last executing test programs: 1.290230839s ago: executing program 0 (id=1): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x640005a6) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1c, 0x4, 0x4, 0x9}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r3, r3, 0x32, 0x0, @val=@iter={&(0x7f00000001c0)=@map_fd=r3, 0x10}}, 0x20) sendmsg$AUDIT_SET(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x800, 0x70bd27, 0x25dfdbfd, {0x24, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x9, 0x2, 0x9, 0x0, 0xffffffe5, 0x3}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) 1.238864107s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = semget$private(0x0, 0x5, 0x0) semop(r2, &(0x7f0000000140)=[{0x0, 0xffff}], 0x1) write(r1, &(0x7f0000000180)='7', 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x8800) 1.188917437s ago: executing program 0 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x17, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000500042018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f6ffffffb702000008000000b70300000500010085000000cb00000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0xfe7, &(0x7f0000000700)=""/4071, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000001}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x5c82b, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x5c82b, 0x4000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c800}, 0x40) 1.087031224s ago: executing program 0 (id=7): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000140)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x553, &(0x7f0000000400)="$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") (async, rerun: 64) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x0, 0x82) (async, rerun: 64) r2 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x8168, 0x7, 0x4, 0x80000000, {{0x27, 0x4, 0x1, 0xc, 0x9c, 0x64, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @lsrr={0x83, 0x1b, 0xd8, [@rand_addr=0x64010100, @broadcast, @remote, @multicast2, @loopback, @remote]}, @timestamp={0x44, 0x18, 0xcb, 0x0, 0x1, [0x9, 0x80000001, 0xb, 0x8, 0x9]}, @end, @timestamp={0x44, 0x8, 0x82, 0x0, 0x4, [0x0]}, @timestamp_prespec={0x44, 0x24, 0x7b, 0x3, 0xd, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x8}, {@local, 0x7}, {@private=0xa010102, 0x3}]}, @timestamp_addr={0x44, 0x24, 0xc0, 0x1, 0x3, [{@remote, 0x9}, {@broadcast, 0x1}, {@remote, 0x10001}, {@loopback, 0x5}]}]}}}}}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000300)={0x1, 0x1, 0x0, r3, 0x4f}, 0xc) syz_mount_image$ext4(&(0x7f00000030c0)='ext4\x00', &(0x7f0000003300)='./file0\x00', 0x0, &(0x7f0000003340), 0x3, 0x490, &(0x7f0000003380)="$eJzs3UFrXNUeAPD/nSR9aZu+pO+9RV/BWmwlLdqZpLFtcFEriK4Kat3HmExCyCQTMpO2CUVS/ACCiAquXLkR/ACC9COIUNC9iCiirS5cqCMzudPWOJMETHNx5veD03vOPTPzP6eTOXPPPZe5AXSt4xFxKSJ6IuJ0RAym+3NpivWNVH/c3Ts3puopiVrtyg9JJOm+5msl6fZg+rT+iHj5hYjXkr/GrayuzU+WSsXltFyoLiwVKqtrZ+YWJmeLs8XFsbHR8+MXxs+Nj+xaXy8+9807b374/MVPn7z21cR3p16vN2sgrXuwH7tpo+t9jf+Lpt6IWH4YwTLQk/anL+uGAACwI/Vj/P9ExGON4//B6GkczQEAAACdpPbMQPyaRNQAAACAjpVrXAOb5PLptQADkcvl8xvX8P4vDuRK5Ur1iZnyyuL0xrWyQ9GXm5krFUfSa4WHoi+pl0cb+fvls5vKYxFxOCLeHtzfKOenyqXprE9+AAAAQJc4uGn+//PgxvwfAAAA6DBDWTcAAAAAeOjM/wEAAKDzmf8DAABAR3vx8uV6qjXvfz19dXVlvnz1zHSxMp9fWJnKT5WXl/Kz5fJs4zf7FrZ7vVK5vPRULK5cL1SLlWqhsro2sVBeWaxONO7rPVF0n2gAAADYe4cfvfVlEhHrT+9vpLp9aZ25OnS2XNYNADLTk3UDgMz0Zt0AIDPm+ECyTX1/u4rPdr8tAADAwzH8f+v/0K2s/0P3sv4P3cv6P3Qvc3zA+j8AAHS+gUZKcvl0LXAgcrl8PuJQ47YAfcnMXKk4EhH/jogvBvv+VS+PZt1oAAAAAAAAAAAAAAAAAAAAAAAAAPiHqdWSqAEAAAAdLSL3bZLe/2t48OTA5vMD+5JfBhvbiLj2/pV3r09Wq8uj9f0/3ttffS/dfzaLMxgAAADAZs15enMeDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC76e6dG1PNtJdxv382IoZaxe+N/sa2P/oi4sBPSfQ+8LwkInp2If76zYg40ip+Um9WDKWt2Bw/FxH7M45/cBfiQze7VR9/LrX6/OXieGPb+vPXm6a/q/34l7s3/vW0Gf8O7TDG0dsfF9rGvxlxtLf1+NOMn7SJf2KH8V99ZW2tXV3tg4jhlt8/yZ9iFaoLS4XK6tqZuYXJ2eJscXFsbPT8+IXxc+MjhZm5UjH9t2WMtx755Pet+n+gTfyhbfp/cof9/+329Tv/3SL+qROt3/8jW8Sv/008nn4P1OuHm/n1jfyDjn30+bGt+j/dpv/bvf+ndtj/0y+98fUOHwoA7IHK6tr8ZKlUXJaRkZG5l8l6ZAIAAHbb/YP+rFsCAAAAAAAAAAAAAAAAAAAA3Wsvfk4s6z4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzEHwEAAP//0wfUAw==") (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000003840)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x40086610, &(0x7f0000003880)={@id={0x2, 