [ 83.151243][ T39] team0 (unregistering): Port device team_slave_1 removed [ 83.161000][ T39] team0 (unregistering): Port device team_slave_0 removed [ 83.264852][ T7450] netlink: 260 bytes leftover after parsing attributes in process `syz.3.444'. [ 83.281968][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.299763][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.337150][ T7356] team0: Port device team_slave_0 added [ 83.341421][ T7356] team0: Port device team_slave_1 added [ 83.358442][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.360960][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.365514][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.368189][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.368223][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.368239][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.427523][ T7356] hsr_slave_0: entered promiscuous mode [ 83.427942][ T7356] hsr_slave_1: entered promiscuous mode [ 83.428152][ T7356] debugfs: 'hsr0' already exists in 'hsr' [ 83.428168][ T7356] Cannot create hsr debugfs directory [ 83.856991][ T7356] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.875803][ T7508] loop1: detected capacity change from 0 to 512 [ 83.877444][ T7508] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.890898][ T7508] EXT4-fs: Mount option(s) incompatible with ext2 [ 83.909624][ T7504] loop7: detected capacity change from 0 to 4096 [ 83.913771][ T7504] EXT4-fs: inline encryption not supported [ 83.918368][ T7504] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.918398][ T7504] EXT4-fs (loop7): Test dummy encryption mode enabled [ 83.924838][ T7504] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0002] [ 83.924890][ T7504] System zones: 0-5 [ 83.934020][ T7504] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.055183][ T7356] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.235613][ T7356] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.274476][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.275094][ T7520] vfat: Unknown parameter 'codepag%' [ 84.358094][ T7356] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.439470][ T7534] set_capacity_and_notify: 2 callbacks suppressed [ 84.439729][ T7534] loop3: detected capacity change from 0 to 512 [ 84.456946][ T7534] EXT4-fs: Ignoring removed nobh option [ 84.484475][ T7534] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #3: comm syz.3.453: corrupted inode contents [ 84.484513][ T7534] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 84.484994][ T7534] EXT4-fs (loop3): Remounting filesystem read-only [ 84.486265][ T7534] __quota_error: 33 callbacks suppressed [ 84.486275][ T7534] Quota error (device loop3): write_blk: dquota write failed [ 84.486321][ T7534] Quota error (device loop3): qtree_write_dquot: Error -30 occurred while creating quota [ 84.486603][ T7534] EXT4-fs (loop3): 1 truncate cleaned up [ 84.500484][ T7534] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.501394][ T7534] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.507691][ T7356] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.522446][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.523522][ T7356] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.529149][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.530999][ T7356] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.539711][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.540136][ T7356] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.558510][ T7356] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.585395][ T4719] Bluetooth: hci1: command tx timeout [ 84.659481][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.713359][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.713412][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.714111][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.715842][ T7560] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 84.717410][ T7560] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 84.731336][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.733570][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.735584][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.737652][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.739855][ T7560] wlan0 speed is unknown, defaulting to 1000 [ 84.989597][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.999788][ T798] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.999836][ T798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.001320][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.001344][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.249052][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.273947][ T7592] loop3: detected capacity change from 0 to 256 [ 85.296923][ T7356] veth0_vlan: entered promiscuous mode [ 85.306921][ T7356] veth1_vlan: entered promiscuous mode [ 85.341304][ T7356] veth0_macvtap: entered promiscuous mode [ 85.347490][ T7356] veth1_macvtap: entered promiscuous mode [ 85.366085][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.371763][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.387720][ T3644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.387774][ T3644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.387803][ T3644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.387824][ T3644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.488808][ T1262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.488839][ T1262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.514880][ T1262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.514909][ T1262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.573419][ T7611] loop3: detected capacity change from 0 to 256 [ 85.642811][ T7615] loop0: detected capacity change from 0 to 128 [ 86.179395][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 86.232228][ T7639] loop7: detected capacity change from 0 to 128 [ 86.250314][ T7639] FAT-fs (loop7): data area starts beyond volume (36 > 6) [ 86.250354][ T7639] FAT-fs (loop7): Can't find a valid FAT filesystem [ 86.264106][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.7.467'. [ 87.177107][ T7643] loop0: detected capacity change from 0 to 8192 [ 87.189799][ T7654] loop3: detected capacity change from 0 to 512 [ 87.190925][ T7643] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.318521][ T4719] Bluetooth: hci1: command tx timeout [ 87.326705][ T7662] netlink: 76 bytes leftover after parsing attributes in process `syz.3.470'. [ 87.468998][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 87.780309][ T7690] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 88.177093][ T7692] hub 8-0:1.0: USB hub found [ 88.179913][ T7692] hub 8-0:1.0: 8 ports detected [ 89.050583][ T7701] loop0: detected capacity change from 0 to 256 [ 89.261447][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 89.279388][ T7717] loop3: detected capacity change from 0 to 128 [ 89.289509][ T7717] FAT-fs (loop3): data area starts beyond volume (36 > 6) [ 89.289539][ T7717] FAT-fs (loop3): Can't find a valid FAT filesystem [ 89.297383][ T7717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 89.394179][ T4719] Bluetooth: hci1: command tx timeout [ 90.245047][ T7723] process 'syz.0.478' launched './file1' with NULL argv: empty string added [ 90.606339][ T7734] netlink: 24 bytes leftover after parsing attributes in process `syz.3.485'. [ 90.669329][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 90.739391][ T7753] netlink: 'syz.3.488': attribute type 1 has an invalid length. [ 90.739423][ T7753] netlink: 224 bytes leftover after parsing attributes in process `syz.3.488'. [ 90.740757][ T7753] loop3: detected capacity change from 0 to 256 [ 90.920975][ T7762] wg2: entered allmulticast mode [ 92.232524][ T4727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.237517][ T4727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.239597][ T4727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.241501][ T4727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.243508][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.320271][ T7805] loop1: detected capacity change from 0 to 1024 [ 92.355962][ T7805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.473263][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.540411][ T7826] FAULT_INJECTION: forcing a failure. [ 92.540411][ T7826] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.544716][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.1.502 Not tainted syzkaller #0 PREEMPT [ 92.544740][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 92.544746][ T7826] Call trace: [ 92.544751][ T7826] show_stack+0x2c/0x3c (C) [ 92.544775][ T7826] __dump_stack+0x30/0x40 [ 92.544787][ T7826] dump_stack_lvl+0xd8/0x12c [ 92.544797][ T7826] dump_stack+0x1c/0x28 [ 92.544807][ T7826] should_fail_ex+0x41c/0x590 [ 92.544818][ T7826] should_fail+0x14/0x24 [ 92.544827][ T7826] should_fail_usercopy+0x20/0x30 [ 92.544837][ T7826] simple_read_from_buffer+0xc4/0x238 [ 92.544847][ T7826] proc_fail_nth_read+0x1a8/0x248 [ 92.544856][ T7826] vfs_read+0x230/0x8c8 [ 92.544866][ T7826] ksys_read+0x12c/0x228 [ 92.544872][ T7826] __arm64_sys_read+0x84/0x98 [ 92.544879][ T7826] invoke_syscall+0x98/0x244 [ 92.544889][ T7826] el0_svc_common+0xec/0x23c [ 92.544898][ T7826] do_el0_svc+0x4c/0x5c [ 92.544908][ T7826] el0_svc+0x64/0x260 [ 92.544918][ T7826] el0t_64_sync_handler+0x48/0x148 [ 92.544928][ T7826] el0t_64_sync+0x198/0x19c [ 92.707398][ T40] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.720262][ T7840] loop1: detected capacity change from 0 to 128 [ 92.733971][ T7840] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.742495][ T7840] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 92.742520][ T7840] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 92.743661][ T7840] vhci_hcd vhci_hcd.0: Device attached [ 92.778856][ T7851] vhci_hcd: connection closed [ 92.780710][ T12] vhci_hcd vhci_hcd.1: stop threads [ 92.780747][ T12] vhci_hcd vhci_hcd.1: release socket [ 92.780784][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 92.785132][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.785152][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 0 [ 92.793410][ T40] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.797930][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 1024 [ 92.802826][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 8192 [ 92.804749][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 11264 [ 92.805078][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.805090][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #11: comm syz-executor: Directory block failed checksum [ 92.805376][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.805390][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 0 [ 92.805552][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 1024 [ 92.805760][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 8192 [ 92.805938][ T4712] EXT4-fs error (device loop1): ext4_readdir:225: inode #11: comm syz-executor: path /102/file1/lost+found: directory fails checksum at offset 11264 [ 92.814687][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.814703][ T4712] EXT4-fs error (device loop1): ext4_empty_dir:3085: inode #11: comm syz-executor: Directory block failed checksum [ 92.816730][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.840152][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.843607][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.851180][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.856921][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.865830][ T4712] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:375: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D. [ 92.923895][ T40] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.932012][ T7796] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.933740][ T7796] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.935357][ T7796] bridge_slave_0: entered allmulticast mode [ 92.937195][ T7796] bridge_slave_0: entered promiscuous mode [ 92.940148][ T7796] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.942807][ T7796] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.944343][ T7796] bridge_slave_1: entered allmulticast mode [ 92.953407][ T7796] bridge_slave_1: entered promiscuous mode [ 92.988042][ T7796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.994980][ T7796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.003773][ T7796] team0: Port device team_slave_0 added [ 93.005787][ T7796] team0: Port device team_slave_1 added [ 93.013198][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.014803][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.019647][ T7796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.022293][ T7796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.024335][ T7796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.024421][ T7796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.136836][ T40] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.182014][ T7884] loop0: detected capacity change from 0 to 512 [ 93.186205][ T7884] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 93.187206][ T7796] hsr_slave_0: entered promiscuous mode [ 93.187524][ T7796] hsr_slave_1: entered promiscuous mode [ 93.187723][ T7796] debugfs: 'hsr0' already exists in 'hsr' [ 93.187735][ T7796] Cannot create hsr debugfs directory [ 93.203671][ T7884] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.206474][ T7884] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.510: Allocating blocks 41-42 which overlap fs metadata [ 93.206491][ T7884] loop0: lost filesystem error report