last executing test programs: 4.520500553s ago: executing program 4 (id=5): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8092) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_id(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000180), &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r7, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x38}}, 0x4891) sendmsg$netlink(r6, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000013c0)={0x14, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x4, 0xcb}]}, 0x14}], 0x1}, 0x4000000) 3.070891867s ago: executing program 4 (id=6): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x171202, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) remap_file_pages(&(0x7f0000093000/0x4000)=nil, 0x4000, 0x6000003, 0x3254, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x408e, &(0x7f0000000280)={[{@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0xffb}}, {@jqfmt_vfsv0}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}]}, 0x3, 0x440, &(0x7f0000000300)="$eJzs28tvG8UfAPDvruP0/Ut+pTz6AAIFEfFImrRAD1xAIHEACQkO5RiStCp1G9QEiVYVFITKEVXijjgi8RdwggsCTkhc4Y4qVSiXFk5Ga+8mjmPnhR2X+vORtp3ZHXvm29mxZ3bqAPrWSPZHErE3In6LiKF6dmWBkfpftxevTP+1eGU6iWr1zT+TWrlbi1emi6LF6/bkmdE0Iv00icMt6p2/dPncVKUyezHPjy+cf298/tLlZ86enzoze2b2wuTJkyeOTzz/3OSzHYkza9OtQx/OHTn46tvXX58+df2dn75Jivib4uiQkbUuPl6tdri63trXkE4GetgQNqUUEVl3lWvjfyhKsdx5Q/HKJz1tHNBV1Wq1uqf95atV4C6WxEZLnss/L4C7Q/FFn61/i2Obph53hJsv1hdAWdy386N+ZSDSvEy5aX3bSSMRcerq319mR3TnOQQAwArfZfOfp1vN/9K4r6Hc//K9oeGI+H9E7I+IeyLiQETcG1Ere39EPND45jvXr795k2T1/Ce9seXgNiCb/72Q722tnP8Vs78YLuW5fbX4y8nps5XZY9laOCJGo7wjy0+sUcf3L//6ebtrjfO/7MjqL+aCeTtuDOxY+ZqZqYWpfxNzo5sfRxwaaBV/srQTkETEwYg4tMU6zj759ZF219rFX97IG3dgn6n6VcQT9f6/Gk3xF5K19yfHd0Zl9th4cVes9vMv195oV//6/d9dWf/vbnn/L8U/nDTu185vvo5rv3/Wdk2z1ft/MHmrlh7Mz30wtbBwcSJiMHmt3ujG85PLry3yRfks/tGjrcf//lj+lzgcEdlN/GBEPBQRD+dtfyQiHo2Io2vE/+NLj7279fi7K4t/ZlP9v5wYjOYzrROlcz98u6LS4c3En/X/iVpqND+zkc+/jbRra3czAAAA/PekEbE3knRsKZ2mY2P1/y9/IHanlbn5hadOz71/Yab+G4HhKKfFk66hhuehE/myvshPNuWP58+NvyjtquXHpucqM70OHvrcnjbjP/NHqdetA7rO77Wgfxn/0L+Mf+hfxj/0rxbjf1cv2gFsv1bf/x/1oB3A9msa/7b9oI9Y/0P/Mv6hfxn/0Jfmd8X6P5KXkFiViPSOaIZElxK9/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADojH8CAAD//69z5Dw=") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x0, 0x82) r2 = userfaultfd(0x80800) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f00000007c0)={{&(0x7f000036c000/0x4000)=nil, 0x4000}, 0x1}) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000780)={0x8, 0x40000cca8, 0x10003}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000880)="ad00"/16, 0x10) sendmmsg$unix(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@rights={{0x10}}], 0x20, 0x20000004}}], 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a40)={'syzkaller1\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x74, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x7ff, 0x80000000, 0xffffffff, {0x2, 0x2, 0x2e, 0x9, 0x401}, {0x4a, 0x2, 0x3, 0x2, 0x0, 0x1}, 0x0, 0xb, 0x59e}}]}]}}]}, 0x74}}, 0x0) write$tun(r5, &(0x7f0000000c40)=ANY=[], 0x36) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3982, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 2.39976151s ago: executing program 4 (id=17): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000040)) setns(r1, 0x2000000) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000840)={0x9, 0x204, 0x4, 0x18000}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="1700000007"], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000dc0)='[', 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000e00)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000e40), 0xd) bind$rds(r2, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x10) close(r2) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x202, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000580)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r4, 0x3b86, &(0x7f00000005c0)={0x18, r5, 0x0, 0x800}) sendmsg$rds(r2, &(0x7f0000000740)={&(0x7f0000000780)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x9}], 0x18}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x54040081}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10000, 0xa}, {0xffff, 0xffff}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x6c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xfd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmmsg(r6, &(0x7f0000000380), 0x40000000000009f, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r9, 0x0, 0x61, &(0x7f0000000e40)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000b80300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f496ca288908e79051882157b2f64190f057faddc6fab805436126d24a21491265d65a3b6db8e2c421d6d68db0aea5a9d69e1eeba23d8f3517dbb6836d992132707451807221ccefb6f2499ebca140f8b6e51c9849b69d9c3f71eeb150360a846df89d86aa00b0cd0434a5c40ecff6e6b8730c6072b9bc7c85423c964871b05eb2a35e49997f935fc3993dacc87fc2f0fcc4aa04bcf23154de8a13b2da3865fab86c5264b4998e799ba626058aa7e"], &(0x7f0000000d40)=0x3e0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) 2.293584673s ago: executing program 4 (id=19): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000440, &(0x7f0000000180)={[{@auto_da_alloc}, {@orlov}]}, 0xfd, 0x4bb, &(0x7f0000000c00)="$eJzs281rHOUfAPDv7G6SNn1Jfv3Vl9Zqo1UsviRNWrWgUBUEDwqCHupJYpKW2rSRJkJbgo1S6kXQgncRvIj+BZ48iXoSvOpdCkVzafW0MpnZ7SbZ3eZ98/L5wCTz7Dyzz/OdZ56ZZ2Z2AtiyetI/ScTOiPg9IroiolCbYXs2pfluT08O/TM9OZREufzmX0m6WtyanhyqZE3y/zuyRCn9osLVJF6sU+74pctnB0dHRy7k6b6Jc+/3jV+6/PSZc4OnR06PnB84fvzY0f7nnh14ZkXiTOt0a/+HYwf2vfr29deHTl5/9+fvkojOyvLaOJbp+a7q7GR1m8z12AoVtl7sqplPSi2sCIvSERFpc7XN9P+uKF7dXV3WFa983NLKAauqXC6XBxovnioDm1gSS1mrmB87gI2rcqJPr38r0xoNPdaFmy9lF0Bp3LfzKVtSyu6DdGTXRrtWqfyeiDg59e+X6RSLvg/Rtkq1AgA2sx/S8c9TdcZ/pYh7syx/n4iI3fmzoe6I+F9E7ImI/0fE3oi4J7K890XE/fWL6XmnQfk9c9Lzxz+FG8uNsZl0/PdC/mxr9viv+hSsu5inds3E35acOjM6ciTfJoejrSNN99f99iRiKv3/22eNyq8d/6VTWn5lLJjX40apY/Y6w4MTg8sOPHfzo4j9pXrxJ1G6E0Xsi4j9SyzjzBPfHJj9SbE6d/f4m1iB50zlryIez9p/KubEX5E0fz7Zty1GR470VfaKiOk5Zfzy67U3GpWfxV+I5vFvX36gDaTt31lv/z9Rjb87qX1eOz7vK9rvVsa1Pz5peE2z1P2/PXlrVuEXBycmLvRHtCevzf+85gZ3JX1x+NuZ/Gn8hw/V7/978nXS+B+IiHQnfjAiHoqIg3ndH46IRyLiUJP4f3r50fcaxn9w4fv/VPZvRZ+upvEP1z3+NWr/Rcxsy7/h7I/fN4y/0v6VBqvb/scqiZlKLeT4V1udziY1Xco2AwAAgI2mEBE7Iyn0VucLhd7e7Pfye6OzMDo2PvHkqbEPzg9n7wh0R1uhcqerq+Z+aH9+b7iSHsjTV/L00fy+8RfF7TPp3qGx0eFWBw9b3I4G/T/1Z7HVtQNWXWnua2rlrlZVBVhj3teErWvp/d+RAza6u/TiwlrVA1h7zuKwddXr/1dqE0lkv5IHNh3nf9i6qv3/8wVkrnnda+7Lm8DG0+z876cAsLnN6/8uCGArWNJ7/etpJr6OaJ4nWS9VXdTMp8tZvbRaFeu480kUahYla7x92lvSKAPFiBbuEqVYYOa4VL6y7EJbfWQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYGf8FAAD//98f2qA=") mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="580700fcffffffffc80f024ba1f1c498080000000000", @ANYRES32=0x0, @ANYBLOB="137c0300231a05002c0012800e0001006970366772657461700000001800028014000600fc0000000000000000000000000000010a000100aaaaaaaaaabb0000"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r2}) syz_emit_ethernet(0x3e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050186dd6000000000082c08fe8000000000000000000000000000bbfe8000000000000000000000000000aa8800036c00000000"], 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) recvmsg$can_j1939(r3, &(0x7f0000000880)={&(0x7f0000000400)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f00000005c0)=""/57, 0x39}, {&(0x7f0000000680)=""/160, 0xa0}], 0x4, &(0x7f0000000780)=""/203, 0xcb}, 0x10002) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x15e) r4 = memfd_create(&(0x7f00000009c0)='\xff\x00l\x1e\xa00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f9, &(0x7f0000000280)={'sit0\x00', @random="3f00230c1100"}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x301, 0x20}, 0xc) socket$inet6(0xa, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000002700)={0x0, 0x0, &(0x7f0000002980)={&(0x7f00000029c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xf, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000002b00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240008d1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000002b40), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002b80)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000002bc0)={&(0x7f0000002dc0)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002e80)="81", 0x1}], 0x1}, 0x4) r8 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x2010, r0, 0x9df9b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) fstat(r10, &(0x7f0000000600)) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020}, 0x2020) 1.796148131s ago: executing program 0 (id=27): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'netpci0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0xfff9, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0xc0, 0x2}}}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR="e1"]}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./config\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='fc\n', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000611814000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) 1.659737463s ago: executing program 0 (id=31): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@noauto_da_alloc}, {@orlov}]}, 0x1, 0xb66, &(0x7f0000001380)="$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") r2 = syz_mount_image$ext4(&(0x7f0000000240)='ext3\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@nolazytime}, {@discard}, {@max_batch_time={'max_batch_time', 0x3d, 0x200}}, {@inlinecrypt}, {@noblock_validity}]}, 0xff, 0x46d, &(0x7f0000000f00)="$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") ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.635611984s ago: executing program 3 (id=32): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000d2081000000000000000000073010f000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2400c010, &(0x7f0000000f80)={0x2, 0x1234, @loopback}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) (async) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x11, 0x8137, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040025bd7000fbdbdf25010000000800010001000037f90003000000000000000000", @ANYRES32=0x0, @ANYBLOB="080001000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000000000008000300", @ANYRES32=r6, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000002000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 1.556749265s ago: executing program 0 (id=33): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x280, r2, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0x28, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x80}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xfff}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x99, 0xbe, "4eae403d212a681df3c611fe151e431aae07e43bc4a934822ee04954e0966c6a052f67f344de709ebc7ca25fd9b8ac7655dba059d3843c5e771d7f67f204b02d5d5c617b9442daf63450a70bd4fb8cb715bf43a6879a62a09a0e91565d7e1f3888c6a74f209dea7108f78ee26151f579477ef788b6efd1880da6302cbea0b6b281a3d9b6f6a24618a0df9d953e574bd83314401980"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x102, 0xac, "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"}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x458}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x60, 0xac, "93a27e2e56a76221a55504399c7503de500e60ec0035ddff1cf9073d8c325ca907ee3bf5fc824e915673eb12b7d9350218dc868f7f85df337a14de55283c7b87d111607b90a13c9b8314a903646f520eeaa8552c6d59309ff6c53574"}]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x8855) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r1, 0x301}, 0x14}}, 0x0) 1.464161928s ago: executing program 3 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000280)=[{0xff80, 0x4, 0x9, 0xfffff038}, {0x0, 0x2, 0x34, 0xfffff00c}, {0xe, 0x9, 0x2}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x4000080, 0x0, 0x0) 1.462464721s ago: executing program 0 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, r2, 0x215, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000048) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1800040, &(0x7f0000000a80)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@block_validity}, {@nodioread_nolock}, {@noauto_da_alloc}, {@resuid}, {@noblock_validity}]}, 0x1, 0x59d, &(0x7f0000000b40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./file1\x00', 0x143442, 0x0) pwritev2(r5, &(0x7f0000001140)=[{&(0x7f0000001180)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x86) r6 = openat(0xffffffffffffff9c, &(0x7f00000011c0)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x1, 0x90001) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x8, 0x4, 0x100, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@bloom_filter={0x1e, 0x5, 0x9, 0x1ff, 0x44830, r7, 0x86, '\x00', 0x0, r4, 0x1, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xb, &(0x7f0000000480)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0x30}, @map_fd={0x18, 0x1, 0x1, 0x0, r7}, @generic={0x15, 0x8, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x3, 0xb, 0x9, 0xffffffffffffffc0}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r6, 0x0, 0x0, 0xb811, 0x0) close(r9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000540)=r8, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, 0x0) 1.363610826s ago: executing program 3 (id=36): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f00000001c0)={[{@nobarrier}, {@bh}, {@nodelalloc}, {@usrquota}, {@commit}]}, 0x8, 0x638, &(0x7f0000000940)="$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") 1.215574957s ago: executing program 3 (id=38): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0xc8840) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff8}, {0x1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x4, 0x6, 0x5, 0x1}, @dev={0xac, 0x14, 0x14, 0x36}, @multicast2, 0x0, 0x8001}}]}, {0x4}, {0xc}, {0xc}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x94}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'gretap0\x00', &(0x7f0000000780)={'syztnl0\x00', 0x0, 0x40, 0x7800, 0xe, 0x7, {{0xb, 0x4, 0x2, 0x7, 0x2c, 0x66, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, {[@ssrr={0x89, 0x13, 0xb6, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xe}, @empty, @broadcast]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'dvmrp1\x00', 0x0}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffe0, 0xb}, {0x7, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x400, 0x6, 0xfffd, 0x4}, {0x40, 0x1, 0x3, 0x7f, 0x7ff, 0x16800000}, 0xcd04, 0xfffffffe, 0x1526}}, @TCA_TBF_BURST={0x8, 0x6, 0xad}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x54815}, 0x4008000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000ac0)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}}, 0x44090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x124, r0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000800}, 0x4008000) r12 = socket$inet6(0xa, 0x3, 0x2f) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r13, 0x84, 0x7f, &(0x7f0000000000)="010000000980ffff", 0x8) r14 = open$dir(&(0x7f0000000400)='./sec\x00', 0x200000, 0x12d) mkdirat(r14, &(0x7f0000000440)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sec\x00', &(0x7f0000000280)='securityfs\x00', 0x0, 0x0) r15 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r15, &(0x7f0000000300)="616464726573735f67726f7570206772703120302e302e302e302d3235352e3235352e3235352e3235350a616464726573735f67726f75702067727031203a3a2d666666663a666666663a666666663a666666663a666666663a666666663a666666663a666666660a61636c5f67726f7570203020826574776f726b20696e65742073747265616d2062696e6420406772703120302d3635353b350a61636c5f67726f75702030206e6574776f726b20696e657420646772616d2062696e6420407fe26772703120302d36353533350a", 0xd0) setsockopt$inet6_IPV6_XFRM_POLICY(r12, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x3}, @in=@local, 0x4e28, 0x0, 0x4, 0xf000, 0x2}, {0x3, 0x802, 0x913e, 0x0, 0xfffffffffffffffc, 0xfffffffffffff207, 0x2000005}, {0x0, 0x0, 0x0, 0x8}, 0x3, 0x0, 0x1, 0x0, 0x4, 0x3}, {{@in6=@private0, 0x4d2, 0x33}, 0x0, @in6=@local, 0x3507, 0x0, 0x2, 0x14, 0x4, 0xfffffffe, 0xfffffffd}}, 0xe8) connect$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @random="5aeadd61229e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, @mcast2, {[], @time_exceed={0x4, 0x2, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], "af34000000000000"}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.085055181s ago: executing program 3 (id=39): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001340)={0x0, 0x0, 0x0}, &(0x7f0000001380)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000140)='3', 0x4e) syz_emit_vhci(0x0, 0x9) sendmmsg$unix(r0, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}], 0x50, 0x40800}}], 0x1, 0x0) 1.079537589s ago: executing program 2 (id=40): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x270f, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000500)={0x2, 0x270f, @empty}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xb, &(0x7f0000000600)=@raw=[@generic={0x6a, 0xa, 0x0, 0xfffa, 0xf27}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4, 0x0, 0x0, 0xffffffff}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x55}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0xbf, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000740)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c61737400000000040002801400000011000100"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010426bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000400000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}}, 0x200040cc) 945.272848ms ago: executing program 2 (id=41): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x101301) ioctl$USBDEVFS_BULK(r0, 0xc0185502, &(0x7f0000000080)={{{0x1, 0x1}}, 0x20, 0x8, 0x0}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2580, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0x3d) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000140)={0xffefffff, 0x6e3, 0xb8, 0xfffffffd, 0x9, "d5a900000000000000fb9503d2b30d3b00"}) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x1010, 0xffffffffffffffff, 0xec776000) 815.965328ms ago: executing program 2 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newtclass={0xc6c, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0xc40, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x8, 0xd, 0x1c0000, 0x2, 0x81, 0x2, 0x1, 0x1ff, 0x81, 0x8, 0x8, 0x100, 0x8, 0xf, 0x3, 0xdbd4, 0xfffffff8, 0xd37, 0x1, 0x5, 0x9, 0x804, 0x5, 0x3, 0x800, 0x8, 0xb43, 0x7, 0x7, 0xfffffffc, 0xffffff4e, 0x1, 0x9, 0x1, 0x81, 0x7ff, 0x4, 0x3, 0xfffffeff, 0x8, 0x4, 0x10, 0x3, 0x9, 0xfffffff7, 0x5, 0x8, 0x6, 0x0, 0xd3e, 0x2d, 0x276, 0x9, 0x4, 0x748, 0x7f, 0x9, 0xffffffff, 0x8, 0x7, 0x4, 0xfffffffb, 0x56, 0x9, 0xdf, 0x1ff, 0xc7, 0x8, 0xff, 0x0, 0x3, 0x2, 0x400, 0x7, 0xfff, 0x101, 0x1, 0xc0000, 0x5, 0xffff, 0x6, 0x7fffffff, 0x3, 0x477, 0x9, 0x4, 0xbe, 0x100, 0x0, 0x6, 0x1, 0x7, 0xe, 0x3, 0x9, 0x4, 0x9000000, 0x8, 0xd, 0xee11, 0x6, 0x6, 0x405, 0x4, 0x5, 0xc, 0x80, 0xffffffff, 0x1, 0x0, 0x3, 0x1, 0x8, 0x401, 0x6, 0xbdd, 0x3, 0x2, 0xd, 0x100, 0x5, 0xfffffffc, 0x200, 0x3, 0xe4f6, 0x7f, 0x3, 0x7, 0x5, 0x80, 0x100, 0x5a6, 0x7, 0x4, 0xeebe, 0x47ac1a21, 0xff, 0x5, 0x9, 0x1ff, 0x101, 0x19, 0x8, 0x6, 0xfff, 0x9, 0x2, 0x100, 0x2, 0x2, 0x8, 0xfff, 0x7fff, 0x2, 0x0, 0x1, 0x1ff, 0x2, 0xffffffff, 0x3039, 0x1, 0x2, 0x5a, 0x0, 0x7, 0x7, 0x9, 0x5, 0xfffffb5b, 0x101, 0x3, 0x485, 0xfffffeff, 0x400, 0x5, 0x7, 0x200, 0x585, 0xfffffffd, 0x0, 0xa, 0x1, 0x6, 0x7fff, 0x9000, 0xb, 0x917, 0xfffff000, 0x505, 0x8, 0x5, 0xfffffffc, 0xb, 0xfffff70f, 0x80000001, 0x4, 0x3355d8d5, 0x1, 0x81, 0x7fff, 0xfffffffd, 0xb5d, 0x7, 0x7, 0x600, 0x791f, 0x3, 0x1, 0x6, 0x1ff, 0x1000, 0x8, 0x1000, 0x72e, 0x100, 0x0, 0x25, 0xfffffffb, 0x7, 0xff, 0x0, 0x7, 0xfff, 0x401, 0xffffffff, 0x81, 0x3, 0x1, 0x8, 0x7, 0x8cc0, 0x1, 0xffff, 0x7, 0x2, 0xfffffff4, 0x8000, 0x9, 0x5, 0x1, 0x100, 0x350, 0x3, 0x7d84, 0xf75, 0x78e, 0xfff, 0x2e, 0x20000000, 0x2, 0xc, 0x5, 0x5, 0x2, 0x5, 0x9]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x9, 0x1, 0x0, 0x3f1, 0x2, 0x5}, {0x8, 0x0, 0x8, 0x7b, 0x7ff, 0x4}, 0x4, 0x7, 0xffff, 0x8, 0x644}}, @TCA_HTB_CTAB={0x404, 0x3, [0xb, 0x3, 0x6, 0x8, 0xfffffffc, 0x9, 0xb, 0xfffffff9, 0x10000, 0x5, 0x2, 0x6, 0x8, 0x5a, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb3, 0x3, 0x0, 0x1, 0x800, 0x1ff, 0x922, 0x91, 0xa236f736, 0x8, 0x4, 0xff, 0x2, 0x10000, 0x5, 0x5, 0x0, 0x8000, 0x9, 0x8, 0xfffff800, 0x6, 0x0, 0xfffffffc, 0x5, 0xffff, 0x7, 0x0, 0x1, 0xf56, 0x1ff, 0x1, 0x2, 0x3, 0x5, 0x7, 0xfffffffb, 0xfffffff8, 0x7, 0x4, 0x1000, 0x6, 0x7f, 0x4, 0x9, 0x0, 0x80000000, 0x7, 0x0, 0x3ff, 0xe, 0x3, 0x2, 0x7, 0x4, 0x1, 0x1, 0x1, 0x96c, 0x4, 0x38, 0xc, 0x8001, 0x1, 0x1, 0x8668, 0x400, 0xb, 0x8, 0x7, 0x2400000, 0x6, 0x200, 0x9, 0xfffffff9, 0x0, 0x7, 0x6, 0x53d7, 0xfff, 0xffffffff, 