0x0, @c}}) (async) ioctl$FITRIM(r1, 0xc0185879, &(0x7f00000009c0)={0x8, 0x40000cca8, 0x10003}) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x0, 0x89b8, 0x40, 0x1, 0xe5}, &(0x7f0000000ac0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6131, 0x2, 0x1, 0x100}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xece1, 0x10, 0x1, 0x7e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8f03, 0x1, 0x3, 0x208}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8769, 0x10000, 0x3, 0x1b5}}], 0x4, &(0x7f0000001d40)={0x2e, 0x2a, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, 0x0, '\x00', {0x1, 0x824, 0x0, &(0x7f0000000d40)=@buf_max_buf="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"}}, &(0x7f0000001dc0)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='./file1\x00', 0x101042, 0xc0) pwrite64(r6, &(0x7f0000001e40)='E', 0x1, 0x4fed3) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x180) (async) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f00000032c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000003100)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r7, &(0x7f0000003140)='7', 0x1) (async) unshare(0x2a020400) (async) r8 = syz_io_uring_setup(0x15aa, &(0x7f0000001e80)={0x0, 0x5961, 0x10000, 0x3, 0x4e}, &(0x7f0000001f00)=0x0, &(0x7f0000001f40)=0x0, &(0x7f0000001f80)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003180)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f00000031c0)='./sys\x00', &(0x7f0000003200)='sysfs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000003240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r12, &(0x7f0000003280)="6d64308cd8", 0x5) (async) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000001fc0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, {0x0, r13}}) (async) syz_ublk_process_io(r5, 0x2, 0x6, &(0x7f0000003040)=@ublk_io_fetch_sqe={0x2e, 0x18, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x496ae371f79d77f8, {0x2}, 0x0, r13, '\x00', {0x3, 0x5c6, 0x0, &(0x7f0000002040)=@buf_4k="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"}}, 0x1) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x10) 988.123305ms ago: executing program 1 (id=8): r0 = socket(0x2000000015, 0x80005, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r2, 0x890c, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x80000000}, 0x19a) write(r1, &(0x7f0000000040)="240000001a005f0400f9f407000904018000200000000001000000000800030040000000", 0x24) accept$inet6(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon0/bind\x00', 0x1, 0x0) write$cgroup_int(r3, &(0x7f00000001c0)=0x70, 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 903.851388ms ago: executing program 2 (id=3): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_ublk_setup_io_uring(0x48d0, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0, 0xc0012102, 0x0, {0x3}}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x3, 0x1}, &(0x7f00000000c0)=0x8) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000180)='./bus\x00', 0x1001a, &(0x7f0000000440)={[{@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nojournal_checksum}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@jqfmt_vfsv1}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0x2, 0x439, &(0x7f0000000980)="$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") r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000e80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) r7 = socket$kcm(0x2, 