last executing test programs: 50.861888091s ago: executing program 3 (id=406): r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x38, r0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x5, 0x7, @local}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0xd) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}}, 0x4001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r1], 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC(r4, 0x40603d07, 0x0) ptrace$setregs(0x4212, 0x0, 0x58, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) 50.310178838s ago: executing program 3 (id=413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x1000410, &(0x7f0000000380)={[{@grpid}, {@jqfmt_vfsv0}]}, 0x4, 0x4eb, &(0x7f00000003c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000900)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000940)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000b00)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000b80), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000bc0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={0x0, 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) mmap(&(0x7f0000690000/0x1000)=nil, 0x1000, 0x4, 0x1010, r1, 0xd6766000) timer_settime(0x0, 0x1, &(0x7f0000000e80)={{0x0, 0x3938700}}, &(0x7f0000000ec0)) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, 0x0, 0x44084) r5 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000160001030000000000f6ffff0a"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, 0x0) r7 = getpid() kcmp(r7, r7, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/bnep\x00') setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000000a80)=0x6, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000010000000000000002000400b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="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"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) 49.465567494s ago: executing program 3 (id=414): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x180) write(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000006d80)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000006dc0)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0, 0x80000}, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x10, 0x2, 0x0, 0x200, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x8000, r1, 0x0, 0xfffffff2}, 0x38) 49.384287894s ago: executing program 3 (id=415): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000021c0)='./file1\x00', 0x210000, &(0x7f0000002200), 0xfc, 0x56f, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000002800)={0x7, 0x100}, 0x0) r1 = getpid() socket$tipc(0x1e, 0x5, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000500)={0x0, 0x8550, 0xc00, 0x1, 0x11}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, &(0x7f00000005c0)={'filter\x00', 0x278, '\x00'/632}, &(0x7f0000000880)=0x2a0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000008c0)=ANY=[@ANYRES64=r3]) sched_setscheduler(r1, 0x1, &(0x7f0000002840)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000002880)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000028c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000002900)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000002980), 0x651, 0x0) recvmmsg(r5, &(0x7f00000029c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002a00)=0x6) r7 = mq_open(0x0, 0xa167ad740cb9a351, 0x3c, 0x0) fcntl$setflags(r7, 0x2, 0x0) pwrite64(r6, &(0x7f00000003c0)="329d1f38be8dff28d5d4a415736efba4589b8d7e2d80574f6d72e6f7f59e08f5a13d39ec4ad37b676396cae370bbaf5c82eba1bf3f1aaafd2e616d49380eba7be4fbec6b8bfbe7aa18e1a156cd73e20c73322f8a983619bdb20e41855c2b20b4cea6360eb6299ea23830770776b5dc4f3eaa1b8e246e52aaa2745b00d1397c9061399edb81a89b8e064c7527811290d531a7dc067ba7a746ce4392148d866f1ab801d53b16ad9efe5acadd92519b85800eaf00000000008dbcd2a8e872f68ee389b3000000", 0xc5, 0x5) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r7}}, './proc\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, 0x0, 0x400c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/split_huge_pages\x00', 0x1, 0x0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000200)=0x0) migrate_pages(r10, 0x10001, &(0x7f0000000240)=0xf41d, &(0x7f0000000280)=0xaa4) write(r9, &(0x7f00000001c0)='1,0x7f0000800000,0x7f0000a00000,0,-', 0x23) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89f9, 0x0) syz_emit_vhci(0x0, 0x16) 49.289774038s ago: executing program 32 (id=416): mknodat$md(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x6180, 0x0) r0 = openat$md_node(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xabd7adf0fcb327ff}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048090}, 0x4000) ioctl$HOT_REMOVE_DISK(r0, 0x922, 0x0) 49.028370798s ago: executing program 33 (id=417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000002c00)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000002c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002c80), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r7 = io_uring_setup(0xbeae, &(0x7f0000000280)={0x0, 0x49ab, 0x80000}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000300)=[{&(0x7f0000000500)=""/4095, 0x440000}], 0x2000000000000021) io_uring_enter(r7, 0x516b, 0x3e29, 0xca, &(0x7f0000001640)={[0x3ff]}, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 48.889237122s ago: executing program 34 (id=420): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x2b, 0x3, 0x70bd2c, 0x25dfdbfe, {0x6}, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40070) (async) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000180)=""/19, &(0x7f0000000400)=0x13) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) (async) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000003c0)=@ccm_128={{0x304}, "1c273b96d251dfc0", "5a173e60547411d49bda4d6c77630711", "e6c84abe", "e9cb1bf0434f65b8"}, 0x28) (async) r7 = socket(0x1, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sec\x00', &(0x7f00000001c0)='securityfs\x00', 0x0, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) write(r8, &(0x7f0000000380)='address_group grp1 0.0.0.0-655.255.255.255\n', 0x2b) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x4000886}, 0x0) 48.869387099s ago: executing program 35 (id=421): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@nogrpid}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x4, 0x8, 0x1, 0x7fffffff, 0xd, "00080000000000000000000cadf100004000"}) r2 = syz_open_pts(r0, 0x141401) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./trace\x00', 0x0) r3 = syz_clone(0x648e7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/set_event\x00', 0x202, 0x0) write(r4, &(0x7f0000000740)="212a6838fa5de65531da837d823a", 0xe) write(r2, &(0x7f0000000180)="d5", 0xfffffedf) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000001c0)=0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4040) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='noac,,smackfstransmuteC']) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r7 = userfaultfd(0x1) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000780)) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f00000007c0)={{&(0x7f00006c4000/0x2000)=nil, 0x2000}}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="010000000000ffffffff3900000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0xec}}, 0x4008000) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0xa0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x3a040, 0x1a0) syz_open_procfs(r3, &(0x7f0000000800)='net/ptype\x00') 48.006337257s ago: executing program 3 (id=423): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0xfffffff5, &(0x7f0000000140)=[{&(0x7f0000000180)="a2", 0xfffffdef}], 0x1}, 0x0) close_range(r0, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000000)={0x13, {{0x29, 0x0, 0x3e000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffe}}}, 0x88) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001100010003000000000064000000000064"], 0x20}}, 0x0) 47.649873793s ago: executing program 3 (id=424): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x2000012, 0x9f, 0x0, &(0x7f0000000e80)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000001100)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x873}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@max_batch_time}, {@norecovery}, {@acl}]}, 0xfe, 0x495, &(0x7f0000000940)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0xa4) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x156) getdents64(r0, &(0x7f00000000c0)=""/47, 0x2f) r1 = fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb810019000800450a0058006600000e2f"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002480)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002e9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r6 = socket(0x2, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002800)=@newqdisc={0x104, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0xffff, 0xc}}, [@TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x875, 0x5, 0x2, 0x0, 0x302, 0x4}}, {0xc, 0x2, [0x7, 0x80, 0x3, 0x22]}}, {{0x1c, 0x1, {0x4, 0x7, 0x800, 0xe07f, 0x2, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0xa, 0x8]}}, {{0x1c, 0x1, {0x7f, 0x86, 0xff, 0x18, 0x2, 0x6, 0xb, 0x5}}, {0xe, 0x2, [0xffc0, 0x8, 0x401, 0x3e3, 0xa86]}}, {{0x1c, 0x1, {0x7, 0x4, 0x7fff, 0x0, 0x2, 0x5, 0x400, 0x7}}, {0x12, 0x2, [0x9, 0x47, 0xffff, 0xe6, 0x7f, 0x0, 0x3]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x7c6, 0x1, 0x100, 0x0, 0xa}}, {0x18, 0x2, [0xb8eb, 0x0, 0x7fff, 0x4, 0x400, 0x9, 0x3, 0xfffe, 0xf1, 0x4]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002940)=ANY=[@ANYBLOB="d4000000f6897c54ca90c88122071293c300ac66f96a3d9af0a9f8775ae5a90c269fa7a0975b8502000000fc676808ca08000000fbfff8fbe294e53f77a2f416ca9a7a0830752853676f8c11ed7c8697e87a5447d919a5838b0feb3b4f234244246a6db4a5b1e726953372c0e559b0d5253fca1b71da82c94e3520e0165ee71951e8a133223e2cbb090062ddd96f6dcbd6392118009293b8363d315249bc3aaff9feb79a25a1b8c1e85937d700000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040055030000"], 0xd4}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908186ea04e641c89a2ee0432e9c0894a8d7aff0c865e96548d507f048f907320b0f8b1e83b5f1425b63ad9c6adfd09578bbda92c9bd8f57d6efd752a6f20487ebea241d612212e3ccb077a5150c08f56aed6ee45acd4439043886b78cc5562b00bc57cf509d90b02a7bc86919f1b882f556e6aac5e9b93ee545b2b68bd014e2a49c332432ef4adeb61ac418aa4e20ee299f1a8b7a72e985223996b11a8913f3b1c23b10f88c3de28660457a37126fd3b6394536da0cd962f532ff22c496e1df4ffe049b193514c02571399d3618383a287068f4f15d51d1781cc0bc2af66ddc68135bfd33634e1a75be80630ce76ef79c86c9abb2fdc6d84367ea10fd8a6ee3c99eaec83c66bf5ffce6eb5ccc2546b6df905ff1aea223029ba2f7eb2469c5b8637b79347361f8cf0fa9d58a039e7811f343961b22c23d68b2c04eb8b5aeee7c6f71ce95cab886bf2694e0643d18761043e2d1dcb8ce0bdd15817a75f591b05146424797f729689e2a7bd53cb6c02fd15c339057c714794b407b342d12e69ec383b6ea6c99f845d04fd5128203c78a388fb0a1caf1f725f7636eb41e415951f8284a9c475760eb9312f7d6307037d472fbda509d56a0cf8e36d44f3f0b67fabdd2842ab4241cbfc7d309188d3a634129a13bfcac3b39b75d46bed585550ff7b41746dfd7e0f0c8a25e9f39deb7e2a4f0e068b86c6593b3b37838d2809eef3eb2f3120fde2fe3e9fef4e4bea1ddf3d17c40f753b37baaa110a8b4ad805d500e0235e9371b828993da25c5697d1001c8971b3862eef047730b242350403c851cd74cdea94501c0e2875a5830aa71733a0f022cb37e1cfffaee8eb0a23d51181a0691dadcd6b30a86a5fbf5c499120e265938f6430ffde09eb173327c2e25bdf22ae0d742141db856c4beee07af0ce37c078f6e59b41a29502cc01737c984185f6622a3ce02ed04daf2a7eb03c92a5a5ecce5973ef704aba9efcb99bf52f5c662d52f4399a13af760f9f9ff3d5930c3fae014b92ee0aded4ba51d95cf946d5f55f5b5d4603f8b76087d681ad77fc385fe114331c24a4ada85eaebf5405467dbe656b31b79a0f893864a13bda309a2fec2f4fc4858d9daf946df31f4077338bfc3116a45827ce8907ad691d241d3a8859a3672aeee3878e45b0be6f68194638dee30ba6735a6424e51f8b9a4965d37ab7ca96e167a5c32c8a935ff34693e24d067039db0f4ffe4dc5fe7c56a0d6e52a7cef9a6f1cc8b88d61d2258e3e0e8f2d7b699d4a22ab661f6afae5b48cc8fbc9ddfe57e76f274e65b210994fd96cd4deb6fdb795df4147ca0d876b1b08b64d20a28a358f48086c0f8d1f0741260f95adabba51f2d3f36107d49d46ba0c666232597bf08bfab60b5a432a1652e2c503fcf977ea6ff15c8e8f3bd9b7a3017c36be787d5a6579f5236b17d7bdc2c3918d9257e266bdf7929bb366d98d2b225c08c3c5ed22113b8c051c811bd1e52ecbe619dbc9579270c7cf69ac129e84a7141e689d9745d56e1cda6affdc1856757a6e39039b17d5286cf393186b99b20c54987087ece9972c39b4a05f1ca218c35254c666e7fcb7df4aa401cc79e1aade63732064ca80af164709a85fcf8ac72fa5ace60aa04d2ee0d5f051cb032f7c25100facb7ec1c247812b0de4f1c3c1ab98f904d9752cc427bc0445d8e27b51d5a8084087ea61f82ccc1114679f673753eddc7cfc00ba7e25db3391579ecdf638ab73078133e49b522d3d16bf2ebd06e7cefc24154088965ad3c9291c68f19f7cdd2943abc716ecf0b33fe249108da2b1f9abdbcb4dba89746a8c5711a41556efe5537327e253bd9ac68dc56516392292152b86ef118e25cac4e3c7c2b20bbc5bbc2d825c8dc14e9807aa6a423fdebfa7deee913c8f9f58bd967d43af1d65dc5ce72b2cd1a17ce34facd199bf2c62beeb752d156d6f31ea0323bc3ec0500587c485d8141f5b5ac81457df9396fbf98222212ef70527b6ed8d6e4d11156c8ecaee4692e068a72cb3b12686436028a7297956c48ee8fc393907edd3695fddbb786808c0a48182e3334e73fedcef0ee1bfbb13dce8a79b8822fd1ca0ed645f64d134c240844be5a7ac3aa15419ae79e7b1d721ae5abe1b0896c6189f23b65d79f5c3677b89f40aceff98dfca244a160dff264a2b14a3774064e1152fe0cabfc23e3e16dba5f46ea6af09fb3b8529022837c7e9303e3ecd0170fcc0e6fb0f3981d9f8f838412eae1a3dd13b7a980a642739e8abebed29db34c06460f09e27ddba1ed76b4ac6290235f6f81fcd3eb12af9821575b050aaf80d5c6c695807f7480f24e4bc0159744f9045a2d37574508d7e687482f775d0a4c471c4914e6a64b0d444037407b8d079751ddf4b14ed0ee6f1e622952a331a1a147f3a805fb7ca29c3c7feb2dddd0db795ac0ca327d95b19ff37bd8d553703014e5137f8c41b947d199f95f245d3354f9679876db736da5cfbd7cb9f80a12e50c895b999b670c9e161aa12e82c79d98fed5017e11674158a2f258ecc7c550f10dee6bb9d159316c567e3973e8aa30f157f6d30f239877021e7161c0a93c7b6bedccc7a3d8c9313f6f860d33ae0c162236853ae29d7a619bc306998e51c5d91a73475119a648700fbf3a41701ef87b440b83573a44339aea5806c0883470613e38baa518466dee2c671d96768f8d842feb5a812ea3ecd1e307a913a1032f06af2656b0a969b38366c39ca149205540391f36c897efb80aa43707c12e21544386fc232a45c9eb40a64c35edd4db20bd4970d642c0c2a0ee43ce8bf4d1bd84b3c3fa198cfc8d1f83960a1c3cd85a164926dc962a9078c5b079e0f4bb0b4e94b0aec3d13e7c47edc936927da2e6e7fe9485b0489bc4fdd1699611aeb00d767057602b8e53dfb4a6651c0f2873e5f60fdd7e2542d6aba79f491f87522f77427323e87386c89e1df9dd6e4f32be85c9eefbd6e6b177dde573b0d0bb8df828185aedc7aba2e6c3d4d9df393b203c1147f005860a6dd44dbcebead0eeb29fe3216930ef4a5994a93851df960d3be82d4294b64ba8295a59d099fd10afe39c2a79727a5447fa27909d53df6a00a63897261619e853036a6852e95ac6da62276007f2f3f386267cd8a0d136e645247e76db84e466e56ba42618b4fdef3e6d8c48dae5d03e1e369cd74042146e361cd6b4e654c8adc75446c454d3275a7d91646c4fb721966df9df3f761f10bebd212bfc87db9c48ffa0c6efcb17db3955f4a6f58919a036cda4f0a0c07a7306d2909adeeb474bd0bbec58865c4a5804108a014838673ff26438c162ec61e71bb880b154d475c71d500bfda3128b9fac2bccecb790dbd3075f424b1244f111c7eb5cbb7af0b6f3ec9cac20f82b1631822b940c03d697e213747627a5a7ed57414f2826888e515b88e61e69b742b053fe086ffc916abe00a41870cd332201d96c96bd174b369094b0da81ddc50affefa3709a358a5c00308d30a41d10b1c3f91a011bd246588336ff76dd60c10c3bbc8eec06adb3e73cc21d218b83eb9306e0650dd4e41bd65e15bb99a0653fc312251c174abed9e3ed04ef0378feaf78d839ebf61fda85c290f140cd3690cff881c348c57f504c50ca61986b29e58fdb0cbe276e42c982154762110c0f65b240aebe4291c66157629f0a45ea48e8e6a5dfe062214d635c5f828d1c888ec83a279ddac80f748c00e984248bef8e884590dcc1322aceb2d3b525618450fa0649e4ae8722769c6a32eb47161f7bf08bd59f903240ab9f790313b41607554b21ce45f10cde937f9f68fbb23ace0eaebd86b1201ea230c7f4c57f6594e655904db2a6d3d294f98fe630a524573f52c145b19eea382bc3adac7c7b62863bfa04f2d9fb9b93e7cda0fff4af897281580b879912ebd2c9c9d433ef479e886a477ce4538590179049aaff5e8e51b25db6c0300393a37c25c350e1e4effdd657f26de15199d39e134d1e7fe278b68377674a0e31a12e67096d44f62bd0353147041050fe44d9fbfc95fa8aa368e5868148a9e7a6f5551cf55f677b48ac2b4cd29a300d3cb9cd3a5ef486b9b3138018fb1568ce3f59385b98e93b7113dc85cd242bb57e545d6c151727d1c33ced565b2e29419bc6c458b45ab2107a55793618d20bd476e81ff79543cbace7b26a53a67a3f17ad0e2f2c0cc55f45d374ddc3cf8ada0c52cf1251cc4a6e1c7e84a1536cf328a0a392a3b79bbef1b40ad6e69811f3ec73b971c7cf6d64bfd0b183135d76fbb121aa99c753dce310f3288d460a1158a0c1c2ca4a66eadb38c6669dae4742a1da14b007555ffdae4e60f535ee23018dde93863b028346edc0f8da3ee5208b06fb107e921492ed9f2f2064d865afb5f955c80b1a6c5dbc540f1af7dd68925353d288fce304243f09d1791661027ea11f21ade9abb81a71343f1d405f35b01a504a99e08514f3b8307dce0b7c4305c0e531a538c6c11d8021183a87c2de3e1e384d114559601b948359f153d9845067683d8ef3dc75829a46211368ddf4837c021bf3ba1cc8005ab6902e094635f86f2f090851d5ac0af51c3aec46bdf9024ebe196351e2acd483f71821f033aa02d7bdee2fe987412bda115a5ce7f51dfdb78ce378485801fa10180339d3c5372a65cc46d2f0ef8ad3317062af5c243f81d920075e4874ea69081ba22d8be502422e973128c657da28f4f63d34919b5a4663544e244524263bae0a9a6c7455a16b5b860aedea7a2ea87abb402e151461d8310d05dd611e063e278628420a3f7bf0fd9acfb6dc82741cb588b4d1d8a5b2b5db58e052b07c4e354034842102305c0b070dbe2cea7a59b306054ffcb08432c67d272f40d6d9f42826ed660e6558f80f8522499e0f89335c18297ee395bcbf0ad1af122434e9319177f9ad9c5c140841551733282f74ea025e4e3c4ae11dc64df48497d747ab0d08a2de58abff2242c6267a7498b7ae4fc1ebabc8dc5ede8a053000fe8af5ade0f6868c22d4b2602c36cfc3605a616850973edcc5ebec3e18dea4a4e3f4e11f1c979991b636233ae70f0cb42d592e5bc5b7b3773820b22c386f365738d4ba6a0e76e6e5ab480a77336b394fc807950df4939f6dda4cf088b318660da8b487b1cd0b8b8aaf69bc5c1f7330d1cfc7a7ab84f01a5f4d8ee0b887bd91d8af80be32e171ca03e9a906c6c8b342baec668db3ff9522002d5f60e751e712031d3cbeff0d47523625b3d41633e7c0d3ef3b5b4336b17c36075debcdea4b6357ab468114ae7265eaa39545973a602af35dfbd0ed03a3c6b717eefb92c52291a0b014ae4467a233db1d48c625228733262acf9d08c98e2aba18df6dde6160fe748bbaf217cae345449c1cb5e22ef26e6e8ef2666a307a3ca7a08ab2a7e3a938eab61b772a69aa4dce0ace312136870dadad35c98d2911b4d37dfcf31c3c36cd26177e3cda3049aecc9928545c2e102d2586225cfc96e9884042923e2874ebf71dc81060970705aba2a7ad1127b218e4ade098a41285ff7bee3a0b8dfcddf9933730183c92158d0bbc8dd874e3fab555c30075d7985ad56808387a44610c2b0890de328bb3eeae9fbd6da1b50153ad6d1cf108b7eca8880293643bc836ee65f5c5b0515a61825e38a579129d67bee7e6330e87c8f63064fa1abb7b3af74c16b90b450e781e2243d84bd8191f589ecd2f50cc9b8e07f76ea782d8cecdf9ec"}}}}}}, 0x0) 47.629215514s ago: executing program 36 (id=424): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x2000012, 0x9f, 0x0, &(0x7f0000000e80)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000001100)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x873}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@max_batch_time}, {@norecovery}, {@acl}]}, 0xfe, 0x495, &(0x7f0000000940)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0xa4) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x156) getdents64(r0, &(0x7f00000000c0)=""/47, 0x2f) r1 = fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb810019000800450a0058006600000e2f"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002480)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002e9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r6 = socket(0x2, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002800)=@newqdisc={0x104, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0xffff, 0xc}}, [@TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x875, 0x5, 0x2, 0x0, 0x302, 0x4}}, {0xc, 0x2, [0x7, 0x80, 0x3, 0x22]}}, {{0x1c, 0x1, {0x4, 0x7, 0x800, 0xe07f, 0x2, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0xa, 0x8]}}, {{0x1c, 0x1, {0x7f, 0x86, 0xff, 0x18, 0x2, 0x6, 0xb, 0x5}}, {0xe, 0x2, [0xffc0, 0x8, 0x401, 0x3e3, 0xa86]}}, {{0x1c, 0x1, {0x7, 0x4, 0x7fff, 0x0, 0x2, 0x5, 0x400, 0x7}}, {0x12, 0x2, [0x9, 0x47, 0xffff, 0xe6, 0x7f, 0x0, 0x3]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x7c6, 0x1, 0x100, 0x0, 0xa}}, {0x18, 0x2, [0xb8eb, 0x0, 0x7fff, 0x4, 0x400, 0x9, 0x3, 0xfffe, 0xf1, 0x4]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002940)=ANY=[@ANYBLOB="d4000000f6897c54ca90c88122071293c300ac66f96a3d9af0a9f8775ae5a90c269fa7a0975b8502000000fc676808ca08000000fbfff8fbe294e53f77a2f416ca9a7a0830752853676f8c11ed7c8697e87a5447d919a5838b0feb3b4f234244246a6db4a5b1e726953372c0e559b0d5253fca1b71da82c94e3520e0165ee71951e8a133223e2cbb090062ddd96f6dcbd6392118009293b8363d315249bc3aaff9feb79a25a1b8c1e85937d700000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040055030000"], 0xd4}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 44.847713486s ago: executing program 5 (id=418): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40042, 0x1) close(0x3) syz_ublk_setup_io_uring(0x6901, &(0x7f0000000180)={0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x10, 0x0, r0, 0x1}, 0x50) mount$9p_fd(0x300, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 44.724829022s ago: executing program 5 (id=429): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file3\x00', 0x4010, &(0x7f0000000140), 0x2, 