0x5, 0x1, 0x400, 0xd, 0x9, 0x90, 0x8, 0x3, 0x2, 0x2, 0x80000000, 0x1, 0x1000, 0x6, 0xa, 0x7, 0x8, 0x4, 0x7, 0x0, 0x8, 0xffff, 0xfffff801, 0x8, 0x10000, 0xffff, 0x4, 0x8008, 0x5, 0x1, 0x9, 0x6, 0xfff, 0x4, 0xffff, 0x401, 0x579, 0xd, 0x1, 0xe62, 0xfffffff8, 0x3, 0x7, 0x0, 0x8, 0x80, 0x81, 0x9, 0x0, 0x1, 0x8, 0x80000001, 0x8, 0xfff, 0x9, 0x6, 0x7, 0x5, 0x6, 0x0, 0x4, 0x3, 0x0, 0xfffffffe, 0x7f, 0x1, 0x2, 0x400, 0x3, 0x80000000, 0x7, 0x5, 0x6, 0x8, 0x8, 0x449f, 0x5, 0x4, 0x4, 0x9, 0x0, 0x168, 0xcec, 0x4de, 0x7, 0x0, 0x2, 0x6, 0x3, 0x7, 0x61a, 0x7, 0x4, 0x5, 0x7, 0x7, 0x0, 0x7f, 0x4, 0xa14, 0x90000000, 0x9, 0x2, 0x8000, 0x200, 0x1, 0x242, 0x6, 0x3, 0xa, 0x2f, 0xfff, 0x0, 0x0, 0x19, 0x6, 0x3, 0x0, 0xfffffffd, 0x15, 0x8, 0x3, 0x4, 0x5, 0xffffffff, 0x5ffad104, 0x6, 0xdbfe, 0xfffffff9, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x8, 0x3, 0x4, 0x1, 0xffffc993, 0x653e, 0xffffffff, 0x8, 0x8001, 0x7, 0xb, 0xac1, 0xffff, 0x2, 0x2, 0x4, 0x1ff, 0x0, 0x3, 0x40, 0x6]}, @TCA_HTB_CTAB={0x404, 0x3, [0x9, 0x1, 0x5, 0x2, 0x1, 0xa, 0x0, 0x6, 0x40000000, 0x3, 0x15, 0x3, 0x7, 0x0, 0x9, 0xf6, 0x8001, 0xffffffff, 0x0, 0xfffffffe, 0x40, 0x8, 0xfffffffc, 0x80000000, 0x1, 0x2, 0x7, 0x2, 0x7, 0x2, 0x7, 0xffff, 0x101, 0x5, 0x7, 0x81, 0x306, 0x5, 0x3, 0x620f8cf2, 0x4, 0x8, 0x7, 0x10000, 0xdac4, 0x6, 0x6, 0xd, 0x2, 0x4f08, 0x9a12a13, 0x0, 0x5, 0x0, 0xfdb, 0x8, 0x5, 0x7, 0x2, 0xf, 0x80000001, 0x6e61, 0xffff, 0x7, 0x7, 0xc, 0x10, 0x77, 0x0, 0xe, 0x63, 0x9, 0x8, 0x2bc4, 0x7fff, 0x4, 0x8, 0x2, 0x363a, 0xeb45, 0x9, 0x6, 0xd, 0x8, 0x30d962b1, 0x0, 0x101, 0x8, 0x4, 0x6, 0x5, 0x5, 0x0, 0x8, 0x10001, 0x0, 0x200, 0x0, 0x5, 0x4335f8e, 0x5, 0x8, 0x7, 0x9, 0x1, 0x8, 0x2, 0xffffffd6, 0x1, 0x3, 0x6, 0x7fffffff, 0x7, 0x1, 0x2, 0x3, 0x81, 0x5, 0x2768, 0x1, 0x9, 0x8, 0x5ef, 0xc7, 0xfffff800, 0x1ff, 0x4, 0x5e, 0x7, 0x8, 0x9, 0x4, 0xf, 0x4a, 0x800, 0x8, 0x5, 0x9, 0x400, 0x9e, 0x2, 0x1000, 0x2, 0xffffffff, 0xd, 0x0, 0x8000, 0x33b, 0x1, 0x4, 0xc8, 0xffff, 0x0, 0xf3, 0x7, 0xb1, 0x7, 0x6, 0xfffeffff, 0x8cf8, 0x1, 0x8, 0x5e, 0xf, 0x3, 0xa, 0x1, 0x6, 0xf, 0x55, 0x64b, 0x3, 0x7fff, 0x200, 0x0, 0xb, 0x1, 0x8000, 0xfffffffd, 0x3, 0xfffffff7, 0x9, 0x80000001, 0x8, 0x2b0, 0x166, 0x5, 0x2, 0x2, 0x101, 0x1, 0xffffffff, 0x80000000, 0x5dc0, 0x1, 0x23f1, 0x80000001, 0xfff, 0x7, 0x1000, 0x3, 0x4, 0x3, 0xe, 0x8, 0xffffffff, 0x40, 0x0, 0x7, 0x9fdc, 0x6, 0x4, 0x16e3, 0x101, 0xc9, 0xfffffffa, 0x10001, 0x5, 0x3, 0xc, 0x1, 0x0, 0x3ff, 0x81, 0x9, 0x6, 0x2, 0x3, 0x3, 0x4, 0x80000000, 0x5, 0x1, 0x917, 0x2, 0x7f, 0xc3f, 0x96, 0x9, 0x60000, 0x0, 0x2, 0xc000, 0xe3, 0x7, 0x7, 0x8, 0x8, 0xfffffe01, 0x2c, 0x60000000, 0x2, 0x0, 0xb1, 0x0, 0x3]}]}}]}, 0xc6c}}, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x40000, 0x120, 0x12}, 0x18) 814.874817ms ago: executing program 2 (id=44): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f0000000300)=""/24, 0x18}, {&(0x7f0000000140)=""/25, 0x19}, {&(0x7f0000000440)=""/122, 0x7a}, {&(0x7f0000000200)=""/199, 0xc7}, {&(0x7f0000000900)=""/253, 0xfd}], 0x6) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r2, &(0x7f00000004c0)={0x2c, 0x1, r3, 0x0, r1}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x7, 0x6}, {0x6, 0xfd, 0xee, 0x16}]}) r4 = syz_open_dev$usbfs(&(0x7f0000000580), 0x205, 0x88201) r5 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x7, 0x0) r6 = fcntl$dupfd(r4, 0x0, r4) syz_mount_image$squashfs(&(0x7f0000000500), &(0x7f0000000a00)='./file1\x00', 0x808c10, &(0x7f0000000a40)=ANY=[], 0x3, 0x1bc, &(0x7f0000000a80)="$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") ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000600)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000640)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000a40), &(0x7f0000000c40)='./file0\x00', 0x12048c1, &(0x7f0000000c80)={[{@uni_xlate}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8no}, {@utf8}, {@shortname_lower}, {@utf8}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_mixed}, {@fat=@flush}, {@shortname_winnt}, {@uni_xlate}]}, 0x0, 0x2bf, &(0x7f0000000d40)="$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") r7 = syz_open_procfs(0x0, &(0x7f0000001000)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000001040)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000001180)='.\x00', &(0x7f00000011c0)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r7, &(0x7f0000001200)={0x2020}, 0x2020) ioctl$MON_IOCQ_URB_LEN(r5, 0x9201) r8 = syz_io_uring_setup(0x6c04, &(0x7f0000000680)={0x0, 0x14c4, 0x1, 0x3, 0x4e}, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0, &(0x7f0000000780)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000007c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2000, @fd_index=0x4, 0x0, &(0x7f0000000840)=[{&(0x7f0000000880)=""/92, 0x5c}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x4, '\x00', 0x0}}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003240)={0x1, &(0x7f0000003280)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r12 = syz_open_dev$dri(&(0x7f00000032c0), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r12, 0xc04064a0, &(0x7f0000003300)={0x0, &(0x7f0000003340)=[0x0], 0x0, 0x0, 0x0, 0x1}) 798.455031ms ago: executing program 1 (id=45): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r0, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000440)=0x1b) (async) sched_setaffinity(r3, 0x8, &(0x7f0000000440)=0x1b) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x80800) splice(r4, &(0x7f0000000280)=0x7, r1, 0x0, 0xfffffffffffffffd, 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='\x00', 0x89901) fcntl$setsig(r5, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) (async) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500), 0x200002, 0x0) openat$cgroup_devices(r6, &(0x7f0000000540)='devices.deny\x00', 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000580)={0x0, 0x44a3f1ed, 0x0, 0x8000}) (async) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000000580)={0x0, 0x44a3f1ed, 0x0, 0x8000}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000640)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000740), 0x651, 0x0) 680.487179ms ago: executing program 1 (id=46): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=0xffffffffffffffff, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x800001, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000540)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x0, 0x1}, 0x20) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000440)=0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYRES32=r2, @ANYRESOCT=0x0, @ANYBLOB="ada3e0321a0e24de1f2514e0f9985c55b1b3e31d1387e9ed", @ANYBLOB="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", @ANYRESOCT=r3, @ANYBLOB="8e32c92d635449b0f81469fd5096c6a5098d1f373dad149a7515bf33a0c6379f9bc5a52b5d5412fc54d9b2ff6ff4be942c310711b6d7be9882474bb0b3c2afb6468a894e0526cbdd675d610ce725ac0b0dfef69b0b3dc49d5df4f5a421a56b663b01957eaa0f2f403f2a62e6", @ANYRES64=r1, @ANYRESOCT=0x0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000580), 0xcff5, r4}, 0x38) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) listen(r2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e27, 0x0, @empty}, 0x1c) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$EVIOCGPROP(r6, 0x80404509, &(0x7f0000000380)=""/138) shutdown(r2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x19ff}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 569.410243ms ago: executing program 1 (id=47): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newsa={0xfc, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in=@local, 0x0, 0x2b}, @in=@loopback, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0x2, 0x2, 0x0, 0x14}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xf}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_to_batadv\x00', &(0x7f0000000040)=@ethtool_eeprom={0xc, 0x335a, 0x10}}) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 567.684446ms ago: executing program 0 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x11, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x3, {0x100000001}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0x8}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x7, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7, 0x1}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0xa}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x7, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./sec\x00', &(0x7f00000004c0)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='select pid=1\nuse_group 0\nnetwork inet stream bind @grp1 0-65535\nnetwork inet dgram bind @grp1 --65535\n', 0x66) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x19, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001280)={@cgroup=r2, 0x16, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001340)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1600000030000000", @ANYRES32=r3, @ANYBLOB="e3d45c74f5056da914d93d1da1a83e1b099b3e9ee02ea9a580d91711182227f2ab374342999a1edca8bf68dc5a59f89450c2fc69ee118ff550259a4ffc2e765fa9f1b27e188d3c8d6ae70212c661718507fd3c0bc69d224ef5a90190fd45e12f871ab72b52e2d872f1581d3a60db596a828d618580114bdeaea1474ce4197b398513cc7d508fa7935a736383aadf1f68a1650d950a59ed90d1eccb995da6489c1e08f55ddf2a0c162f5dcab4dc83deb797db7c494601d2a3667c43c8c5cfb5b62130", @ANYRES32=0x0, @ANYRES64=r4], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001300)={@ifindex, r1, 0x75, 0x8, 0x0, @void, @value=r1, @void, @void, r4}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000012780)={'veth0_to_bridge\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8001}, {0xffff, 0xffff}, {0xb, 0x2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x5}}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000127c0)={0x0, 0x0, &(0x7f0000012800)={&(0x7f0000000280)=@delqdisc={0x180, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0x2}, {0xfff3, 0xe}, {0x945869b9527714e2, 0xfff2}}, [@TCA_STAB={0x154, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0xfb, 0x6, 0x6, 0x2, 0x5, 0x139, 0x4}}, {0xc, 0x2, [0x5a, 0x7, 0x9, 0xd2]}}, {{0x1c, 0x1, {0x2, 0x2, 0x9a0, 0x6, 0x1, 0xc, 0x9, 0x5}}, {0xe, 0x2, [0x55, 0x7, 0x8, 0x800, 0x1000]}}, {{0x1c, 0x1, {0x7, 0x3, 0xfff, 0x6, 0x1, 0x10444a37, 0x7, 0x1}}, {0x6, 0x2, [0x97]}}, {{0x1c, 0x1, {0x0, 0x0, 0x41, 0x101, 0x1, 0x3964d7db, 0x5, 0x6}}, {0x10, 0x2, [0x7, 0xb, 0x4, 0x10, 0xd349, 0x10]}}, {{0x1c, 0x1, {0x8, 0x4, 0x204, 0xe, 0x1, 