last executing test programs: 4.981308185s ago: executing program 2 (id=3): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r2, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000011c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044021}, 0x2c809f25aba839b2) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000240)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 4.970522355s ago: executing program 3 (id=4): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000400)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x11, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5}]}}, 0x0, 0x2a}, 0x28) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1862000008000000000023000600000018680000100000000000000008000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x3a, &(0x7f00000000c0)=""/58, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000140)=[{0x4, 0x5, 0xb, 0x6}, {0x2, 0x2, 0x5, 0x6}], 0x10, 0x800}, 0x94) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000d80)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x4c7ac378262d4d93, 0x0, 0x0, @by_dev={r2}, [@cache={0x0, 0x800, 0x0, 0x98, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'smq 2 migration_threshold 1024'}}]}) 4.965593466s ago: executing program 0 (id=1): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000ac0)={[{@noblock_validity}, {@nojournal_checksum}, {@errors_continue}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noblock_validity}]}, 0xfc, 0x56f, &(0x7f0000000380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x28040) fcntl$setflags(r4, 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4ec, &(0x7f00000013c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000001900)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7a0d34d445bdce32, 0x28011, r8, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) listen(0xffffffffffffffff, 0x39b3) 4.862014252s ago: executing program 4 (id=5): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000009, 0x2010, 0xffffffffffffffff, 0x93291000) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0xd, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r2, 0x3, 0x0, @val=@tracing={0x0, 0x1}}, 0x20) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='GPL\x00', 0xf, 0x1000, &(0x7f0000000780)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfa}, 0x94) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x1, 0x4}, &(0x7f0000000200)=0x8) socket(0x2, 0x80805, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f0000000340)={0x40000000, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4) capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000540)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) connect$inet(r4, &(0x7f0000000580)={0x2, 0x4e23, @loopback}, 0x10) 4.828378298s ago: executing program 3 (id=6): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r2, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000011c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044021}, 0x2c809f25aba839b2) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000240)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 4.552398827s ago: executing program 4 (id=8): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000b00)={&(0x7f000030c000/0x2000)=nil, 0x2000}) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x3, &(0x7f0000000a00)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x34, &(0x7f0000000ac0)=r1, 0x4) r4 = io_uring_setup(0x803a61, &(0x7f00000000c0)={0x0, 0x8270, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080), 0xfe, 0x571, &(0x7f0000000480)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x50582, 0x0) r7 = syz_io_uring_setup(0x6e17, &(0x7f0000000180)={0x0, 0xd56a, 0x1, 0x5, 0x2053, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000340)=@IORING_OP_SOCKET={0x2d, 0x20, 0x0, 0x7a70, 0xc2d9, 0x0, 0x4, 0x0, 0x0, {0x0, 0x0, 0x5}}) io_uring_enter(r7, 0x3663, 0x4db7, 0x61, 0x0, 0xfffffffffffffde2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) symlinkat(&(0x7f0000000b40)='.\x00', 0xffffffffffffff9c, 0x0) r11 = socket$inet(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000b80)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000bc0)=0x5, 0x4) sendto$inet(r11, 0x0, 0x0, 0x200007fd, &(0x7f0000000c00)={0x2, 0x4e23, @empty}, 0x10) sendto$inet(r11, &(0x7f0000000c40)="ee", 0xffffffffffffff75, 0x20004010, 0x0, 0x0) pipe2(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r11, 0x0, r12, 0x0, 0x7ffff000, 0x3) sendmsg$nl_route(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.971308634s ago: executing program 2 (id=9): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x198) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000d00)=""/4096, 0x1000}], 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000cc0)={0x3c, r2, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x3}]}, 0x3c}}, 0x0) 3.663293122s ago: executing program 3 (id=10): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r0 = syz_open_procfs(0x0, &(0x7f0000000680)='task\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_io_uring_setup(0x2170, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4004}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)) io_uring_enter(r2, 0x959, 0x4000, 0xf, 0x0, 0x0) rt_sigtimedwait(&(0x7f0000000440)={[0x7fffffff]}, &(0x7f0000000480), &(0x7f0000000500), 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x0, 0x700, 0x3, 0x9, {{0x17, 0x4, 0x2, 0x7, 0x5c, 0x67, 0x0, 0x0, 0x29, 0x0, @local, @loopback, {[@timestamp={0x44, 0x2c, 0xb6, 0x0, 0xd, [0x3, 0x5, 0x3ff, 0x1000, 0x40, 0x1ff, 0x1, 0x2, 0xe90, 0xfffffffa]}, @lsrr={0x83, 0xf, 0xf7, [@dev={0xac, 0x14, 0x14, 0x2f}, @dev={0xac, 0x14, 0x14, 0x40}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xae, 0x1, 0x8, [{@empty, 0xb}]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0x4}, {0x8, 0xfff1}, {0x5, 0xfffe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xbf3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff7}, @TCA_RATE={0x6, 0x5, {0x4, 0x3c}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec772000) 3.598628599s ago: executing program 1 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000100)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x52) recvmmsg(r1, &(0x7f0000000400), 0x5b, 0x40, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000400)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) write$cgroup_pid(r5, &(0x7f00000004c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x17, 0x9, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94) 3.499892048s ago: executing program 0 (id=12): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r2, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000011c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$tipc(0x1e, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044021}, 0x2c809f25aba839b2) sendmmsg$alg(r6, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000240)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r6, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) 