0x3, 0x2) close(r7) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f00000012c0)={&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r7, &(0x7f0000001380)={&(0x7f00000013c0)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000001400)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001440), 0x6000}], 0x4, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) chdir(&(0x7f0000000dc0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000e00)='./bus\x00', 0x40, 0x60) r9 = getpid() sched_setscheduler(r9, 0x1, &(0x7f00000001c0)=0x7) sched_setscheduler(r9, 0x7, &(0x7f0000000240)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000e40)='memory.events\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x3f00000000000000) 895.927179ms ago: executing program 4 (id=5): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2002, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2002, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1}) (async) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) r1 = dup(0xffffffffffffffff) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) gettid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1001e, &(0x7f0000000180)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@test_dummy_encryption_v1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nobh}, {@data_err_ignore}, {@noinit_itable}]}, 0x2, 0x445, &(0x7f0000001500)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000001980)='./file1\x00', 0x42, 0x14) write$FUSE_WRITE(r2, &(0x7f00000019c0)={0x18}, 0xfffffdef) ioctl$FIBMAP(r2, 0x1, &(0x7f0000001a00)=0x101) (async) ioctl$FIBMAP(r2, 0x1, &(0x7f0000001a00)=0x101) timer_settime(0x0, 0x0, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mknodat$md(0xffffffffffffff9c, &(0x7f00000002c0)='./md0\x00', 0x6180, 0x0) symlinkat(&(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') (async) symlinkat(&(0x7f0000000300)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000480), 0x0, &(0x7f00000004c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000500)='./bus\x00') openat$md_node(0xffffffffffffff9c, &(0x7f0000000540)='./md0\x00', 0x2, 0x0) 824.921664ms ago: executing program 3 (id=4): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}}, 0x0) syz_emit_ethernet(0x136, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x128, 0x67, 0x0, 0x44, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff, @basic={0x0, 0x0, 0x18, [@ipv4=@udp={{0x6, 0x4, 0x1, 0x13, 0x106, 0x67, 0x0, 0x6f, 0x11, 0x0, @private=0xa010101, @remote, {[@ra={0x94, 0x4, 0x1}]}}, {0x4e24, 0x4e20, 0xee, 0x0, @opaque="3b07799a4aaa3781128bf1e6d7791fe8ca71fab88597e5cf52cef84c69f18c11934e1799bc7e34268a4e782c87d531fecd66249b24a1c7db7375fb7f83eefa9bdcda6bd64c7759a241738bd07f07b07294da77ae4d1e4ad6ac93a39cf757bae32e35b195079836ebd5b94bdca516e15cb075e2fe9535c10875009eae33216c1c0404c4aa1c173988baa1a2fe4e8c340d7c3e2455f73c5d610aa83e04184308b7e74c2eda477050e571b318ba17c107bd45758511fbf62cf79b964ee04ae0231b96192f5a8156a761591a2c1800240bed6e721a11b17a5c40a93d09f09b2ab3b9af3c28313740"}}]}}}}}}, 0x0) 679.012712ms ago: executing program 3 (id=9): mount(&(0x7f0000000000)=@md={'/dev/md', @num=0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x20405d, &(0x7f00000000c0)='\x00') (async) mount(&(0x7f0000000000)=@md={'/dev/md', @num=0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='cgroup2\x00', 0x20405d, &(0x7f00000000c0)='\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) sendmsg$inet6(r2, &(0x7f0000000700)={&(0x7f0000000180)={0xa, 0x4e23, 0x200, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000440)=[{&(0x7f00000001c0)="a73662c63f55252e885f31481ae7adb36e1de697154220f8c7114d7dce51e0d1341eb029456c9504bf041e0001d19322c553a467ce110745208845e3eb3994c66d", 0x41}, {&(0x7f0000000240)="e2f41329d5e51d7e93e6ed932193921632d1a7507ec9741d401af24dccfa2e6aa71695f1b5b34d712a7154f225bd8d2db349993a11f3c3c595abad28e7f7bb762cebf8e20fc525f4d366bbfd7a34b973d1f033fb7221c4a1eaefc6127ea2d376e618ab7764af39794bb9faca666af08dc783735cf2b97c", 