0x8, 0xc60, 0x9}}, {0x16, 0x2, [0x3, 0x3, 0x9, 0x1, 0x8006, 0x1, 0x0, 0x5, 0x2]}}, {{0x1c, 0x1, {0x0, 0x8, 0xd, 0x6, 0x0, 0x2ad3, 0xfffff000, 0x2}}, {0x8, 0x2, [0x8, 0x3b4]}}, {{0x1c, 0x1, {0x5, 0x80, 0x0, 0x0, 0x1, 0xb, 0x5, 0x2}}, {0x8, 0x2, [0x7f, 0x8]}}, {{0x1c, 0x1, {0x2, 0x8d, 0xa, 0x5, 0x2, 0x2, 0x4, 0x8}}, {0x14, 0x2, [0x0, 0x1, 0x9f4, 0x2, 0xe, 0x0, 0x4, 0x6]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x180}}, 0x0) write(r9, &(0x7f0000001440)="4ce4e75a42fd3eb89c9dab3920b5751c14b45f3267fcc3ad8362833fff9b028961cfe2c34615510d8cb0b831dd133702189bb05d9b4319a96327937a438f159a55ef4f40b2579f4eda8dd81136772edba7ab4c20e98e9debeb04a35503bc866657f54acb65b4596d65ce92b3183dd267ec346ba263a6c2b2176459c8d5e4792a6f576e17b15c8db55784f322fdf82ae65e5d90d2b47e9022da7c38ea92a37241c074991c2f586d079fc51d2a9be95b29fdd4b6ccd7cf6ec6ee7504abcdbaeea918cbf405d3f585", 0xc7) r11 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder_logs/state\x00', 0x0, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r11, 0x10f, 0x85) sendmsg$nl_route_sched(r5, &(0x7f0000012880)={0x0, 0x0, &(0x7f00000128c0)={&(0x7f0000012900)=@deltfilter={0x2c, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r7, {0xb, 0x1}, {0x1, 0xffff}, {0xb, 0xf}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x24044010) 565.509332ms ago: executing program 2 (id=49): syz_usb_connect$cdc_ecm(0x0, 0xbb, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa9, 0x1, 0x1, 0x5, 0x80, 0x7f, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "6909c417"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xdd91, 0x3, 0xd}, [@mdlm_detail={0x64, 0x24, 0x13, 0x60, "487826bc4d58484628acf0fe1de57aae64bfd76f4d85c160edc56995a24f5cb396132a26b9a73ad6abf1bdb8dfd756d3015df5444a2ca60922544c426e25565200fbc20bb55e5172783258c2a85a062bb8a1ab6208654c9b30ef14d2df220928"}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x8c5c09fa54ec3723}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x2, 0x6b, 0x15}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x7f, 0xe7}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x4, 0x9, 0x9, 0x10, 0x81}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41c}}]}) r0 = add_key$fscrypt_provisioning(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)={0x1, 0x0, @auto=[0x2f, 0x21, 0x3b, 0x16, 0x3a, 0x1f, 0x3f, 0x33, 0x32]}, 0x11, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="788b40205a889533031d4ca36f16da197bc5b293c62aaaeba0f08b0141ccf5b61b02943da8a80dcbadf38f5e166ba9d2900b", 0x32, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000002c0)='cifs.spnego\x00', &(0x7f00000003c0)=@keyring={'key_or_keyring:', r1}) keyctl$negate(0xd, r1, 0x4, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "69f57967f819f4ae64023380aa2158baa0fe03bd9f0dc74f8d5f83905734398cd5451487d405fc8c63c6a601c3ec15e259cbaf5d21d457bdcfb69498be8fe586", 0x2d}, 0x48, 0xfffffffffffffff9) keyctl$update(0x2, r2, 0x0, 0x0) keyctl$read(0xb, r2, &(0x7f0000000500)=""/4096, 0x1000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001500)={{{@in6=@mcast1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000001600)=0xe8) keyctl$chown(0x4, r0, r3, 0xee00) r4 = syz_open_dev$dvb_frontend(&(0x7f0000001640), 0x257, 0x420003) ioctl$FE_DISEQC_SEND_BURST(r4, 0x6f41, &(0x7f0000001680)=0x1) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f00000016c0)={0x3, 0x6, 0xb}) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r2, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000001700)={r1, 0x84, 0xdb}, &(0x7f0000001740)={'enc=', 'pkcs1', ' hash=', {'sha1-ssse3\x00'}}, &(0x7f00000017c0)="9b4e3c1052201f6605ad9689106df3ea8f13d59dc217f0daea7ed995419eee86d6f62000dcb11c90252023ba47a96cba40cad1ef11248fe216a348e8f6bc354d1ad50404333c4dba45f51c5a6341bccd4440c3fabc9d47b73b4b4908a38ff448c8f95dac044b4b71c633b4497f41f1b78ef4aa59b5fa08c605e09ad27aaf3fd630b38d43", &(0x7f0000001880)=""/219) keyctl$link(0x8, r0, r1) syz_usb_connect$uac3(0x6, 0xdb, &(0x7f0000001980)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x105a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0xb2, 0xb0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0x2, 0xa5, {0xa, 0x25, 0x25, 0x4, 0x80, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x7, 0x7, 0x5, 0x0, 0x5, 0x0, 0x8, 0x3}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8001, 0xe0, 0x7, "c5a03db21ee1bbd0"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x936, 0xd, 0xa9}, @as_header={0x17, 0x24, 0x1, 0x0, 0x8fd1, 0x0, 0x0, 0x3, 0x7, 0xc, 0xfc}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x10, 0x80, 0xb, "282bd8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x7e684b2ca7a470da, 0x6, 0x1, 0x3, {0xa, 0x25, 0x25, 0x5, 0x9, 0x4}}}}}}}}]}}, &(0x7f0000001bc0)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x300, 0xf, 0x8, 0xaa, 0x20, 0xc6}, 0x88, &(0x7f0000001ac0)={0x5, 0xf, 0x88, 0x4, [@ssp_cap={0xc, 0x10, 0xa, 0xd, 0x0, 0x41f, 0xf00f, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x4c, 0xd, 0x8}, @generic={0x29, 0x10, 0xb, "a5c11a03bf0cc3d4328bd45838c60e58f48db2e90ae1604689e39987c17a0291203d1848a6fd"}, @generic={0x44, 0x10, 0xa, "a69fa2e9b1e614261362e51b31b63c2f7d50ab14c521d4323b823e49ca1cda8738db26a34155df63a38595e7ed4d9e0b6a9648772d7c32d7a2f54dd11a5c055e3f"}]}, 0x1, [{0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x860}}]}) keyctl$get_keyring_id(0x0, r0, 0x7fffffffffffffff) r5 = add_key$user(&(0x7f0000001c00), &(0x7f0000001c40)={'syz', 0x0}, &(0x7f0000001c80)="3162dcd064cef6db52629e280c960d3a1522cdb390000d85c6ae9cb8a36a7dfe8d8091269e363b3e2599758445dbc1a4109bb36ce4fa110485bcf4d96671a268f43b80426069b1b1afa875021d10e0b931895230425736c94c6cd038195f41321fb3390fa4171cd087679b49b89d1ffc543caa3df9110db98c00c598cd0410d44cecfd35cafcb249dd5206cd33308c9fb96261c512c53f34700c3ed388732a4263e939f078a1d2f4c2acd89ba7ef47e9589000", 0xb3, r2) syz_usb_connect$cdc_ncm(0x5, 0x7d, &(0x7f0000001d40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x2, 0x1, 0x5b, 0x0, 0xc, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'j'}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x4, 0x7, 0x5}, {0x6, 0x24, 0x1a, 0xfffb, 0x6}, [@dmm={0x7, 0x24, 0x14, 0x400, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0x9, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x3, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x68, 0x6, 0x1}}}}}}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001dc0)={0xa, 0x6, 0x250, 0xd, 0x4, 0xf, 0xff, 0x80}, 0x5, &(0x7f0000001e00)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000001e40)=@lang_id={0x4, 0x3, 0x3409}}, {0xf1, &(0x7f0000001e80)=@string={0xf1, 0x3, "a3e3fcdacd7edc7fe4459367e397fbb742fbdf334a65c09814c408b06c2a6d0f9598d9d703e5c8771635dc8e882e36030f9e5debed7f78cb19d64884ed47c8ca368ec7fa51f953f3a720ce9217b2f8c5a772be7bef48278a4f7322a4d4a6e1fa646f3f29de56a5007b6241d213cc1e54f1926aad8f1a92ca4bc6e21d649e81761f7cda84daf399e09a2875a370516a491a7736dbf644c66185718c2a58a0e4ceeb66a16d152ef4e61968b2e9d1dd035d49a9e91fbf65f594d0d7a351f1d817d95e598f24825d9d5e3718cf0d15d972a44968107c64020125db561a0a03a60a2209345dbba8ff910794b67a529780c7"}}, {0x4, &(0x7f0000001f80)=@lang_id={0x4, 0x3, 0x457}}]}) r6 = add_key$fscrypt_provisioning(&(0x7f0000002000), &(0x7f0000002040)={'syz', 0x1}, &(0x7f0000002080)={0x2, 0x0, @c}, 0x29, r2) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000020c0)={r6, 0x1b, 0x98}, &(0x7f0000002100)={'enc=', 'pkcs1', ' hash=', {'nhpoly1305-avx2\x00'}}, &(0x7f0000002180)="6a7b0b844a673547ffb00ec04e8b27c14c3fd6d3e8119e5578dbcd", &(0x7f00000021c0)=""/152) r7 = syz_mount_image$fuse(&(0x7f0000002280), &(0x7f00000022c0)='./file0\x00', 0x401, &(0x7f0000002300)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@allow_other}, {@allow_other}, {@default_permissions}, {@default_permissions}], [{@dont_measure}, {@permit_directio}, {@seclabel}, {@seclabel}, {@euid_lt={'euid<', r3}}]}}, 0x1, 0x0, &(0x7f0000002440)="3fe69f9c660366abc4b63fd37f90fd277c0a7835cf1e892fe6c76da74dbc5ef5f46e15aca86ec970d137e29c5ae38433efafc18fd9abd5740e60351906db06b2a117c7ead623c79130aa085252153cb7c6f1e3c177eea9662545c41f515908bb9031028b524da6b95cad6c5288ecced72b6275") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f00000024c0)={@id={0x2, 0x0, @b}, 0x10, 0x0, '\x00', @d}) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000002540)={0x1, 0xfffffffffffff965, 0x2, 0x60a, 0x3}) keyctl$set_timeout(0xf, r5, 0x4) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x11) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002600), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x1880000, &(0x7f0000004680)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}, {@max_read={'max_read', 0x3d, 0x4153900e}}], [{@permit_directio}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@obj_role={'obj_role', 0x3d, '\'-\x9e$'}}, {@appraise_type}, {@context={'context', 0x3d, 'staff_u'}}]}}) 496.152253ms ago: executing program 3 (id=50): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffd, 0x0, @loopback, 0x5}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x1000a) sendfile(r0, r1, &(0x7f0000000580)=0x2e, 0xfffc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x200000, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000d40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x92042, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700582c0020010000000000000000000000000001ff0200000000000000000000000000013a00000000000000020090780000000468cd85b5000784002001000000000000000000000000000000000000000000000000bbaad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d0000000000"], 0x0) write$sysctl(r2, &(0x7f0000000000)='3\x00', 0x1001) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000002c0)=0x7) setreuid(0xee01, 0xee01) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ptrace$cont(0x1f, r3, 0x6, 0x7) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100004000000000024100000010001369623a6d6163766c616e310037511d4c454255be07ad8d5cc0723b01de593edbdf6ab56c861ff1e9c8070000000000008076fb2639835ab38f7cca48ce9ca9d8f042c8b861add80e"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000003c0), 0x651, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xf, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18060000020000000000009a9a5f000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000000000000009500000000000000"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r6, &(0x7f0000000400), 0x4000087, 0x2, 0x0) r9 = io_uring_setup(0x5584, &(0x7f0000000440)={0x0, 0x1ffffe, 0x0, 0x2, 0xd5, 0x0, r2}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x9}}, 0x0, 0x0, 0x37, 0x0, "fac6724727e4f3c1d64620d26b854f105c32ccc0474a86848b795360542cfbf7c5b64eae2a4b74c0b3c8db47913288c0d76204dc2b3d5fb67b8201154e7c4da7e703b6e0d692172f26aa34741a950143"}, 0xd8) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r9, 0xd, 0x0, 0x0) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, {0xa0, "b19e5eeca5ee99f56f3db67190f0450788d9e2ffa56c8db8136721d19fc4ade3e0ad74d7e4d29618747c0bc02c6eeb9574a06c2ec75d7418f3a283493b3140a7db927f31976ab74af6c1a60a17f73ffbdd8acb6355b4cc89e9b4f611f2c7f46e7741766e5102c6fa1dbc9996641df9cc4b789b83e9c773dbeb73cb09dc39cfd3b9d3718dad420a117622fa4cc395d0e9a72cd66beca8a0809c6b3bfeb6773a9b"}}, 0xa6) 492.953303ms ago: executing program 1 (id=51): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) lseek(r0, 0x0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x50, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @empty}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x98b}]}]}, 0x50}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x908080, &(0x7f00000001c0)={[{@nolazytime}, {@dax}, {@noblock_validity}]}, 0x10, 0x53f, &(0x7f0000000cc0)="$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") 481.603592ms ago: executing program 1 (id=52): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$igmp(0x2, 0x3, 0x2) socket(0x2, 0xa, 0x300) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x0, 0x1c, 0x66, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @local}, @info_request={0xf, 0x0, 0x0, 0x401}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 454.938741ms ago: executing program 0 (id=53): r0 = msgget$private(0x0, 0x480) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, r1, 0x0, 0x0, 0x0, 0x1a4, 0x9}, 0x0, 0x0, 0x4a, 0x522, 0x2008, 0x2, 0xffffffff, 0x6, 0x9, 0x7}) msgsnd(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x401, 0x0) msgget(0x1, 0x2) msgrcv(r0, 0x0, 0x0, 0x1, 0x2000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r2, 0x894a, &(0x7f0000000340)="f53a") 220.141705ms ago: executing program 1 (id=54): syz_open_dev$dri(0x0, 0x0, 0x0) syz_read_part_table(0x108f, &(0x7f00000003c0)="$eJzs0LFNK0EQBuDf797d2RIBJSAacQc0QWSJmNRyJySElEAR9EBKDAEw6Mx5DSlCIvm+YLRzO/ePtOFPXZylbk9aW6nTIcvdob9Mdv24TG2uv/3Wp8/q83gzJFX1sp2axbqqHu5aXNXTph2rkrFFvFXN3/LYTYnp0h2ux+fKsDrue03+Z52pJudT3WbMMN8u9rXL+xx5f9zfEqbZf/upL65++GoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Ls+AgAA//8N2jLs") prlimit64(0x0, 0xe, &(0x7f0000001c40)={0x8, 0x18}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) getrlimit(0x4, &(0x7f0000000180)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x204000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='7', 0x1) write(r1, 0x0, 0x0) lseek(r0, 0x9d2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001c80)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001cc0)=0x7) r3 = syz_io_uring_setup(0x10f, &(0x7f0000001d00)={0x0, 0xfffffffd, 0x2, 0x4}, &(0x7f0000001d80), &(0x7f0000001dc0), &(0x7f0000001e00)) io_uring_enter(r3, 0x66a8, 0x4000, 0xf, 0x0, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000001e40)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x9000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 2 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x19}}) r2 = socket$inet(0x2, 0x2, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0xffffffa9, 0x9, 0x1ff}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r3, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x9, 0x7, 0x7f, 0xb4, 0x8, 0x4}, 0x9c) recvmmsg(r2, &(0x7f00000002c0), 0xa0d, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0xb5eca3352bb6c284) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0x76, 0x6, "ca258235283677d4abadd55df0f360dca21d0b245d66a4b45b9890782191994115a15bdf0303594ae81e946b61ff3057c5dedb64ed1fd9a1e7934dd2781b47f0bcf62bc91935265489870ea95a9c19f7f160decd36dfdc2f6083e8df40b6c72e2b3cb8285d4fa87deabcb3b938b72fa7619f"}, @NFTA_TABLE_USERDATA={0x33, 0x6, "299523f53d5106c8cd7fbc8c0494bc0f48b83915241fc4bf5797e2f56bd51e61f56d141313ec96e2dee259a10be6c1"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xf, 0x6, "f3afac4ed0b31b803a75ab"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x15c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast1}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts. [ 29.024496][ T4724] cgroup: Unknown subsys name 'net' [ 29.155287][ T4724] cgroup: Unknown subsys name 'cpuset' [ 29.156571][ T4724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.345249][ T4724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.147208][ T4750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.147650][ T4750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.147962][ T4750] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.148241][ T4750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.148283][ T4751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.148814][ T4750] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.148882][ T4751] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.149043][ T4750] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.149292][ T4750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.149454][ T4750] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.149519][ T4751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.149568][ T4750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.150070][ T4750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.150137][ T4751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.150287][ T4750] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.150342][ T4751] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.150977][ T4750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.151722][ T4738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.151771][ T4738] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.151823][ T4738] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.160568][ T4753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.163714][ T4746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.163961][ T4746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.164700][ T4748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.166590][ T4748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.324260][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.324528][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.324892][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.350963][ T4742] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.366320][ T4735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.366525][ T4740] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.399819][ T4747] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.412483][ T4736] infiniband rxe0: set active [ 30.413080][ T4736] infiniband rxe0: added rxe_eth0 [ 30.419892][ T4744] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.434002][ T4747] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.437427][ T4736] RDS/IB: rxe0: added [ 30.437490][ T4736] smc: adding ib device rxe0 with port count 1 [ 30.437511][ T4736] smc: ib device rxe0 port 1 has no pnetid [ 30.454384][ T874] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.493190][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.542882][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.604651][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.689869][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.689909][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.690012][ T4735] bridge_slave_0: entered allmulticast mode [ 30.690455][ T4735] bridge_slave_0: entered promiscuous mode [ 30.691441][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.691463][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.691545][ T4735] bridge_slave_1: entered allmulticast mode [ 30.691940][ T4735] bridge_slave_1: entered promiscuous mode [ 30.699993][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.700962][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.710142][ T4736] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.717419][ T4735] team0: Port device team_slave_0 added [ 30.717503][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.717561][ T4742] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.717647][ T4742] bridge_slave_0: entered allmulticast mode [ 30.718598][ T4742] bridge_slave_0: entered promiscuous mode [ 30.719458][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.719478][ T4742] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.719521][ T4742] bridge_slave_1: entered allmulticast mode [ 30.723343][ T4742] bridge_slave_1: entered promiscuous mode [ 30.732563][ T4742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.745349][ T4735] team0: Port device team_slave_1 added [ 30.748778][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.748872][ T4747] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.748959][ T4747] bridge_slave_0: entered allmulticast mode [ 30.749545][ T4747] bridge_slave_0: entered promiscuous mode [ 30.750739][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.750766][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.750834][ T4740] bridge_slave_0: entered allmulticast mode [ 30.751398][ T4740] bridge_slave_0: entered promiscuous mode [ 30.761950][ T4742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.768195][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.768224][ T4747] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.768326][ T4747] bridge_slave_1: entered allmulticast mode [ 30.768732][ T4747] bridge_slave_1: entered promiscuous mode [ 30.777068][ T4747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.777596][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.777634][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.777724][ T4740] bridge_slave_1: entered allmulticast mode [ 30.778452][ T4740] bridge_slave_1: entered promiscuous mode [ 30.792207][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.792217][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.792228][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.794084][ T4742] team0: Port device team_slave_0 added [ 30.794914][ T4747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.800978][ T4747] team0: Port device team_slave_0 added [ 30.801665][ T4747] team0: Port device team_slave_1 added [ 30.813881][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.813893][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.813909][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.817552][ T4742] team0: Port device team_slave_1 added [ 30.825777][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.825788][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.825810][ T4747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.826413][ T4747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.826419][ T4747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.826432][ T4747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.844956][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.845911][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.852012][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.852021][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.852033][ T4742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.853104][ T4742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.853110][ T4742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.853122][ T4742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.862686][ T4742] hsr_slave_0: entered promiscuous mode [ 30.864165][ T4742] hsr_slave_1: entered promiscuous mode [ 30.878265][ T4747] hsr_slave_0: entered promiscuous mode [ 30.878538][ T4747] hsr_slave_1: entered promiscuous mode [ 30.878758][ T4747] debugfs: 'hsr0' already exists in 'hsr' [ 30.878803][ T4747] Cannot create hsr debugfs directory [ 30.882195][ T4735] hsr_slave_0: entered promiscuous mode [ 30.882462][ T4735] hsr_slave_1: entered promiscuous mode [ 30.882636][ T4735] debugfs: 'hsr0' already exists in 'hsr' [ 30.882645][ T4735] Cannot create hsr debugfs directory [ 30.887648][ T4740] team0: Port device team_slave_0 added [ 30.888401][ T4740] team0: Port device team_slave_1 added [ 30.898277][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.898286][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.898300][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.912985][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.912995][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.913008][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.990340][ T4740] hsr_slave_0: entered promiscuous mode [ 30.990613][ T4740] hsr_slave_1: entered promiscuous mode [ 30.990813][ T4740] debugfs: 'hsr0' already exists in 'hsr' [ 30.990823][ T4740] Cannot create hsr debugfs directory [ 31.067845][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.068092][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.068199][ T4736] bridge_slave_0: entered allmulticast mode [ 31.068621][ T4736] bridge_slave_0: entered promiscuous mode [ 31.073366][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.073391][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.073860][ T4736] bridge_slave_1: entered allmulticast mode [ 31.074300][ T4736] bridge_slave_1: entered promiscuous mode [ 31.075977][ T4742] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.081916][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.082237][ T4742] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.083800][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.090405][ T4742] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.091709][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.092003][ T4742] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.093884][ T4742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.094882][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.099288][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.109920][ T4736] team0: Port device team_slave_0 added [ 31.110666][ T4736] team0: Port device team_slave_1 added [ 31.122604][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.122616][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.122631][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.133587][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.133596][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.133609][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.139353][ T4742] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.139385][ T4742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.139513][ T4742] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.139541][ T4742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.156741][ T4742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.159942][ T4742] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.169470][ T4747] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.170433][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.170737][ T4747] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.172512][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.172985][ T4747] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.175683][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.195795][ T4736] hsr_slave_0: entered promiscuous mode [ 31.196090][ T4736] hsr_slave_1: entered promiscuous mode [ 31.196259][ T4736] debugfs: 'hsr0' already exists in 'hsr' [ 31.196268][ T4736] Cannot create hsr debugfs directory [ 31.199197][ T4747] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.200137][ T4747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.245139][ T4735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.246396][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.253629][ T4735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.257018][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.268322][ T4735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.269295][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.269593][ T4735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.270376][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.304532][ T4740] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.309880][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.323308][ T4740] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.324391][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.337717][ T4740] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.339767][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.342211][ T4736] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.345575][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.351315][ T4740] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.354684][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.355008][ T4736] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.356424][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.356775][ T4736] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.357700][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.358167][ T4736] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.359195][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.368024][ T4747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.371452][ T4747] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.382925][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.382971][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.384414][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.384436][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.427472][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.430592][ T4747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.434172][ T4742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.447161][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.450567][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.451247][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.466641][ T4740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.466657][ T4740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.476784][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.476819][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.478310][ T1362] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.478338][ T1362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.478661][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.478681][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.490275][ T1362] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.490302][ T1362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.507193][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.521771][ T4735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.521793][ T4735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.539902][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.547480][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.547506][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.555261][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.555284][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.661040][ T4742] veth0_vlan: entered promiscuous mode [ 31.673113][ T4742] veth1_vlan: entered promiscuous mode [ 31.678411][ T4742] veth0_macvtap: entered promiscuous mode [ 31.679457][ T4742] veth1_macvtap: entered promiscuous mode [ 31.682552][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.698850][ T4742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.726086][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726293][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726312][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726328][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.747092][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.770513][ T4747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.773381][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.773391][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.785021][ T4735] veth0_vlan: entered promiscuous mode [ 31.786766][ T4735] veth1_vlan: entered promiscuous mode [ 31.796065][ T4735] veth0_macvtap: entered promiscuous mode [ 31.797143][ T4735] veth1_macvtap: entered promiscuous mode [ 31.809268][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.811499][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.811511][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.822162][ T4747] veth0_vlan: entered promiscuous mode [ 31.828846][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.829870][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.834451][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.834638][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.834756][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.834853][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.848356][ T4747] veth1_vlan: entered promiscuous mode [ 31.850323][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.862422][ T4740] veth0_vlan: entered promiscuous mode [ 31.885485][ T4747] veth0_macvtap: entered promiscuous mode [ 31.890305][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.890317][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.891218][ T4747] veth1_macvtap: entered promiscuous mode [ 31.894856][ T4740] veth1_vlan: entered promiscuous mode [ 31.900488][ T4740] veth0_macvtap: entered promiscuous mode [ 31.901492][ T4740] veth1_macvtap: entered promiscuous mode [ 31.906522][ T4742] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.918983][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.924372][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.929643][ T4747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.932239][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.949236][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.949250][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.950446][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.963710][ T1404] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963771][ T1404] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963802][ T1404] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963820][ T1404] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963838][ T1404] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963855][ T1404] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.963871][ T1404] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.975737][ T914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.975748][ T914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.987354][ T914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.987365][ T914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.022326][ T4736] veth0_vlan: entered promiscuous mode [ 32.035134][ T4736] veth1_vlan: entered promiscuous mode [ 32.041369][ T4736] veth0_macvtap: entered promiscuous mode [ 32.045044][ T4736] veth1_macvtap: entered promiscuous mode [ 32.054493][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.055562][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.174674][ T4739] Bluetooth: hci1: command tx timeout [ 32.182801][ T4739] Bluetooth: hci3: command tx timeout [ 32.262911][ T4748] Bluetooth: hci4: command tx timeout [ 32.263380][ T4748] Bluetooth: hci2: command tx timeout [ 32.264161][ T4739] Bluetooth: hci0: command tx timeout [ 32.315397][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.315410][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.328419][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.328428][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.353431][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353571][ T1299] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353693][ T1299] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.362289][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.362302][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.377724][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.401367][ T4930] loop0: detected capacity change from 0 to 512 [ 32.428454][ T4932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 32.430390][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.430401][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.472240][ T4930] EXT4-fs error (device loop0): __ext4_fill_super:5622: inode #2: comm syz.0.1: iget: checksum invalid [ 32.472306][ T4930] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -74 [ 32.472776][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 32.472788][ C1] EXT4-fs (loop0): initial error at time 32: __ext4_fill_super:5622: inode 2 [ 32.472812][ C1] EXT4-fs (loop0): last error at time 32: __ext4_fill_super:5622: inode 2 [ 32.485035][ T4930] EXT4-fs (loop0): get root inode failed [ 32.485046][ T4930] EXT4-fs (loop0): mount failed [ 33.414665][ T4930] loop0: detected capacity change from 0 to 256 [ 33.417760][ T4930] vfat: Unknown parameter 'unie' [ 33.494830][ T4941] mmap: syz.4.6 (4941) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.518646][ T4941] loop4: detected capacity change from 0 to 512 [ 33.519053][ T4941] EXT4-fs: Ignoring removed bh option [ 33.532979][ T4941] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 33.532993][ T4941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.533000][ T4941] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.544428][ T4941] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.6: invalid indirect mapped block 2048 (level 1) [ 33.544456][ T4941] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 33.545485][ T4941] EXT4-fs (loop4): Remounting filesystem read-only [ 33.545619][ T4941] EXT4-fs (loop4): 1 truncate cleaned up [ 33.546099][ T4941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.599012][ T4949] netlink: 'syz.3.9': attribute type 16 has an invalid length. [ 33.599027][ T4949] netlink: 'syz.3.9': attribute type 17 has an invalid length. [ 33.601667][ T4941] syz.4.6 uses obsolete (PF_INET,SOCK_PACKET) [ 33.613571][ T4949] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 33.621516][ T4947] FAULT_INJECTION: forcing a failure. [ 33.621516][ T4947] name fail_futex, interval 1, probability 0, space 0, times 1 [ 33.621539][ T4947] CPU: 0 UID: 0 PID: 4947 Comm: syz.0.8 Not tainted syzkaller #0 PREEMPT [ 33.621551][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 33.621557][ T4947] Call trace: [ 33.621560][ T4947] show_stack+0x2c/0x3c (C) [ 33.621576][ T4947] __dump_stack+0x30/0x40 [ 33.621585][ T4947] dump_stack_lvl+0xd8/0x12c [ 33.621593][ T4947] dump_stack+0x1c/0x28 [ 33.621601][ T4947] should_fail_ex+0x418/0x58c [ 33.621612][ T4947] should_fail+0x14/0x24 [ 33.621621][ T4947] get_futex_key+0x1ec/0x12b0 [ 33.621634][ T4947] futex_wait_setup+0x58/0x674 [ 33.621642][ T4947] __futex_wait+0x108/0x25c [ 33.621650][ T4947] futex_wait+0x108/0x2c0 [ 33.621657][ T4947] do_futex+0x320/0x378 [ 33.621669][ T4947] __arm64_sys_futex+0x2e4/0x418 [ 33.621681][ T4947] invoke_syscall+0x98/0x244 [ 33.621690][ T4947] el0_svc_common+0xec/0x23c [ 33.621699][ T4947] do_el0_svc+0x4c/0x5c [ 33.621706][ T4947] el0_svc+0x60/0x1d8 [ 33.621715][ T4947] el0t_64_sync_handler+0x44/0x104 [ 33.621723][ T4947] el0t_64_sync+0x198/0x19c [ 33.640268][ T4947] capability: warning: `syz.0.8' uses deprecated v2 capabilities in a way that may be insecure [ 33.659055][ T4951] loop2: detected capacity change from 0 to 512 [ 33.667171][ T4951] ======================================================= [ 33.667171][ T4951] WARNING: The mand mount option has been deprecated and [ 33.667171][ T4951] and is ignored by this kernel. Remove the mand [ 33.667171][ T4951] option from the mount to silence this warning. [ 33.667171][ T4951] ======================================================= [ 33.761575][ T4962] capability: warning: `syz.3.11' uses 32-bit capabilities (legacy support in use) [ 33.935276][ T4965] loop2: detected capacity change from 0 to 1024 [ 33.967665][ T4965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 33.988594][ T4977] netlink: 'syz.3.15': attribute type 8 has an invalid length. [ 34.037951][ T4742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.108905][ T4986] loop3: detected capacity change from 0 to 4096 [ 34.110598][ T4988] Zero length message leads to an empty skb [ 34.116901][ T4986] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 34.116916][ T4986] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.125716][ T4986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.137068][ T4992] loop1: detected capacity change from 0 to 512 [ 34.143236][ T4985] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 34.167209][ T4985] fscrypt: AES-256-XTS using blk-crypto-fallback [ 34.170914][ T4995] loop4: detected capacity change from 0 to 512 [ 34.178468][ T4985] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 34.180242][ T4992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.191873][ T4995] EXT4-fs: Ignoring removed orlov option [ 34.204444][ T4747] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 34.221831][ T4995] EXT4-fs error (device loop4): ext4_orphan_get:1403: inode #11: comm syz.4.19: casefold flag without casefold feature [ 34.221853][ T4995] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 34.232719][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 34.232734][ C1] EXT4-fs (loop4): initial error at time 34: ext4_orphan_get:1403: inode 11 [ 34.232752][ C1] EXT4-fs (loop4): last error at time 34: ext4_orphan_get:1403: inode 11 [ 34.243529][ T4995] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.19: couldn't read orphan inode 11 (err -117) [ 34.243600][ T4995] loop4: lost filesystem error report for type 5 error -117 [ 34.247615][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.253162][ T4739] Bluetooth: hci3: command tx timeout [ 34.253184][ T4739] Bluetooth: hci1: command tx timeout [ 34.295715][ T4735] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.304999][ T4995] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.19: bg 0: block 7: invalid block bitmap [ 34.332937][ T51] Bluetooth: hci0: command tx timeout [ 34.332960][ T51] Bluetooth: hci4: command tx timeout [ 34.388587][ T4742] EXT4-fs error (device loop4): ext4_readdir:280: inode #2: block 13: comm syz-executor: path /3/file0: bad entry in directory: directory entry overrun - offset=92, inode=16, rec_len=196732, size=1024 fake=0 [ 34.398229][ T4742] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 34.399373][ T4742] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 34.399761][ T5016] loop3: detected capacity change from 0 to 1024 [ 34.404009][ T5016] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.404027][ T5016] EXT4-fs: Ignoring removed oldalloc option [ 34.409209][ T5016] EXT4-fs: Mount option(s) incompatible with ext3 [ 34.489203][ T5021] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 34.563674][ T5029] netlink: 9800 bytes leftover after parsing attributes in process `syz.3.25'. [ 34.563954][ T5027] netlink: 9800 bytes leftover after parsing attributes in process `syz.3.25'. [ 34.638035][ T5032] loop3: detected capacity change from 0 to 256 [ 34.638427][ T5032] vfat: Unknown parameter 'iocharsZt' [ 34.676710][ T4736] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.815223][ T5050] EXT4-fs: Ignoring removed orlov option [ 34.824393][ T5050] EXT4-fs (loop0): invalid #clusters per group: 32768 [ 34.940202][ T5057] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 35.058828][ T5061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 35.061451][ T5061] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.35: lblock 0 mapped to illegal pblock 0 (length 6) [ 35.062084][ T5061] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 35.062102][ T5061] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.062102][ T5061] [ 35.063162][ T5061] EXT4-fs error (device loop0): ext4_map_blocks:790: inode #15: comm syz.0.35: lblock 0 mapped to illegal pblock 0 (length 6) [ 35.126989][ T5066] EXT4-fs: Ignoring removed bh option [ 35.138115][ T5066] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 35.138168][ T5066] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.138183][ T5066] EXT4-fs error (device loop3): ext4_get_journal_inode:5928: comm syz.3.36: inode #1: comm syz.3.36: iget: illegal inode # [ 35.138195][ T5066] loop3: lost filesystem error report for type 5 error -117 [ 35.138936][ T5066] EXT4-fs (loop3): no journal found [ 35.276588][ T5068] loop2: AHDI p1 p2 p3 p4 [ 35.277924][ T5068] loop2: p1 start 2130706432 is beyond EOD, truncated [ 35.277939][ T5068] loop2: p3 size 4277665791 extends beyond EOD, truncated [ 35.396301][ T4729] udevd[4729]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 35.450976][ T5078] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 35.452013][ T5078] batman_adv: batadv0: Adding interface: macvlan2 [ 35.452022][ T5078] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.452036][ T5078] batman_adv: batadv0: Interface activated: macvlan2 [ 35.452515][ T4923] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 35.523689][ T5081] usb usb1: usbfs: process 5081 (syz.2.41) did not claim interface 0 before use [ 35.601730][ T5084] netlink: 1028 bytes leftover after parsing attributes in process `syz.2.42'. [ 35.694041][ T4739] Bluetooth: hci2: command tx timeout [ 35.761011][ T4946] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 35.773970][ T5088] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 35.773980][ T5088] unable to read xattr id index table [ 35.774543][ T5088] SQUASHFS error: zlib decompression failed, data probably corrupt [ 35.774559][ T5088] SQUASHFS error: Failed to read block 0x9b: -5 [ 35.774565][ T5088] SQUASHFS error: Unable to read metadata cache entry [99] [ 35.774572][ T5088] SQUASHFS error: Unable to read inode 0x127 [ 35.804473][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 35.804496][ T5094] netlink: 'syz.1.46': attribute type 11 has an invalid length. [ 35.816035][ T5094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 35.816055][ T5094] netlink: 'syz.1.46': attribute type 11 has an invalid length. [ 35.827130][ T1404] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.827157][ T1404] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.827173][ T1404] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.827187][ T1404] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 35.850370][ T40] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 35.850390][ T40] EXT4-fs (loop0): This should not happen!! Data will be lost [ 35.850390][ T40] [ 35.850399][ T40] EXT4-fs (loop0): Total free blocks count 0 [ 35.850406][ T40] EXT4-fs (loop0): Free/Dirty block details [ 35.850415][ T40] EXT4-fs (loop0): free_blocks=0 [ 35.850425][ T40] EXT4-fs (loop0): dirty_blocks=32 [ 35.850431][ T40] EXT4-fs (loop0): Block reservation details [ 35.904445][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.906004][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.922416][ T5102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.922613][ T5102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.925920][ T5102] fuse: Bad value for 'fd' [ 35.956407][ T4729] udevd[4729]: incorrect ext4 checksum on /dev/loop1 [ 35.989842][ T5104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.008094][ T5104] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.50: corrupted xattr block 33: invalid header [ 36.009502][ T5104] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.50: corrupted xattr block 33: invalid header [ 36.009876][ T5104] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.50: corrupted xattr block 33: invalid header [ 36.060832][ T5104] EXT4-fs error (device loop3): ext4_xattr_block_get:608: inode #15: comm syz.3.50: corrupted xattr block 33: invalid header [ 36.070114][ T5104] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 36.071262][ T5104] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28 [ 36.071280][ T5104] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.071280][ T5104] [ 36.071290][ T5104] EXT4-fs (loop3): Total free blocks count 0 [ 36.071299][ T5104] EXT4-fs (loop3): Free/Dirty block details [ 36.071310][ T5104] EXT4-fs (loop3): free_blocks=65280 [ 36.071320][ T5104] EXT4-fs (loop3): dirty_blocks=31 [ 36.071327][ T5104] EXT4-fs (loop3): Block reservation details [ 36.071334][ T5104] EXT4-fs (loop3): i_reserved_data_blocks=31 [ 36.088382][ T5104] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 36.245054][ T5121] loop1: AHDI p1 p2 p3 p4 [ 36.245184][ T5121] loop1: p1 start 2130706432 is beyond EOD, truncated [ 36.245196][ T5121] loop1: p3 start 1761607680 is beyond EOD, truncated [ 36.249022][ T5121] FAULT_INJECTION: forcing a failure. [ 36.249022][ T5121] name failslab, interval 1, probability 0, space 0, times 0 [ 36.249043][ T5121] CPU: 1 UID: 0 PID: 5121 Comm: syz.1.54 Not tainted syzkaller #0 PREEMPT [ 36.249054][ T5121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.249060][ T5121] Call trace: [ 36.249063][ T5121] show_stack+0x2c/0x3c (C) [ 36.249079][ T5121] __dump_stack+0x30/0x40 [ 36.249089][ T5121] dump_stack_lvl+0xd8/0x12c [ 36.249097][ T5121] dump_stack+0x1c/0x28 [ 36.249105][ T5121] should_fail_ex+0x418/0x58c [ 36.249116][ T5121] should_failslab+0xc4/0x120 [ 36.249127][ T5121] __kmalloc_flags_noprof+0x140/0x724 [ 36.249138][ T5121] alloc_slab_obj_exts+0x70/0x1bc [ 36.249148][ T5121] __memcg_slab_post_alloc_hook+0x408/0x824 [ 36.249158][ T5121] __kvmalloc_node_noprof+0x4f8/0x7fc [ 36.249169][ T5121] traverse+0xe4/0x4a4 [ 36.249178][ T5121] seq_lseek+0x12c/0x200 [ 36.249187][ T5121] ksys_lseek+0xf8/0x180 [ 36.249197][ T5121] __arm64_sys_lseek+0x84/0x98 [ 36.249206][ T5121] invoke_syscall+0x98/0x244 [ 36.249215][ T5121] el0_svc_common+0xec/0x23c [ 36.249223][ T5121] do_el0_svc+0x4c/0x5c [ 36.249231][ T5121] el0_svc+0x60/0x1d8 [ 36.249240][ T5121] el0t_64_sync_handler+0x44/0x104 [ 36.249248][ T5121] el0t_64_sync+0x198/0x19c [ 36.342525][ T4739] Bluetooth: hci1: command tx timeout [ 36.413227][ T4739] Bluetooth: hci4: command tx timeout [ 36.413256][ T4739] Bluetooth: hci0: command tx timeout [ 36.454078][ T5126] [ 36.454609][ T5126] ============================================ [ 36.455880][ T5126] WARNING: possible recursive locking detected [ 36.457078][ T5126] syzkaller #0 Not tainted [ 36.457950][ T5126] -------------------------------------------- [ 36.459245][ T5126] syz.2.55/5126 is trying to acquire lock: [ 36.460495][ T5126] ffff0000dca0ce78 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: __netdev_update_features+0x988/0x1894 [ 36.462938][ T5126] [ 36.462938][ T5126] but task is already holding lock: [ 36.464537][ T5126] ffff0000dca0ce78 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: dev_ethtool+0x384/0x1a98 [ 36.466696][ T5126] and the lock comparison function returns 0: [ 36.468026][ T5126] [ 36.468026][ T5126] other info that might help us debug this: [ 36.469754][ T5126] Possible unsafe locking scenario: [ 36.469754][ T5126] [ 36.471304][ T5126] CPU0 [ 36.471944][ T5126] ---- [ 36.472582][ T5126] lock(&dev_instance_lock_key#23); [ 36.473685][ T5126] lock(&dev_instance_lock_key#23); [ 36.474680][ T5126] [ 36.474680][ T5126] *** DEADLOCK *** [ 36.474680][ T5126] [ 36.476291][ T5126] May be due to missing lock nesting notation [ 36.476291][ T5126] [ 36.477887][ T5126] locks held by syz.2.55/5126: 2, last CPU#1: [ 36.479112][ T5126] #0: ffff80008ab049c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_lock+0x20/0x2c [ 36.480882][ T5126] #1: ffff0000dca0ce78 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: dev_ethtool+0x384/0x1a98 [ 36.483011][ T5126] [ 36.483011][ T5126] stack backtrace: [ 36.484230][ T5126] CPU: 1 UID: 0 PID: 5126 Comm: syz.2.55 Not tainted syzkaller #0 PREEMPT [ 36.485943][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 36.487957][ T5126] Call trace: [ 36.488605][ T5126] show_stack+0x2c/0x3c (C) [ 36.489543][ T5126] __dump_stack+0x30/0x40 [ 36.490491][ T5126] dump_stack_lvl+0xd8/0x12c [ 36.491540][ T5126] dump_stack+0x1c/0x28 [ 36.492540][ T5126] print_deadlock_bug+0x2e8/0x2f0 [ 36.493654][ T5126] __lock_acquire+0x2404/0x2b08 [ 36.494727][ T5126] lock_acquire+0x13c/0x320 [ 36.495749][ T5126] __mutex_lock+0x164/0x1078 [ 36.496754][ T5126] mutex_lock_nested+0x24/0x30 [ 36.497595][ T5126] __netdev_update_features+0x988/0x1894 [ 36.498580][ T5126] netdev_update_features+0x78/0xf4 [ 36.499506][ T5126] macvlan_device_event+0x530/0x778 [ 36.500476][ T5126] notifier_call_chain+0x1a4/0x4cc [ 36.501521][ T5126] raw_notifier_call_chain+0x3c/0x50 [ 36.502667][ T5126] call_netdevice_notifiers_info+0xb8/0x120 [ 36.503864][ T5126] netdev_features_change+0x84/0xcc [ 36.505002][ T5126] dev_ethtool+0x165c/0x1a98 [ 36.506033][ T5126] dev_ioctl+0x284/0xc88 [ 36.506935][ T5126] sock_do_ioctl+0x198/0x254 [ 36.507926][ T5126] sock_ioctl+0x55c/0x7ec [ 36.508807][ T5126] __arm64_sys_ioctl+0x154/0x1cc [ 36.509807][ T5126] invoke_syscall+0x98/0x244 [ 36.510749][ T5126] el0_svc_common+0xec/0x23c [ 36.511688][ T5126] do_el0_svc+0x4c/0x5c [ 36.512541][ T5126] el0_svc+0x60/0x1d8 [ 36.513318][ T5126] el0t_64_sync_handler+0x44/0x104 [ 36.514315][ T5126] el0t_64_sync+0x198/0x19c [ 37.205284][ T4742] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.773870][ T51] Bluetooth: hci2: command tx timeout [ 38.412877][ T51] Bluetooth: hci1: command tx timeout [ 38.493131][ T51] Bluetooth: hci0: command tx timeout [ 38.493138][ T4739] Bluetooth: hci4: command tx timeout