3.479689975s ago: executing program 4 (id=13): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f0000000080)=0x10, 0x80800) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0xfffffff5, 0x1, [0x7ff, 0x9, 0x7f, 0x4, 0x7, 0x6]}}) sendmsg$NFT_BATCH(r1, 0x0, 0x4000) mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) r3 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000180)='./md0\x00', 0x2, 0x0) r4 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x10000, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xf6, 0xa) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x720, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r3, @ANYRES64=r4, @ANYBLOB="9481acde36df7a0691", @ANYRESOCT=r0, @ANYBLOB="925deafce3c1e50cdc7723", @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES16], 0xf) ioctl$SET_ARRAY_INFO(r3, 0x40480923, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x6, 0xa, 0x800, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10301, 0x10000}) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f0000000280)={0x7, {0x1, 0x0}, 0x0, 0x6}) ioctl$ADD_NEW_DISK(r3, 0x40140921, &(0x7f00000002c0)={0x16, {0x1, 0x1}, 0x1}) ioctl$RUN_ARRAY(r3, 0x400c0930, 0x0) 3.040128854s ago: executing program 2 (id=14): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000006c0), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xd4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xd4}}, 0x0) 2.40941384s ago: executing program 1 (id=15): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r2, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000011c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044021}, 0x2c809f25aba839b2) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000240)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 2.357137417s ago: executing program 3 (id=16): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = io_uring_setup(0x3a61, &(0x7f00000000c0)={0x0, 0x8270, 0x40, 0x3, 0x846}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff000000000000000073797a30000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000240003006d04000082c0000000000000000000000600ff0901a10185107508950609018102090191028511750895130901810209019102c0"], 0x13c) write$UHID_INPUT2(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="0c000000070010ff41"], 0xd) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x200000, &(0x7f0000000080), 0xfe, 0x571, &(0x7f0000000480)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0xdcc, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e05003e20", @ANYBLOB="0800d02b283aee3952f3edfc314c30ceed499ca82c839c611b0519a7aaacbd7228d6c81a63f02035b3ff566f1fcb98300685233397f2405df2855cf2aa2c2d9c13e4bcf88f926719595e4b4e2992ca8801ea7995a8"], 0x8) 2.01476269s ago: executing program 2 (id=17): socket$unix(0x1, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000f00)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f40)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001000)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000001080), 0x651, 0x0) recvmmsg(r2, &(0x7f00000010c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001100)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000001140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000011c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000001200)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r4, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r1}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_NETNS_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044021}, 0x2c809f25aba839b2) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f0000000240)="e1483f4367ab", 0xfdea}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001240)=""/4096, 0xfdfa}], 0x1}}], 0x1, 0x40000141, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) 1.516483393s ago: executing program 1 (id=18): r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4010, &(0x7f00000001c0), 0x2, 0xbd8, &(0x7f00000083c0)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000002e40)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000002e80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x2, 0x1}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000003040), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000003240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000011c0000080009000100000008000a00010000000500070003000000060002000000000008001700", @ANYRES32], 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000003280)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000003300)={0x34, r5, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000000602, 0x0) r7 = dup(r6) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000280)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000001440)={{{@in6=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000001540)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r9, &(0x7f0000001580)) r10 = io_uring_setup(0x1aa7, &(0x7f0000002f00)={0x0, 0xfb71, 0x38c1, 0x7, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002f80)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) io_uring_register$IORING_REGISTER_FILES(r10, 0x20, &(0x7f0000003000)=[r10], 0x1) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000300)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x1fe000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r11, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f00000000c0)=0x4, 0x4) sendmsg$inet(r11, &(0x7f0000000100)={0x0, 0x14, &(0x7f0000000140)=[{&(0x7f0000000200)=' ', 0x100120}], 0x1}, 0x15) connect$l2tp(r7, &(0x7f0000000340)={0x2, 0x0, @remote, 0x1}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000380)=@v1={0x0, @aes256, 0x10, @desc1}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x10142, 0x81) 1.503049664s ago: executing program 0 (id=19): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x280440e, &(0x7f0000000380)={[{@debug}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@user_xattr}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000080) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) wait4(r0, 0x0, 0x40000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r9, @ANYBLOB="0600eb00000800000400ec000a000600"], 0x44}}, 0x28000) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r5, 0x2, 0x70bd2c, 0x9, {{}, {@void, @val={0xc, 0x99, {0x8, 0x6}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xfffd}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r9}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4095}, 0x800) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) 1.383700443s ago: executing program 1 (id=20): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./pipefs\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x8}, @broadcast}}]}, 0x30}}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000780)={0x104, r3, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x96b, 