0x77}, {&(0x7f00000002c0)="7d9c227722ac65965afb1b150e9313b4089cb079346e25b188bed8baca", 0x1d}, {&(0x7f0000000300)="d6bda4343c8e609afdd72c80545218ca376c8bb10b7f389f97b0e733f91911cd0af65c3ee9c2fda61b25ca5c69eed2bf9252887a1305324a91e0a625050857ac4ee3ff4ee29f2eee80e2e060e9dd3e7aab97931d1add851090ae7d4fd5751a94eeee4e349d0649abee87b9181aad8e8260217f3eab07e9b5e0efa1f064ab65d82a82cbb88a0106a713fb968e4af1575b92346586d23ea2f4d43b735b1f8d805bb6fcff0ebb739eb257025df1ceb84c41561af926872edcc0a47d0e63b127300cfbf4215cc165abf0b149eac025844d2cc8c491", 0xd3}, {&(0x7f0000000400)="ad0192d6ceab1e94ca8115063d9db81288253cb14abbcf", 0x17}], 0x5, &(0x7f00000004c0)=[@tclass={{0x14, 0x29, 0x43, 0x570}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x84, 0xc, '\x00', [@pad1, @hao={0xc9, 0x10, @private0}, @pad1, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0x0, [0xffffffff, 0x6, 0x703, 0x8, 0xa, 0x8, 0x9, 0x4]}}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x0, 0x3, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra={0x5, 0x2, 0x101}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hopopts={{0x130, 0x29, 0x36, {0x89, 0x22, '\x00', [@generic={0x81, 0x3e, "e152e785257b01e6fcab177c083d914ca9e757c40857e104ea5d0ee4684fd2397e92138b99a0b24f9f43269fda0ce30b1842382dc75215b017aa37f89340"}, @pad1, @jumbo={0xc2, 0x4, 0xf11}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x2, 0x2, 0x40, 0x10, [0x9]}}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0x1e, "743ac3cbcb6b5c215f4ea50e816531105f323dad3191232eab0db2e685bb"}, @generic={0x0, 0x82, "da40582a217021d7decd9e72a6fa6f0e7263d4ec233538291d1c9e380626e0bdc46d4278318865c154123c8a1e724ef0f4f7de1eb352af96ae19073373f378d672278b49b089500d418029388620deb00709a8853d76392799144b09aa4d78351936e55ec08550ae5ddee16464c4e3a2c73c4764a7801e6979a94c826be63735eeef"}]}}}], 0x218}, 0x90) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) copy_file_range(r2, &(0x7f0000000740)=0x1, r3, &(0x7f00000007c0)=0x4, 0x2f9, 0x0) (async) copy_file_range(r2, &(0x7f0000000740)=0x1, r3, &(0x7f00000007c0)=0x4, 0x2f9, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x1, 0x1b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840], 0x0, &(0x7f0000000800), &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x24, 0xf5, 'veth1_to_batadv\x00', 'vlan0\x00', 'veth0_to_bond\x00', 'team_slave_1\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xf0, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0xffff, {0x3}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x228) (async) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x20, 0x1, 0x1b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000840], 0x0, &(0x7f0000000800), &(0x7f0000000840)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x24, 0xf5, 'veth1_to_batadv\x00', 'vlan0\x00', 'veth0_to_bond\x00', 'team_slave_1\x00', @broadcast, [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, 0x70, 0xa0, 0xf0, [], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x1}}}], @common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x0, 0xffff, {0x3}}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x228) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000b40)={0x2, 0xbc, &(0x7f0000000a80)=[@in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00', 0xea5}, @in6={0xa, 0x4e20, 0xf5f2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, @in6={0xa, 0x4e22, 0x1, @empty, 0x400}, @in6={0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e21, 0x245, @remote, 0x3ff}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000b80)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000bc0)={r4, @in6={{0xa, 0x4e24, 0x2, @mcast2, 0x9}}, 0x5, 0x5}, 0x90) geteuid() (async) r5 