0xbd8, &(0x7f0000000bc0)="$eJzs3M1rHOcZAPBnRqu1ZKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8FC3llhNYfSCquZB1W7T9Q2p5begk4MQk5xGdfEpJrLol9TcghYIJiJWBCsmH2Q1K8Wkm2dzWO/PvBu/O+887u8zwer2Ze2N0AXlhj2UMacSwiLiYRpdb+NCKKjd5QRK153PrayvTnayvTSdTrf/okiSQiHq6tTLdfK2ltj7QGQxHx7m+T+N4/OuMuLC3PTVWrlfnW+OTilesnF5aWfzF7Zepy5XLl6sTpX02emjw9fmayZ7U++uDcnc9+8vuPal+8/OXtT//9UhLnYqQ1t7WOXhmLsY1/k60KETHV62A5GWjVs7XOpLDLk9I+JwUAQFfplnu4H0QpBmLz5q0Ub76Xa3IAAABAT9QHIuoAAADAAZdY/wMAAMAB1/4cwMO1lel2y/cTCfvrwfmIGG3Wv95qzZlC1BrboRiMiMMPk9j6tdak+bRnNhYRH94/81rWouN7yP+71YMQO6qtRsQPtzv/SaP+0ca3uDvrTyNivAfxxx4b7/f/v2ep/1wP4uddPwAvprvnmxeyzutfunH/E9tc/wrbXLueRt7Xv/b933rH/d9m/QNd7v/+uMcYN2/990a3uaz+X9/53avtlsXPts9U1BN4sBrxo8J29Scb9Sdd6r+4xxilr25Uus3lXX/9/xHHY/v625Kdf5/o5MxstTLefNw2xuo7k690i593/dn5P9yl/vbvP3U7/9f3GOMvFy683rHz/mZ35/rTj4vJnxu9YmvP36YWF+cnIorJHzr3n9ohkdrmMe3XyOo/8dOd3//b1T/QfLnGXLYWWG1ts/HfHwv7m9s33+iWUnv998Tnf3jXI/Ykq/9Sl/O/tf63C53n/597jPGzt/51otvc1vVv1rL47bUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSlETESSVre6KdpuRxxJCK+H4fT6rWFxZ/PXPvr1UvZXMRoDKYzs9XKeESUmuMkG080+pvjU4+NfxkRRyPiP6Xhxrg8fa16Ke/iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HAkIkYiScsRkUbEeilNy+W8swIAAAB6bjTvBAAAAIC+s/4HAACAg8/6HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD47+uO795KIqJ0dbrRMsTU3mGtmQL+leScA5GYg7wSA3BTyTgDIzROu8d0uwAGU7DI/1HXmUM9zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD5dfzY3XtJRNTODjdaptiaG8w1M6Df0rwTAHIzsNNkYf/yAPaftzi8uKzxgWSX+aHNY2rfnDnUt5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeP6MNFqSliOi2NpXLkd8JyJGYzCZma1WxiPiuxHxfmnwUDaeyDlnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAem9haXluqlqtzGedNFqdjT3fgk4kzUr6HqsVp5Z/yTo96RTjKZ/+qF6v55183zu5/lkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnC0vLc1PVamV+Ie9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLwtLC3PTVWrlfk+dvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/HwdAAD///TiCwo=") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x12) r0 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1, 0x0, 0x7fffffff, 0x5, 0xffff, 0x2}) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) 44.565965771s ago: executing program 6 (id=431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 44.54527653s ago: executing program 6 (id=432): r0 = syz_io_uring_setup(0xf03, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_BIND=@ipv6={0x38, 0x4, 0x0, r4, 0x1c, &(0x7f00000006c0)={{0xa, 0x4e21, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}}}) io_uring_enter(r0, 0x1008, 0xfffffffd, 0x9, 0x0, 0x0) 44.382092604s ago: executing program 6 (id=435): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67db3e6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b19abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f0000000000f8e10238d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000000000"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000013c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001440)="b9fb0307683a0600000000000000", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.30936013s ago: executing program 5 (id=436): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e00)={0xffffffffffffffff, 0x2000012, 0x9f, 0x0, &(0x7f0000000e80)="000000d7fbf467b238a5fc00a14c644d7c8e6e510000977e37850af2afee94f7fc027d4aea637bf089f1aeeab55a7684a45d1edddc793cb007ede4d018995759c39e17dddfb4e6d75a512e81eecc760d15686b784a33254c2bc8d2854a2437fb6258c6adf24ba24fdd18117bd43453d34e7f02b8cecca433baa43fd8190159449d7fdb4462576dca888f14a7f11c41516a10afbd92c27ac0ab16861332ccf3", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb}, 0x17) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000001100)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x873}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@max_batch_time}, {@norecovery}, {@acl}]}, 0xfe, 0x495, &(0x7f0000000940)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0xa4) symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x156) getdents64(r0, &(0x7f00000000c0)=""/47, 0x2f) r1 = fsopen(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000022c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb810019000800450a0058006600000e2f"], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002480)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002e9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24008000) r6 = socket(0x2, 0x4, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002800)=@newqdisc={0x104, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x2, 0x9}, {0xffff, 0xc}}, [@TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x8, 0x875, 0x5, 0x2, 0x0, 0x302, 0x4}}, {0xc, 0x2, [0x7, 0x80, 0x3, 0x22]}}, {{0x1c, 0x1, {0x4, 0x7, 0x800, 0xe07f, 0x2, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0xa, 0x8]}}, {{0x1c, 0x1, {0x7f, 0x86, 0xff, 0x18, 0x2, 0x6, 0xb, 0x5}}, {0xe, 0x2, [0xffc0, 0x8, 0x401, 0x3e3, 0xa86]}}, {{0x1c, 0x1, {0x7, 0x4, 0x7fff, 0x0, 0x2, 0x5, 0x400, 0x7}}, {0x12, 0x2, [0x9, 0x47, 0xffff, 0xe6, 0x7f, 0x0, 0x3]}}, {{0x1c, 0x1, {0x6, 0x5, 0x5, 0x7c6, 0x1, 0x100, 0x0, 0xa}}, {0x18, 0x2, [0xb8eb, 0x0, 0x7fff, 0x4, 0x400, 0x9, 0x3, 0xfffe, 0xf1, 0x4]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002780)={&(0x7f0000002940)=ANY=[@ANYBLOB="d4000000f6897c54ca90c88122071293c300ac66f96a3d9af0a9f8775ae5a90c269fa7a0975b8502000000fc676808ca08000000fbfff8fbe294e53f77a2f416ca9a7a0830752853676f8c11ed7c8697e87a5447d919a5838b0feb3b4f234244246a6db4a5b1e726953372c0e559b0d5253fca1b71da82c94e3520e0165ee71951e8a133223e2cbb090062ddd96f6dcbd6392118009293b8363d315249bc3aaff9feb79a25a1b8c1e85937d700000000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fedbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="b800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040055030000"], 0xd4}, 0x1, 0x0, 0x0, 0x40011}, 0x4000) syz_emit_ethernet(0x102b, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf82, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 44.164616133s ago: executing program 6 (id=437): syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000840)="$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") r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8410) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000ec0)=""/4109, 0x100d}, {&(0x7f0000001f00)=""/4094, 0xffe}, {&(0x7f0000002f00)=""/240, 0xf0}, {&(0x7f0000003000)=""/191, 0xbf}, {&(0x7f00000030c0)=""/94, 0x5e}], 0x5}, 0x12022) syz_mount_image$fuse(0x0, &(0x7f0000000cc0)='./bus\x00', 0x283016, 0x0, 0x13, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000d00)='./file0\x00', &(0x7f00000001c0), 0x3014011, &(0x7f0000000440)={[{@index_on}, {@verity_require}, {@xino_on}, {@volatile}, {@redirect_dir_follow}, {@volatile}, {@xino_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@volatile}, {@verity_on}]}) umount2(&(0x7f0000000dc0)='./file0\x00', 0x9) mount$overlay(0x0, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x4008, &(0x7f0000000e80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = open(&(0x7f00000004c0)='./file0\x00', 0x101000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e20, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}}, 0x0, 0x0, 0xf, 0x0, "f9b49f88074704f0fcb56265f7158192e96ef3f967ab043ba7652abaf16bb230fc59bfb904119f68f36139030f6ef61d2358bfabf2d125cc359c97d5adbffeba34327b878f67f8702fdc19efe73dc198"}, 0xd8) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='bridge0\x00') ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000800)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800cb6aa24626c12cb4ee73a1714240000000000000"], 0x0) 43.390563745s ago: executing program 6 (id=439): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095", @ANYRES16=r0, @ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x0, 0xe, 0xfffffffffffffe05, &(0x7f0000000280), 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x129281, 0x0) write$vga_arbiter(r2, &(0x7f0000000080)=@target={'target ', {'PCI:', '0', ':', '0', ':', '0', '.', '0'}}, 0x13) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x200000a) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x18}) 43.11831054s ago: executing program 5 (id=446): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./debug/split_huge_pages\x00', 0x208281, 0x0) write(r0, &(0x7f00000000c0)='1,0x4', 0x5) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000280), 0x1, 0x582, &(0x7f00000002c0)="$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") syz_clone(0x1100000, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, 0x0) close_range(r0, r1, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000000)={0x0, 0x9, 0x3}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, 0x0) 43.118163896s ago: executing program 37 (id=446): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./debug/split_huge_pages\x00', 0x208281, 0x0) write(r0, &(0x7f00000000c0)='1,0x4', 0x5) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder-control\x00', 0x802, 0x0) bind$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f0000000280), 0x1, 0x582, &(0x7f00000002c0)="$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") syz_clone(0x1100000, &(0x7f0000000140), 0x0, &(0x7f0000000180), 0x0, 0x0) close_range(r0, r1, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f0000000000)={0x0, 0x9, 0x3}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, 0x0) 41.826286775s ago: executing program 6 (id=449): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 41.726810861s ago: executing program 38 (id=449): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 21.930182954s ago: executing program 8 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 21.805317836s ago: executing program 8 (id=600): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e00)) write$vhost_msg_v2(r0, &(0x7f0000000fc0)={0x2, 0x0, {&(0x7f0000001040)=""/57, 0x39, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001080)=0x1) 21.718791177s ago: executing program 8 (id=603): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000011180)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000004c0)='./file0\x00', 0x200008, &(0x7f0000000500)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRESOCT], 0x1, 0x3a3, &(0x7f0000000b40)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 21.23145853s ago: executing program 8 (id=607): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f0000000d00)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_winnt}, {@utf8}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlate}, {@utf8}, {@utf8}, {@fat=@discard}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}]}, 0x1, 0x28e, &(0x7f0000000dc0)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000020c0)='memory.swap.current\x00', 0x275a, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/70, 0x0, 0x4}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090a000000000000000000001290cbe753cf0b2b000340060000000e0002000000e0000009000200000000000002000100000000000000000200000000030005000000000002000000e00000010000000000000000"], 0x50}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000240)=""/87, 0x0, 0x100000}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000500)={0x0, 0x6, 0x1, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0xd20, 0x3, 0x7ffd, 0x1, 0x5, 0x2, 0x0, 0x802, 0x9, 0x3, 0x1, 0xffffffdffffffff4, 0x200000004a, 0x400000000005, 0xf9, 0x200000000000d, 0xe1, 0x413, 0x1, 0x2a9, 0x8, 0xc39, 0x1, 0x8, 0xfffffffc, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x7e4, 0x8, 0x8, 0x6aa, 0x100, 0x40, 0x83, 0x538a, 0x9, 0xda, 0x2, 0x7, 0x0, 0x3, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x1000000000014, 0x5ba, 0x1, 0x7ffffffe, 0x3, 0x8000, 0xc9, 0x7, 0x6, 0xc, 0xffffffff, 0x7ff, 0xbbc, 0x1fcc, 0x6, 0xfffffffffffffffc, 0xd, 0x1f, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000002, 0x0, 0x4, 0x7, 0x9, 0x200000000007, 0x9, 0x1001, 0x16d, 0x6, 0x68e, 0xffffffffffff43b0, 0x0, 0x50000000000000, 0xe, 0x0, 0x4, 0x3000000003, 0x2, 0x7, 0x6, 0x3, 0x8, 0x2, 0x0, 0x3, 0x44, 0x0, 0x7, 0xe, 0x1000003]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000a00)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) r2 = syz_open_dev$video(&(0x7f0000000300), 0x10002, 0x8000) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000c00)={0x3, @output={0x0, 0x1, {0x4, 0x84}, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0x58, &(0x7f0000000ac0)}, 0x10) r3 = io_uring_setup(0x899, &(0x7f0000000b40)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) fsopen(&(0x7f0000000bc0)='cgroup2\x00', 0x1) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000003c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000400)=0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x4008af04, &(0x7f0000000440)) 20.965783949s ago: executing program 8 (id=609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x800700, &(0x7f0000000100)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@grpjquota}, {@bh}, {@norecovery}, {@noauto_da_alloc}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nogrpid}, {@dioread_lock}, {@test_dummy_encryption}, {@noquota}]}, 0x3, 0x474, &(0x7f00000001c0)="$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") utimensat(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x0, 0x100) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff) r1 = landlock_create_ruleset(&(0x7f0000000840)={0x2, 0x2, 0x3, 0x0, 0x0, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$l2tp6(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000880)={0xa, 0x0, 0xfffffdbb, @remote, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, r0, 0xcd3a991b146a75f, 0x70bd3d, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4, 0x2e}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x80a4) lsetxattr$security_ima(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0), &(0x7f0000000700)=@md5={0x1, "12971f2287e5cce0831f7e880fd8059d"}, 0x11, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="040e079c0814"], 0xa) 20.525841672s ago: executing program 8 (id=618): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000600100004012200a4"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0xc00}, 0x38) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x80002c1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) lseek(r4, 0x289e0cb5, 0x0) 20.412853701s ago: executing program 39 (id=618): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000600100004012200a4"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, r0, 0xc00}, 0x38) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x80002c1, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='smaps\x00') madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) lseek(r4, 0x289e0cb5, 0x0) 18.807037151s ago: executing program 9 (id=638): bpf$PROG_LOAD(0x5, &(0x7f0000001980)={0x3, 0x8, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], &(0x7f0000002c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2102) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x8, 0x3, 0x0, @random="58ec07e4203a"}, 0x10) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x1) landlock_restrict_self(r1, 0xe) setns(0xc9, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f00000001c0)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8914, &(0x7f0000000200)="7465716c3000000000000000000000000100"/40) ioctl(r3, 0x8914, &(0x7f0000000240)='teql0\x00'/40) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x65) 17.72523823s ago: executing program 9 (id=645): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) r0 = userfaultfd(0x1) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000740)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100)="c3"}, 0x20) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x24000001) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) inotify_init1(0x80000) ptrace$setregset(0x4205, r1, 0x403, &(0x7f0000000240)={0x0}) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000001c0)='overlay\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r2, &(0x7f0000000340)='270', 0x3) r3 = syz_open_dev$mtd(&(0x7f0000000380), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000540), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)={{0x6, 0x68}, {0xffffffffffffefff, 0x4}, 0x8001, 0x5}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./dev/kmsg\x00', 0x1, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002abd7000fcdbdf250900020073797a30000000000800410073697700010033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) lseek(r5, 0x80000000000040, 0x4) statx(r5, 0x0, 0x2000, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) mount$overlay(0x0, &(0x7f00000005c0)='./file1\x00', &(0x7f0000000600), 0x100042, &(0x7f0000000800)={[{@nfs_export_off}, {@xino_off}, {@uuid_off}, {@redirect_dir_on}, {@default_permissions}, {@volatile}, {@userxattr}, {@metacopy_off}], [{@subj_role={'subj_role', 0x3d, '.['}}, {@uid_lt={'uid<', r7}}, {@smackfshat={'smackfshat', 0x3d, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ptp0\x00'}}, {@subj_user={'subj_user', 0x3d, '\x00'}}, {@subj_role}, {@flag='rw'}]}) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000680)={0x0, 0x10000, 0x1}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="600000001000ffff28bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="715a0300231a0500400012800b0001c300697036677265000030000280040012001400070000000000001cd1b2ddebe5db583e9fe8000000000000000000010d14000600200100"/83], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 17.357767103s ago: executing program 9 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1b2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x1c, &(0x7f0000000940)=ANY=[@ANYBLOB="bf16000000000000b7020000ff4100007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000a40)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b00)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_buf(r2, 0x1, 0x37, 0xffffffffffffffff, &(0x7f0000000740)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08000011ff000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c40)=ANY=[@ANYBLOB="4400200019f88454bd61f159f5a1c653947155a2e6be4b69979951836ca8424b157563bebeba0273cb36e2b2d49a18baa846ce5a3964791d8b81e4a8e2951560e3cc038f57fbce9f4609dc3d24b91c1f1a813cd7ba13fc7286d78b13075a9529a140442e5921f668a569747c57358d6d", @ANYRES16=r3, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r4, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}, 0x1, 0x0, 0x0, 0xfc7b4ac0b2bdcf4a}, 0x0) syz_80211_inject_frame(&(0x7f0000000440)=@broadcast, &(0x7f0000000d00)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @random="762f5234e7b0", {0x0, 0x7b0}}, 0x0, @default, 0x3009, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0xee, "3dd126aa398d5fecfc0d918ae346d7ce803f288b81cb2009a7d289cc60d64ee249889d921f5c7b762728e492fef8a4bd4929579b7ab64070c76a499b8aedf4b02ea00826f2333d2d715c7400fb55635e99966287d960d74862bc9435d6f3a71acfb059916d581eba4a56cce7274fe72fd6d2341603ced51c186ad2b1aa294472121805d8886847ee36098e9f831e158d9f244b8db0d0917f1c9e0a5b76f3896905628c96db81b350ec3b8f4cff6c7e4bf881627e0be3550466b110d3e7a4aee40b56d9b083b2d7b94fc8cc678caf47dab744f6046c1dc6b639b5897f90964b7bf1e71c6756ac0b643ed7a6e2fd3a"}, {0xdd, 0x8d, "6a7a5f47d0f2dbe205d00225cde86a2b1e44ab5c96bc8e292368d7a94db6f12abbebf42171ef78e199c7bb69b3c619ddaa8dc51a2d50509e8b870646cf70e506acb05eb41e0d675fc0bf673a4f7599afcc2a3c86ed9493586ef76b5aa71d9f633bdd17ffdd81437c702cebddf344c45da0f5f9b940aa7f48f0a5058e4a08635d3392fbc175031897cebef69b72"}]}, 0x1b5) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prctl$PR_SCHED_CORE(0x25, 0x8020000000000002, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000005c0)=@device_b, &(0x7f0000000780)=ANY=[@ANYBLOB="b000000008021f000000ef021100000008021100000010000000020000008b13cffad791df29842234eea35d2a883e7766f56e34cc5a2d3eba4a6d7c2e080e95cef0728ffdc15d61776305ad5eb9255b9ac0c87d345ca6c05b7df399355c7bd972faa7fc117c0a339d37d132b6f33d28352e9ade9c3c0d4eee6bfa6193ccf0cdfc3b113aaf5a3a94ff54a20f0246d82dcfe24dfaa89798ac6df66a1419d34eb8a88edf8a6c7ab83aec26614e81be417e6e34aba37132a03aba60bb7be5ec65b35f2f000000"], 0x1e) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000b40)=[@in6={0xa, 0x4e24, 0x5, @empty}, @in6={0xa, 0x4e23, 0xfffff001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7fffffff}, @in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00'}], 0x54) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) 16.69539078s ago: executing program 9 (id=654): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000100)) accept$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000240)=0x10) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x42040, 0x4) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000800)={0x80}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@private0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xfffffffffffffd8c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000200)={[{@errors_remount}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@nobarrier}]}, 0x43, 0x4e3, &(0x7f0000000280)="$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") mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000bc0)={0x2, [0x0, 0x8]}, 0x8) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x38, r3, 0x20, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x38}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000b80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x24, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1ff}]}, 0x24}}, 0x10040) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200002, 0xa5) 16.374098186s ago: executing program 