0x71}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_FRAME={0xb3, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x6}, @value=@ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0x70}, @void, @val={0x72, 0x6}, [{0xdd, 0x86, "1efbbc5b7c22e95f50e431ea9f87c1e31cb554fd8a52f7ac7c2c9f9edd766d295bef6a147f8dca84c471f256e956678f439919a068081adee76b26a7adee05dfa23ad0955624b0d1683713314edc6521b9ccfb6d8e11571ee11938639bc06525562729b4032e4f5240be5f50c30b238b998ce14921cc38982df0a0d0b30d520d96288847a0a3"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xb580}], @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x104}, 0x1, 0x0, 0x0, 0x12}, 0x20000000) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000380)=[@acquire]}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000480)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x2100, 0x3, 0x2}, @flat=@handle={0x73682a85, 0xa, 0x1, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802500ff00080002"], 0x44}}, 0x2000800) 1.311817126s ago: executing program 1 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000000)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='7', 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000280)={'bond0\x00', 0x102e}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 1.228438055s ago: executing program 3 (id=22): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./sec/integrity/ima/binary_runtime_measurements\x00', 0x0, 0x2c) read(r0, &(0x7f0000000500)=""/1024, 0x400) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wg2\x00', 0x0}) connect$packet(r0, &(0x7f0000000940)={0x11, 0x1, r1, 0x1, 0x7, 0x6, @multicast}, 0x14) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000980)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000009c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000a80)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000b40), 0x4000087, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x11, &(0x7f0000000cc0)=ANY=[@ANYBLOB="180000000000000000000000feffffff850000000f000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r6, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', r1, 0x2f, 0xfa, 0x7, 0xe, 0xb, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x7, 0x8, 0xa}}) 1.219064745s ago: executing program 4 (id=23): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000480)={[{@grpid}, {@noacl}, {@nodioread_nolock}, {@dioread_lock}, {@stripe}, {@init_itable}, {@grpjquota_path={'grpjquota', 0x3d, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/'}}, {@orlov}, {@nouser_xattr}]}, 0x1, 0xbd0, &(0x7f0000002380)="$eJzs3M1rHOcZAPBnRqsvW+3KpZS6F6uUYkPbtewiU5tC7eLSSw+F9lqwkFdGaP2BpOJK1mHV/gOlzTmQSyCJSfAhPvuSQK65JM41JoEQExQrARMShdkPeW3t6sNeaYT0+8GreV+9M/s8z47XMy/ecQAH1kj2I404GhGXkohi4/dpRPTVegMR1fp+K8uLE18vL04ksbr6ty+SSCLi0fLiRPO1ksb2cGMwEBHv/zGJH/1nfdzZ+YXp8UqlPNMYn5y7euPk7PzCb6aujl8pXylfO3Xmd2Onx86Mnh3rWq2PPz5/96uf//mT6jevf3v7y/+/msT5GGrMtdbRLSMxsvaetCpExHi3g+Wkp1FPa51JYZOD0h1OCgCAjtKWe7ifRDF64snNWzHe+SDX5AAAAICuWO2JWAUAAAD2ucT6HwAAAPa55vcAHi0vTjRbvt9I2F0PL0TEcL3+lUarzxSiWtsORG9EHHqUROtjrUn9sBc2EhEPPjr7VtZih55D3kh1KSJ+2u78J7X6h2tPca+vP42I0S7EH3lmvNfq/3Vf5/rPdyF+3vUDcDDdu1C/kK2//qVr9z8Rj2v/TtR6/Su0uXY9j5HBp8e7ff1r3v+trLv/e1J/T4f7v79uMcat116+2Wkuew9/f/dPbzZbFj/bvlBR2/BwKeJnhXb1J2v1Jx3qv/TUK/V1jFH87ma501ze9a++EnE82tfflGz8/xOdnJyqlEfrP9vGWHpv7I1O8fOuPzv/hzrUv9n5v7HFGP+4ePFOp7nN608/60v+Xus1/4T9a3xubuZURF/yl/W/P914oL2D5j7N18jqP/GLjT//7erPQlQb70O2FlhqbLPxv5+J+Yfbt97eqP5s7Zfn+b/8nOf/v1uM8ct3/3ei01zr+jdrWfwHSX0tDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNaUQMRZKW1vppWipFHI6IH8ehtHJ9du5Xk9f/ee1yNhcxHL3p5FSlPBoRxfo4ycanav0n49PPjH8bEUci4qXiYG1cmrheuZx38QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw5HBFDkaSliEgjYqWYpqVS3lkBAAAAXTecdwIAAADAjrP+BwAAgP1vg/V/UtjNRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANivjhy7dz+JiOq5wVrL9DXmenPNDNhpad4JALnpyTsBIDeFvBMAcrPNNb7bBdiHkk3mBzrO9Hc9FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD2ruNH791PIqJ6brDWMn2Nud62RxzbxeyAnZTmnQCQm56NJgu7lwew+3zE4eBqv8YHDo6eSDbZYyCiuU/16Zn+bcb6/NNtHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAHjJUa0laioi01k/TUiniBxExHL3J5FSlPBoRP4yID4u9/dm4P++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LrZ+YXp8UqlPKOjo5NvJ9kbadQ7ef/NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAHmbnF6bHK5XyzGzemQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m51fmB6vVMozW+jc2c7OLZ28awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/fBwAA//9VihLz") openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f0000000300)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000005c0), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000140), 0x8) sendmmsg$sock(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}}], 0x1, 0x20000000) recvmmsg(r1, &(0x7f0000000600), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000640)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000680)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000006c0), 0x12) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0xd4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000001}, @CTA_NAT_SRC={0x40, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00'}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010100}]}]}, 0xd4}}, 0x0) 1.17817314s ago: executing program 0 (id=24): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000ac0)={[{@noblock_validity}, {@nojournal_checksum}, {@errors_continue}, {@i_version}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noblock_validity}]}, 0xfc, 0x56f, &(0x7f0000000380)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = mq_open(&(0x7f0000001380)='\a\x05\x00\x00', 0xa167ad740cb9a351, 0x3c, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x28040) fcntl$setflags(r4, 0x2, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0x10c6b) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)={[{@quota}, {@noload}, {@init_itable}]}, 0x1, 0x4ec, &(0x7f00000013c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f00000018c0)='./file1\x00', 0x101042, 0x15) pwrite64(r8, &(0x7f0000001900)='2', 0xfdef, 0xc00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7a0d34d445bdce32, 0x28011, r8, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x64) listen(0xffffffffffffffff, 0x39b3) 1.122130857s ago: executing program 2 (id=25): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) syz_ublk_setup_io_uring(0x6af7, &(0x7f0000000140)={0x0, 0x774a, 0x20, 0x3, 0x10a, 0x0, r0}, &(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) syz_io_uring_setup(0x34b9, &(0x7f0000000280)={0x0, 0x69ec, 0xc00, 0x5, 0x50}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000003c0)=@IORING_OP_WRITE={0x17, 0x0, 0x2004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffff2, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_ublk_setup_io_uring(0x3425, &(0x7f0000000440)={0x0, 0x6ff5, 0x40, 0x3, 0x84}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) r7 