for type 5 error -117 [ 93.206673][ T7884] Quota error (device loop0): write_blk: dquota write failed [ 93.206700][ T7884] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 93.206712][ T7884] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.510: Failed to acquire dquot type 0 [ 93.206722][ T7884] loop0: lost filesystem error report for type 5 error -117 [ 93.208736][ T7884] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 93.208781][ T7884] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.510: corrupted inode contents [ 93.208793][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.209119][ T7884] EXT4-fs error (device loop0): ext4_dirty_inode:6639: inode #12: comm syz.0.510: mark_inode_dirty error [ 93.209137][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.209240][ T7884] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.510: corrupted inode contents [ 93.209253][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.209331][ T7884] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #12: comm syz.0.510: mark_inode_dirty error [ 93.209341][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.209425][ T7884] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.510: corrupted inode contents [ 93.209435][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.209923][ T7884] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 93.209937][ T7884] loop0: lost filesystem error report for type 5 error -117 [ 93.210018][ T7884] EXT4-fs error (device loop0): ext4_do_update_inode:5742: inode #12: comm syz.0.510: corrupted inode contents [ 93.210028][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.210149][ T7884] EXT4-fs error (device loop0): ext4_truncate:4691: inode #12: comm syz.0.510: mark_inode_dirty error [ 93.210165][ T7884] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 93.210275][ T7884] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 93.210284][ T7884] loop0: lost filesystem error report for type 5 error -117 [ 93.210444][ T7884] EXT4-fs (loop0): 1 truncate cleaned up [ 93.211179][ T7884] EXT4-fs (loop0): pa 00000000c48f38f9: logic 1, phys. 41, len 23 [ 93.211211][ T7884] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 93.212631][ T7884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 93.282562][ T7356] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.334758][ T7894] loop3: detected capacity change from 0 to 1024 [ 93.356810][ T7894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.362530][ T7899] loop0: detected capacity change from 0 to 1024 [ 93.370549][ T7899] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 93.370777][ T7899] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52584!=20869) [ 93.376447][ T7899] JBD2: no valid journal superblock found [ 93.380164][ T7899] EXT4-fs (loop0): Could not load journal inode [ 93.383705][ T7796] netdevsim netdevsim5 eth11 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.477913][ T12] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.482559][ T12] netdevsim netdevsim8 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.502292][ T7907] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 93.502390][ T7907] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 93.505983][ T12] netdevsim netdevsim8 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.506036][ T12] netdevsim netdevsim8 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.734279][ T40] bridge_slave_1: left allmulticast mode [ 93.735933][ T40] bridge_slave_1: left promiscuous mode [ 93.744673][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.751032][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.753408][ T40] bridge_slave_0: left allmulticast mode [ 93.755580][ T40] bridge_slave_0: left promiscuous mode [ 93.757153][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.861184][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.876172][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.915490][ T4719] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.915517][ T40] bond0 (unregistering): Released all slaves [ 93.918021][ T4719] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.919401][ T4719] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.920474][ T4719] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.920713][ T4719] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.948643][ T7796] netdevsim netdevsim5 eth10 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.190041][ T6930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.235044][ T40] hsr_slave_0: left promiscuous mode [ 94.236345][ T40] hsr_slave_1: left promiscuous mode [ 94.237945][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.237970][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.245785][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.245814][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.259457][ T40] veth1_macvtap: left promiscuous mode [ 94.262240][ T40] veth0_macvtap: left promiscuous mode [ 94.262314][ T40] veth1_vlan: left promiscuous mode [ 94.262354][ T40] veth0_vlan: left promiscuous mode [ 94.344302][ T4727] Bluetooth: hci2: command tx timeout [ 94.414064][ T40] team0 (unregistering): Port device team_slave_1 removed [ 94.418068][ T40] team0 (unregistering): Port device team_slave_0 removed [ 94.479703][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.518'. [ 94.494835][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.494876][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.494953][ T7929] bridge_slave_0: entered allmulticast mode [ 94.495407][ T7929] bridge_slave_0: entered promiscuous mode [ 94.496099][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.496126][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.496187][ T7929] bridge_slave_1: entered allmulticast mode [ 94.496611][ T7929] bridge_slave_1: entered promiscuous mode [ 94.503570][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.530643][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.541538][ T7929] team0: Port device team_slave_0 added [ 94.547195][ T7929] team0: Port device team_slave_1 added [ 94.554331][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.555643][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.560839][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.563450][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.565135][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.569682][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.598441][ T7929] hsr_slave_0: entered promiscuous mode [ 94.598836][ T7929] hsr_slave_1: entered promiscuous mode [ 94.599056][ T7929] debugfs: 'hsr0' already exists in 'hsr' [ 94.600235][ T7929] Cannot create hsr debugfs directory [ 94.632761][ T8005] loop3: detected capacity change from 0 to 4096 [ 94.634810][ T8005] EXT4-fs: inline encryption not supported [ 94.649465][ T8010] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 94.662947][ T8005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 94.662993][ T8005] EXT4-fs (loop3): Test dummy encryption mode enabled [ 94.689466][ T8005] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 94.689531][ T8005] System zones: 0-5 [ 94.699811][ T8015] loop7: detected capacity change from 0 to 128 [ 94.702777][ T8015] EXT4-fs (loop7): Test dummy encryption mode enabled [ 94.705550][ T8005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.705784][ T8010] loop0: detected capacity change from 0 to 4096 [ 94.712071][ T8015] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.779444][ T5762] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.797968][ T6930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.817048][ T7796] netdevsim netdevsim5 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.885614][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.7.526'. [ 94.921460][ T7796] netdevsim netdevsim5 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.923659][ T8034] loop3: detected capacity change from 0 to 2048 [ 94.936342][ T8034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.944801][ T4727] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 94.944830][ T4727] CPU: 0 UID: 0 PID: 4727 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT [ 94.944847][ T4727] Tainted: [L]=SOFTLOCKUP [ 94.944851][ T4727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 94.944857][ T4727] Workqueue: hci5 hci_rx_work [ 94.944874][ T4727] Call trace: [ 94.944878][ T4727] show_stack+0x2c/0x3c (C) [ 94.944895][ T4727] __dump_stack+0x30/0x40 [ 94.944908][ T4727] dump_stack_lvl+0xd8/0x12c [ 94.944920][ T4727] dump_stack+0x1c/0x28 [ 94.944931][ T4727] sysfs_warn_dup+0x9c/0xb8 [ 94.944943][ T4727] sysfs_create_dir_ns+0x190/0x1f4 [ 94.944955][ T4727] kobject_add_internal+0x290/0x6f0 [ 94.944965][ T4727] kobject_add_varg+0x9c/0xe8 [ 94.944973][ T4727] kobject_add+0x110/0x1c8 [ 94.944981][ T4727] device_add+0x394/0x9e0 [ 94.944989][ T4727] hci_conn_add_sysfs+0xbc/0x1e8 [ 94.945000][ T4727] le_conn_complete_evt+0xc68/0x10f8 [ 94.945010][ T4727] hci_le_conn_complete_evt+0x114/0x3d8 [ 94.945019][ T4727] hci_le_meta_evt+0x2b0/0x46c [ 94.945030][ T4727] hci_event_packet+0x4c0/0x9c8 [ 94.945040][ T4727] hci_rx_work+0x2f4/0xd78 [ 94.945048][ T4727] process_scheduled_works+0x788/0x10b8 [ 94.945059][ T4727] worker_thread+0x798/0xbd0 [ 94.945069][ T4727] kthread+0x304/0x3d4 [ 94.945077][ T4727] ret_from_fork+0x10/0x20 [ 94.945850][ T4727] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.945875][ T4727] Bluetooth: hci5: failed to register connection device [ 95.064153][ T6930] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.092048][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.129191][ T8060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.148156][ T8062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.153407][ T8062] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.532: corrupted xattr block 33: invalid header [ 95.175761][ T7929] netdevsim netdevsim2 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.177951][ T8062] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.532: corrupted xattr block 33: invalid header [ 95.180608][ T8062] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.532: corrupted xattr block 33: invalid header [ 95.204687][ T8071] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.532: corrupted xattr block 33: invalid header [ 95.210840][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.213552][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.218681][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.220894][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.223226][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.228036][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.228641][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.231988][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.234522][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.236873][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.239375][ T6930] EXT4-fs error (device loop3): ext4_empty_dir:3082: inode #12: comm syz-executor: invalid size [ 95.275823][ T7929] netdevsim netdevsim2 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.303181][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.342115][ T7929] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.386387][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.432959][ T7929] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.507805][ T798] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.515043][ T798] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.518532][ T798] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.525063][ T798] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.531388][ T40] bridge_slave_1: left allmulticast mode [ 95.531431][ T40] bridge_slave_1: left promiscuous mode [ 95.531509][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.537103][ T40] bridge_slave_0: left allmulticast mode [ 95.538108][ T40] bridge_slave_0: left promiscuous mode [ 95.538214][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.621675][ T7867] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.703431][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.727965][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.737039][ T40] bond0 (unregistering): Released all slaves [ 95.739667][ T40] bond1 (unregistering): Released all slaves [ 95.748465][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.793835][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.801742][ T4719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.802829][ T4719] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.812962][ T4719] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.841336][ T4719] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.935614][ T7929] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.946443][ T4719] Bluetooth: hci0: command tx timeout [ 95.949396][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.949787][ T7929] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.956427][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.991250][ T7929] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.994887][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.995261][ T7929] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.997744][ T7929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.114862][ T8141] netlink: 'syz.7.541': attribute type 2 has an invalid length. [ 96.197307][ T40] hsr_slave_0: left promiscuous mode [ 96.198397][ T40] hsr_slave_1: left promiscuous mode [ 96.198877][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 96.198890][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.213871][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.213900][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.219791][ T40] veth1_macvtap: left promiscuous mode [ 96.219845][ T40] veth0_macvtap: left promiscuous mode [ 96.219914][ T40] veth1_vlan: left promiscuous mode [ 96.219953][ T40] veth0_vlan: left promiscuous mode [ 96.424935][ T4719] Bluetooth: hci2: command tx timeout [ 96.516746][ T40] team0 (unregistering): Port device team_slave_1 removed [ 96.524695][ T40] team0 (unregistering): Port device team_slave_0 removed [ 96.586094][ T8173] set_capacity_and_notify: 2 callbacks suppressed [ 96.586301][ T8173] loop7: detected capacity change from 0 to 128 [ 96.636468][ T8173] FAT-fs (loop7): data area starts beyond volume (36 > 6) [ 96.636505][ T8173] FAT-fs (loop7): Can't find a valid FAT filesystem [ 96.644569][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.7.544'. [ 96.646164][ T7796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.647726][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.671894][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.755649][ T7796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.759342][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.431859][ T7796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.445089][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.455960][ T7796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.457225][ T7796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.529892][ T7929] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.607270][ T1262] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.607323][ T1262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.651279][ T1262] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.651330][ T1262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.702365][ T7796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.707309][ T7796] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.709449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.709488][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.716627][ T7796] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.716663][ T7796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.722714][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.722753][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.799399][ T8208] loop7: detected capacity change from 0 to 512 [ 97.819820][ T8208] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 97.846301][ T8208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.864256][ T4719] Bluetooth: hci4: command tx timeout [ 97.891185][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.903026][ T8208] netlink: 108 bytes leftover after parsing attributes in process `syz.7.547'. [ 97.938487][ T8228] tmpfs: Bad value for 'nr_inodes' [ 97.939319][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.939345][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.939399][ T8112] bridge_slave_0: entered allmulticast mode [ 97.939823][ T8112] bridge_slave_0: entered promiscuous mode [ 97.957319][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.958865][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.962525][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.963921][ T8112] bridge_slave_1: entered allmulticast mode [ 97.966746][ T8112] bridge_slave_1: entered promiscuous mode [ 98.022484][ T8112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.023437][ T8112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.026859][ T4719] Bluetooth: hci0: command tx timeout [ 98.052827][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.061802][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.072752][ T8252] loop0: detected capacity change from 0 to 128 [ 98.077667][ T8112] team0: Port device team_slave_0 added [ 98.079367][ T8252] FAT-fs (loop0): bogus number of FAT structure [ 98.084523][ T8252] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 98.084569][ T8252] FAT-fs (loop0): Can't find a valid FAT filesystem [ 98.088605][ T8112] team0: Port device team_slave_1 added [ 98.097204][ T7929] veth0_vlan: entered promiscuous mode [ 98.099518][ T7929] veth1_vlan: entered promiscuous mode [ 98.105603][ T7929] veth0_macvtap: entered promiscuous mode [ 98.106991][ T7929] veth1_macvtap: entered promiscuous mode [ 98.110723][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.111749][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.113500][ T1262] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.113610][ T1262] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.113660][ T1262] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.113691][ T1262] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.130360][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.203400][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.213528][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.213564][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.213581][ T8112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.214481][ T8112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.214489][ T8112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.214505][ T8112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.223784][ T8112] hsr_slave_0: entered promiscuous mode [ 98.224097][ T8112] hsr_slave_1: entered promiscuous mode [ 98.249534][ T8274] loop0: detected capacity change from 0 to 128 [ 98.286228][ T8274] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.310216][ T8284] loop7: detected capacity change from 0 to 256 [ 98.310615][ T8284] vfat: Bad value for 'shortname' [ 98.375522][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.410199][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.410230][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.434742][ T8274] tipc: Started in network mode [ 98.435751][ T8274] tipc: Node identity ac1414aa, cluster identity 4711 [ 98.437694][ T8274] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 98.439570][ T8274] tipc: Enabled bearer , priority 10 [ 98.440887][ T867] IPVS: starting estimator thread 0... [ 98.504368][ T4719] Bluetooth: hci2: command tx timeout [ 98.513641][ T12] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.513699][ T12] netdevsim netdevsim3 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.513720][ T12] netdevsim netdevsim3 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.513737][ T12] netdevsim netdevsim3 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.515600][ T3652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.515612][ T3652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.529579][ T8296] IPVS: using max 60 ests per chain, 144000 per kthread [ 98.546236][ T7796] veth0_vlan: entered promiscuous mode [ 98.551642][ T40] bridge_slave_1: left allmulticast mode [ 98.551682][ T40] bridge_slave_1: left promiscuous mode [ 98.551761][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.554607][ T40] bridge_slave_0: left allmulticast mode [ 98.554620][ T40] bridge_slave_0: left promiscuous mode [ 98.554695][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.558367][ T7356] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.575259][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 98.714231][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 98.728064][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.759343][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.765664][ T40] bond0 (unregistering): Released all slaves [ 98.854260][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.004274][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.144371][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.284230][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.424214][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.565657][ T4807] tipc: Node number set to 2886997162 [ 99.704908][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 99.732338][ T8112] netdevsim netdevsim6 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.786871][ T7796] veth1_vlan: entered promiscuous mode [ 99.802905][ T7796] veth0_macvtap: entered promiscuous mode [ 99.858443][ T7796] veth1_macvtap: entered promiscuous mode [ 99.901164][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.902253][ T7796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.907133][ T3560] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.913329][ T15] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.913383][ T15] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.913409][ T15] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.955071][ T4719] Bluetooth: hci4: command tx timeout [ 99.974260][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 100.057911][ T4719] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 100.078856][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.080399][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.082203][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.083677][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.160938][ T4719] Bluetooth: hci0: command tx timeout [ 100.596663][ T4719] Bluetooth: hci2: command tx timeout [ 100.840503][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 100.873817][ T40] hsr_slave_0: left promiscuous mode [ 100.876269][ T40] hsr_slave_1: left promiscuous mode [ 100.879501][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.881051][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.923929][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.923962][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.962486][ T40] veth1_macvtap: left promiscuous mode [ 100.962539][ T40] veth0_macvtap: left promiscuous mode [ 100.962633][ T40] veth1_vlan: left promiscuous mode [ 100.962677][ T40] veth0_vlan: left promiscuous mode [ 101.146898][ T40] team0 (unregistering): Port device team_slave_1 removed [ 101.152058][ T40] team0 (unregistering): Port device team_slave_0 removed [ 101.201610][ T8436] netlink: 12 bytes leftover after parsing attributes in process `syz.7.572'. [ 101.236683][ T8112] netdevsim netdevsim6 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.239655][ T8438] loop5: detected capacity change from 0 to 128 [ 101.239995][ T8438] vfat: Bad value for 'check' [ 101.243477][ T8438] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.341121][ T8112] netdevsim netdevsim6 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.501465][ T8451] loop5: detected capacity change from 0 to 256 [ 101.571326][ T8451] FAT-fs (loop5): data area starts beyond volume (274 > 64) [ 101.571388][ T8451] FAT-fs (loop5): Can't find a valid FAT filesystem [ 101.728580][ T8112] netdevsim netdevsim6 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.733886][ T8461] loop7: detected capacity change from 0 to 128 [ 101.743477][ T8461] FAT-fs (loop7): data area starts beyond volume (36 > 6) [ 101.743511][ T8461] FAT-fs (loop7): Can't find a valid FAT filesystem [ 101.753236][ T8461] netlink: 8 bytes leftover after parsing attributes in process `syz.7.577'. [ 102.044854][ T4719] Bluetooth: hci4: command tx timeout [ 102.824375][ T4719] Bluetooth: hci0: command tx timeout [ 102.932028][ T8112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 103.085621][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.087379][ T8112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 103.089949][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.093669][ T8485] netlink: 'syz.7.583': attribute type 1 has an invalid length. [ 103.108178][ T8485] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.624203][ C1] net_ratelimit: 3 callbacks suppressed [ 103.624244][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 103.789398][ T8112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 103.880379][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.880783][ T8112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 103.888226][ T8112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.035572][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.038249][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.043529][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.048422][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.049291][ T8497] bridge_slave_0: left allmulticast mode [ 104.049309][ T8497] bridge_slave_0: left promiscuous mode [ 104.049385][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.052901][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.087024][ T8497] bridge_slave_1: left allmulticast mode [ 104.089138][ T8497] bridge_slave_1: left promiscuous mode [ 104.090605][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.099146][ T8497] bond0: (slave bond_slave_0): Releasing backup interface [ 104.105194][ T4727] Bluetooth: hci4: command tx timeout [ 104.131124][ T8497] bond0: (slave bond_slave_1): Releasing backup interface [ 104.168849][ T8497] team0: Port device team_slave_0 removed [ 104.177115][ T8497] team0: Port device team_slave_1 removed [ 104.177482][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.177495][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.188508][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.188548][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.190312][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.585'. [ 104.197936][ T8497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 104.252036][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.286030][ T8112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.289541][ T8112] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.311555][ T5448] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.311601][ T5448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.312130][ T5448] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.312149][ T5448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.387485][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.401758][ T8541] gadgetfs expected dummy_udc controller not usbip-vudc [ 104.401795][ T8541] udc usbip-vudc.0: failed to start USB Gadget filesystem: -19 [ 104.402354][ T8541] UDC core: USB Gadget filesystem: couldn't find an available UDC [ 104.485159][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.634895][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.674242][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 104.727502][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.727597][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.727663][ T8508] bridge_slave_0: entered allmulticast mode [ 104.728114][ T8508] bridge_slave_0: entered promiscuous mode [ 104.729338][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.729391][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.729444][ T8508] bridge_slave_1: entered allmulticast mode [ 104.733943][ T8508] bridge_slave_1: entered promiscuous mode [ 104.767094][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.767157][ T5448] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.767712][ T5448] netdevsim netdevsim0 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.787771][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.797711][ T39] netdevsim netdevsim0 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.797769][ T39] netdevsim netdevsim0 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.807956][ T8112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.822069][ T40] bridge_slave_1: left allmulticast mode [ 104.822101][ T40] bridge_slave_1: left promiscuous mode [ 104.822176][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.825690][ T40] bridge_slave_0: left allmulticast mode [ 104.825704][ T40] bridge_slave_0: left promiscuous mode [ 104.825779][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.869834][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.596'. [ 104.918055][ T8598] loop7: detected capacity change from 0 to 128 [ 104.918482][ T8598] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.919406][ T8598] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 104.925991][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.941777][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.955316][ T40] bond0 (unregistering): Released all slaves [ 104.973517][ T8508] team0: Port device team_slave_0 added [ 104.978987][ T8508] team0: Port device team_slave_1 added [ 104.990713][ T8600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.599'. [ 105.018045][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.019348][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.028902][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.035539][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.035571][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.035594][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.057091][ T8508] hsr_slave_0: entered promiscuous mode [ 105.058656][ T8508] hsr_slave_1: entered promiscuous mode [ 105.059986][ T8508] debugfs: 'hsr0' already exists in 'hsr' [ 105.061117][ T8508] Cannot create hsr debugfs directory [ 105.098262][ T8607] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.098690][ T8607] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.101982][ T8607] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.102047][ T8607] bridge0: port 2(bridge_slave_1) entered listening state [ 105.102133][ T8607] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.102169][ T8607] bridge0: port 1(bridge_slave_0) entered listening state [ 105.105666][ T40] tipc: Disabling bearer [ 105.105839][ T40] tipc: Left network mode [ 105.141874][ T8508] netdevsim netdevsim4 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.104439][ T4727] Bluetooth: hci1: command tx timeout [ 106.121640][ T8112] veth0_vlan: entered promiscuous mode [ 106.139716][ T8112] veth1_vlan: entered promiscuous mode [ 106.153418][ T8623] FAULT_INJECTION: forcing a failure. [ 106.153418][ T8623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.156814][ T8623] CPU: 1 UID: 0 PID: 8623 Comm: syz.2.604 Tainted: G L syzkaller #0 PREEMPT [ 106.156834][ T8623] Tainted: [L]=SOFTLOCKUP [ 106.156839][ T8623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 106.156844][ T8623] Call trace: [ 106.156847][ T8623] show_stack+0x2c/0x3c (C) [ 106.156866][ T8623] __dump_stack+0x30/0x40 [ 106.156877][ T8623] dump_stack_lvl+0xd8/0x12c [ 106.156887][ T8623] dump_stack+0x1c/0x28 [ 106.156896][ T8623] should_fail_ex+0x41c/0x590 [ 106.156907][ T8623] should_fail+0x14/0x24 [ 106.156917][ T8623] should_fail_usercopy+0x20/0x30 [ 106.156927][ T8623] _inline_copy_from_user+0x3c/0x174 [ 106.156936][ T8623] kstrtouint_from_user+0xcc/0x174 [ 106.156943][ T8623] proc_fail_nth_write+0x9c/0x234 [ 106.156951][ T8623] vfs_write+0x2a4/0xa0c [ 106.156959][ T8623] ksys_write+0x12c/0x228 [ 106.156965][ T8623] __arm64_sys_write+0x84/0x98 [ 106.156972][ T8623] invoke_syscall+0x98/0x244 [ 106.156983][ T8623] el0_svc_common+0xec/0x23c [ 106.156992][ T8623] do_el0_svc+0x4c/0x5c [ 106.157002][ T8623] el0_svc+0x64/0x260 [ 106.157012][ T8623] el0t_64_sync_handler+0x48/0x148 [ 106.157022][ T8623] el0t_64_sync+0x198/0x19c [ 106.247865][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz.5.606'. [ 106.255836][ T8508] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.308732][ T8639] loop5: detected capacity change from 0 to 128 [ 106.317065][ T8639] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.324091][ T8639] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 106.348289][ T40] hsr_slave_0: left promiscuous mode [ 106.350062][ T40] hsr_slave_1: left promiscuous mode [ 106.352666][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.356378][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.358100][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.359459][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.370619][ T40] veth1_macvtap: left promiscuous mode [ 106.372775][ T40] veth0_macvtap: left promiscuous mode [ 106.372844][ T40] veth1_vlan: left promiscuous mode [ 106.372885][ T40] veth0_vlan: left promiscuous mode [ 106.398767][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 106.420737][ T8648] netlink: 20 bytes leftover after parsing attributes in process `syz.2.611'. [ 106.495563][ T40] team0 (unregistering): Port device team_slave_1 removed [ 106.502531][ T8651] netlink: 32 bytes leftover after parsing attributes in process `syz.5.610'. [ 106.504747][ T40] team0 (unregistering): Port device team_slave_0 removed [ 106.557833][ T4401] 8021q: adding VLAN 0 to HW filter on device eth4 [ 106.563792][ T8112] veth0_macvtap: entered promiscuous mode [ 106.565130][ T8112] veth1_macvtap: entered promiscuous mode [ 106.566035][ T8646] netlink: 48 bytes leftover after parsing attributes in process `syz.5.610'. [ 106.571701][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.7.612'. [ 106.574495][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.576848][ T8112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.598337][ T8508] netdevsim netdevsim4 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.606463][ T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.606565][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.606594][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.606616][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.653423][ T8616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.653456][ T8616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.701350][ T8508] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.714467][ T8669] loop7: detected capacity change from 0 to 512 [ 106.726611][ T8671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.617'. [ 106.728300][ T8669] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 106.734091][ T8616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.736203][ T8616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.757143][ T8669] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.616: bad orphan inode 13 [ 106.757178][ T8669] loop7: lost filesystem error report for type 5 error -117 [ 106.757324][ T8669] ext4_test_bit(bit=12, block=18) = 1 [ 106.757332][ T8669] is_bad_inode(inode)=0 [ 106.757336][ T8669] NEXT_ORPHAN(inode)=0 [ 106.757340][ T8669] max_ino=32 [ 106.757344][ T8669] i_nlink=1 [ 106.757816][ T8669] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 106.765043][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.7.616'. [ 106.765065][ T8669] netlink: 'syz.7.616': attribute type 25 has an invalid length. [ 106.765074][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.616'. [ 106.775961][ T8669] netlink: 16 bytes leftover after parsing attributes in process `syz.7.616'. [ 106.777981][ T8669] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 106.781384][ T8669] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.616: bg 0: block 248: padding at end of block bitmap is not set [ 106.782159][ T8669] Quota error (device loop7): write_blk: dquota write failed [ 106.782186][ T8669] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 106.782206][ T8669] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.616: Failed to acquire dquot type 1 [ 106.782860][ T8669] netlink: 'syz.7.616': attribute type 3 has an invalid length. [ 106.785383][ T8669] Quota error (device loop7): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 106.785434][ T8669] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 106.785449][ T8669] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.616: Failed to acquire dquot type 1 [ 106.839373][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 106.839572][ T3560] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-5 [ 106.839591][ T3560] EXT4-fs error (device loop7): ext4_release_dquot:7077: comm kworker/u8:7: Failed to release dquot type 1 [ 106.839602][ T3560] loop7: lost filesystem error report for type 5 error -117 [ 106.856504][ T8682] netlink: 'syz.6.536': attribute type 11 has an invalid length. [ 106.883892][ T8682] binder: 8681:8682 BC_INCREFS_DONE u0000000000000003 no match [ 106.883933][ T8682] binder: 8681:8682 got transaction to invalid handle, 2 [ 106.883944][ T8682] binder: 8681:8682 cannot find target node [ 106.883960][ T8682] binder: 8681:8682 transaction async to 0:0 failed 3/29201/-22, code 0 size 96-24 line 3252 [ 106.932086][ T8508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.958748][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.961895][ T4892] binder: undelivered TRANSACTION_ERROR: 29201 [ 106.962373][ T8508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.969857][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.970873][ T8508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.977057][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.977579][ T8508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.980768][ T8687] loop5: detected capacity change from 0 to 4096 [ 107.002116][ T8508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.003525][ T40] IPVS: stop unused estimator thread 0... [ 107.030563][ T4727] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 107.138783][ T8708] loop5: detected capacity change from 0 to 4096 [ 107.143122][ T8708] EXT4-fs (loop5): Test dummy encryption mode enabled [ 107.148615][ T8708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.151759][ T4401] 8021q: adding VLAN 0 to HW filter on device eth5 [ 107.175828][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.185508][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.201918][ T3644] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.201966][ T3644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.207119][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.207161][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.269833][ T7796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.430857][ T4401] 8021q: adding VLAN 0 to HW filter on device eth6 [ 107.498641][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.581656][ T8508] veth0_vlan: entered promiscuous mode [ 107.587301][ T8508] veth1_vlan: entered promiscuous mode [ 107.593370][ T4401] 8021q: adding VLAN 0 to HW filter on device eth7 [ 107.603570][ T8508] veth0_macvtap: entered promiscuous mode [ 107.610224][ T8508] veth1_macvtap: entered promiscuous mode [ 107.618351][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.619995][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.627422][ T3560] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.627467][ T3560] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.627496][ T3560] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.627515][ T3560] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.910376][ T8779] loop6: detected capacity change from 0 to 128 [ 107.912440][ T8779] FAT-fs (loop6): data area starts beyond volume (36 > 6) [ 107.915802][ T8779] FAT-fs (loop6): Can't find a valid FAT filesystem [ 108.201151][ T4727] Bluetooth: hci1: command tx timeout [ 109.093521][ T8789] loop5: detected capacity change from 0 to 4096 [ 110.264185][ T4727] Bluetooth: hci1: command tx timeout [ 110.271381][ T8717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.318656][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.320415][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.329129][ T8805] loop5: detected capacity change from 0 to 4096 [ 110.331176][ T8805] EXT4-fs (loop5): Test dummy encryption mode enabled [ 110.343973][ T4727] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 110.351488][ T8805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.357085][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.358977][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.441386][ T7796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.499886][ T8823] loop4: detected capacity change from 0 to 256 [ 110.688016][ T8844] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 111.202902][ T8890] loop5: detected capacity change from 0 to 512 [ 111.379549][ T8912] loop5: detected capacity change from 0 to 2048 [ 111.401801][ T8912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.478493][ T7796] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.542396][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.542442][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.542800][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.545423][ T8933] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 111.816344][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.816957][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.817299][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.817615][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.817936][ T8933] wlan0 speed is unknown, defaulting to 1000 [ 111.920833][ T8940] bond1: Removing last arp target with arp_interval on [ 111.937148][ T4727] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 111.956466][ T8939] bond2: Removing last arp target with arp_interval on [ 112.229010][ T8966] loop4: detected capacity change from 0 to 1024 [ 112.413808][ T4719] Bluetooth: hci1: command tx timeout [ 112.469399][ T8970] vivid-000: disconnect [ 112.471729][ T8968] vivid-000: reconnect [ 112.522169][ T8975] tmpfs: Bad value for 'mpol' [ 112.523997][ T8975] tmpfs: Bad value for 'mpol' [ 112.546893][ T8975] loop7: detected capacity change from 0 to 1024 [ 112.549723][ T8975] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.556398][ T8975] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 112.556459][ T8975] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 112.556468][ T8975] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.672: Failed to acquire dquot type 0 [ 112.556480][ T8975] loop7: lost filesystem error report for type 5 error -5 [ 112.561532][ T8975] EXT4-fs (loop7): 1 truncate cleaned up [ 112.563181][ T8975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.571436][ T8975] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 112.571494][ T8975] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 112.571506][ T8975] EXT4-fs error (device loop7): ext4_acquire_dquot:7041: comm syz.7.672: Failed to acquire dquot type 0 [ 112.596718][ T5762] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.697442][ T8988] sctp: [Deprecated]: syz.7.674 (pid 8988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.697442][ T8988] Use struct sctp_sack_info instead [ 112.932452][ T9012] __nla_validate_parse: 15 callbacks suppressed [ 112.932599][ T9012] netlink: 12 bytes leftover after parsing attributes in process `syz.5.678'. [ 113.551417][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 113.568964][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 113.647981][ T4401] 8021q: adding VLAN 0 to HW filter on device eth8 [ 113.886305][ T9065] futex_wake_op: syz.2.683 tries to shift op by 144; fix this program [ 114.068706][ T9065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.070011][ T9065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.158635][ T9071] netlink: 'syz.4.687': attribute type 5 has an invalid length. [ 114.161067][ T9071] ieee802154 phy0 wpan0: encryption failed: -22 [ 114.185783][ T9068] loop6: detected capacity change from 0 to 1024 [ 114.204271][ T9075] loop4: detected capacity change from 0 to 512 [ 114.204709][ T9075] ext2: Unknown parameter 'obj_type' [ 114.312586][ T9084] netlink: 12 bytes leftover after parsing attributes in process `syz.7.690'. [ 114.343296][ T4401] 8021q: adding VLAN 0 to HW filter on device eth9 [ 114.425825][ T4719] Bluetooth: hci1: command 0x2016 tx timeout [ 114.556340][ T4401] 8021q: adding VLAN 0 to HW filter on device eth10 [ 114.699842][ T4401] 8021q: adding VLAN 0 to HW filter on device eth11 [ 114.770241][ T9126] netlink: 'syz.7.692': attribute type 3 has an invalid length. [ 114.839988][ T9130] sctp: [Deprecated]: syz.6.693 (pid 9130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.839988][ T9130] Use struct sctp_sack_info instead [ 114.997080][ T4401] 8021q: adding VLAN 0 to HW filter on device eth12 [ 115.245823][ T4401] 8021q: adding VLAN 0 to HW filter on device eth14 [ 115.384431][ T4401] 8021q: adding VLAN 0 to HW filter on device eth13 [ 115.437055][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.560080][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.568102][ T4401] 8021q: adding VLAN 0 to HW filter on device eth15 [ 115.598577][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.600521][ T4719] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.601495][ T4719] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.603238][ T4719] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.605611][ T4719] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 115.647318][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.725648][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.801014][ T9192] wlan0 speed is unknown, defaulting to 1000 [ 115.848635][ T39] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.868354][ T39] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.868410][ T39] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.880815][ T39] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.883919][ T12] bridge_slave_1: left allmulticast mode [ 115.883948][ T12] bridge_slave_1: left promiscuous mode [ 115.884040][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.895456][ T12] bridge_slave_0: left allmulticast mode [ 115.895482][ T12] bridge_slave_0: left promiscuous mode [ 115.895569][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.042958][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.067448][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.702'. [ 116.067490][ T4727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.068488][ T4727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.068871][ T4727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.069314][ T4727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.069525][ T4727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.077739][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.108643][ T12] bond0 (unregistering): Released all slaves [ 116.228676][ T9192] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.228725][ T9192] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.228809][ T9192] bridge_slave_0: entered allmulticast mode [ 116.230455][ T9192] bridge_slave_0: entered promiscuous mode [ 116.261857][ T9192] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.261915][ T9192] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.262017][ T9192] bridge_slave_1: entered allmulticast mode [ 116.262858][ T9192] bridge_slave_1: entered promiscuous mode [ 116.272259][ T9243] wlan0 speed is unknown, defaulting to 1000 [ 116.280487][ T9192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.287548][ T9192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.375389][ T9192] team0: Port device team_slave_0 added [ 116.379114][ T9192] team0: Port device team_slave_1 added [ 116.410062][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.410095][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.410110][ T9192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.439425][ T9192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.439459][ T9192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.439476][ T9192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.468325][ T12] hsr_slave_0: left promiscuous mode [ 116.469598][ T12] hsr_slave_1: left promiscuous mode [ 116.470223][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.470240][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.475926][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.475954][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.485672][ T12] veth1_macvtap: left promiscuous mode [ 116.485715][ T12] veth0_macvtap: left promiscuous mode [ 116.485764][ T12] veth1_vlan: left promiscuous mode [ 116.485799][ T12] veth0_vlan: left promiscuous mode [ 116.523516][ T4727] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.525624][ T4727] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.526657][ T4727] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.528101][ T4727] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.528449][ T4727] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.636553][ T12] team0 (unregistering): Port device team_slave_1 removed [ 116.640961][ T12] team0 (unregistering): Port device team_slave_0 removed [ 116.694489][ T9286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 116.744016][ T9192] hsr_slave_0: entered promiscuous mode [ 116.745707][ T9192] hsr_slave_1: entered promiscuous mode [ 116.747200][ T9192] debugfs: 'hsr0' already exists in 'hsr' [ 116.748692][ T9192] Cannot create hsr debugfs directory [ 117.699656][ T4727] Bluetooth: hci1: command tx timeout [ 117.918427][ T9301] loop6: detected capacity change from 0 to 1024 [ 117.918822][ T9301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.929293][ T9301] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.949312][ T8112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.976869][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.976951][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.977012][ T9243] bridge_slave_0: entered allmulticast mode [ 117.977444][ T9243] bridge_slave_0: entered promiscuous mode [ 118.008186][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.008234][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.008330][ T9243] bridge_slave_1: entered allmulticast mode [ 118.008789][ T9243] bridge_slave_1: entered promiscuous mode [ 118.101320][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.104515][ T4727] Bluetooth: hci2: command tx timeout [ 118.117128][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.128256][ T9267] wlan0 speed is unknown, defaulting to 1000 [ 118.160680][ T9192] netdevsim netdevsim4 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.178581][ T9243] team0: Port device team_slave_0 added [ 118.184878][ T9243] team0: Port device team_slave_1 added [ 118.209723][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.209753][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.209771][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.218285][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.218312][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.218327][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.266810][ T9243] hsr_slave_0: entered promiscuous mode [ 118.267324][ T9243] hsr_slave_1: entered promiscuous mode [ 118.268295][ T9243] debugfs: 'hsr0' already exists in 'hsr' [ 118.268307][ T9243] Cannot create hsr debugfs directory [ 118.306750][ T9192] netdevsim netdevsim4 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.385577][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.429177][ T9192] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.488864][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.515696][ T9267] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.517236][ T9267] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.517326][ T9267] bridge_slave_0: entered allmulticast mode [ 118.517792][ T9267] bridge_slave_0: entered promiscuous mode [ 118.520982][ T9267] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.521040][ T9267] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.521158][ T9267] bridge_slave_1: entered allmulticast mode [ 118.521591][ T9267] bridge_slave_1: entered promiscuous mode [ 118.535627][ T9192] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.562889][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.571421][ T9267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.574043][ T9267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.594186][ T4727] Bluetooth: hci3: command tx timeout [ 118.597919][ T9267] team0: Port device team_slave_0 added [ 118.600132][ T9267] team0: Port device team_slave_1 added [ 118.619429][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.619531][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.619561][ T9267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.620599][ T9267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.620608][ T9267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.620620][ T9267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.648218][ T9267] hsr_slave_0: entered promiscuous mode [ 118.649786][ T9267] hsr_slave_1: entered promiscuous mode [ 118.650573][ T9267] debugfs: 'hsr0' already exists in 'hsr' [ 118.650588][ T9267] Cannot create hsr debugfs directory [ 118.692730][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.760874][ T9192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.762357][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.763778][ T9192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.768330][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.770992][ T9192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.776415][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.776786][ T9192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.779634][ T9192] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.813683][ T9243] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.856334][ T3560] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.856387][ T3560] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.860246][ T3560] netdevsim netdevsim5 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.867576][ T3560] netdevsim netdevsim5 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.949906][ T9243] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.959399][ T9192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.966913][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.6.713'. [ 118.976387][ T9192] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.995533][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.995593][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.996206][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.996229][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.031956][ T9243] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.147758][ T9363] hub 8-0:1.0: USB hub found [ 119.148115][ T9363] hub 8-0:1.0: 8 ports detected [ 119.352975][ T9243] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.401633][ T9192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.467201][ T12] bridge_slave_1: left allmulticast mode [ 119.467240][ T12] bridge_slave_1: left promiscuous mode [ 119.467323][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.471289][ T12] bridge_slave_0: left allmulticast mode [ 119.471334][ T12] bridge_slave_0: left promiscuous mode [ 119.471405][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.492960][ T12] bridge_slave_1: left allmulticast mode [ 119.493286][ T12] bridge_slave_1: left promiscuous mode [ 119.493383][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.497831][ T12] bridge_slave_0: left allmulticast mode [ 119.497858][ T12] bridge_slave_0: left promiscuous mode [ 119.497922][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.657737][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.695628][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.705543][ T4727] Bluetooth: hci1: command tx timeout [ 119.716691][ T12] bond0 (unregistering): Released all slaves [ 119.719190][ T12] bond1 (unregistering): Released all slaves [ 119.723959][ T12] bond2 (unregistering): Released all slaves [ 119.789481][ T12] bond2 (unregistering): (slave erspan1): Releasing active interface [ 119.789514][ T12] erspan1 (unregistering): left promiscuous mode [ 119.853585][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.875956][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.915442][ T12] bond0 (unregistering): Released all slaves [ 119.917814][ T12] bond1 (unregistering): Released all slaves [ 119.923180][ T12] bond2 (unregistering): Released all slaves [ 119.935858][ T12] bond3 (unregistering): Released all slaves [ 120.008187][ T9243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.010566][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.011023][ T9243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.013826][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.014650][ T9243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.026529][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.026883][ T9243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.033624][ T9243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.330918][ T9267] netdevsim netdevsim5 eth21 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.332139][ T4727] Bluetooth: hci2: command tx timeout [ 120.485387][ T9267] netdevsim netdevsim5 eth20 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.493685][ T9192] veth0_vlan: entered promiscuous mode [ 120.542492][ T9192] veth1_vlan: entered promiscuous mode [ 120.557635][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.572165][ T9267] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.581586][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.609242][ T9192] veth0_macvtap: entered promiscuous mode [ 120.612917][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.612970][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.613974][ T9192] veth1_macvtap: entered promiscuous mode [ 120.636945][ T798] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.636995][ T798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.643316][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.648116][ T9192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.654939][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.654994][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.655016][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.655034][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.665015][ T4719] Bluetooth: hci3: command tx timeout [ 120.670155][ T9267] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.838792][ T9482] netlink: 'syz.2.720': attribute type 3 has an invalid length. [ 120.865700][ T12] hsr_slave_0: left promiscuous mode [ 120.866929][ T12] hsr_slave_1: left promiscuous mode [ 120.867188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.867200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.871020][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.871045][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.876522][ T12] hsr_slave_0: left promiscuous mode [ 120.877623][ T12] hsr_slave_1: left promiscuous mode [ 120.877929][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.877942][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.878910][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.878922][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.897854][ T12] veth1_macvtap: left promiscuous mode [ 120.897911][ T12] veth0_macvtap: left promiscuous mode [ 120.897960][ T12] veth1_vlan: left promiscuous mode [ 120.897995][ T12] veth0_vlan: left promiscuous mode [ 120.901816][ T12] veth1_macvtap: left promiscuous mode [ 120.902108][ T12] veth0_macvtap: left promiscuous mode [ 120.902165][ T12] veth1_vlan: left promiscuous mode [ 120.902232][ T12] veth0_vlan: left promiscuous mode [ 121.056622][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.060344][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.186214][ T12] team0 (unregistering): Port device team_slave_1 removed [ 121.190074][ T12] team0 (unregistering): Port device team_slave_0 removed [ 121.297519][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.386271][ T9243] veth0_vlan: entered promiscuous mode [ 121.393478][ T9243] veth1_vlan: entered promiscuous mode [ 121.411751][ T9243] veth0_macvtap: entered promiscuous mode [ 121.413168][ T9243] veth1_macvtap: entered promiscuous mode [ 121.422001][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.425071][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.427728][ T39] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.427778][ T39] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.427800][ T39] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.427817][ T39] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.784327][ T4719] Bluetooth: hci1: command tx timeout [ 122.362187][ T4719] Bluetooth: hci2: command tx timeout [ 122.756611][ T4719] Bluetooth: hci3: command tx timeout [ 122.831654][ T4401] 8021q: adding VLAN 0 to HW filter on device eth19 [ 123.070289][ T9422] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.108300][ T9267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.111825][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.120991][ T9267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.134798][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.137547][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.137588][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.145541][ T9267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.150262][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.167006][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.167035][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.170331][ T9714] overlay: ./file1 is not a directory [ 123.173350][ T9267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.187246][ T9267] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.190839][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.190869][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.216512][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.216545][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.288142][ T9267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.303784][ T9267] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.329610][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.329658][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.330191][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.330218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.359733][ T9267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.361936][ T9745] netlink: 'syz.7.701': attribute type 4 has an invalid length. [ 123.363446][ T9267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.369588][ T9745] netlink: 'syz.7.701': attribute type 4 has an invalid length. [ 123.706912][ T9775] loop7: detected capacity change from 0 to 256 [ 123.868459][ T4719] Bluetooth: hci1: command tx timeout [ 123.870072][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 123.936180][ T9784] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.018424][ T9267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.425174][ T4719] Bluetooth: hci2: command tx timeout [ 124.447798][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.7.739'. [ 124.473929][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 124.483295][ T9267] veth0_vlan: entered promiscuous mode [ 124.491244][ T9267] veth1_vlan: entered promiscuous mode [ 124.514763][ T9267] veth0_macvtap: entered promiscuous mode [ 124.517083][ T9267] veth1_macvtap: entered promiscuous mode [ 124.539295][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.546976][ T9267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.565177][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.565229][ T39] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.565251][ T39] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.565268][ T39] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.640105][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.640136][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.651578][ T798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.651607][ T798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.661316][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.746'. [ 124.661347][ T9833] netlink: 64 bytes leftover after parsing attributes in process `syz.4.746'. [ 124.681469][ T26] IPVS: starting estimator thread 0... [ 124.741778][ T9842] xt_connbytes: Forcing CT accounting to be enabled [ 124.790211][ T9848] loop4: detected capacity change from 0 to 128 [ 124.795237][ T9848] FAT-fs (loop4): data area starts beyond volume (36 > 6) [ 124.795260][ T9848] FAT-fs (loop4): Can't find a valid FAT filesystem [ 124.797889][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 124.823040][ T9836] IPVS: using max 47 ests per chain, 112800 per kthread [ 124.824664][ T4719] Bluetooth: hci3: command tx timeout [ 125.924886][ T9860] binfmt_misc: register: failed to install interpreter file ./file2 [ 125.928723][ T9860] random: crng reseeded on system resumption [ 125.967190][ T9860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.967381][ T9860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.020524][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.021969][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.056468][ T9867] netlink: 8 bytes leftover after parsing attributes in process `syz.6.754'. [ 126.211931][ T9883] netlink: 'syz.6.759': attribute type 12 has an invalid length. [ 126.211962][ T9883] netlink: 20 bytes leftover after parsing attributes in process `syz.6.759'. [ 126.212013][ T9883] bond0: option primary_reselect: invalid value (8) [ 126.975531][ T9909] infiniband syz1: set active [ 126.975578][ T9909] infiniband syz1: added syz_tun [ 127.484702][ T9909] RDS/IB: syz1: added [ 127.484925][ T9909] smc: adding ib device syz1 with port count 1 [ 127.484962][ T9909] smc: ib device syz1 port 1 has no pnetid [ 127.873979][ T9936] netlink: 20 bytes leftover after parsing attributes in process `syz.7.769'. [ 128.041162][ T9941] netlink: 'syz.6.768': attribute type 3 has an invalid length. [ 128.105941][ T9942] loop7: detected capacity change from 0 to 4096 [ 128.251415][ T9959] loop7: detected capacity change from 0 to 512 [ 128.255324][ T9959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.286181][ T9959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.312169][ T9959] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 128.316423][ T9959] random: crng reseeded on system resumption [ 128.327761][ T4401] 8021q: adding VLAN 0 to HW filter on device eth16 [ 128.339814][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.340013][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.348694][ T9974] input: syz1 as /devices/virtual/input/input5 [ 128.378475][ T9974] tipc: Started in network mode [ 128.379561][ T9974] tipc: Node identity aaaaaaaaaa16, cluster identity 4711 [ 128.381172][ T9974] tipc: Enabled bearer , priority 10 [ 128.617716][ T4401] 8021q: adding VLAN 0 to HW filter on device eth17 [ 128.697063][T10004] netlink: 56 bytes leftover after parsing attributes in process `syz.2.781'. [ 128.779423][T10018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.784'. [ 128.846904][ T4401] 8021q: adding VLAN 0 to HW filter on device eth18 [ 128.865432][ T9243] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.235816][T10065] netlink: 'syz.4.792': attribute type 3 has an invalid length. [ 129.432300][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.439059][T10067] binfmt_misc: register: failed to install interpreter file ./file2 [ 129.440578][T10067] random: crng reseeded on system resumption [ 129.450238][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.450440][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.494264][ T867] tipc: Node number set to 12364458 [ 129.803768][T10091] loop5: detected capacity change from 0 to 512 [ 129.828222][T10091] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.854308][T10091] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #2: comm syz.5.802: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 129.865845][ T9267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.941282][T10096] netlink: 'syz.4.804': attribute type 10 has an invalid length. [ 129.949992][T10096] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.646756][T10127] binfmt_misc: register: failed to install interpreter file ./file2 [ 130.647820][T10127] random: crng reseeded on system resumption [ 130.660060][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.660260][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.691654][T10124] fuse: root generation should be zero [ 130.773219][T10137] __nla_validate_parse: 1 callbacks suppressed [ 130.773434][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 130.844515][T10139] netlink: 'syz.6.816': attribute type 3 has an invalid length. [ 131.142661][T10152] loop4: detected capacity change from 0 to 512 [ 131.148976][T10152] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 131.153892][T10152] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.824: invalid indirect mapped block 9 (level 0) [ 131.153933][T10152] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 131.154729][ C1] EXT4-fs (loop4): initial error at time 131: ext4_free_branches:1023: inode 11 [ 131.154754][ C1] EXT4-fs (loop4): last error at time 131: ext4_free_branches:1023: inode 11 [ 131.158106][T10152] EXT4-fs (loop4): 1 truncate cleaned up [ 131.158574][T10152] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.167668][T10152] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 131.172163][T10152] overlayfs: failed to set uuid (/file0, err=-28); falling back to uuid=null. [ 131.177097][T10152] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.824: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 131.180179][T10152] netlink: 20 bytes leftover after parsing attributes in process `syz.4.824'. [ 131.348808][ T9192] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 131.871429][ T9192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.949759][T10181] loop5: detected capacity change from 0 to 256 [ 132.000151][ T3560] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.135871][ T3560] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.213963][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.835'. [ 132.254083][T10190] binfmt_misc: register: failed to install interpreter file ./file2 [ 132.254584][T10190] random: crng reseeded on system resumption [ 132.283246][ T3560] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.292515][T10190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.298998][T10190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.326094][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.328662][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.330622][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.332717][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.334980][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.514364][T10203] netlink: 'syz.5.838': attribute type 3 has an invalid length. [ 132.801752][ T3560] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.899075][ T39] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.913505][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.923247][ T12] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.930681][ T12] netdevsim netdevsim4 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.940802][ T3560] bridge_slave_1: left allmulticast mode [ 132.940834][ T3560] bridge_slave_1: left promiscuous mode [ 132.940936][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.946198][ T3560] bridge_slave_0: left allmulticast mode [ 132.946228][ T3560] bridge_slave_0: left promiscuous mode [ 132.946304][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.957772][ T3560] tipc: Resetting bearer [ 133.021295][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.6.842'. [ 133.025267][T10227] usb 1-1: USB disconnect, device number 2 [ 133.035270][ T3560] tipc: Disabling bearer [ 133.061925][ T3560] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.067322][ T3560] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.085473][ T3560] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 133.116725][ T3560] bond0 (unregistering): Released all slaves [ 133.119387][ T3560] bond1 (unregistering): Released all slaves [ 133.133887][T10241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.846'. [ 133.155847][ T3560] tipc: Left network mode [ 133.324552][T10262] binfmt_misc: register: failed to install interpreter file ./file2 [ 133.326889][T10262] random: crng reseeded on system resumption [ 133.341879][T10262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.342071][T10262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.396652][T10276] loop5: detected capacity change from 0 to 512 [ 133.488189][ T4401] 8021q: adding VLAN 0 to HW filter on device eth2 [ 133.511853][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.856'. [ 133.529856][T10189] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.530532][T10189] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.530621][T10189] bridge_slave_0: entered allmulticast mode [ 133.543795][T10189] bridge_slave_0: entered promiscuous mode [ 133.547737][T10189] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.552336][T10189] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.552449][T10189] bridge_slave_1: entered allmulticast mode [ 133.552908][T10189] bridge_slave_1: entered promiscuous mode [ 133.582170][ T3560] hsr_slave_0: left promiscuous mode [ 133.583667][ T3560] hsr_slave_1: left promiscuous mode [ 133.584179][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.584201][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.587845][ T3560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.588285][ T3560] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.592446][ T3560] veth1_macvtap: left promiscuous mode [ 133.593796][ T3560] veth0_macvtap: left promiscuous mode [ 133.593871][ T3560] veth1_vlan: left promiscuous mode [ 133.593977][ T3560] veth0_vlan: left promiscuous mode [ 133.781895][ T3560] team0 (unregistering): Port device team_slave_1 removed [ 133.788390][ T3560] team0 (unregistering): Port device team_slave_0 removed [ 133.926716][T10189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.933374][T10189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.954840][T10189] team0: Port device team_slave_0 added [ 133.958384][T10189] team0: Port device team_slave_1 added [ 133.983810][T10189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.983916][T10189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.983936][T10189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.988709][T10189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.988721][T10189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 133.988734][T10189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.018251][T10189] hsr_slave_0: entered promiscuous mode [ 134.021179][T10189] hsr_slave_1: entered promiscuous mode [ 134.023800][T10189] debugfs: 'hsr0' already exists in 'hsr' [ 134.025371][T10189] Cannot create hsr debugfs directory [ 134.132192][T10357] loop6: detected capacity change from 0 to 512 [ 134.132649][T10357] EXT4-fs: inline encryption not supported [ 134.141676][T10357] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 134.150948][T10189] netdevsim netdevsim9 eth23 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.155347][T10357] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.870: corrupted in-inode xattr: e_value size too large [ 134.155385][T10357] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 134.161327][T10357] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.870: couldn't read orphan inode 15 (err -117) [ 134.161378][T10357] loop6: lost filesystem error report for type 5 error -117 [ 134.174152][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 134.174179][ C1] EXT4-fs (loop6): initial error at time 134: ext4_iget_extra_inode:5180: inode 15 [ 134.174212][ C1] EXT4-fs (loop6): last error at time 134: ext4_orphan_get:1404 [ 134.192890][T10357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.210891][ T3560] IPVS: stop unused estimator thread 0... [ 134.240785][ T8112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.277059][T10189] netdevsim netdevsim9 eth22 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.314558][T10380] loop5: detected capacity change from 0 to 512 [ 134.316507][T10380] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.326866][T10380] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.345578][ T4727] Bluetooth: hci1: command tx timeout [ 134.355586][T10380] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 134.366760][T10380] random: crng reseeded on system resumption [ 134.375507][T10189] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.389550][T10380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.391554][T10380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.445634][T10189] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.584656][T10189] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 134.597488][T10189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 134.599056][T10189] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 134.601612][T10189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 134.602542][T10189] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 134.607516][T10189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 134.610926][T10189] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 134.612826][T10189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 134.653677][T10418] syz.7.875 (10418): drop_caches: 2 [ 134.666908][T10189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.673788][T10189] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.677801][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.677845][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.680487][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.680526][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.865398][T10189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.913976][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 134.923005][ T9267] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.957023][T10477] netlink: 20 bytes leftover after parsing attributes in process `syz.2.881'. [ 135.014661][T10189] veth0_vlan: entered promiscuous mode [ 135.025853][T10189] veth1_vlan: entered promiscuous mode [ 135.046255][T10189] veth0_macvtap: entered promiscuous mode [ 135.050988][T10189] veth1_macvtap: entered promiscuous mode [ 135.056700][T10189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.059155][T10189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.065336][ T39] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.065404][ T39] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.065434][ T39] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.065453][ T39] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.105755][T10492] loop5: detected capacity change from 0 to 128 [ 135.109434][T10492] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 135.122213][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.122237][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.153780][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.153818][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.188156][T10499] netlink: 16 bytes leftover after parsing attributes in process `syz.5.883'. [ 135.192962][T10503] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.195034][T10503] overlayfs: failed to set xattr on upper [ 135.196227][T10503] overlayfs: ...falling back to redirect_dir=nofollow. [ 135.197612][T10503] overlayfs: ...falling back to uuid=null. [ 135.199686][T10502] FAULT_INJECTION: forcing a failure. [ 135.199686][T10502] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.199722][T10502] CPU: 1 UID: 0 PID: 10502 Comm: syz.2.885 Tainted: G L syzkaller #0 PREEMPT [ 135.199739][T10502] Tainted: [L]=SOFTLOCKUP [ 135.199743][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 135.199751][T10502] Call trace: [ 135.199754][T10502] show_stack+0x2c/0x3c (C) [ 135.199774][T10502] __dump_stack+0x30/0x40 [ 135.199785][T10502] dump_stack_lvl+0xd8/0x12c [ 135.199795][T10502] dump_stack+0x1c/0x28 [ 135.199805][T10502] should_fail_ex+0x41c/0x590 [ 135.199816][T10502] should_fail+0x14/0x24 [ 135.199826][T10502] should_fail_usercopy+0x20/0x30 [ 135.199836][T10502] _copy_from_iter+0x188/0x1064 [ 135.199844][T10502] netlink_sendmsg+0x570/0x948 [ 135.199854][T10502] __sock_sendmsg+0xc8/0x17c [ 135.199863][T10502] ____sys_sendmsg+0x3d0/0x6c8 [ 135.199872][T10502] ___sys_sendmsg+0x198/0x224 [ 135.199880][T10502] __sys_sendmsg+0x158/0x204 [ 135.199889][T10502] __arm64_sys_sendmsg+0x88/0x9c [ 135.199898][T10502] invoke_syscall+0x98/0x244 [ 135.199908][T10502] el0_svc_common+0xec/0x23c [ 135.199917][T10502] do_el0_svc+0x4c/0x5c [ 135.199927][T10502] el0_svc+0x64/0x260 [ 135.199937][T10502] el0t_64_sync_handler+0x48/0x148 [ 135.199947][T10502] el0t_64_sync+0x198/0x19c [ 135.340307][T10510] overlayfs: failed to resolve './file0': -2 [ 135.382840][T10517] loop6: detected capacity change from 0 to 512 [ 