9 (id=655): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000000), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000900), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000940)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000980)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000a00)}, 0x96000}) connect$vsock_stream(r5, &(0x7f00000003c0), 0x10) 16.049527832s ago: executing program 9 (id=657): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061114c6804710d75bd59e3d59106840000000000850000004051c3d32423e409aa99a29b44d2b1a382188bd64548b0c7b47c30419f348d1d417bc7a4fb47ceb7f341802a59443d2104107a1551c30319893231e97a3bacf2e080d1eaf58d23f72040fbd01cffcaeca0d09635bd80eda516a377d0b2be3e48cb3ba42708ae"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80001001}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 15.987082032s ago: executing program 40 (id=657): r0 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_lsm={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000000061114c6804710d75bd59e3d59106840000000000850000004051c3d32423e409aa99a29b44d2b1a382188bd64548b0c7b47c30419f348d1d417bc7a4fb47ceb7f341802a59443d2104107a1551c30319893231e97a3bacf2e080d1eaf58d23f72040fbd01cffcaeca0d09635bd80eda516a377d0b2be3e48cb3ba42708ae"], &(0x7f0000000d00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80001001}]}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 4.554047089s ago: executing program 7 (id=715): r0 = syz_open_dev$video(&(0x7f0000000140), 0x489, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x100c8c8, &(0x7f0000000080)=ANY=[], 0x84, 0x262, &(0x7f0000000240)="$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") syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x103000, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0xffffffffffffff9c, 0x0, 0x1000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000200)={0x9, 0x100, 0x0, {0xa, 0x0, 0x7, 0x870}}) 4.209998295s ago: executing program 2 (id=724): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffa, @loopback}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rpc\x00') syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000280), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(r3, &(0x7f0000000300), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000340)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000380)='vers\x00', 0x0, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x2, 0xe, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_sec_ctx={0x1}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}, @sadb_lifetime={0x4, 0x3}]}, 0xa8}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000500)='source\x00', &(0x7f0000000540)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000580)='addr\x00', &(0x7f00000005c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = openat(r1, &(0x7f0000000600)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000640)='n\\ 0 127.0.0.1 2\\000000\\\\0l', 0x1b) ioctl$TFD_IOC_SET_TICKS(r7, 0x40085400, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 3.897191991s ago: executing program 7 (id=726): openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c000600010000000100000008002a"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) 3.864311633s ago: executing program 7 (id=727): mlock(&(0x7f00003b6000/0x4000)=nil, 0x4000) mmap(&(0x7f000003c000/0x2000)=nil, 0x2000, 0x100000a, 0x2010, 0xffffffffffffffff, 0x7320b000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_read_part_table(0x632, &(0x7f00000013c0)="$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") ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000002ac0)={0x7f, 0x6}) r1 = io_uring_setup(0x7272, &(0x7f0000001180)={0x0, 0x8270, 0x40, 0x1, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001200)=[{&(0x7f0000002c00)=""/141, 0x8d}], 0x113e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002cc0)={0x18, 0x3, &(0x7f0000002d80)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000001a00)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/20]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448e4, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000001240), 0x8) socket$nl_route(0x10, 0x3, 0x0) listen(r5, 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e30aaaaaa14245ffec73353687caaaa10d2"], 0xd) syz_emit_vhci(&(0x7f0000002e40)=ANY=[@ANYBLOB="042c1100d900aaaaaaaa"], 0x14) accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000001a40)=""/140, &(0x7f0000001b00)=0x8c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x3, 0xc, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000001c80)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x4, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f00000029c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0xfffffdd5, 0x0, 0xffffffffffffffff, 0xffffff2e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a00)={r6, 0x0, 0xe, 0x0, &(0x7f0000002a80)="dc188619b95d02ff4284860188a8", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.38223022s ago: executing program 0 (id=733): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000600100004"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='smaps\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) lseek(r3, 0x289e0cb5, 0x0) 2.469030903s ago: executing program 2 (id=737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500"], 0x1c}}, 0x8050) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) 2.432871249s ago: executing program 2 (id=738): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x11, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$unix(0x1, 0x5, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r1, 0xffffffffffffffff, 0x8000002}, 0xc) 2.323369087s ago: executing program 4 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) 1.800884809s ago: executing program 0 (id=743): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x0) 1.800701782s ago: executing program 2 (id=744): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)={0x1d8, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1a0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xa}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.724428797s ago: executing program 4 (id=745): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0xf5}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000001580)=0x68e, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) signalfd4(0xffffffffffffffff, &(0x7f00000015c0)={[0xffeffffffffffffa]}, 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x2, 0x2}}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x27, [@local]}]}}, "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"}}, 0xfce) 1.720962117s ago: executing program 2 (id=746): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000000), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000900), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000940)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000980)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000a00)}, 0x96000}) connect$vsock_stream(r5, &(0x7f00000003c0), 0x10) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) 1.711057494s ago: executing program 0 (id=747): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x40000000000009f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000000), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000006c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000740)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000007c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r7, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x6) prctl$PR_GET_NO_NEW_PRIVS(0x27) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) r9 = syz_open_dev$vim2m(&(0x7f0000000900), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000940)={0x8, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r9, 0xc058565d, &(0x7f0000000980)=@userptr={0x2, 0x1, 0x4, 0x10, 0x1, {0x77359400}, {0x3, 0xc, 0x9, 0x80, 0x3, 0x12, "b70400"}, 0x3, 0x2, {&(0x7f0000000a00)}, 0x96000}) connect$vsock_stream(r5, &(0x7f00000003c0), 0x10) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f00000004c0)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.645233118s ago: executing program 7 (id=748): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500"], 0x1c}}, 0x8050) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) 1.301675384s ago: executing program 1 (id=750): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e00)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000fc0)={0x2, 0x0, {&(0x7f0000001040)=""/57, 0x39, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001080)=0x1) 1.301134709s ago: executing program 7 (id=751): r0 = syz_open_dev$vcsn(&(0x7f0000000380), 0x101, 0xef6f067933d31d45) r1 = io_uring_setup(0x2ea5, &(0x7f0000000000)={0x0, 0xfffffffd, 0x40, 0x1, 0xda, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="050000003008", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}}, 0x0) close(r3) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/32, 0x20}], &(0x7f0000000280)=[0x9], 0x1}, 0x20) 1.275713715s ago: executing program 4 (id=752): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4010) 1.233679788s ago: executing program 1 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)={0x30, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.213809337s ago: executing program 4 (id=754): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./sys\x00', 0x210000, &(0x7f0000000540)={[{@dax_never}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@lazytime}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000600100004"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40080, &(0x7f0000000240)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) socket$netlink(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000440), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x80002c1, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='smaps\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000640)=0x14) lseek(r3, 0x289e0cb5, 0x0) 1.201274329s ago: executing program 1 (id=755): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)={0x30, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.113014497s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000013c0)={0x1d8, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1a0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x128, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x100, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xa}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.085497634s ago: executing program 1 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x60}}, 0x0) 1.06531279s ago: executing program 1 (id=758): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000300)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) listen(0xffffffffffffffff, 0xd) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000080)) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000700)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r3, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x2c}}, 0x4001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESOCT=r2], 0x22) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x200, 0x0) ioctl$PTP_PIN_SETFUNC(r5, 0x40603d07, 0x0) ptrace$setregs(0x4212, 0x0, 0x58, 0x0) ioctl$VT_ACTIVATE(r2, 0x5606, 0x0) 325.107004ms ago: executing program 0 (id=759): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000000)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) r4 = socket$kcm(0x21, 0x2, 0xa) setuid(0xee01) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB='/'], 0x20) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000120100000100000000000000000000001800000000000000100100000c000000aa000000000019b8c22d5e"], 0x30}, 0xfc40) 324.576013ms ago: executing program 2 (id=760): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) mount(0x0, &(0x7f0000000880)='./debug\x00', &(0x7f00000008c0)='debugfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24004854) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setns(0xc9, 0x0) gettid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r5, 0x5, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x30000, 0x0, 0x4000}, 0x0) 186.26581ms ago: executing program 0 (id=761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000001c0)={'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010108}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x25c, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200002, 0x2, 0x2}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="080000fa"], 0xdc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000140), 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, 0x0) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000200)) 106.864219ms ago: executing program 4 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500"], 0x1c}}, 0x8050) recvmsg(r0, &(0x7f0000003400)={0x0, 0x0, 0x0}, 0x10000) 66.025139ms ago: executing program 7 (id=763): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x48, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4, 0x1b}}]}]}, 0xf5}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000001580)=0x68e, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) signalfd4(0xffffffffffffffff, &(0x7f00000015c0)={[0xffeffffffffffffa]}, 0x8, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100), 0x2, 0x2}}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000004c0)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0xc}, @ipv4=@generic={{0x7, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0x27, [@local]}]}}, "2197e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7f46005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d"}}, 0xfce) 445.667µs ago: executing program 0 (id=764): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e00)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000e40)=0x200000000) write$vhost_msg_v2(r0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001080)=0x1) 0s ago: executing program 4 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4010) kernel console output (not intermixed with test programs): 68][ T6468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.184354][ T6468] team0: Port device team_slave_0 added [ 65.185205][ T6468] team0: Port device team_slave_1 added [ 65.208020][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.208033][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.208046][ T6468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.236058][ T6468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.236071][ T6468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.236084][ T6468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.255353][ T13] bridge_slave_1: left allmulticast mode [ 65.255380][ T13] bridge_slave_1: left promiscuous mode [ 65.255952][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.261778][ T13] bridge_slave_0: left allmulticast mode [ 65.261873][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.274610][ T13] bridge_slave_1: left allmulticast mode [ 65.274629][ T13] bridge_slave_1: left promiscuous mode [ 65.274708][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.276064][ T13] bridge_slave_0: left allmulticast mode [ 65.276077][ T13] bridge_slave_0: left promiscuous mode [ 65.276131][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.332590][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.333319][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.333613][ T4722] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 65.334606][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.334770][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.334940][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.335129][ T4722] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 65.335797][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.335939][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.336099][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.336290][ T4722] EXT4-fs error (device loop3): empty_inline_dir:1796: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 65.336417][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.336514][ T4722] EXT4-fs error (device loop3): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /105/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 65.337848][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.338407][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.342227][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.342780][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.343287][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.343780][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.344272][ T4722] EXT4-fs warning (device loop3): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 65.467953][ T6030] EXT4-fs unmount: 56 callbacks suppressed [ 65.467969][ T6030] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.500083][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.530099][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.540354][ T13] bond0 (unregistering): Released all slaves [ 65.542722][ T13] bond1 (unregistering): Released all slaves [ 65.591594][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.602099][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.603421][ T13] bond0 (unregistering): Released all slaves [ 65.605832][ T13] bond1 (unregistering): Released all slaves [ 65.639092][ T4402] 8021q: adding VLAN 0 to HW filter on device eth1 [ 65.673658][ T6468] hsr_slave_0: entered promiscuous mode [ 65.676203][ T6468] hsr_slave_1: entered promiscuous mode [ 65.676487][ T6468] debugfs: 'hsr0' already exists in 'hsr' [ 65.676496][ T6468] Cannot create hsr debugfs directory [ 65.739807][ T6476] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.739878][ T6476] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.739967][ T6476] bridge_slave_0: entered allmulticast mode [ 65.740436][ T6476] bridge_slave_0: entered promiscuous mode [ 65.780143][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.787807][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.789061][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.789675][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.789898][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.803642][ T6476] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.803674][ T6476] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.803788][ T6476] bridge_slave_1: entered allmulticast mode [ 65.804256][ T6476] bridge_slave_1: entered promiscuous mode [ 65.850959][ T6476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.851872][ T6476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.857934][ T6476] team0: Port device team_slave_0 added [ 65.859400][ T6476] team0: Port device team_slave_1 added [ 65.876632][ T6489] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.876665][ T6489] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.876727][ T6489] bridge_slave_0: entered allmulticast mode [ 65.877132][ T6489] bridge_slave_0: entered promiscuous mode [ 65.877901][ T6489] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.877921][ T6489] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.877974][ T6489] bridge_slave_1: entered allmulticast mode [ 65.878376][ T6489] bridge_slave_1: entered promiscuous mode [ 65.888082][ T6489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.890817][ T6489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.947706][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.947720][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.947732][ T6476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.977884][ T6476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.977899][ T6476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.977911][ T6476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.987689][ T6476] hsr_slave_0: entered promiscuous mode [ 65.988019][ T6476] hsr_slave_1: entered promiscuous mode [ 65.988203][ T6476] debugfs: 'hsr0' already exists in 'hsr' [ 65.988213][ T6476] Cannot create hsr debugfs directory [ 65.998144][ T6489] team0: Port device team_slave_0 added [ 66.014737][ T6489] team0: Port device team_slave_1 added [ 66.025763][ T6468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.026792][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.027161][ T6468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.028192][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.029084][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.029094][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.029107][ T6489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.032310][ T6489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.032317][ T6489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.032329][ T6489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.043919][ T6489] hsr_slave_0: entered promiscuous mode [ 66.044242][ T6489] hsr_slave_1: entered promiscuous mode [ 66.044469][ T6489] debugfs: 'hsr0' already exists in 'hsr' [ 66.044480][ T6489] Cannot create hsr debugfs directory [ 