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000580)) socket$inet_sctp(0x2, 0x5, 0x84) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, r6, &(0x7f00000005c0)=@IORING_OP_LISTEN={0x39, 0x24, 0x0, r7, 0x0, 0x0, 0x8000, 0x0, 0x0, {0x0, r8}}) syz_genetlink_get_family_id$tipc2(&(0x7f00000058c0), r0) 1.077695196s ago: executing program 1 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x21400, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r3 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) sched_setscheduler(r3, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x2b, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000007900000006000000f4170000000000000100000000090000009500000000000000eb781028f886105138e29253b031feac81b1"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000d80)={0x4, 0x0, 0x0, 0x1d0, 0x138, 0x1, 0x0, 0x4c7ac378262d4d93, 0x0, 0x0, @by_dev={r2}, [@cache={0x0, 0x800, 0x0, 0x98, 'cache\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, '1024', 0x20, '0', 0x20, 'smq 2 migration_threshold 1024'}}]}) 0s ago: executing program 2 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) futex(0x0, 0x6, 0x3d, 0x0, 0x0, 0x2) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000100)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x52) recvmmsg(r1, &(0x7f0000000400), 0x5b, 0x40, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r5, 0x0, 0x0) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x1) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000400)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000f00", 0x33a) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x17, 0x9, &(0x7f0000000640)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 28.881806][ T4724] cgroup: Unknown subsys name 'net' [ 29.041979][ T4724] cgroup: Unknown subsys name 'cpuset' [ 29.043280][ T4724] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.202830][ T4724] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.051056][ T4748] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.051397][ T4748] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.051598][ T4748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.051863][ T4748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.059330][ T4750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.059682][ T4753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.059805][ T4753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.059925][ T4753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.060221][ T4751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.060349][ T4753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.060544][ T4753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.060885][ T4753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.061044][ T4753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.061356][ T4753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.061550][ T4753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.062092][ T4753] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.062423][ T4753] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.062613][ T4753] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.067672][ T4753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.068038][ T4753] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.068245][ T4753] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.070038][ T4753] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.073270][ T4754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.073363][ T4754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.076585][ T4747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.262905][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.263182][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.263543][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.270688][ T4749] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.273608][ T4736] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.277470][ T4738] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.286631][ T4735] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.331365][ T4737] infiniband rxe0: set active [ 30.331575][ T4739] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.333725][ T4737] infiniband rxe0: added rxe_eth0 [ 30.362424][ T4737] RDS/IB: rxe0: added [ 30.362496][ T4737] smc: adding ib device rxe0 with port count 1 [ 30.362517][ T4737] smc: ib device rxe0 port 1 has no pnetid [ 30.374651][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.375322][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.420170][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.474328][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.518195][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.574364][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.574653][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.574722][ T4749] bridge_slave_0: entered allmulticast mode [ 30.575250][ T4749] bridge_slave_0: entered promiscuous mode [ 30.587712][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.587777][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.587886][ T4749] bridge_slave_1: entered allmulticast mode [ 30.588397][ T4749] bridge_slave_1: entered promiscuous mode [ 30.600849][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.600886][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.600952][ T4736] bridge_slave_0: entered allmulticast mode [ 30.601377][ T4736] bridge_slave_0: entered promiscuous mode [ 30.607400][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.607422][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.607476][ T4736] bridge_slave_1: entered allmulticast mode [ 30.607905][ T4736] bridge_slave_1: entered promiscuous mode [ 30.613366][ T4737] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.638862][ T4736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.642261][ T4749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.663352][ T4736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.664136][ T4749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.679149][ T4736] team0: Port device team_slave_0 added [ 30.687552][ T4749] team0: Port device team_slave_0 added [ 30.687627][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.687684][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.687734][ T4738] bridge_slave_0: entered allmulticast mode [ 30.688450][ T4738] bridge_slave_0: entered promiscuous mode [ 30.689609][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689631][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.689712][ T4738] bridge_slave_1: entered allmulticast mode [ 30.690160][ T4738] bridge_slave_1: entered promiscuous mode [ 30.691741][ T4736] team0: Port device team_slave_1 added [ 30.701240][ T4749] team0: Port device team_slave_1 added [ 30.713505][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.713516][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.713527][ T4736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.716728][ T4736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.716738][ T4736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.716753][ T4736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.724078][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.724939][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.731636][ T4735] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.731663][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.731715][ T4735] bridge_slave_0: entered allmulticast mode [ 30.732806][ T4735] bridge_slave_0: entered promiscuous mode [ 30.733745][ T4735] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.733825][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.733925][ T4735] bridge_slave_1: entered allmulticast mode [ 30.734341][ T4735] bridge_slave_1: entered promiscuous mode [ 30.747894][ T4736] hsr_slave_0: entered promiscuous mode [ 30.748208][ T4736] hsr_slave_1: entered promiscuous mode [ 30.765751][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.765766][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.765783][ T4749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.766362][ T4749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.766369][ T4749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.766382][ T4749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.776166][ T4749] hsr_slave_0: entered promiscuous mode [ 30.776489][ T4749] hsr_slave_1: entered promiscuous mode [ 30.776677][ T4749] debugfs: 'hsr0' already exists in 'hsr' [ 30.776726][ T4749] Cannot create hsr debugfs directory [ 30.805365][ T4738] team0: Port device team_slave_0 added [ 30.814341][ T4735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.815250][ T4735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.825059][ T4735] team0: Port device team_slave_0 added [ 30.825678][ T4738] team0: Port device team_slave_1 added [ 30.839735][ T4735] team0: Port device team_slave_1 added [ 30.858207][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.858219][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.858231][ T4738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.858640][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.858650][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.858662][ T4735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.875617][ T4735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.875628][ T4735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.875643][ T4735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.881945][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.881954][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.881966][ T4738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.910308][ T4738] hsr_slave_0: entered promiscuous mode [ 30.910869][ T4738] hsr_slave_1: entered promiscuous mode [ 30.911043][ T4738] debugfs: 'hsr0' already exists in 'hsr' [ 30.911053][ T4738] Cannot create hsr debugfs directory [ 30.917666][ T4735] hsr_slave_0: entered promiscuous mode [ 30.917958][ T4735] hsr_slave_1: entered promiscuous mode [ 30.918134][ T4735] debugfs: 'hsr0' already exists in 'hsr' [ 30.918143][ T4735] Cannot create hsr debugfs directory [ 30.926761][ T4737] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.926863][ T4737] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.926917][ T4737] bridge_slave_0: entered allmulticast mode [ 30.927351][ T4737] bridge_slave_0: entered promiscuous mode [ 30.932837][ T4737] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.932865][ T4737] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.932924][ T4737] bridge_slave_1: entered allmulticast mode [ 30.933388][ T4737] bridge_slave_1: entered promiscuous mode [ 30.956155][ T4737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.958846][ T4737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.979302][ T4737] team0: Port device team_slave_0 added [ 30.986926][ T4737] team0: Port device team_slave_1 added [ 30.989766][ T4749] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.994735][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.007161][ T4749] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.008374][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.010029][ T4749] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.012400][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.012920][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.012927][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.012939][ T4737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.014382][ T4737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.014390][ T4737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.014401][ T4737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.026100][ T4749] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.031656][ T4749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.069414][ T4737] hsr_slave_0: entered promiscuous mode [ 31.069722][ T4737] hsr_slave_1: entered promiscuous mode [ 31.069915][ T4737] debugfs: 'hsr0' already exists in 'hsr' [ 31.069925][ T4737] Cannot create hsr debugfs directory [ 31.074091][ T4736] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.077628][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.082766][ T4736] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.083738][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.084512][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.084544][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.084692][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.084729][ T4749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.088720][ T4736] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.089936][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.105679][ T4736] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.106649][ T4736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.139929][ T4735] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.142052][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.142348][ T4735] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.143177][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.154406][ T4735] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.155275][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.158678][ T4736] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.158705][ T4736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.158775][ T4736] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.158804][ T4736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.170016][ T4735] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.171469][ T4735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.173886][ T4738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.174911][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.175198][ T4738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.176406][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.176770][ T4738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.177572][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.177828][ T4738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.178903][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.194125][ T4749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.205448][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.205903][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.206337][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.206580][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.219330][ T4749] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.231984][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.232018][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.235860][ T3071] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.235883][ T3071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.248458][ T4737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.249621][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.257238][ T4737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.258417][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.258917][ T4737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.259803][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.267995][ T4737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.269022][ T4737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.288300][ T4749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.288323][ T4749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.311742][ T4735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.315984][ T4735] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.332942][ T4736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.336549][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336572][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.337134][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337153][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.347625][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.355037][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.369419][ T4738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.369436][ T4738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.383912][ T1205] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.383944][ T1205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.384324][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.384349][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.398145][ T4736] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.404877][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.404909][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.406675][ T1205] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.406696][ T1205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.421507][ T4737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.427711][ T4736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.427726][ T4736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.449845][ T4737] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.473434][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.473473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.474495][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.474514][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.572581][ T4749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.584948][ T4749] veth0_vlan: entered promiscuous mode [ 31.586675][ T4749] veth1_vlan: entered promiscuous mode [ 31.596007][ T4749] veth0_macvtap: entered promiscuous mode [ 31.597451][ T4749] veth1_macvtap: entered promiscuous mode [ 31.606055][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.607081][ T4749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.643890][ T4735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.685616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.685633][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.699160][ T4738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.722608][ T4738] veth0_vlan: entered promiscuous mode [ 31.724553][ T4738] veth1_vlan: entered promiscuous mode [ 31.728458][ T4736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.740072][ T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.740085][ T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.751576][ T133] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.751752][ T133] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.751992][ T133] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.752059][ T133] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.778577][ T4738] veth0_macvtap: entered promiscuous mode [ 31.786010][ T4737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.789644][ T4736] veth0_vlan: entered promiscuous mode [ 31.793397][ T4738] veth1_macvtap: entered promiscuous mode [ 31.804588][ T4736] veth1_vlan: entered promiscuous mode [ 31.807480][ T4737] veth0_vlan: entered promiscuous mode [ 31.808585][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.809554][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.809686][ T4737] veth1_vlan: entered promiscuous mode [ 31.826100][ T4749] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.835893][ T133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.835936][ T133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.835962][ T133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.835990][ T133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.837864][ T4737] veth0_macvtap: entered promiscuous mode [ 31.848623][ T4735] veth0_vlan: entered promiscuous mode [ 31.850284][ T4735] veth1_vlan: entered promiscuous mode [ 31.857910][ T4736] veth0_macvtap: entered promiscuous mode [ 31.858486][ T4737] veth1_macvtap: entered promiscuous mode [ 31.916388][ T4736] veth1_macvtap: entered promiscuous mode [ 31.919680][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.922277][ T4736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.947317][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.948788][ T4737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.970855][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.970886][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.970903][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.986772][ T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.986816][ T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.003745][ T133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.006746][ T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.007981][ T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.008804][ T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.009999][ T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.091155][ T4747] Bluetooth: hci4: command tx timeout [ 32.091392][ T4747] Bluetooth: hci1: command tx timeout [ 32.173301][ T4747] Bluetooth: hci0: command tx timeout [ 32.173592][ T4747] Bluetooth: hci2: command tx timeout [ 32.174523][ T4754] Bluetooth: hci3: command tx timeout [ 32.207174][ T4735] veth0_macvtap: entered promiscuous mode [ 32.213930][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.213945][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.227941][ T4735] veth1_macvtap: entered promiscuous mode [ 32.234618][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.234631][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.246117][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.246129][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.255859][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.257011][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.257023][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.259754][ T4735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.268426][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.268437][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.311278][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.311289][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.325348][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.325363][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.333762][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.333931][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.334070][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.334180][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.364307][ T4932] loop0: detected capacity change from 0 to 1024 [ 32.367300][ T4932] EXT4-fs: Ignoring removed i_version option [ 32.433766][ T4932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.452093][ T4943] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 32.833371][ T4951] loop1: detected capacity change from 0 to 4096 [ 32.837719][ T4951] ext4: Unknown parameter 'noacl' [ 33.060036][ T4956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'. [ 33.427615][ T4949] loop4: detected capacity change from 0 to 1024 [ 33.478479][ T4949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.518747][ T4952] Injecting memory failure for pfn 0x136ff3 at process virtual address 0x20000000 [ 33.526593][ T4952] Memory failure: 0x136ff3: recovery action for clean LRU page: Recovered [ 33.526612][ T4952] Injecting memory failure for pfn 0x137469 at process virtual address 0x20002000 [ 33.526729][ T4952] Memory failure: 0x137469: recovery action for clean LRU page: Recovered [ 33.526738][ T4952] Injecting memory failure for pfn 0x1374a9 at process virtual address 0x20006000 [ 33.526895][ T4952] Memory failure: 0x1374a9: recovery action for clean LRU page: Recovered [ 33.526903][ T4952] Injecting memory failure for pfn 0x136ff9 at process virtual address 0x2000e000 [ 33.527048][ T4952] Memory failure: 0x136ff9: recovery action for clean LRU page: Recovered [ 33.527056][ T4952] Injecting memory failure for pfn 0x137401 at process virtual address 0x20016000 [ 33.527200][ T4952] Memory failure: 0x137401: recovery action for clean LRU page: Recovered [ 33.994093][ T4968] netlink: 'syz.1.11': attribute type 15 has an invalid length. [ 33.994112][ T4968] netlink: 666 bytes leftover after parsing attributes in process `syz.1.11'. [ 34.007508][ T4735] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.021884][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.170454][ T4745] Bluetooth: hci1: command tx timeout [ 34.170480][ T4745] Bluetooth: hci4: command tx timeout [ 34.260457][ T4745] Bluetooth: hci2: command tx timeout [ 34.260484][ T4745] Bluetooth: hci0: command tx timeout [ 34.260551][ T4754] Bluetooth: hci3: command tx timeout [ 34.283725][ T4970] loop2: detected capacity change from 0 to 4096 [ 34.284173][ T4970] ext4: Unknown parameter 'noacl' [ 34.920299][ T4975] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 34.920338][ T4975] block device autoloading is deprecated and will be removed. [ 35.327168][ T4981] loop3: detected capacity change from 0 to 1024 [ 35.360763][ T4981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.366312][ T4981] Zero length message leads to an empty skb [ 35.366558][ T4754] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 35.371660][ T4983] md/raid10:md4: active with 1 out of 3 devices [ 35.372360][ T4983] md4: detected capacity change from 0 to 3840 [ 35.373840][ T4975] md: invalid raid superblock magic on ram9 [ 35.373851][ T4975] md: ram9 does not have a valid v0.90 superblock, not importing! [ 35.373882][ T4975] md: md_import_device returned -22 [ 35.384630][ T4909] logitech-hidpp-device 0003:046D:C082.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 35.405611][ T4996] fido_id[4996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 35.802262][ T4999] loop1: detected capacity change from 0 to 4096 [ 35.812652][ T4999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.812712][ T5001] loop0: detected capacity change from 0 to 4096 [ 35.819855][ T5001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.819872][ T5001] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.826037][ T5001] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0002] [ 35.826089][ T5001] System zones: 0-5 [ 35.827191][ T5001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.851168][ T5001] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 35.912134][ T4749] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.961311][ T5006] binder: 5005:5006 tried to acquire reference to desc 0, got 1 instead [ 35.964430][ T5007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19'. [ 35.966433][ T4844] binder: release 5005:5006 transaction 5 out, still active [ 35.966451][ T4844] binder: undelivered TRANSACTION_COMPLETE [ 35.982600][ T4844] binder: send failed reply for transaction 5, target dead [ 35.985479][ T5007] fscrypt: AES-256-XTS using blk-crypto-fallback [ 36.003994][ T5010] .: renamed from bond0 (while UP) [ 36.004104][ T5010] FAULT_INJECTION: forcing a failure. [ 36.004104][ T5010] name failslab, interval 1, probability 0, space 0, times 1 [ 36.004118][ T5010] CPU: 1 UID: 0 PID: 5010 Comm: syz.1.21 Not tainted syzkaller #0 PREEMPT [ 36.004128][ T5010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 36.004134][ T5010] Call trace: [ 36.004137][ T5010] show_stack+0x2c/0x3c (C) [ 36.004152][ T5010] __dump_stack+0x30/0x40 [ 36.004161][ T5010] dump_stack_lvl+0xd8/0x12c [ 36.004170][ T5010] dump_stack+0x1c/0x28 [ 36.004177][ T5010] should_fail_ex+0x418/0x58c [ 36.004188][ T5010] should_failslab+0xc4/0x120 [ 36.004198][ T5010] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 36.004209][ T5010] kstrdup+0x50/0x104 [ 36.004220][ T5010] kstrdup_const+0x54/0x6c [ 36.004230][ T5010] kernfs_rename_ns+0x2e0/0x55c [ 36.004239][ T5010] sysfs_rename_link_ns+0x190/0x1b4 [ 36.004249][ T5010] device_rename+0x100/0x214 [ 36.004259][ T5010] netif_change_name+0x234/0x6b8 [ 36.004269][ T5010] dev_change_name+0x104/0x1f4 [ 36.004279][ T5010] dev_ifsioc+0x288/0xc34 [ 36.004288][ T5010] dev_ioctl+0x394/0xc88 [ 36.004295][ T5010] sock_do_ioctl+0x198/0x254 [ 36.004308][ T5010] sock_ioctl+0x55c/0x7ec [ 36.004320][ T5010] __arm64_sys_ioctl+0x154/0x1cc [ 36.004330][ T5010] invoke_syscall+0x98/0x244 [ 36.004339][ T5010] el0_svc_common+0xec/0x23c [ 36.004347][ T5010] do_el0_svc+0x4c/0x5c [ 36.004355][ T5010] el0_svc+0x60/0x1d8 [ 36.004364][ T5010] el0t_64_sync_handler+0x44/0x104 [ 36.004372][ T5010] el0t_64_sync+0x198/0x19c [ 36.005454][ T5010] netlink: 'syz.1.21': attribute type 32 has an invalid length. [ 36.005464][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 36.010349][ T5010] bond1: option coupled_control: invalid value (115) [ 36.054365][ T5010] bond1 (unregistering): Released all slaves [ 36.073857][ T4737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.128930][ T5013] loop4: detected capacity change from 0 to 4096 [ 36.129767][ T5013] ext4: Unknown parameter 'noacl' [ 36.174865][ T4736] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.250892][ T4747] Bluetooth: hci1: command tx timeout [ 36.251207][ T4754] Bluetooth: hci4: command tx timeout [ 36.274704][ T5022] loop0: detected capacity change from 0 to 1024 [ 36.275322][ T5022] EXT4-fs: Ignoring removed i_version option [ 36.285471][ T5022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.367967][ T4747] Bluetooth: hci2: command tx timeout [ 36.368714][ T4754] Bluetooth: hci0: command tx timeout [ 37.924468][ T5038] netlink: 'syz.2.27': attribute type 15 has an invalid length. [ 37.924533][ T5038] netlink: 666 bytes leftover after parsing attributes in process `syz.2.27'. [ 37.929761][ T5036] workqueue: Failed to create a rescuer kthread for wq "kcopyd": -EINTR [ 37.930736][ T5036] ================================================================== [ 37.930743][ T5036] BUG: KASAN: null-ptr-deref in dm_kcopyd_client_destroy+0xa0/0x3c4 [ 37.930764][ T5036] Read of size 4 at addr 0000000000000174 by task syz.1.26/5036 [ 37.930772][ T5036] [ 37.930776][ T5036] CPU: 1 UID: 0 PID: 5036 Comm: syz.1.26 Not tainted syzkaller #0 PREEMPT [ 37.930786][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.930791][ T5036] Call trace: [ 37.930794][ T5036] show_stack+0x2c/0x3c (C) [ 37.930805][ T5036] __dump_stack+0x30/0x40 [ 37.930814][ T5036] dump_stack_lvl+0xd8/0x12c [ 37.930830][ T5036] print_report+0x58/0x84 [ 37.930840][ T5036] kasan_report+0x8c/0xc4 [ 37.930851][ T5036] kasan_check_range+0x17c/0x1ac [ 37.930863][ T5036] __kasan_check_read+0x20/0x30 [ 37.930871][ T5036] dm_kcopyd_client_destroy+0xa0/0x3c4 [ 37.930882][ T5036] __destroy+0x15c/0x2cc [ 37.930893][ T5036] cache_ctr+0xe78/0x1f1c [ 37.930903][ T5036] dm_table_add_target+0x44c/0xb18 [ 37.930911][ T5036] table_load+0x27c/0x764 [ 37.930921][ T5036] dm_ctl_ioctl+0x884/0xbbc [ 37.930931][ T5036] __arm64_sys_ioctl+0x154/0x1cc [ 37.930941][ T5036] invoke_syscall+0x98/0x244 [ 37.930949][ T5036] el0_svc_common+0xec/0x23c [ 37.930957][ T5036] do_el0_svc+0x4c/0x5c [ 37.930965][ T5036] el0_svc+0x60/0x1d8 [ 37.930974][ T5036] el0t_64_sync_handler+0x44/0x104 [ 37.930981][ T5036] el0t_64_sync+0x198/0x19c [ 37.930990][ T5036] ================================================================== [ 37.930994][ T5036] Disabling lock debugging due to kernel taint [ 37.931009][ T5036] Unable to handle kernel paging request at virtual address dfff80000000002e [ 37.931015][ T5036] KASAN: null-ptr-deref in range [0x0000000000000170-0x0000000000000177] [ 37.931021][ T5036] Mem abort info: [ 37.931024][ T5036] ESR = 0x0000000096000005 [ 37.931028][ T5036] EC = 0x25: DABT (current EL), IL = 32 bits [ 37.931033][ T5036] SET = 0, FnV = 0 [ 37.931037][ T5036] EA = 0, S1PTW = 0 [ 37.931041][ T5036] FSC = 0x05: level 1 translation fault [ 37.931045][ T5036] Data abort info: [ 37.931048][ T5036] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 37.931053][ T5036] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 37.931058][ T5036] GCS = 0, Overlay = 0, DirtyBit = 0 [ 37.931063][ T5036] [dfff80000000002e] address between user and kernel address ranges [ 37.931070][ T5036] Internal error: Oops: 0000000096000005 [#1] SMP [ 37.975948][ T5036] Modules linked in: [ 37.976654][ T5036] CPU: 1 UID: 0 PID: 5036 Comm: syz.1.26 Tainted: G B syzkaller #0 PREEMPT [ 37.978479][ T5036] Tainted: [B]=BAD_PAGE [ 37.979221][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.981042][ T5036] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 37.982438][ T5036] pc : dm_kcopyd_client_destroy+0xa4/0x3c4 [ 37.983487][ T5036] lr : dm_kcopyd_client_destroy+0xa0/0x3c4 [ 37.984540][ T5036] sp : ffff800098e17620 [ 37.985311][ T5036] x29: ffff800098e176c0 x28: ffff7000131c2efc x27: dfff800000000000 [ 37.987070][ T5036] x26: 0000000000000400 x25: 000000000000002e x24: 0000000000000174 [ 37.988683][ T5036] x23: dfff800000000000 x22: ffff7000131c2ec4 x21: ffff800098e17620 [ 37.990327][ T5036] x20: fffffffffffffff4 x19: fffffffffffffff4 x18: ffff8001237d4000 [ 37.991997][ T5036] x17: 3d3d3d3d3d3d3d3d x16: 3d3d3d3d3d3d3d3d x15: 3d3d3d3d3d3d3d3d [ 37.993656][ T5036] x14: 0000000000000840 x13: 0000000000000001 x12: 0000000000000000 [ 37.995309][ T5036] x11: 0000000000000000 x10: 0000000000080000 x9 : 0000000000000000 [ 37.996890][ T5036] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080484084 [ 37.998483][ T5036] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f4854 [ 38.000080][ T5036] x2 : 0000000000000000 x1 : ffff0000c70b1d80 x0 : 0000000000000000 [ 38.001548][ T5036] Call trace: [ 38.002122][ T5036] dm_kcopyd_client_destroy+0xa4/0x3c4 (P) [ 38.003191][ T5036] __destroy+0x15c/0x2cc [ 38.003973][ T5036] cache_ctr+0xe78/0x1f1c [ 38.004747][ T5036] dm_table_add_target+0x44c/0xb18 [ 38.005643][ T5036] table_load+0x27c/0x764 [ 38.006404][ T5036] dm_ctl_ioctl+0x884/0xbbc [ 38.007202][ T5036] __arm64_sys_ioctl+0x154/0x1cc [ 38.008100][ T5036] invoke_syscall+0x98/0x244 [ 38.008934][ T5036] el0_svc_common+0xec/0x23c [ 38.009765][ T5036] do_el0_svc+0x4c/0x5c [ 38.010521][ T5036] el0_svc+0x60/0x1d8 [ 38.011271][ T5036] el0t_64_sync_handler+0x44/0x104 [ 38.012189][ T5036] el0t_64_sync+0x198/0x19c [ 38.013027][ T5036] Code: 52800081 91060278 972c3f7c d343ff19 (38f76b28) [ 38.014281][ T5036] ---[ end trace 0000000000000000 ]--- [ 38.018677][ T5022] Injecting memory failure for pfn 0x138d35 at process virtual address 0x20000000 [ 38.021005][ T5022] Memory failure: 0x138d35: Sending SIGBUS to syz.0.24:5022 due to hardware memory corruption [ 38.021035][ T5022] Memory failure: 0x138d35: recovery action for unsplit thp: Failed [ 38.301127][ T5036] Kernel panic - not syncing: Oops: Fatal exception [ 38.307416][ T5036] SMP: stopping secondary CPUs [ 38.308213][ T5036] Kernel Offset: disabled [ 38.308942][ T5036] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 38.310135][ T5036] Memory Limit: none [ 38.570523][ T5036] Rebooting in 86400 seconds..