135.386734][T10517] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.417621][T10517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.429659][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 135.503859][T10527] ------------[ cut here ]------------ [ 135.503876][T10527] WARNING: fs/ext4/ext4_jbd2.c:75 at ext4_journal_check_start+0x1e4/0x230, CPU#1: syz.6.889/10527 [ 135.506904][T10527] Modules linked in: [ 135.507607][T10527] CPU: 1 UID: 0 PID: 10527 Comm: syz.6.889 Tainted: G L syzkaller #0 PREEMPT [ 135.509427][T10527] Tainted: [L]=SOFTLOCKUP [ 135.510184][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 135.511924][T10527] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 135.513294][T10527] pc : ext4_journal_check_start+0x1e4/0x230 [ 135.514312][T10527] lr : ext4_journal_check_start+0x1e4/0x230 [ 135.515312][T10527] sp : ffff8000927672e0 [ 135.516018][T10527] x29: ffff8000927672e0 x28: ffff0000d531c668 x27: dfff800000000000 [ 135.517398][T10527] x26: ffff800088b07eb8 x25: 0000000000000000 x24: 1fffe0001edd6081 [ 135.518790][T10527] x23: 1fffe0001aa638cd x22: ffff0000d531c668 x21: dfff800000000000 [ 135.520076][T10527] x20: 0000000070810001 x19: ffff0000d531c000 x18: 00000000ffffffff [ 135.521350][T10527] x17: ffff80008a791000 x16: 0000000000000004 x15: ffff80008a31ada0 [ 135.522635][T10527] x14: ffff80008a590e28 x13: 0000000000000001 x12: 0000000000000000 [ 135.523944][T10527] x11: ffff80008a590e28 x10: 0000000000080000 x9 : 00000000000024c9 [ 135.525298][T10527] x8 : ffff8000a0d1d000 x7 : 0000000000000000 x6 : 0000000000000008 [ 135.526620][T10527] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff800080fc1868 [ 135.527965][T10527] x2 : 0000000000000001 x1 : ffff0000d3ec57c0 x0 : 0000000000000001 [ 135.529302][T10527] Call trace: [ 135.529813][T10527] ext4_journal_check_start+0x1e4/0x230 (P) [ 135.530850][T10527] __ext4_journal_start_sb+0x190/0x948 [ 135.531846][T10527] ext4_file_open+0x5c0/0x85c [ 135.532585][T10527] do_dentry_open+0x5c4/0xfc0 [ 135.533369][T10527] vfs_open+0x44/0x2dc [ 135.534061][T10527] path_openat+0x21fc/0x2a60 [ 135.534814][T10527] do_file_open+0x1c8/0x2e8 [ 135.535561][T10527] do_open_execat+0x108/0x32c [ 135.536321][T10527] open_exec+0x34/0x54 [ 135.536998][T10527] bm_register_write+0x1c0/0x123c [ 135.537853][T10527] vfs_write+0x2a4/0xa0c [ 135.538583][T10527] ksys_write+0x12c/0x228 [ 135.539321][T10527] __arm64_sys_write+0x84/0x98 [ 135.540071][T10527] invoke_syscall+0x98/0x244 [ 135.540801][T10527] el0_svc_common+0xec/0x23c [ 135.541527][T10527] do_el0_svc+0x4c/0x5c [ 135.542204][T10527] el0_svc+0x64/0x260 [ 135.542868][T10527] el0t_64_sync_handler+0x48/0x148 [ 135.543742][T10527] el0t_64_sync+0x198/0x19c [ 135.544517][T10527] irq event stamp: 156 [ 135.545167][T10527] hardirqs last enabled at (155): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 135.546838][T10527] hardirqs last disabled at (156): [] el1_brk64+0x20/0x54 [ 135.548278][T10527] softirqs last enabled at (94): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 135.550007][T10527] softirqs last disabled at (92): [] fpsimd_restore_current_state+0x44/0x9c8 [ 135.551726][T10527] ---[ end trace 0000000000000000 ]--- [ 135.567369][T10530] random: crng reseeded on system resumption [ 135.576935][T10517] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 135.654868][T10527] binfmt_misc: register: failed to install interpreter file ./file2 [ 135.719126][T10530] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.029365][ T8616] smc: removing ib device syz1 [ 136.058832][ T867] syz1: Port: 1 Link DOWN [ 136.141249][ T15] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.158376][ T4401] 8021q: adding VLAN 0 to HW filter on device eth3 [ 136.258109][ T15] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.385285][ T15] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.391970][ T4401] 8021q: adding VLAN 0 to HW filter on device eth20 [ 136.462793][ T15] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.556943][ T8616] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.556996][ T8616] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.561999][ T8616] netdevsim netdevsim6 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.571249][ T15] bridge_slave_1: left allmulticast mode [ 136.571280][ T15] bridge_slave_1: left promiscuous mode [ 136.571361][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.573778][ T15] bridge_slave_0: left allmulticast mode [ 136.573791][ T15] bridge_slave_0: left promiscuous mode [ 136.573857][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.648014][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.666686][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.676329][ T15] bond0 (unregistering): Released all slaves [ 136.678075][ T8616] netdevsim netdevsim6 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.680398][ T4401] 8021q: adding VLAN 0 to HW filter on device eth21 [ 136.945245][ T15] hsr_slave_0: left promiscuous mode [ 136.946544][ T15] hsr_slave_1: left promiscuous mode [ 136.946762][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.946775][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.947843][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.947855][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.953313][ T15] veth1_macvtap: left promiscuous mode [ 136.953362][ T15] veth0_macvtap: left promiscuous mode [ 136.953410][ T15] veth1_vlan: left promiscuous mode [ 136.953449][ T15] veth0_vlan: left promiscuous mode [ 137.060422][ T15] team0 (unregistering): Port device team_slave_1 removed [ 137.065125][ T15] team0 (unregistering): Port device team_slave_0 removed [ 137.442031][ T15] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.523740][ T15] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.610066][ T15] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.679791][ T15] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.768821][ T798] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.770635][ T798] netdevsim netdevsim2 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.783228][ T798] netdevsim netdevsim2 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.783300][ T798] netdevsim netdevsim2 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.803740][ T15] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.878099][ T15] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.934012][ T15] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.001385][ T15] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.089629][ T39] netdevsim netdevsim5 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.094207][ T39] netdevsim netdevsim5 eth29: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.103675][ T39] netdevsim netdevsim5 eth30: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.117586][ T39] netdevsim netdevsim5 eth31: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.170524][ T15] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.182202][ T4401] 8021q: adding VLAN 0 to HW filter on device eth0 [ 138.252131][ T15] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.331103][ T15] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.381082][ T15] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.401890][ T4401] 8021q: adding VLAN 0 to HW filter on device eth1 [ 138.498481][ T8616] netdevsim netdevsim7 eth32: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.498533][ T8616] netdevsim netdevsim7 eth33: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.503318][ T8616] netdevsim netdevsim7 eth34: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.508022][ T8616] netdevsim netdevsim7 eth35: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.515342][ T15] bridge_slave_1: left promiscuous mode [ 138.516467][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.518730][ T15] bridge_slave_0: left allmulticast mode [ 138.519787][ T15] bridge_slave_0: left promiscuous mode [ 138.520906][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.526177][ T15] bridge_slave_1: left allmulticast mode [ 138.526203][ T15] bridge_slave_1: left promiscuous mode [ 138.526268][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.528649][ T15] bridge_slave_0: left allmulticast mode [ 138.528661][ T15] bridge_slave_0: left promiscuous mode [ 138.528714][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.618031][ T15] bond0 (unregistering): Released all slaves [ 138.657339][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.685405][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.725313][ T15] bond0 (unregistering): Released all slaves [ 138.768087][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.771006][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.815457][ T15] bond0 (unregistering): Released all slaves [ 138.939914][ T4401] 8021q: adding VLAN 0 to HW filter on device eth22 [ 139.059036][ T4401] 8021q: adding VLAN 0 to HW filter on device eth23 [ 139.187710][ T4401] 8021q: adding VLAN 0 to HW filter on device eth24 [ 139.357637][ T4401] 8021q: adding VLAN 0 to HW filter on device eth25 [ 139.488778][ T4401] 8021q: adding VLAN 0 to HW filter on device eth26 [ 139.492165][ T15] hsr_slave_0: left promiscuous mode [ 139.493556][ T15] hsr_slave_1: left promiscuous mode [ 139.498001][ T15] hsr_slave_0: left promiscuous mode [ 139.499095][ T15] hsr_slave_1: left promiscuous mode [ 139.499323][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.499335][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.503033][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.503056][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.506965][ T15] hsr_slave_0: left promiscuous mode [ 139.508002][ T15] hsr_slave_1: left promiscuous mode [ 139.508223][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.508234][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.509356][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.509366][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.518959][ T15] veth1_macvtap: left promiscuous mode [ 139.519004][ T15] veth0_macvtap: left promiscuous mode [ 139.519050][ T15] veth1_vlan: left promiscuous mode [ 139.522061][ T15] veth1_macvtap: left promiscuous mode [ 139.522092][ T15] veth0_macvtap: left promiscuous mode [ 139.522133][ T15] veth1_vlan: left promiscuous mode [ 139.522167][ T15] veth0_vlan: left promiscuous mode [ 139.528741][ T15] veth1_macvtap: left promiscuous mode [ 139.528769][ T15] veth0_macvtap: left promiscuous mode [ 139.528810][ T15] veth1_vlan: left promiscuous mode [ 139.528842][ T15] veth0_vlan: left promiscuous mode [ 139.783222][ T15] team0 (unregistering): Port device team_slave_1 removed [ 139.798896][ T15] team0 (unregistering): Port device team_slave_0 removed [ 139.910443][ T15] team0 (unregistering): Port device team_slave_1 removed [ 139.914259][ T15] team0 (unregistering): Port device team_slave_0 removed [ 140.089583][ T4401] 8021q: adding VLAN 0 to HW filter on device eth27 [ 140.209327][ T4401] 8021q: adding VLAN 0 to HW filter on device eth28 [ 140.338712][ T4401] 8021q: adding VLAN 0 to HW filter on device eth29 [ 140.466345][ T4401] 8021q: adding VLAN 0 to HW filter on device eth30 [ 140.591207][ T4401] 8021q: adding VLAN 0 to HW filter on device eth31 [ 140.648677][ T15] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.711492][ T15] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.719198][ T4401] 8021q: adding VLAN 0 to HW filter on device eth32 [ 140.777783][ T15] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.844340][ T4401] 8021q: adding VLAN 0 to HW filter on device eth33 [ 140.851933][ T15] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.939621][ T5448] netdevsim netdevsim9 eth36: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.939670][ T5448] netdevsim netdevsim9 eth37: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.939705][ T5448] netdevsim netdevsim9 eth38: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.944978][ T5448] netdevsim netdevsim9 eth39: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.948972][ T15] bridge_slave_1: left allmulticast mode [ 140.949294][ T15] bridge_slave_1: left promiscuous mode [ 140.949374][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.952475][ T15] bridge_slave_0: left allmulticast mode [ 140.952789][ T15] bridge_slave_0: left promiscuous mode [ 140.952870][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.016528][ T15] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.056653][ T15] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.095863][ T15] bond0 (unregistering): Released all slaves [ 141.098133][ T4401] 8021q: adding VLAN 0 to HW filter on device eth34 [ 141.219332][ T4401] 8021q: adding VLAN 0 to HW filter on device eth35 [ 141.361674][ T15] hsr_slave_0: left promiscuous mode [ 141.362804][ T15] hsr_slave_1: left promiscuous mode [ 141.363014][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.363025][ T15] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.364067][ T15] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.364078][ T15] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.369262][ T15] veth1_macvtap: left promiscuous mode [ 141.369297][ T15] veth0_macvtap: left promiscuous mode [ 141.369340][ T15] veth1_vlan: left promiscuous mode [ 141.369370][ T15] veth0_vlan: left promiscuous mode [ 141.470401][ T15] team0 (unregistering): Port device team_slave_1 removed [ 141.474077][ T15] team0 (unregistering): Port device team_slave_0 removed [ 141.640242][ T4401] 8021q: adding VLAN 0 to HW filter on device eth36 [ 141.972069][ T4401] 8021q: adding VLAN 0 to HW filter on device eth37 [ 142.082846][ T4401] 8021q: adding VLAN 0 to HW filter on device eth38 [ 142.197528][ T4401] 8021q: adding VLAN 0 to HW filter on device eth39