66.072019][ T4402] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.115696][ T6468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.116923][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.117280][ T6468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.118189][ T6468] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.129982][ T6483] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.130036][ T6483] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.130098][ T6483] bridge_slave_0: entered allmulticast mode [ 66.130550][ T6483] bridge_slave_0: entered promiscuous mode [ 66.138170][ T6483] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.138196][ T6483] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.141415][ T6483] bridge_slave_1: entered allmulticast mode [ 66.141898][ T6483] bridge_slave_1: entered promiscuous mode [ 66.152832][ T6558] rxe_eth0 speed is unknown, defaulting to 1000 [ 66.195409][ T6558] lo speed is unknown, defaulting to 1000 [ 66.221363][ T6483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.222338][ T6483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.232595][ T6483] team0: Port device team_slave_0 added [ 66.233395][ T6483] team0: Port device team_slave_1 added [ 66.296203][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.296217][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.296232][ T6483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.296794][ T6483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.296801][ T6483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.296812][ T6483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.342773][ T6489] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 66.344915][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.345226][ T6489] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 66.346067][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.346338][ T6489] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 66.364673][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.365063][ T6489] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 66.371687][ T6489] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.428401][ T50] Bluetooth: hci0: command tx timeout [ 66.458044][ T6483] hsr_slave_0: entered promiscuous mode [ 66.459786][ T6483] hsr_slave_1: entered promiscuous mode [ 66.459988][ T6483] debugfs: 'hsr0' already exists in 'hsr' [ 66.459998][ T6483] Cannot create hsr debugfs directory [ 66.468390][ T4402] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.489147][ T13] hsr_slave_0: left promiscuous mode [ 66.489444][ T13] hsr_slave_1: left promiscuous mode [ 66.490936][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.490956][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.491327][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.491336][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.493409][ T13] hsr_slave_0: left promiscuous mode [ 66.493652][ T13] hsr_slave_1: left promiscuous mode [ 66.493907][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.493916][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.494198][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.494206][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.498553][ T50] Bluetooth: hci1: command tx timeout [ 66.512070][ T13] veth1_macvtap: left promiscuous mode [ 66.512195][ T13] veth0_macvtap: left promiscuous mode [ 66.512248][ T13] veth1_vlan: left promiscuous mode [ 66.512293][ T13] veth0_vlan: left promiscuous mode [ 66.518914][ T13] veth1_macvtap: left promiscuous mode [ 66.518942][ T13] veth0_macvtap: left promiscuous mode [ 66.519001][ T13] veth1_vlan: left promiscuous mode [ 66.519035][ T13] veth0_vlan: left promiscuous mode [ 66.644223][ T13] team0 (unregistering): Port device team_slave_1 removed [ 66.647865][ T13] team0 (unregistering): Port device team_slave_0 removed [ 66.658185][ T4725] Bluetooth: hci2: command tx timeout [ 66.658860][ T50] Bluetooth: hci3: command tx timeout [ 66.761980][ T13] team0 (unregistering): Port device team_slave_1 removed [ 66.765668][ T13] team0 (unregistering): Port device team_slave_0 removed [ 66.821030][ T6468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.865532][ T6476] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 66.872422][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.878618][ T6476] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 66.883342][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.892322][ T6468] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.904730][ T6476] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 66.906033][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.906335][ T6476] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 66.907280][ T6476] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.919475][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.919505][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.933674][ T6489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.986906][ T6489] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.992505][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.992532][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.021176][ T6483] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 67.022355][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.022949][ T6558] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.023008][ T6558] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.023076][ T6558] bridge_slave_0: entered allmulticast mode [ 67.023787][ T6558] bridge_slave_0: entered promiscuous mode [ 67.025396][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.025420][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.026797][ T6483] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 67.042563][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.043944][ T6483] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 67.052634][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.055087][ T6558] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.055143][ T6558] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.055228][ T6558] bridge_slave_1: entered allmulticast mode [ 67.055701][ T6558] bridge_slave_1: entered promiscuous mode [ 67.064664][ T6483] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 67.065724][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.075926][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 67.085144][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.085175][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.097420][ T6558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.110334][ T6558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.142058][ T6558] team0: Port device team_slave_0 added [ 67.143052][ T6558] team0: Port device team_slave_1 added [ 67.180367][ T6483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.187324][ T6483] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.193511][ T6489] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.196758][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.196786][ T1915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.197802][ T1915] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.197824][ T1915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.206478][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.206489][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.206503][ T6558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.207171][ T6558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.207178][ T6558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.207189][ T6558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.274088][ T6483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.274108][ T6483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.288214][ T6558] hsr_slave_0: entered promiscuous mode [ 67.288517][ T6558] hsr_slave_1: entered promiscuous mode [ 67.288707][ T6558] debugfs: 'hsr0' already exists in 'hsr' [ 67.288717][ T6558] Cannot create hsr debugfs directory [ 67.294028][ T6476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.323427][ T6476] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.363847][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.363879][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.364407][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.364426][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.427413][ T6476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.427432][ T6476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.476324][ T54] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.487188][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 67.534291][ T6558] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 67.546616][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 67.546995][ T6558] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 67.552662][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 67.556602][ T6489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.596217][ T54] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.603020][ T6558] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 67.606769][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 67.607104][ T6558] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 67.611754][ T6558] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 67.627081][ T6483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.662374][ T6468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.674614][ T54] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.775202][ T54] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.781357][ T6489] veth0_vlan: entered promiscuous mode [ 67.786463][ T6558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.792943][ T6476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.813754][ T6489] veth1_vlan: entered promiscuous mode [ 67.831438][ T6489] veth0_macvtap: entered promiscuous mode [ 67.833389][ T6489] veth1_macvtap: entered promiscuous mode [ 67.834498][ T6558] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.837338][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.846147][ T6489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.851308][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.851335][ T5473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.852586][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.852606][ T5473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.853641][ T4402] 8021q: adding VLAN 0 to HW filter on device eth6 [ 67.857797][ T50] Bluetooth: hci4: command tx timeout [ 67.869412][ T5473] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.870014][ T5473] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.870085][ T5473] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.870149][ T5473] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.873762][ T6468] veth0_vlan: entered promiscuous mode [ 67.875401][ T6468] veth1_vlan: entered promiscuous mode [ 67.903201][ T6468] veth0_macvtap: entered promiscuous mode [ 67.933921][ T6483] veth0_vlan: entered promiscuous mode [ 67.956362][ T54] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.961550][ T6468] veth1_macvtap: entered promiscuous mode [ 67.967017][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.983900][ T6483] veth1_vlan: entered promiscuous mode [ 67.996178][ T6476] veth0_vlan: entered promiscuous mode [ 67.999959][ T6476] veth1_vlan: entered promiscuous mode [ 68.002357][ T6468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.030996][ T54] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.036939][ T6483] veth0_macvtap: entered promiscuous mode [ 68.043698][ T6476] veth0_macvtap: entered promiscuous mode [ 68.054538][ T4990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054616][ T4990] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054835][ T4990] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.073851][ T6476] veth1_macvtap: entered promiscuous mode [ 68.096580][ T54] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.104996][ T6483] veth1_macvtap: entered promiscuous mode [ 68.115011][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.123695][ T1713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.123710][ T1713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.132650][ T6476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.149058][ T1713] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149178][ T1915] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149200][ T1915] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149220][ T1915] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149237][ T1915] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.152367][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.153936][ T6483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.155889][ T4990] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.156236][ T4990] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.178800][ T4990] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.198147][ T54] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.234045][ T5473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.234057][ T5473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.266592][ T6558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.274317][ T4402] 8021q: adding VLAN 0 to HW filter on device eth7 [ 68.280101][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.280113][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.306479][ T1713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.306491][ T1713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.360371][ T1915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.360384][ T1915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.426750][ T54] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.448027][ T1915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.448042][ T1915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.473667][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.473686][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.476243][ T1713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.476254][ T1713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.488752][ T1713] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.498173][ T50] Bluetooth: hci0: command tx timeout [ 68.506367][ T54] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.534798][ T6790] loop7: detected capacity change from 0 to 1024 [ 68.558702][ T6558] veth0_vlan: entered promiscuous mode [ 68.561208][ T6558] veth1_vlan: entered promiscuous mode [ 68.579835][ T50] Bluetooth: hci1: command tx timeout [ 68.595052][ T6558] veth0_macvtap: entered promiscuous mode [ 68.596070][ T6558] veth1_macvtap: entered promiscuous mode [ 68.609589][ T6790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.638003][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.642256][ T6558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.643466][ T4402] 8021q: adding VLAN 0 to HW filter on device eth9 [ 68.664262][ T6809] __nla_validate_parse: 3 callbacks suppressed [ 68.664281][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.8.430'. [ 68.690407][ T54] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.711920][ T6805] loop5: detected capacity change from 0 to 4096 [ 68.737241][ T4725] Bluetooth: hci2: command tx timeout [ 68.737299][ T50] Bluetooth: hci3: command tx timeout [ 68.756574][ T1915] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.790041][ T6805] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.846144][ T54] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.874045][ T6823] FAULT_INJECTION: forcing a failure. [ 68.874045][ T6823] name failslab, interval 1, probability 0, space 0, times 0 [ 68.874068][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.8.433 Not tainted syzkaller #0 PREEMPT [ 68.874080][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 68.874086][ T6823] Call trace: [ 68.874089][ T6823] show_stack+0x2c/0x3c (C) [ 68.874108][ T6823] __dump_stack+0x30/0x40 [ 68.874121][ T6823] dump_stack_lvl+0xd8/0x12c [ 68.874131][ T6823] dump_stack+0x1c/0x28 [ 68.874140][ T6823] should_fail_ex+0x418/0x58c [ 68.874149][ T6823] should_failslab+0xc4/0x120 [ 68.874157][ T6823] kmem_cache_alloc_noprof+0x94/0x5d4 [ 68.874165][ T6823] do_getname+0x48/0x234 [ 68.874173][ T6823] user_path_at+0x38/0x78 [ 68.874182][ T6823] do_mount+0xb0/0x148 [ 68.874191][ T6823] __arm64_sys_mount+0x33c/0x388 [ 68.874201][ T6823] invoke_syscall+0x98/0x244 [ 68.874211][ T6823] el0_svc_common+0xec/0x23c [ 68.874221][ T6823] do_el0_svc+0x4c/0x5c [ 68.874230][ T6823] el0_svc+0x60/0x1d8 [ 68.874239][ T6823] el0t_64_sync_handler+0x44/0x104 [ 68.874246][ T6823] el0t_64_sync+0x198/0x19c [ 68.883003][ T1713] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.883585][ T1713] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.883763][ T1713] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.946495][ T1915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.946505][ T1915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.999233][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.999248][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.011679][ T6824] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #12: block 80: comm syz.5.429: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.023720][ T6829] loop8: detected capacity change from 0 to 512 [ 69.044324][ T6829] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.078662][ T6829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.158803][ T6468] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /1/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.160087][ T6468] EXT4-fs error (device loop5): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.163975][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.164157][ T6468] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /1/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.180349][ T6468] EXT4-fs error (device loop5): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.182164][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.182322][ T6468] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /1/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.182581][ T6468] EXT4-fs error (device loop5): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.182737][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.182859][ T6468] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /1/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.183052][ T6468] EXT4-fs error (device loop5): ext4_empty_dir:3103: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.183183][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.183283][ T6468] EXT4-fs error (device loop5): ext4_readdir:280: inode #12: block 80: comm syz-executor: path /1/file3/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 69.183578][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.183966][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.193839][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.194292][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.194652][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.195755][ T6468] EXT4-fs warning (device loop5): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 69.199747][ T54] bridge_slave_1: left allmulticast mode [ 69.199765][ T54] bridge_slave_1: left promiscuous mode [ 69.199863][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.426214][ T54] bridge_slave_0: left allmulticast mode [ 69.426243][ T54] bridge_slave_0: left promiscuous mode [ 69.426531][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.434768][ T6844] loop6: detected capacity change from 0 to 512 [ 69.448297][ T6844] EXT4-fs: Ignoring removed bh option [ 69.464864][ T6844] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 69.470791][ T54] bridge_slave_1: left allmulticast mode [ 69.470812][ T54] bridge_slave_1: left promiscuous mode [ 69.470887][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.474939][ T6844] EXT4-fs (loop6): 1 truncate cleaned up [ 69.475393][ T6844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.487067][ T54] bridge_slave_0: left allmulticast mode [ 69.487087][ T54] bridge_slave_0: left promiscuous mode [ 69.487174][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.512823][ T6844] netlink: 60 bytes leftover after parsing attributes in process `syz.6.437'. [ 69.606411][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.615412][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.619922][ T54] bond0 (unregistering): Released all slaves [ 69.624903][ T6852] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 69.624920][ T6852] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 69.624925][ T6852] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 69.624931][ T6852] overlayfs: missing 'lowerdir' [ 69.639401][ T6852] overlayfs: upper fs needs to support d_type. [ 69.680581][ T54] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 69.709580][ T54] veth1_vlan: left allmulticast mode [ 69.747394][ T54] bond0 (unregistering): Released all slaves [ 69.749926][ T54] bond1 (unregistering): Released all slaves [ 69.795656][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.805635][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.827960][ T54] bond0 (unregistering): Released all slaves [ 69.834912][ T6851] netlink: 60 bytes leftover after parsing attributes in process `syz.6.437'. [ 69.835236][ T4402] 8021q: adding VLAN 0 to HW filter on device eth8 [ 69.838216][ T6853] bridge0: port 3(syz_tun) entered blocking state [ 69.838262][ T6853] bridge0: port 3(syz_tun) entered disabled state [ 69.838348][ T6853] syz_tun: entered allmulticast mode [ 69.838876][ T6853] syz_tun: entered promiscuous mode [ 69.839616][ T6853] bridge0: port 3(syz_tun) entered blocking state [ 69.839639][ T6853] bridge0: port 3(syz_tun) entered forwarding state [ 69.915208][ T54] tipc: Disabling bearer [ 69.917115][ T54] tipc: Left network mode [ 69.918099][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.936704][ T50] Bluetooth: hci4: command tx timeout [ 69.969232][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.000464][ T6862] loop7: detected capacity change from 0 to 1024 [ 70.014484][ T6862] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 70.024057][ T6476] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 70.030325][ T6476] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 70.032073][ T6862] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.055181][ T6468] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.817210][ T4725] Bluetooth: hci2: command tx timeout [ 70.818232][ T50] Bluetooth: hci3: command tx timeout [ 70.888200][ T6476] bridge0: port 3(syz_tun) entered disabled state [ 70.903361][ T6476] syz_tun (unregistering): left allmulticast mode [ 70.903378][ T6476] syz_tun (unregistering): left promiscuous mode [ 70.903407][ T6476] bridge0: port 3(syz_tun) entered disabled state [ 70.950743][ T4725] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.953289][ T4725] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.954115][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.954453][ T4725] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.954657][ T4725] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.989063][ T6886] loop8: detected capacity change from 0 to 512 [ 71.040224][ T6886] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.447: bad orphan inode 11862016 [ 71.040246][ T6886] loop8: lost filesystem error report for type 5 error -117 [ 71.040804][ T6886] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 71.133451][ T6489] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /3/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 71.133658][ T6489] EXT4-fs (loop7): Remounting filesystem read-only [ 71.168990][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.284467][ T6898] netlink: 8 bytes leftover after parsing attributes in process `syz.8.447'. [ 71.288236][ T6898] macvlan2: entered allmulticast mode [ 71.288250][ T6898] hsr0: entered allmulticast mode [ 71.288258][ T6898] hsr_slave_0: entered allmulticast mode [ 71.288271][ T6898] hsr_slave_1: entered allmulticast mode [ 71.288291][ T6898] hsr0: entered promiscuous mode [ 71.450348][ T6904] loop7: detected capacity change from 0 to 512 [ 71.461600][ T6476] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.500134][ T6904] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 71.500158][ T6904] FAT-fs (loop7): Filesystem has been set read-only [ 71.591009][ T6883] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.746115][ T4402] 8021q: adding VLAN 0 to HW filter on device eth10 [ 71.754552][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.755334][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.761896][ T4725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.762948][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.763303][ T4725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.864744][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 71.905304][ T6883] lo speed is unknown, defaulting to 1000 [ 71.961751][ T6926] loop8: detected capacity change from 0 to 512 [ 72.053724][ T50] Bluetooth: hci4: command tx timeout [ 72.899350][ T50] Bluetooth: hci3: command tx timeout [ 72.899377][ T50] Bluetooth: hci2: command tx timeout [ 72.978570][ T4725] Bluetooth: hci0: command tx timeout [ 73.082034][ T6876] loop9: detected capacity change from 0 to 262144 [ 73.132447][ T6940] loop7: detected capacity change from 0 to 1024 [ 73.155623][ T6940] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 73.189343][ T6940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.310704][ T54] hsr_slave_0: left promiscuous mode [ 73.311029][ T54] hsr_slave_1: left promiscuous mode [ 73.311281][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.311292][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.311596][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.311606][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.314528][ T54] hsr_slave_0: left promiscuous mode [ 73.344972][ T54] hsr_slave_1: left promiscuous mode [ 73.487257][ T54] hsr_slave_0: left promiscuous mode [ 73.489382][ T54] hsr_slave_1: left promiscuous mode [ 73.491754][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.491812][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.515604][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.515790][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.776609][ T4725] Bluetooth: hci1: command tx timeout [ 73.974951][ T54] veth1_macvtap: left promiscuous mode [ 73.974985][ T54] veth0_macvtap: left promiscuous mode [ 73.975032][ T54] veth1_vlan: left promiscuous mode [ 73.975069][ T54] veth0_vlan: left promiscuous mode [ 73.980131][ T54] veth1_macvtap: left promiscuous mode [ 73.980161][ T54] veth0_macvtap: left promiscuous mode [ 73.980206][ T54] veth1_vlan: left promiscuous mode [ 73.980242][ T54] veth0_vlan: left promiscuous mode [ 73.980829][ T54] veth1_macvtap: left allmulticast mode [ 73.980840][ T54] veth1_macvtap: left promiscuous mode [ 73.980858][ T54] veth0_macvtap: left promiscuous mode [ 73.980900][ T54] veth1_vlan: left promiscuous mode [ 73.980934][ T54] veth0_vlan: left promiscuous mode [ 74.095095][ T4725] Bluetooth: hci4: command tx timeout [ 74.220802][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.273148][ T6964] loop7: detected capacity change from 0 to 256 [ 74.343212][ T54] team0 (unregistering): Port device team_slave_1 removed [ 74.355218][ T54] team0 (unregistering): Port device team_slave_0 removed [ 74.404601][ T6976] loop9: detected capacity change from 0 to 512 [ 74.509056][ T6983] ip_tables: iptables: counters copy to user failed while replacing table [ 74.578122][ T6983] loop7: detected capacity change from 0 to 512 [ 74.660294][ T54] team0 (unregistering): Port device team_slave_1 removed [ 74.667835][ T54] team0 (unregistering): Port device team_slave_0 removed [ 74.717539][ T6914] rxe_eth0 speed is unknown, defaulting to 1000 [ 74.746508][ T4402] 8021q: adding VLAN 0 to HW filter on device eth11 [ 74.746708][ T4309] infiniband syz0: ib_query_port failed (-19) [ 74.747784][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.9.460'. [ 74.888616][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.898843][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.899772][ T6883] bridge_slave_0: entered allmulticast mode [ 74.911523][ T6883] bridge_slave_0: entered promiscuous mode [ 74.913205][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.914128][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.914193][ T6883] bridge_slave_1: entered allmulticast mode [ 74.914749][ T6883] bridge_slave_1: entered promiscuous mode [ 74.930300][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.937412][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.032032][ T6883] team0: Port device team_slave_0 added [ 75.043998][ T6883] team0: Port device team_slave_1 added [ 75.055429][ T4725] Bluetooth: hci0: command tx timeout [ 75.097032][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.097049][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.097069][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.097789][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.097797][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.097811][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.168856][ T7021] loop8: detected capacity change from 0 to 1024 [ 75.180773][ T6883] hsr_slave_0: entered promiscuous mode [ 75.181095][ T6883] hsr_slave_1: entered promiscuous mode [ 75.193486][ T7021] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 75.206290][ T7021] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 75.206414][ T7021] EXT4-fs (loop8): orphan cleanup on readonly fs [ 75.208062][ T7021] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #3: block 3: comm syz.8.475: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.208082][ T7021] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.208969][ T7021] __quota_error: 179 callbacks suppressed [ 75.208981][ T7021] Quota error (device loop8): write_blk: dquota write failed [ 75.208992][ T7021] Quota error (device loop8): find_free_dqentry: Can't write quota data block 3 [ 75.209038][ T7021] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 75.209060][ T7021] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.475: Failed to acquire dquot type 0 [ 75.209071][ T7021] loop8: lost filesystem error report for type 5 error -117 [ 75.210871][ T7021] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 3: comm syz.8.475: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.210892][ T7021] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.212682][ T7021] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 75.212710][ T7021] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.475: Failed to acquire dquot type 0 [ 75.212725][ T7021] loop8: lost filesystem error report for type 5 error -117 [ 75.213792][ C0] EXT4-fs (loop8): error count since last fsck: 4 [ 75.213808][ C0] EXT4-fs (loop8): initial error at time 75: ext4_map_blocks:832: inode 3: block 3 [ 75.213827][ C0] EXT4-fs (loop8): last error at time 75: ext4_acquire_dquot:7070 [ 75.256109][ T7021] EXT4-fs error (device loop8): ext4_free_blocks:6719: comm syz.8.475: Freeing blocks not in datazone - block = 0, count = 4096 [ 75.256132][ T7021] loop8: lost filesystem error report for type 5 error -117 [ 75.257269][ T7021] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #3: block 3: comm syz.8.475: lblock 3 mapped to illegal pblock 3 (length 1) [ 75.257289][ T7021] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.258108][ T7021] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 75.258134][ T7021] EXT4-fs error (device loop8): ext4_acquire_dquot:7070: comm syz.8.475: Failed to acquire dquot type 0 [ 75.258147][ T7021] loop8: lost filesystem error report for type 5 error -117 [ 75.258374][ T7021] EXT4-fs (loop8): 1 orphan inode deleted [ 75.262927][ T7021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.272401][ T7027] loop9: detected capacity change from 0 to 1024 [ 75.279447][ T4402] 8021q: adding VLAN 0 to HW filter on device eth12 [ 75.297220][ T7027] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.328976][ T7021] EXT4-fs error (device loop8): ext4_lookup:1787: inode #15: comm syz.8.475: iget: bad extended attribute block 6 [ 75.330249][ T7021] netlink: 'syz.8.475': attribute type 10 has an invalid length. [ 75.353277][ T7021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.356615][ T7021] team0: Port device netdevsim1 added [ 75.392052][ T7021] netlink: 'syz.8.475': attribute type 10 has an invalid length. [ 75.441493][ T7021] team0: Port device netdevsim1 removed [ 75.442262][ T7021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.457333][ T7021] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 75.491578][ T7042] loop7: detected capacity change from 0 to 1024 [ 75.491978][ T7042] EXT4-fs: Ignoring removed bh option [ 75.524588][ T7021] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.581121][ T7042] EXT4-fs: Mount option(s) incompatible with ext2 [ 75.637713][ T7042] loop7: detected capacity change from 0 to 256 [ 75.656295][ T7042] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 75.656320][ T7042] FAT-fs (loop7): Filesystem has been set read-only [ 75.801694][ T7059] loop8: detected capacity change from 0 to 8192 [ 75.811242][ T54] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.840220][ T4402] 8021q: adding VLAN 0 to HW filter on device eth13 [ 75.853547][ T4725] Bluetooth: hci1: command tx timeout [ 75.856117][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.856432][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.856558][ T6914] bridge_slave_0: entered allmulticast mode [ 75.858436][ T6914] bridge_slave_0: entered promiscuous mode [ 75.874967][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.874999][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.875072][ T6914] bridge_slave_1: entered allmulticast mode [ 75.902395][ T6914] bridge_slave_1: entered promiscuous mode [ 75.962997][ T54] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.018537][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.038467][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.064834][ T54] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.108538][ T7085] loop8: detected capacity change from 0 to 2048 [ 76.131197][ T7085] loop8: p1 p2 p3 p4 [ 76.131197][ T7085] p1: [ 76.131285][ T7085] loop8: p1 size 67110656 extends beyond EOD, truncated [ 76.134229][ T7085] loop8: p3 size 134217728 extends beyond EOD, truncated [ 76.134791][ T7085] loop8: p4 size 4278190080 extends beyond EOD, truncated [ 76.135223][ T7085] loop8: p5 size 67110656 extends beyond EOD, truncated [ 76.138602][ T7085] loop8: p6 size 134217728 extends beyond EOD, truncated [ 76.167197][ T6914] team0: Port device team_slave_0 added [ 76.193887][ T6914] team0: Port device team_slave_1 added [ 76.244110][ T7095] loop7: detected capacity change from 0 to 8 [ 76.254813][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.290533][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.290546][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.290559][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.291123][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.291130][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.291145][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.369416][ T54] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.376118][ T4402] 8021q: adding VLAN 0 to HW filter on device eth14 [ 76.393949][ T6914] hsr_slave_0: entered promiscuous mode [ 76.406858][ T6914] hsr_slave_1: entered promiscuous mode [ 76.407065][ T6914] debugfs: 'hsr0' already exists in 'hsr' [ 76.407076][ T6914] Cannot create hsr debugfs directory [ 76.408675][ T6883] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.420969][ T6883] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 76.422547][ T6883] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.431536][ T6883] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 76.447395][ T6883] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.451854][ T6883] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 76.491466][ T6883] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.499189][ T6883] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 76.637419][ T54] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.703464][ T6883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.720566][ T6883] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.731697][ T54] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.781188][ T4981] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.781221][ T4981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.787552][ T1713] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.787581][ T1713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.810113][ T54] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.926363][ T54] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.992723][ T6883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.067361][ T54] bridge_slave_1: left allmulticast mode [ 77.067384][ T54] bridge_slave_1: left promiscuous mode [ 77.067471][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.082615][ T54] bridge_slave_0: left allmulticast mode [ 77.082634][ T54] bridge_slave_0: left promiscuous mode [ 77.082713][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.105521][ T54] bridge_slave_1: left allmulticast mode [ 77.105541][ T54] bridge_slave_1: left promiscuous mode [ 77.105619][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.109144][ T54] bridge_slave_0: left allmulticast mode [ 77.109159][ T54] bridge_slave_0: left promiscuous mode [ 77.109220][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.109702][ T7127] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.123271][ T7127] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.136151][ T4725] Bluetooth: hci0: command tx timeout [ 77.163548][ T837] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.180836][ T7133] EXT4-fs: Ignoring removed bh option [ 77.181217][ T7133] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 77.193330][ T7133] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.491: corrupted in-inode xattr: e_value size too large [ 77.193355][ T7133] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.193534][ T7133] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.491: couldn't read orphan inode 15 (err -117) [ 77.193548][ T7133] loop7: lost filesystem error report for type 5 error -117 [ 77.194115][ T7133] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.198194][ T7133] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.491: Unrecognised inode hash code 4 [ 77.198212][ T7133] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.491: Corrupt directory, running e2fsck is recommended [ 77.295663][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.335191][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.353968][ T54] bond0 (unregistering): Released all slaves [ 77.480698][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 77.486792][ T7143] netlink: 'syz.8.495': attribute type 29 has an invalid length. [ 77.486839][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 77.521132][ T7148] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.526417][ T54] bond0 (unregistering): Released all slaves [ 77.530556][ T6883] veth0_vlan: entered promiscuous mode [ 77.535736][ T6883] veth1_vlan: entered promiscuous mode [ 77.583281][ T6883] veth0_macvtap: entered promiscuous mode [ 77.584513][ T6883] veth1_macvtap: entered promiscuous mode [ 77.587698][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.588664][ T6883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.625910][ T4981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.647707][ T4981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.648262][ T4981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.648327][ T4981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.649511][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.667855][ T5471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.667871][ T5471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.702458][ T837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.702474][ T837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.820915][ T7160] Invalid source name [ 77.933957][ T4725] Bluetooth: hci1: command tx timeout [ 78.278164][ T7173] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.616301][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.785884][ T7185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.800496][ T6914] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.813497][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.813917][ T6914] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.819175][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.140154][ T6914] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.156122][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.157283][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.157643][ T6914] netdevsim netdevsim0 netdevsim3: renamed from eth23 [ 79.168276][ T6914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.212777][ T7201] ip_tables: iptables: counters copy to user failed while replacing table [ 79.304664][ T7201] set_capacity_and_notify: 5 callbacks suppressed [ 79.304687][ T7201] loop7: detected capacity change from 0 to 512 [ 79.317599][ T7216] loop1: detected capacity change from 0 to 1024 [ 79.337763][ T7216] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.360458][ T7214] netlink: 12 bytes leftover after parsing attributes in process `syz.9.513'. [ 79.707657][ T7228] loop9: detected capacity change from 0 to 512 [ 79.708153][ T7228] EXT4-fs: Ignoring removed bh option [ 79.711209][ T7228] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 79.715046][ T7228] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.515: corrupted in-inode xattr: e_value size too large [ 79.715065][ T7228] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.715222][ T7228] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.515: couldn't read orphan inode 15 (err -117) [ 79.715235][ T7228] loop9: lost filesystem error report for type 5 error -117 [ 79.742590][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.748172][ T7228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.760381][ T7228] EXT4-fs warning (device loop9): dx_probe:801: inode #2: comm syz.9.515: Unrecognised inode hash code 4 [ 79.760402][ T7228] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.515: Corrupt directory, running e2fsck is recommended [ 79.787344][ T6914] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.820940][ T1915] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.820973][ T1915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.863879][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.869582][ T7235] loop8: detected capacity change from 0 to 256 [ 79.892486][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.892519][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.925538][ T7239] warning: `syz.9.517' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.012282][ T50] Bluetooth: hci1: command tx timeout [ 80.024911][ T4725] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 80.185471][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.220429][ T54] hsr_slave_0: left promiscuous mode [ 80.220702][ T54] hsr_slave_1: left promiscuous mode [ 80.220959][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.220970][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.223255][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.223266][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.250376][ T54] hsr_slave_0: left promiscuous mode [ 80.255813][ T54] hsr_slave_1: left promiscuous mode [ 80.256184][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.256196][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.257305][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.257316][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.284297][ T54] veth1_macvtap: left promiscuous mode [ 80.284332][ T54] veth0_macvtap: left promiscuous mode [ 80.284382][ T54] veth1_vlan: left promiscuous mode [ 80.284508][ T54] veth0_vlan: left promiscuous mode [ 80.287603][ T54] veth1_macvtap: left promiscuous mode [ 80.287624][ T54] veth0_macvtap: left promiscuous mode [ 80.287668][ T54] veth1_vlan: left promiscuous mode [ 80.287706][ T54] veth0_vlan: left promiscuous mode [ 80.699958][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.720583][ T7300] loop8: detected capacity change from 0 to 128 [ 80.723068][ T7300] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.730288][ T7300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 80.730325][ T7300] System zones: 1-3, 19-19, 35-36 [ 80.736634][ T7300] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.761308][ T7297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.791103][ T54] team0 (unregistering): Port device team_slave_1 removed [ 80.794977][ T54] team0 (unregistering): Port device team_slave_0 removed [ 80.815581][ T7303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.924545][ T54] team0 (unregistering): Port device team_slave_1 removed [ 80.930191][ T54] team0 (unregistering): Port device team_slave_0 removed [ 81.034307][ T6483] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 81.065304][ T7329] netlink: 12 bytes leftover after parsing attributes in process `syz.8.528'. [ 81.106304][ T7326] loop9: detected capacity change from 0 to 2048 [ 81.139092][ T7326] loop9: p1 p2 p3 p4 [ 81.139092][ T7326] p1: [ 81.139183][ T7326] loop9: p1 size 67110656 extends beyond EOD, truncated [ 81.150630][ T7337] netlink: 'syz.8.530': attribute type 11 has an invalid length. [ 81.176520][ T7326] loop9: p3 size 134217728 extends beyond EOD, truncated [ 81.177069][ T7326] loop9: p4 size 4278190080 extends beyond EOD, truncated [ 81.177854][ T7326] loop9: p5 size 67110656 extends beyond EOD, truncated [ 81.180435][ T7326] loop9: p6 size 134217728 extends beyond EOD, truncated [ 81.241852][ T6914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.339015][ T6914] veth0_vlan: entered promiscuous mode [ 81.348070][ T6914] veth1_vlan: entered promiscuous mode [ 81.364538][ T7360] loop7: detected capacity change from 0 to 1024 [ 81.400039][ T7353] loop8: detected capacity change from 0 to 2048 [ 81.410079][ T7360] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.426633][ T6914] veth0_macvtap: entered promiscuous mode [ 81.439193][ T7353] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.445837][ T6914] veth1_macvtap: entered promiscuous mode [ 81.498544][ T7353] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.534: bg 0: block 2: invalid block bitmap [ 81.759977][ T7353] fs-verity (loop8, inode 13): ext4_end_enable_verity() failed with err -28 [ 81.766729][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.797376][ T7373] loop1: detected capacity change from 0 to 1024 [ 81.804358][ T6914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.807073][ T7373] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 81.829013][ T725] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829061][ T725] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829079][ T725] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829098][ T725] netdevsim netdevsim2 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829114][ T725] netdevsim netdevsim2 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829130][ T725] netdevsim netdevsim2 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829146][ T725] netdevsim netdevsim2 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829162][ T725] netdevsim netdevsim4 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829178][ T725] netdevsim netdevsim4 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829193][ T725] netdevsim netdevsim4 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829209][ T725] netdevsim netdevsim4 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829225][ T725] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829240][ T725] netdevsim netdevsim6 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829256][ T725] netdevsim netdevsim6 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829272][ T725] netdevsim netdevsim6 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829288][ T725] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829303][ T725] netdevsim netdevsim5 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829319][ T725] netdevsim netdevsim5 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829334][ T725] netdevsim netdevsim5 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829350][ T725] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829366][ T725] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829381][ T725] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.829397][ T725] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.837863][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.847624][ T7373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.879921][ T7379] FAULT_INJECTION: forcing a failure. [ 81.879921][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.879943][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.8.537 Not tainted syzkaller #0 PREEMPT [ 81.879954][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 81.879961][ T7379] Call trace: [ 81.879965][ T7379] show_stack+0x2c/0x3c (C) [ 81.879985][ T7379] __dump_stack+0x30/0x40 [ 81.879997][ T7379] dump_stack_lvl+0xd8/0x12c [ 81.880007][ T7379] dump_stack+0x1c/0x28 [ 81.880017][ T7379] should_fail_ex+0x418/0x58c [ 81.880025][ T7379] should_fail+0x14/0x24 [ 81.880032][ T7379] should_fail_usercopy+0x20/0x30 [ 81.880039][ T7379] video_usercopy+0xacc/0xe88 [ 81.880049][ T7379] video_ioctl2+0x3c/0x50 [ 81.880057][ T7379] v4l2_ioctl+0x148/0x18c [ 81.880064][ T7379] __arm64_sys_ioctl+0x154/0x1cc [ 81.880072][ T7379] invoke_syscall+0x98/0x244 [ 81.880083][ T7379] el0_svc_common+0xec/0x23c [ 81.880092][ T7379] do_el0_svc+0x4c/0x5c [ 81.880101][ T7379] el0_svc+0x60/0x1d8 [ 81.880110][ T7379] el0t_64_sync_handler+0x44/0x104 [ 81.880117][ T7379] el0t_64_sync+0x198/0x19c [ 82.604665][ T5471] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.668660][ T7388] device-mapper: table: 248:3: raid: Insufficient number of devices (-EINVAL) [ 82.668677][ T7388] device-mapper: ioctl: error adding target to table [ 82.742451][ T7400] loop8: detected capacity change from 0 to 1024 [ 82.767258][ T7400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.098257][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.187380][ T1915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.187398][ T1915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.193135][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.268044][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.268060][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.315784][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.372335][ T7414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.376176][ T7416] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.382715][ T7416] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.415851][ T4402] 8021q: adding VLAN 0 to HW filter on device eth15 [ 83.443497][ T7417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.751374][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.885015][ T7437] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.169522][ T4725] Bluetooth: hci2: command 0x2016 tx timeout [ 84.233843][ T6914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.292150][ T7450] loop1: p1 p2 p3 p4 [ 84.292150][ T7450] p1: [ 84.293918][ T7450] loop1: p1 size 67110656 extends beyond EOD, truncated [ 84.296452][ T7450] loop1: p3 size 134217728 extends beyond EOD, truncated [ 84.297007][ T7450] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 84.297521][ T7450] loop1: p5 size 67110656 extends beyond EOD, truncated [ 84.298040][ T7450] loop1: p6 size 134217728 extends beyond EOD, truncated [ 84.321469][ T7458] netlink: 156 bytes leftover after parsing attributes in process `syz.0.550'. [ 84.343991][ T4345] loop1: p1 p2 p3 p4 [ 84.343991][ T4345] p1: [ 84.344020][ T7463] set_capacity_and_notify: 3 callbacks suppressed [ 84.344031][ T7463] loop7: detected capacity change from 0 to 1024 [ 84.344085][ T4345] loop1: p1 size 67110656 extends beyond EOD, truncated [ 84.346208][ T7463] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 84.347155][ T4345] loop1: p3 size 134217728 extends beyond EOD, truncated [ 84.351634][ T4345] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 84.355715][ T4345] loop1: p5 size 67110656 extends beyond EOD, truncated [ 84.356974][ T7463] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.373724][ T4345] loop1: p6 size 134217728 extends beyond EOD, truncated [ 85.331435][ T24] hid-generic 0005:0008:0007.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz0] on aa:aa:aa:aa:aa:aa [ 85.406168][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.9.560'. [ 85.433346][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.456630][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.517164][ T7491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.524345][ T7497] loop9: detected capacity change from 0 to 512 [ 85.533135][ T7497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 85.552886][ T7497] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.585647][ T7487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.636863][ T7487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.890364][ T4402] 8021q: adding VLAN 0 to HW filter on device eth16 [ 86.091918][ T4402] 8021q: adding VLAN 0 to HW filter on device eth17 [ 86.322136][ T4402] 8021q: adding VLAN 0 to HW filter on device eth18 [ 86.390027][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.469223][ T7557] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.634239][ T7565] Bluetooth: MGMT ver 1.23 [ 86.635941][ T7565] loop7: detected capacity change from 0 to 8 [ 86.759093][ T7576] loop9: detected capacity change from 0 to 1024 [ 86.767486][ T7576] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 86.774900][ T7576] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.664112][ T7592] loop8: detected capacity change from 0 to 4096 [ 87.664525][ T7592] ext4: Unknown parameter 'nouser_xattr' [ 87.703950][ T7592] loop8: detected capacity change from 0 to 4096 [ 87.737231][ T7592] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.253432][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.374479][ T7602] loop9: detected capacity change from 0 to 4096 [ 88.383374][ T7602] ext4: Unknown parameter 'nouser_xattr' [ 88.420656][ T7604] loop7: detected capacity change from 0 to 512 [ 88.439718][ T7602] loop9: detected capacity change from 0 to 4096 [ 88.453549][ T7604] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.466060][ T7604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.476271][ T7602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.828301][ T4402] 8021q: adding VLAN 0 to HW filter on device eth19 [ 89.272189][ T6483] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.311151][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.462162][ T7623] loop7: detected capacity change from 0 to 1024 [ 89.468593][ T7620] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.468614][ T7620] block device autoloading is deprecated and will be removed. [ 89.480860][ T7623] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 89.492401][ T7623] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.578898][ T6489] EXT4-fs error (device loop7): ext4_read_inline_dir:1512: inode #12: block 7: comm syz-executor: path /40/sys/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 89.581284][ T6489] EXT4-fs (loop7): Remounting filesystem read-only [ 89.614232][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.622573][ T7635] loop8: detected capacity change from 0 to 2048 [ 89.697282][ T7635] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.701474][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.8.582'. [ 89.737567][ T7644] loop7: detected capacity change from 0 to 1024 [ 89.758614][ T7644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.758741][ T7648] loop1: detected capacity change from 0 to 512 [ 89.761439][ T7648] EXT4-fs: Ignoring removed bh option [ 89.769937][ T7648] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 89.774350][ T7648] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.585: corrupted in-inode xattr: e_value size too large [ 89.774374][ T7648] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 89.775287][ T7648] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.585: couldn't read orphan inode 15 (err -117) [ 89.775310][ T7648] loop1: lost filesystem error report for type 5 error -117 [ 89.776514][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 89.776528][ C1] EXT4-fs (loop1): initial error at time 89: ext4_iget_extra_inode:5210: inode 15 [ 89.776544][ C1] EXT4-fs (loop1): last error at time 89: ext4_orphan_get:1408 [ 89.777930][ T7648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.790663][ T7648] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.585: Unrecognised inode hash code 4 [ 89.790698][ T7648] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.585: Corrupt directory, running e2fsck is recommended [ 89.832091][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.146933][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.280277][ T7676] loop9: detected capacity change from 0 to 1024 [ 90.291504][ T7676] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.620023][ T7691] loop8: detected capacity change from 0 to 1024 [ 90.728490][ T7705] loop5: detected capacity change from 0 to 7 [ 91.258679][ T7705] Dev loop5: unable to read RDB block 7 [ 91.258704][ T7705] loop5: unable to read partition table [ 91.258769][ T7705] loop5: partition table beyond EOD, truncated [ 91.258794][ T7705] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 91.258951][ T7715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.594'. [ 91.361462][ T7718] loop1: detected capacity change from 0 to 512 [ 91.401914][ T7705] support for cryptoloop has been removed. Use dm-crypt instead. [ 91.407156][ T7722] loop9: detected capacity change from 0 to 512 [ 91.407512][ T7722] EXT4-fs: Ignoring removed i_version option [ 91.420346][ T7722] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.422048][ T7722] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.434087][ T7722] EXT4-fs (loop9): orphan cleanup on readonly fs [ 91.435088][ T7722] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.596: bad orphan inode 12 [ 91.435106][ T7722] loop9: lost filesystem error report for type 5 error -117 [ 91.435675][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 91.435689][ C0] EXT4-fs (loop9): initial error at time 91: ext4_orphan_get:1429 [ 91.435701][ C0] EXT4-fs (loop9): last error at time 91: ext4_orphan_get:1429 [ 91.452010][ T7722] ext4_test_bit(bit=11, block=1) = 0 [ 91.507415][ T7722] EXT4-fs error (device loop9): __ext4_remount:6873: comm syz.9.596: Abort forced by user [ 91.507786][ T7722] EXT4-fs (loop9): Remounting filesystem read-only [ 91.507802][ T7722] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000. [ 91.524716][ T7726] loop1: detected capacity change from 0 to 512 [ 91.539352][ T7726] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 91.539376][ T7726] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 91.556725][ T7726] EXT4-fs (loop1): 1 truncate cleaned up [ 91.640244][ T7745] ip_tables: iptables: counters copy to user failed while replacing table [ 91.669976][ T7746] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.376363][ T6483] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 92.376379][ T6483] FAT-fs (loop8): Filesystem has been set read-only [ 92.376465][ T6483] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 92.792865][ T7829] netlink: 20 bytes leftover after parsing attributes in process `syz.7.614'. [ 92.910697][ T58] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.983786][ T7846] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.998613][ T7849] EXT4-fs: Ignoring removed bh option [ 92.999371][ T7849] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 93.028276][ T7849] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.623: corrupted in-inode xattr: e_value size too large [ 93.028301][ T7849] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 93.028449][ T7849] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.623: couldn't read orphan inode 15 (err -117) [ 93.028462][ T7849] loop7: lost filesystem error report for type 5 error -117 [ 93.117062][ T58] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.121240][ T7849] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.623: Unrecognised inode hash code 4 [ 93.121265][ T7849] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.623: Corrupt directory, running e2fsck is recommended [ 93.151290][ T4725] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.152161][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.152495][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.153420][ T4725] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.157650][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.260427][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.473018][ T7870] FAULT_INJECTION: forcing a failure. [ 93.473018][ T7870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.473043][ T7870] CPU: 1 UID: 0 PID: 7870 Comm: syz.9.625 Not tainted syzkaller #0 PREEMPT [ 93.473056][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 93.473063][ T7870] Call trace: [ 93.473067][ T7870] show_stack+0x2c/0x3c (C) [ 93.473090][ T7870] __dump_stack+0x30/0x40 [ 93.473102][ T7870] dump_stack_lvl+0xd8/0x12c [ 93.473112][ T7870] dump_stack+0x1c/0x28 [ 93.473121][ T7870] should_fail_ex+0x418/0x58c [ 93.473131][ T7870] should_fail+0x14/0x24 [ 93.473137][ T7870] should_fail_usercopy+0x20/0x30 [ 93.473145][ T7870] simple_read_from_buffer+0xc4/0x238 [ 93.473156][ T7870] proc_fail_nth_read+0x1a8/0x248 [ 93.473167][ T7870] vfs_read+0x230/0x8c8 [ 93.473175][ T7870] ksys_read+0x12c/0x228 [ 93.473181][ T7870] __arm64_sys_read+0x84/0x98 [ 93.473188][ T7870] invoke_syscall+0x98/0x244 [ 93.473199][ T7870] el0_svc_common+0xec/0x23c [ 93.473209][ T7870] do_el0_svc+0x4c/0x5c [ 93.473219][ T7870] el0_svc+0x60/0x1d8 [ 93.473228][ T7870] el0t_64_sync_handler+0x44/0x104 [ 93.473236][ T7870] el0t_64_sync+0x198/0x19c [ 93.474372][ T7860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.532924][ T58] bond0: (slave netdevsim1): Releasing backup interface [ 93.568762][ T58] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.655709][ T58] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.679472][ T7858] rxe_eth0 speed is unknown, defaulting to 1000 [ 93.780332][ T1915] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.802669][ T40] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.804641][ T40] netdevsim netdevsim8 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.804667][ T40] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.002795][ T58] bridge_slave_1: left allmulticast mode [ 94.002905][ T58] bridge_slave_1: left promiscuous mode [ 94.008204][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.085859][ T58] bridge_slave_0: left allmulticast mode [ 94.085891][ T58] bridge_slave_0: left promiscuous mode [ 94.085978][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.311521][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.322050][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.335256][ T58] bond0 (unregistering): Released all slaves [ 94.479212][ T7858] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.479459][ T7858] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.479516][ T7858] bridge_slave_0: entered allmulticast mode [ 94.479978][ T7858] bridge_slave_0: entered promiscuous mode [ 94.480764][ T7858] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.480786][ T7858] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.480834][ T7858] bridge_slave_1: entered allmulticast mode [ 94.481233][ T7858] bridge_slave_1: entered promiscuous mode [ 94.542140][ T7858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.552707][ T7858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.623747][ T7858] team0: Port device team_slave_0 added [ 94.630193][ T7858] team0: Port device team_slave_1 added [ 94.641539][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.641554][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.641565][ T7858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.643877][ T7858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.643898][ T7858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.643917][ T7858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.667461][ T7858] hsr_slave_0: entered promiscuous mode [ 94.668853][ T7858] hsr_slave_1: entered promiscuous mode [ 94.671130][ T7858] debugfs: 'hsr0' already exists in 'hsr' [ 94.671148][ T7858] Cannot create hsr debugfs directory [ 94.796635][ T7966] Soft offlining pfn 0x13d55f at process virtual address 0x20000000 [ 94.813213][ T7966] Soft offlining pfn 0x13d9d2 at process virtual address 0x20001000 [ 94.820974][ T7966] Soft offlining pfn 0x12216d at process virtual address 0x20002000 [ 94.821070][ T7966] Soft offlining pfn 0x216c01 at process virtual address 0x20003000 [ 94.821113][ T7966] Memory failure: 0x216c01: unhandlable page. [ 94.880673][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.880700][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.881665][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.881690][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.893018][ T58] hsr0: left allmulticast mode [ 94.893120][ T58] veth1_macvtap: left promiscuous mode [ 94.893143][ T58] veth0_macvtap: left promiscuous mode [ 94.893195][ T58] veth1_vlan: left promiscuous mode [ 94.893232][ T58] veth0_vlan: left promiscuous mode [ 95.006781][ T58] team0 (unregistering): Port device team_slave_1 removed [ 95.011072][ T58] team0 (unregistering): Port device team_slave_0 removed [ 95.150965][ T7858] netdevsim netdevsim2 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.244072][ T7858] netdevsim netdevsim2 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.494973][ T50] Bluetooth: hci2: command tx timeout [ 95.650124][ T8035] overlayfs: missing 'lowerdir' [ 95.659934][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.9.645'. [ 95.660444][ T8035] 0x000000000000-0x000000010000 : "" [ 95.662536][ T8035] ftl_cs: FTL header not found. [ 95.928912][ T8042] netlink: 48 bytes leftover after parsing attributes in process `syz.9.645'. [ 96.018041][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.070980][ T8047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.182964][ T8065] bond1: Unable to set down delay as MII monitoring is disabled [ 96.187069][ T8065] bond1 (unregistering): Released all slaves [ 96.253047][ T8078] FAULT_INJECTION: forcing a failure. [ 96.253047][ T8078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.253070][ T8078] CPU: 0 UID: 0 PID: 8078 Comm: syz.7.648 Not tainted syzkaller #0 PREEMPT [ 96.253080][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 96.253085][ T8078] Call trace: [ 96.253088][ T8078] show_stack+0x2c/0x3c (C) [ 96.253108][ T8078] __dump_stack+0x30/0x40 [ 96.253118][ T8078] dump_stack_lvl+0xd8/0x12c [ 96.253128][ T8078] dump_stack+0x1c/0x28 [ 96.253138][ T8078] should_fail_ex+0x418/0x58c [ 96.253146][ T8078] should_fail+0x14/0x24 [ 96.253153][ T8078] should_fail_usercopy+0x20/0x30 [ 96.253160][ T8078] _inline_copy_from_user+0x3c/0x174 [ 96.253170][ T8078] __sys_bpf+0x1b4/0x82c [ 96.253179][ T8078] __arm64_sys_bpf+0xd0/0xec [ 96.253186][ T8078] invoke_syscall+0x98/0x244 [ 96.253197][ T8078] el0_svc_common+0xec/0x23c [ 96.253207][ T8078] do_el0_svc+0x4c/0x5c [ 96.253219][ T8078] el0_svc+0x60/0x1d8 [ 96.253228][ T8078] el0t_64_sync_handler+0x44/0x104 [ 96.253236][ T8078] el0t_64_sync+0x198/0x19c [ 96.366163][ T8093] netlink: 12 bytes leftover after parsing attributes in process `syz.7.650'. [ 96.401228][ T8100] set_capacity_and_notify: 9 callbacks suppressed [ 96.401242][ T8100] loop7: detected capacity change from 0 to 1024 [ 96.428019][ T8100] EXT4-fs mount: 21 callbacks suppressed [ 96.428075][ T8100] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.507410][ T8115] loop0: detected capacity change from 0 to 512 [ 96.510287][ T8115] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 96.534281][ T8115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.640681][ T8128] loop9: detected capacity change from 0 to 512 [ 96.909234][ T8128] EXT4-fs error (device loop9) in ext4_process_orphan:346: Corrupt filesystem [ 96.909257][ T8128] loop9: lost filesystem error report for type 5 error -117 [ 96.910346][ T8128] EXT4-fs (loop9): Remounting filesystem read-only [ 96.910831][ T8128] EXT4-fs (loop9): 2 truncates cleaned up [ 96.911380][ T8128] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.914256][ T8128] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 97.278687][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.280988][ T6558] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.390288][ T6914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.418859][ T58] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.427360][ T4725] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.431560][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.432204][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.437015][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.440429][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.451406][ T8176] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.523749][ T4725] Bluetooth: hci2: command tx timeout [ 97.799870][ T58] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.868406][ T8171] rxe_eth0 speed is unknown, defaulting to 1000 [ 97.898590][ T58] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.939321][ T8209] loop7: detected capacity change from 0 to 1024 [ 97.963866][ T8209] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.994176][ T58] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.159771][ T58] bridge_slave_1: left allmulticast mode [ 98.159793][ T58] bridge_slave_1: left promiscuous mode [ 98.159889][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.161988][ T58] bridge_slave_0: left allmulticast mode [ 98.162002][ T58] bridge_slave_0: left promiscuous mode [ 98.162064][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.298301][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.325083][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.340740][ T58] bond0 (unregistering): Released all slaves [ 98.368662][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.368745][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.368800][ T8171] bridge_slave_0: entered allmulticast mode [ 98.369205][ T8171] bridge_slave_0: entered promiscuous mode [ 98.375705][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.375762][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.375820][ T8171] bridge_slave_1: entered allmulticast mode [ 98.376257][ T8171] bridge_slave_1: entered promiscuous mode [ 98.395568][ T5472] netdevsim netdevsim9 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.395683][ T4981] netdevsim netdevsim9 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.395701][ T4981] netdevsim netdevsim9 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.395716][ T4981] netdevsim netdevsim9 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.423776][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.424747][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.430847][ T8171] team0: Port device team_slave_0 added [ 98.431589][ T8171] team0: Port device team_slave_1 added [ 98.446393][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.446407][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.446420][ T8171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.446933][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.446939][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.446952][ T8171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.531651][ T8171] hsr_slave_0: entered promiscuous mode [ 98.531956][ T8171] hsr_slave_1: entered promiscuous mode [ 98.542841][ T8171] debugfs: 'hsr0' already exists in 'hsr' [ 98.542861][ T8171] Cannot create hsr debugfs directory [ 98.746575][ T8274] loop1: detected capacity change from 0 to 1024 [ 98.775621][ T7858] netdevsim netdevsim2 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.787036][ T8274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.830284][ T58] hsr_slave_0: left promiscuous mode [ 98.830558][ T58] hsr_slave_1: left promiscuous mode [ 98.830827][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.830838][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.831139][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.831148][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.859144][ T58] veth1_macvtap: left promiscuous mode [ 98.859177][ T58] veth0_macvtap: left promiscuous mode [ 98.859232][ T58] veth1_vlan: left promiscuous mode [ 98.859280][ T58] veth0_vlan: left promiscuous mode [ 98.895489][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.049553][ T58] team0 (unregistering): Port device team_slave_1 removed [ 99.084894][ T58] team0 (unregistering): Port device team_slave_0 removed [ 99.254202][ T8308] loop0: detected capacity change from 0 to 1024 [ 99.260240][ T8308] EXT4-fs: Ignoring removed bh option [ 99.284498][ T8308] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.309971][ T8308] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: comm syz.0.668: lblock 0 mapped to illegal pblock 0 (length 6) [ 99.326438][ T8308] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 3: comm syz.0.668: lblock 3 mapped to illegal pblock 3 (length 3) [ 99.328535][ T8308] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 99.328562][ T8308] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.328562][ T8308] [ 99.359810][ T5472] EXT4-fs error (device loop0): ext4_map_blocks:832: inode #15: block 8: comm kworker/u8:13: lblock 8 mapped to illegal pblock 8 (length 8) [ 99.360749][ T5472] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 99.360773][ T5472] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.360773][ T5472] [ 99.372420][ T6914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.525528][ T4725] Bluetooth: hci4: command tx timeout [ 99.736786][ T4725] Bluetooth: hci2: command tx timeout [ 99.826278][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.867635][ T8343] loop1: detected capacity change from 0 to 1024 [ 99.888390][ T8343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.343842][ T8400] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 100.343869][ T8400] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0002 l0 [ 100.394179][ T8409] loop7: detected capacity change from 0 to 2048 [ 100.415587][ T8409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.763080][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.797698][ T8429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.678'. [ 100.837555][ T8435] loop1: detected capacity change from 0 to 2048 [ 100.871920][ T8435] loop1: p1 p2 p3 p4 [ 100.871920][ T8435] p1: [ 100.872012][ T8435] loop1: p1 size 67110656 extends beyond EOD, truncated [ 100.875582][ T8435] loop1: p3 size 134217728 extends beyond EOD, truncated [ 100.876076][ T8435] loop1: p4 size 4278190080 extends beyond EOD, truncated [ 100.876718][ T8435] loop1: p5 size 67110656 extends beyond EOD, truncated [ 100.877117][ T8435] loop1: p6 size 134217728 extends beyond EOD, truncated [ 101.234436][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.615862][ T4725] Bluetooth: hci4: command tx timeout [ 101.760759][ T4725] Bluetooth: hci2: command tx timeout [ 102.144745][ T8549] loop7: detected capacity change from 0 to 1024 [ 102.157130][ T8549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.014105][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.126608][ T8615] loop1: detected capacity change from 0 to 1024 [ 103.139597][ T8604] FAULT_INJECTION: forcing a failure. [ 103.139597][ T8604] name failslab, interval 1, probability 0, space 0, times 0 [ 103.139618][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: syz.7.684 Not tainted syzkaller #0 PREEMPT [ 103.139629][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 103.139635][ T8604] Call trace: [ 103.139638][ T8604] show_stack+0x2c/0x3c (C) [ 103.139660][ T8604] __dump_stack+0x30/0x40 [ 103.139679][ T8604] dump_stack_lvl+0xd8/0x12c [ 103.139691][ T8604] dump_stack+0x1c/0x28 [ 103.139702][ T8604] should_fail_ex+0x418/0x58c [ 103.139713][ T8604] should_failslab+0xc4/0x120 [ 103.139722][ T8604] __kmalloc_cache_noprof+0x94/0x5fc [ 103.139732][ T8604] sw_sync_debugfs_open+0x160/0x390 [ 103.139745][ T8604] open_proxy_open+0x200/0x254 [ 103.139755][ T8604] do_dentry_open+0x5c4/0xfbc [ 103.139767][ T8604] vfs_open+0x44/0x2dc [ 103.139782][ T8604] path_openat+0x1084/0x18f0 [ 103.139794][ T8604] do_file_open+0x1c8/0x2e8 [ 103.139804][ T8604] do_sys_openat2+0x114/0x1e8 [ 103.139816][ T8604] do_sys_open+0xb0/0xe0 [ 103.139827][ T8604] __arm64_sys_openat+0xa8/0xc4 [ 103.139839][ T8604] invoke_syscall+0x98/0x244 [ 103.139852][ T8604] el0_svc_common+0xec/0x23c [ 103.139864][ T8604] do_el0_svc+0x4c/0x5c [ 103.139876][ T8604] el0_svc+0x60/0x1d8 [ 103.139885][ T8604] el0t_64_sync_handler+0x44/0x104 [ 103.139894][ T8604] el0t_64_sync+0x198/0x19c [ 103.160695][ T8615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.209326][ T8619] loop7: detected capacity change from 0 to 512 [ 103.221454][ T8619] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 103.243930][ T8619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.689781][ T4725] Bluetooth: hci4: command tx timeout [ 103.985781][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.050734][ T8661] FAULT_INJECTION: forcing a failure. [ 104.050734][ T8661] name failslab, interval 1, probability 0, space 0, times 0 [ 104.050757][ T8661] CPU: 0 UID: 0 PID: 8661 Comm: syz.0.689 Not tainted syzkaller #0 PREEMPT [ 104.050769][ T8661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 104.050775][ T8661] Call trace: [ 104.050778][ T8661] show_stack+0x2c/0x3c (C) [ 104.050799][ T8661] __dump_stack+0x30/0x40 [ 104.050810][ T8661] dump_stack_lvl+0xd8/0x12c [ 104.050820][ T8661] dump_stack+0x1c/0x28 [ 104.050829][ T8661] should_fail_ex+0x418/0x58c [ 104.050838][ T8661] should_failslab+0xc4/0x120 [ 104.050846][ T8661] __kmalloc_noprof+0x108/0x6c8 [ 104.050854][ T8661] tomoyo_realpath_from_path+0xbc/0x4dc [ 104.050865][ T8661] tomoyo_mount_permission+0x3b4/0x7e4 [ 104.050875][ T8661] tomoyo_sb_mount+0x48/0x60 [ 104.050885][ T8661] security_sb_mount+0xfc/0x308 [ 104.050894][ T8661] path_mount+0xb8/0xa88 [ 104.050903][ T8661] do_mount+0xe8/0x148 [ 104.050912][ T8661] __arm64_sys_mount+0x33c/0x388 [ 104.050922][ T8661] invoke_syscall+0x98/0x244 [ 104.050933][ T8661] el0_svc_common+0xec/0x23c [ 104.050942][ T8661] do_el0_svc+0x4c/0x5c [ 104.050952][ T8661] el0_svc+0x60/0x1d8 [ 104.050961][ T8661] el0t_64_sync_handler+0x44/0x104 [ 104.050968][ T8661] el0t_64_sync+0x198/0x19c [ 104.050978][ T8661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 104.075494][ T6489] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.382835][ T7858] netdevsim netdevsim2 eth12 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.763141][ T8171] netdevsim netdevsim4 eth19 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.858059][ T8171] netdevsim netdevsim4 eth18 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.896349][ T8691] loop1: detected capacity change from 0 to 512 [ 104.903222][ T8691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.916805][ T8691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.958036][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 104.958059][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 105.003689][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 105.003711][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.0.693'. [ 105.040031][ T8171] netdevsim netdevsim4 eth17 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.370097][ T8171] netdevsim netdevsim4 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.684467][ T8171] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.685682][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.686255][ T8171] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.694936][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.695545][ T8171] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.697097][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.697558][ T8171] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.706370][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.730872][ T8719] loop7: detected capacity change from 0 to 32768 [ 105.766511][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.769199][ T4725] Bluetooth: hci4: command tx timeout [ 105.783834][ T8719] Dev loop7 SGI disklabel: csum bad, label corrupted [ 105.783891][ T8719] loop7: AHDI p2 p3 [ 105.786851][ T8719] loop7: p2 size 4211081215 extends beyond EOD, truncated [ 105.830498][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.834271][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.835907][ T725] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.835937][ T725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.838111][ T4990] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.838136][ T4990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.867005][ T7858] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.872678][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.873028][ T7858] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.875505][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.877470][ T8171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.877482][ T8171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.895865][ T7858] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.900814][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.901181][ T7858] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.905496][ T7858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.960128][ T8740] FAULT_INJECTION: forcing a failure. [ 105.960128][ T8740] name failslab, interval 1, probability 0, space 0, times 0 [ 105.960149][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.1.697 Not tainted syzkaller #0 PREEMPT [ 105.960162][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 105.960168][ T8740] Call trace: [ 105.960171][ T8740] show_stack+0x2c/0x3c (C) [ 105.960191][ T8740] __dump_stack+0x30/0x40 [ 105.960204][ T8740] dump_stack_lvl+0xd8/0x12c [ 105.960216][ T8740] dump_stack+0x1c/0x28 [ 105.960228][ T8740] should_fail_ex+0x418/0x58c [ 105.960237][ T8740] should_failslab+0xc4/0x120 [ 105.960246][ T8740] __kmalloc_node_track_caller_noprof+0x108/0x6e0 [ 105.960257][ T8740] kstrdup+0x50/0x104 [ 105.960266][ T8740] kstrdup_const+0x54/0x6c [ 105.960274][ T8740] __kernfs_new_node+0xb0/0x7d8 [ 105.960286][ T8740] kernfs_new_node+0xe8/0x130 [ 105.960297][ T8740] kernfs_create_dir_ns+0x58/0x138 [ 105.960308][ T8740] sysfs_create_dir_ns+0x120/0x1f4 [ 105.960316][ T8740] kobject_add_internal+0x290/0x6f0 [ 105.960328][ T8740] kobject_add_varg+0x9c/0xe8 [ 105.960337][ T8740] kobject_init_and_add+0xec/0x13c [ 105.960347][ T8740] net_rx_queue_update_kobjects+0x1c8/0x66c [ 105.960357][ T8740] netdev_register_kobject+0x210/0x328 [ 105.960366][ T8740] register_netdevice+0xd74/0x14c0 [ 105.960375][ T8740] hsr_dev_finalize+0x600/0x9ac [ 105.960386][ T8740] hsr_newlink+0x680/0x73c [ 105.960396][ T8740] rtnl_newlink_create+0x294/0x6b8 [ 105.960408][ T8740] rtnl_newlink+0xfe4/0x138c [ 105.960418][ T8740] rtnetlink_rcv_msg+0x66c/0x9bc [ 105.960429][ T8740] netlink_rcv_skb+0x238/0x414 [ 105.960441][ T8740] rtnetlink_rcv+0x28/0x38 [ 105.960452][ T8740] netlink_unicast+0x600/0x7f8 [ 105.960464][ T8740] netlink_sendmsg+0x648/0x948 [ 105.960476][ T8740] __sock_sendmsg+0xc8/0x17c [ 105.960488][ T8740] ____sys_sendmsg+0x3d0/0x6c8 [ 105.960500][ T8740] ___sys_sendmsg+0x198/0x224 [ 105.960512][ T8740] __sys_sendmsg+0x158/0x204 [ 105.960525][ T8740] __arm64_sys_sendmsg+0x88/0x9c [ 105.960537][ T8740] invoke_syscall+0x98/0x244 [ 105.960549][ T8740] el0_svc_common+0xec/0x23c [ 105.960561][ T8740] do_el0_svc+0x4c/0x5c [ 105.960573][ T8740] el0_svc+0x60/0x1d8 [ 105.960582][ T8740] el0t_64_sync_handler+0x44/0x104 [ 105.960590][ T8740] el0t_64_sync+0x198/0x19c [ 105.960602][ T8740] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 106.001516][ T7096] udevd[7096]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 106.035824][ T7858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.081571][ T7858] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.101427][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.101457][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.101982][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.102005][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.110699][ T7858] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.110714][ T7858] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.140192][ T8765] loop1: detected capacity change from 0 to 512 [ 106.177300][ T8765] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.215240][ T8765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.241853][ T8785] loop0: detected capacity change from 0 to 1024 [ 106.325145][ T8785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.615445][ T6914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.636351][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.015244][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.032588][ T7858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.055500][ T7858] veth0_vlan: entered promiscuous mode [ 107.066953][ T7858] veth1_vlan: entered promiscuous mode [ 107.085876][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.702'. [ 107.121364][ T7858] veth0_macvtap: entered promiscuous mode [ 107.129451][ T7858] veth1_macvtap: entered promiscuous mode [ 107.131209][ T8171] veth0_vlan: entered promiscuous mode [ 107.143163][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.147553][ T7858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.159686][ T8171] veth1_vlan: entered promiscuous mode [ 107.212526][ T8835] loop1: detected capacity change from 0 to 1024 [ 107.217353][ T8171] veth0_macvtap: entered promiscuous mode [ 107.229566][ T8171] veth1_macvtap: entered promiscuous mode [ 107.233064][ T725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.233077][ T725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.239502][ T725] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.242282][ T5472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.242319][ T5472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.242337][ T5472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.261518][ T8835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.263475][ T4990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.263485][ T4990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.267103][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.276699][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.298465][ T4990] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.298574][ T4990] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.298634][ T4990] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.298702][ T4990] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.603565][ T8843] netlink: 'syz.2.620': attribute type 39 has an invalid length. [ 107.605735][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.605747][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.619726][ T8843] macvlan1: entered promiscuous mode [ 107.619847][ T8843] macvlan1: entered allmulticast mode [ 107.619855][ T8843] veth1_vlan: entered allmulticast mode [ 107.646380][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.646399][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.699519][ T8843] 9p: Bad value for 'rfdno' [ 107.800779][ T8884] loop0: detected capacity change from 0 to 1024 [ 107.803093][ T8884] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 107.824612][ T8884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.835068][ T8884] overlayfs: failed to resolve './bus': -2 [ 108.644571][ T8899] netlink: 'syz.7.712': attribute type 58 has an invalid length. [ 108.645515][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.646119][ T8896] FAULT_INJECTION: forcing a failure. [ 108.646119][ T8896] name failslab, interval 1, probability 0, space 0, times 0 [ 108.646133][ T8896] CPU: 0 UID: 0 PID: 8896 Comm: syz.4.711 Not tainted syzkaller #0 PREEMPT [ 108.646146][ T8896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 108.646152][ T8896] Call trace: [ 108.646156][ T8896] show_stack+0x2c/0x3c (C) [ 108.646177][ T8896] __dump_stack+0x30/0x40 [ 108.646188][ T8896] dump_stack_lvl+0xd8/0x12c [ 108.646198][ T8896] dump_stack+0x1c/0x28 [ 108.646208][ T8896] should_fail_ex+0x418/0x58c [ 108.646217][ T8896] should_failslab+0xc4/0x120 [ 108.646225][ T8896] __kmalloc_noprof+0x108/0x6c8 [ 108.646234][ T8896] tomoyo_encode2+0x10c/0x330 [ 108.646245][ T8896] tomoyo_encode+0x34/0x50 [ 108.646254][ T8896] tomoyo_realpath_from_path+0x488/0x4dc [ 108.646264][ T8896] tomoyo_path_number_perm+0x1f0/0x500 [ 108.646273][ T8896] tomoyo_file_ioctl+0x2c/0x3c [ 108.646284][ T8896] security_file_ioctl+0xdc/0x2b0 [ 108.646293][ T8896] __arm64_sys_ioctl+0xb0/0x1cc [ 108.646301][ T8896] invoke_syscall+0x98/0x244 [ 108.646312][ T8896] el0_svc_common+0xec/0x23c [ 108.646321][ T8896] do_el0_svc+0x4c/0x5c [ 108.646331][ T8896] el0_svc+0x60/0x1d8 [ 108.646340][ T8896] el0t_64_sync_handler+0x44/0x104 [ 108.646348][ T8896] el0t_64_sync+0x198/0x19c [ 108.646360][ T8896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.766478][ T8905] loop7: detected capacity change from 0 to 256 [ 108.938219][ T8913] loop1: detected capacity change from 0 to 2048 [ 109.050060][ T8913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.061515][ T6914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.110105][ T8934] loop0: detected capacity change from 0 to 2048 [ 109.167463][ T8939] FAULT_INJECTION: forcing a failure. [ 109.167463][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 109.167484][ T8939] CPU: 0 UID: 0 PID: 8939 Comm: syz.1.713 Not tainted syzkaller #0 PREEMPT [ 109.167495][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 109.167501][ T8939] Call trace: [ 109.167504][ T8939] show_stack+0x2c/0x3c (C) [ 109.167524][ T8939] __dump_stack+0x30/0x40 [ 109.167535][ T8939] dump_stack_lvl+0xd8/0x12c [ 109.167544][ T8939] dump_stack+0x1c/0x28 [ 109.167554][ T8939] should_fail_ex+0x418/0x58c [ 109.167562][ T8939] should_failslab+0xc4/0x120 [ 109.167570][ T8939] __kmalloc_cache_node_noprof+0x98/0x618 [ 109.167579][ T8939] __get_vm_area_node+0x188/0x32c [ 109.167588][ T8939] get_vm_area_caller+0x94/0xc8 [ 109.167597][ T8939] vmap+0xf8/0x214 [ 109.167605][ T8939] bpf_ringbuf_alloc+0x178/0x3d8 [ 109.167613][ T8939] ringbuf_map_alloc+0x1c8/0x2cc [ 109.167623][ T8939] map_create+0xa6c/0x153c [ 109.167633][ T8939] __sys_bpf+0x308/0x82c [ 109.167641][ T8939] __arm64_sys_bpf+0xd0/0xec [ 109.167648][ T8939] invoke_syscall+0x98/0x244 [ 109.167659][ T8939] el0_svc_common+0xec/0x23c [ 109.167676][ T8939] do_el0_svc+0x4c/0x5c [ 109.167686][ T8939] el0_svc+0x60/0x1d8 [ 109.167695][ T8939] el0t_64_sync_handler+0x44/0x104 [ 109.167704][ T8939] el0t_64_sync+0x198/0x19c [ 109.343340][ T8934] loop0: p1 p4 [ 109.343340][ T8934] p1: [ 109.343356][ T8934] loop0: partition table partially beyond EOD, truncated [ 109.346109][ T8934] loop0: p4 start 184549376 is beyond EOD, truncated [ 109.361565][ T8934] loop0: p6 start 184549376 is beyond EOD, truncated [ 109.462192][ T8940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.725'. [ 109.463221][ T8940] netlink: 'syz.4.725': attribute type 21 has an invalid length. [ 109.794817][ T6883] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.801214][ T8953] loop7: detected capacity change from 0 to 2048 [ 109.837490][ T8953] loop7: p1 p2 p3 p4 [ 109.837490][ T8953] p1: [ 109.837586][ T8953] loop7: p1 size 67110656 extends beyond EOD, truncated [ 109.844608][ T8953] loop7: p3 size 134217728 extends beyond EOD, truncated [ 109.850326][ T8953] loop7: p4 size 4278190080 extends beyond EOD, truncated [ 109.854684][ T8953] loop7: p5 size 67110656 extends beyond EOD, truncated [ 109.855092][ T8953] loop7: p6 size 134217728 extends beyond EOD, truncated [ 110.019563][ T8977] loop0: detected capacity change from 0 to 1024 [ 110.031605][ T8977] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 110.045483][ T8977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.054846][ T8977] overlayfs: failed to resolve './bus': -2 [ 110.093045][ T8987] loop4: detected capacity change from 0 to 1024 [ 110.120755][ T8987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.551661][ T6914] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.561864][ T8171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.036387][ T9059] netlink: 20 bytes leftover after parsing attributes in process `syz.1.749'. [ 112.102003][ T4402] 8021q: adding VLAN 0 to HW filter on device eth4 [ 112.166999][ T9077] loop4: detected capacity change from 0 to 1024 [ 112.174043][ T9077] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 112.180714][ T9067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.751'. [ 112.188748][ T9077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.191160][ T9077] overlayfs: failed to resolve './bus': -2 [ 113.249837][ T8171] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.290802][ T4402] 8021q: adding VLAN 0 to HW filter on device eth5 [ 113.377177][ T9122] ================================================================== [ 113.377193][ T9122] BUG: KASAN: slab-use-after-free in _raw_spin_lock+0x48/0x60 [ 113.377220][ T9122] Read of size 1 at addr ffff0000fcd7c9a0 by task syz.2.760/9122 [ 113.377231][ T9122] [ 113.377236][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.2.760 Not tainted syzkaller #0 PREEMPT [ 113.377247][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 113.377253][ T9122] Call trace: [ 113.377256][ T9122] show_stack+0x2c/0x3c (C) [ 113.377275][ T9122] __dump_stack+0x30/0x40 [ 113.377289][ T9122] dump_stack_lvl+0xd8/0x12c [ 113.377300][ T9122] print_address_description+0xb0/0x238 [ 113.377310][ T9122] print_report+0x68/0x84 [ 113.377318][ T9122] kasan_report+0x8c/0xc4 [ 113.377329][ T9122] __kasan_check_byte+0x3c/0x54 [ 113.377339][ T9122] lock_acquire+0xa4/0x320 [ 113.377350][ T9122] _raw_spin_lock+0x48/0x60 [ 113.377358][ T9122] lockref_get+0x20/0x78 [ 113.377371][ T9122] __simple_recursive_removal+0x40/0x430 [ 113.377384][ T9122] simple_recursive_removal+0x2c/0x3c [ 113.377394][ T9122] debugfs_remove+0x60/0x88 [ 113.377404][ T9122] ieee80211_sta_debugfs_remove+0x44/0x6c [ 113.377418][ T9122] __sta_info_destroy_part2+0x2fc/0x3e0 [ 113.377432][ T9122] __sta_info_flush+0x4c0/0x5f0 [ 113.377444][ T9122] ieee80211_ibss_disconnect+0x250/0x6c8 [ 113.377457][ T9122] ieee80211_ibss_leave+0x4c/0x114 [ 113.377468][ T9122] ieee80211_leave_ibss+0x20/0x30 [ 113.377479][ T9122] cfg80211_leave_ibss+0x1c8/0x454 [ 113.377489][ T9122] cfg80211_leave_locked+0x11c/0x338 [ 113.377501][ T9122] cfg80211_change_iface+0x2a4/0x990 [ 113.377513][ T9122] nl80211_set_interface+0x458/0x6b4 [ 113.377522][ T9122] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 113.377533][ T9122] genl_rcv_msg+0x43c/0x620 [ 113.377542][ T9122] netlink_rcv_skb+0x238/0x414 [ 113.377554][ T9122] genl_rcv+0x38/0x50 [ 113.377562][ T9122] netlink_unicast+0x600/0x7f8 [ 113.377573][ T9122] netlink_sendmsg+0x648/0x948 [ 113.377585][ T9122] __sock_sendmsg+0xc8/0x17c [ 113.377598][ T9122] ____sys_sendmsg+0x3d0/0x6c8 [ 113.377611][ T9122] ___sys_sendmsg+0x198/0x224 [ 113.377623][ T9122] __sys_sendmsg+0x158/0x204 [ 113.377634][ T9122] __arm64_sys_sendmsg+0x88/0x9c [ 113.377647][ T9122] invoke_syscall+0x98/0x244 [ 113.377659][ T9122] el0_svc_common+0xec/0x23c [ 113.377671][ T9122] do_el0_svc+0x4c/0x5c [ 113.377688][ T9122] el0_svc+0x60/0x1d8 [ 113.377697][ T9122] el0t_64_sync_handler+0x44/0x104 [ 113.377706][ T9122] el0t_64_sync+0x198/0x19c [ 113.377715][ T9122] [ 113.377717][ T9122] Allocated by task 4345: [ 113.377722][ T9122] kasan_save_track+0x40/0x78 [ 113.377731][ T9122] kasan_save_alloc_info+0x40/0x50 [ 113.377740][ T9122] __kasan_slab_alloc+0x70/0x88 [ 113.377748][ T9122] kmem_cache_alloc_lru_noprof+0x26c/0x5d8 [ 113.377756][ T9122] __d_alloc+0x50/0x600 [ 113.377764][ T9122] d_alloc_parallel+0xc4/0xf2c [ 113.377772][ T9122] lookup_open+0x234/0x1180 [ 113.377781][ T9122] path_openat+0x50c/0x18f0 [ 113.377789][ T9122] do_file_open+0x1c8/0x2e8 [ 113.377798][ T9122] do_sys_openat2+0x114/0x1e8 [ 113.377809][ T9122] do_sys_open+0xb0/0xe0 [ 113.377818][ T9122] __arm64_sys_openat+0xa8/0xc4 [ 113.377829][ T9122] invoke_syscall+0x98/0x244 [ 113.377839][ T9122] el0_svc_common+0xec/0x23c [ 113.377848][ T9122] do_el0_svc+0x4c/0x5c [ 113.377858][ T9122] el0_svc+0x60/0x1d8 [ 113.377864][ T9122] el0t_64_sync_handler+0x44/0x104 [ 113.377871][ T9122] el0t_64_sync+0x198/0x19c [ 113.377877][ T9122] [ 113.377879][ T9122] Freed by task 6489: [ 113.377883][ T9122] kasan_save_track+0x40/0x78 [ 113.377890][ T9122] kasan_save_free_info+0x54/0x6c [ 113.377900][ T9122] __kasan_slab_free+0x74/0xa4 [ 113.377908][ T9122] kmem_cache_free+0x184/0x680 [ 113.377915][ T9122] __d_free+0x30/0x40 [ 113.377923][ T9122] rcu_core+0x790/0xfbc [ 113.377933][ T9122] rcu_core_si+0x10/0x1c [ 113.377940][ T9122] handle_softirqs+0x324/0xcbc [ 113.377949][ T9122] __do_softirq+0x14/0x20 [ 113.377954][ T9122] [ 113.377956][ T9122] Last potentially related work creation: [ 113.377960][ T9122] kasan_save_stack+0x40/0x6c [ 113.377967][ T9122] kasan_record_aux_stack+0xb0/0xc8 [ 113.377976][ T9122] call_rcu+0x104/0x634 [ 113.377986][ T9122] dentry_free+0x100/0x308 [ 113.377993][ T9122] dentry_kill+0x47c/0x7b0 [ 113.378002][ T9122] finish_dput+0x28/0x224 [ 113.378009][ T9122] dput+0x60/0x64 [ 113.378015][ T9122] end_dirop+0x80/0x94 [ 113.378022][ T9122] filename_unlinkat+0x2ec/0x45c [ 113.378032][ T9122] __arm64_sys_unlinkat+0xe0/0x108 [ 113.378041][ T9122] invoke_syscall+0x98/0x244 [ 113.378051][ T9122] el0_svc_common+0xec/0x23c [ 113.378061][ T9122] do_el0_svc+0x4c/0x5c [ 113.378070][ T9122] el0_svc+0x60/0x1d8 [ 113.378076][ T9122] el0t_64_sync_handler+0x44/0x104 [ 113.378083][ T9122] el0t_64_sync+0x198/0x19c [ 113.378089][ T9122] [ 113.378091][ T9122] The buggy address belongs to the object at ffff0000fcd7c8d0 [ 113.378091][ T9122] which belongs to the cache dentry of size 312 [ 113.378098][ T9122] The buggy address is located 208 bytes inside of [ 113.378098][ T9122] freed 312-byte region [ffff0000fcd7c8d0, ffff0000fcd7ca08) [ 113.378106][ T9122] [ 113.378108][ T9122] The buggy address belongs to the physical page: [ 113.378113][ T9122] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff0000fcd7c000 pfn:0x13cd7c [ 113.378121][ T9122] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.378127][ T9122] memcg:ffff0000fcd7ded9 [ 113.378131][ T9122] flags: 0x5ffc00000000240(workingset|head|node=0|zone=2|lastcpupid=0x7ff) [ 113.378140][ T9122] page_type: f5(slab) [ 113.378148][ T9122] raw: 05ffc00000000240 ffff0000c186fa00 fffffdffc3e0b590 fffffdffc36b5f10 [ 113.378156][ T9122] raw: ffff0000fcd7c000 000000020015000b 00000000f5000000 ffff0000fcd7ded9 [ 113.378163][ T9122] head: 05ffc00000000240 ffff0000c186fa00 fffffdffc3e0b590 fffffdffc36b5f10 [ 113.378170][ T9122] head: ffff0000fcd7c000 000000020015000b 00000000f5000000 ffff0000fcd7ded9 [ 113.378177][ T9122] head: 05ffc00000000001 fffffdffc3f35f01 00000000ffffffff 00000000ffffffff [ 113.378184][ T9122] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 113.378189][ T9122] page dumped because: kasan: bad access detected [ 113.378192][ T9122] [ 113.378194][ T9122] Memory state around the buggy address: [ 113.378198][ T9122] ffff0000fcd7c880: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 113.378204][ T9122] ffff0000fcd7c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.378209][ T9122] >ffff0000fcd7c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.378213][ T9122] ^ [ 113.378218][ T9122] ffff0000fcd7ca00: fb fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 [ 113.378223][ T9122] ffff0000fcd7ca80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.378227][ T9122] ================================================================== [ 113.378253][ T9122] Disabling lock debugging due to kernel taint [ 113.519274][ T9122] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000d8 [ 113.519291][ T9122] Mem abort info: [ 113.519296][ T9122] ESR = 0x0000000096000006 [ 113.519303][ T9122] EC = 0x25: DABT (current EL), IL = 32 bits [ 113.519312][ T9122] SET = 0, FnV = 0 [ 113.519317][ T9122] EA = 0, S1PTW = 0 [ 113.519321][ T9122] FSC = 0x06: level 2 translation fault [ 113.519326][ T9122] Data abort info: [ 113.519328][ T9122] ISV = 0, ISS = 0x00000006, ISS2 = 0x00000000 [ 113.519334][ T9122] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 113.519339][ T9122] GCS = 0, Overlay = 0, DirtyBit = 0 [ 113.519344][ T9122] user pgtable: 4k pages, 48-bit VAs, pgdp=00000001041b9000 [ 113.519351][ T9122] [00000000000000d8] pgd=080000013246d403, p4d=080000013246d403, pud=0800000124709403, pmd=0000000000000000 [ 113.519369][ T9122] Internal error: Oops: 0000000096000006 [#1] SMP [ 113.536057][ T9122] Modules linked in: [ 113.536831][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.2.760 Tainted: G B syzkaller #0 PREEMPT [ 113.539055][ T9122] Tainted: [B]=BAD_PAGE [ 113.539891][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 113.541891][ T9122] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 113.543461][ T9122] pc : down_write_nested+0xe8/0x2a8 [ 113.544504][ T9122] lr : down_write_nested+0xd8/0x2a8 [ 113.545562][ T9122] sp : ffff800095696ce0 [ 113.546393][ T9122] x29: ffff800095696d40 x28: ffff0000d1cec000 x27: dfff800000000000 [ 113.547984][ T9122] x26: 1fffe0001a39d82f x25: ffff0000d1cec178 x24: ffff800095696ce0 [ 113.549448][ T9122] x23: dfff800000000000 x22: ffff700012ad2d9c x21: 0000000000000002 [ 113.551026][ T9122] x20: 67b1800080d4c1ac x19: 00000000000000d8 x18: 1fffe000349fbc28 [ 113.552631][ T9122] x17: 0000000000000003 x16: ffff8000897a7000 x15: ffff8000898576c0 [ 113.554146][ T9122] x14: ffff0001a4fde14c x13: 0000000000000001 x12: 0000000000000000 [ 113.555696][ T9122] x11: 0000000000000000 x10: 0000000000000001 x9 : 0000000000000000 [ 113.557183][ T9122] x8 : 0000000000000000 x7 : 0000000000000000 x6 : ffff800080d4c1ac [ 113.558764][ T9122] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800080452254 [ 113.560361][ T9122] x2 : 0000000000000001 x1 : 0000000000000008 x0 : 0000000000000001 [ 113.561945][ T9122] Call trace: [ 113.562634][ T9122] down_write_nested+0xe8/0x2a8 (P) [ 113.563703][ T9122] __simple_recursive_removal+0x7c/0x430 [ 113.564830][ T9122] simple_recursive_removal+0x2c/0x3c [ 113.565892][ T9122] debugfs_remove+0x60/0x88 [ 113.566776][ T9122] ieee80211_sta_debugfs_remove+0x44/0x6c [ 113.567941][ T9122] __sta_info_destroy_part2+0x2fc/0x3e0 [ 113.569079][ T9122] __sta_info_flush+0x4c0/0x5f0 [ 113.570086][ T9122] ieee80211_ibss_disconnect+0x250/0x6c8 [ 113.571263][ T9122] ieee80211_ibss_leave+0x4c/0x114 [ 113.572348][ T9122] ieee80211_leave_ibss+0x20/0x30 [ 113.573330][ T9122] cfg80211_leave_ibss+0x1c8/0x454 [ 113.574392][ T9122] cfg80211_leave_locked+0x11c/0x338 [ 113.575441][ T9122] cfg80211_change_iface+0x2a4/0x990 [ 113.576505][ T9122] nl80211_set_interface+0x458/0x6b4 [ 113.577577][ T9122] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 113.578621][ T9122] genl_rcv_msg+0x43c/0x620 [ 113.579476][ T9122] netlink_rcv_skb+0x238/0x414 [ 113.580390][ T9122] genl_rcv+0x38/0x50 [ 113.581190][ T9122] netlink_unicast+0x600/0x7f8 [ 113.582153][ T9122] netlink_sendmsg+0x648/0x948 [ 113.583111][ T9122] __sock_sendmsg+0xc8/0x17c [ 113.584004][ T9122] ____sys_sendmsg+0x3d0/0x6c8 [ 113.584936][ T9122] ___sys_sendmsg+0x198/0x224 [ 113.585824][ T9122] __sys_sendmsg+0x158/0x204 [ 113.586748][ T9122] __arm64_sys_sendmsg+0x88/0x9c [ 113.587768][ T9122] invoke_syscall+0x98/0x244 [ 113.588729][ T9122] el0_svc_common+0xec/0x23c [ 113.589715][ T9122] do_el0_svc+0x4c/0x5c [ 113.590531][ T9122] el0_svc+0x60/0x1d8 [ 113.591345][ T9122] el0t_64_sync_handler+0x44/0x104 [ 113.592410][ T9122] el0t_64_sync+0x198/0x19c [ 113.593341][ T9122] Code: f94013e8 d503201f aa0803e9 5280002a (c8e97e6a) [ 113.594758][ T9122] ---[ end trace 0000000000000000 ]--- [ 113.970111][ T9122] Kernel panic - not syncing: Oops: Fatal exception [ 113.971334][ T9122] SMP: stopping secondary CPUs [ 113.972329][ T9122] Kernel Offset: disabled [ 113.973165][ T9122] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 113.974554][ T9122] Memory Limit: none [ 114.339968][ T9122] Rebooting in 86400 seconds..