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) fstat(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$fuse(&(0x7f0000000c80), &(0x7f0000000cc0)='./file0\x00', 0x10a0004, &(0x7f0000000e00)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@max_read={'max_read', 0x3d, 0x1000}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}], [{@smackfshat={'smackfshat', 0x3d, 'vlan0\x00'}}, {@audit}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_gt={'fowner>', r7}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}}, 0x1, 0x0, &(0x7f0000000f80)="c44f3ef5d7858ef9823a34704a5234b9c370a13fbca8b95e527c1308803db0df34e801d1e4a9a879d3ff778157b4f1e756c07d3f393bc6ba52b076680baf354d29687e4d02dcc9acd6bb9bc65373d5fcca38c2283e50672094db2c797871a74ef41d8f90ee68c98d7cf73bf87a39a2c066646f7a28f421878e8e4d536f2754979d8d38d243827c6cf9aba889783fe0e5c4ce4371bb97272ef64d88f00e2439e895b750a12ba261753ace996514db02388f4bbb099cd9afc598d2518e314addfde84fc2b39b358fb2f6f12b11b5276d5d29615f0a24bf4cce461d6dd2") r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r2, &(0x7f0000001380)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x84612810}, 0xc, &(0x7f0000001340)={&(0x7f0000001140)={0x1d4, r8, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x1e}}}}, [@NL80211_ATTR_TESTDATA={0x67, 0x45, "62ad23e9096e9a6872389d1a9dc751c28526c28e4700ed1cb2a3b97f70297e9053a2819abb47fb02bb7b328ecc8c360f859261c0a2c67bf2a0f7642e52c244021eceb226ad9385b8428758ececa33a041475af138e8cb8948dc2283febc08c6ee4f476"}, @NL80211_ATTR_TESTDATA={0x73, 0x45, "238f2768c9987697ca2da5b85e3a21c4527df44be9d2063a66f398e88deeac941f222e0fcf7f405ed7c3b16bb26cc9d8c2638e73a1dd1f85b7f74e43f7741173210fdec14e443035dd8a5793bbbd4b3f4caae5ffbd63a5511ce09c34ac095df94c5b9065a6300bfcd4c7774f215c0c"}, @NL80211_ATTR_TESTDATA={0x75, 0x45, "edae030fc5f20d6f1112d9a41453f7cb3268ec98b8cb92579895b743cdec92dd299adf668d63848d6f49a4df7865c2bbee0a1cc0ffa0fc12eed818516d851b6fabfb6bfefac106c857a20d9af97afdaf63b9560ef531112353aa3709a49b0c198e12d831681d5b681aefc89cc19df17b00"}, @NL80211_ATTR_TESTDATA={0x57, 0x45, "260bf760917b767b7c92a3cea2f1a64e8607f1364d288daf66e9818f6b830492982974df07c01d603b0c1bf204c3d84e42d77a01a9164b37bca4692e695c4121d89b12e57db5da7eb0fa21a1d412914ad1c747"}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000804) mount(&(0x7f00000013c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='fuse\x00', 0x480, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000001480), &(0x7f00000014c0)={0x0, 0xfb, 0xd0, 0x0, 0x6, "50bd205eeb7b54b428ce7de3d6f4230c", "7ff4b0d59ee50dad9eddf6ffd531130573a3797ba540016db2855755a5e3d867f652f699c41cdc8423d4cd17398f52a2195f60a59619428db9b3d55d8dec216bfc1d0181854252d840a3bcbd3dce53de62428d276cfced8e7e30fdab193dcd3e17ca903138a63ca3ba94efcd98b72df63d2311063e4b8d9ae4f011958ca9964a91ad54c4659fca35777165d8680e7cbec337e18f0ad5a790de993e6aa17db9b40f9750e7a01e03655409f4503d70d5ea22ab45909583ec5c98e17e"}, 0xd0, 0x3) (async) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000001480), &(0x7f00000014c0)={0x0, 0xfb, 0xd0, 0x0, 0x6, "50bd205eeb7b54b428ce7de3d6f4230c", "7ff4b0d59ee50dad9eddf6ffd531130573a3797ba540016db2855755a5e3d867f652f699c41cdc8423d4cd17398f52a2195f60a59619428db9b3d55d8dec216bfc1d0181854252d840a3bcbd3dce53de62428d276cfced8e7e30fdab193dcd3e17ca903138a63ca3ba94efcd98b72df63d2311063e4b8d9ae4f011958ca9964a91ad54c4659fca35777165d8680e7cbec337e18f0ad5a790de993e6aa17db9b40f9750e7a01e03655409f4503d70d5ea22ab45909583ec5c98e17e"}, 0xd0, 0x3) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000015c0)={@empty, @local, 0x0, "b20ac2a8ae3b6f34b76eaf7bc40155973ad342a209f46572e9b50c813aa28f2a", 0x9, 0x8, 0xffffffff, 0x100}, 0x3c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001600), 0x101400, 0x0) mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) acct(&(0x7f0000001640)='./file0\x00') mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r11 = syz_open_dev$vivid(&(0x7f0000001680), 0x1, 0x2) ioctl$XFS_IOC_EXCHANGE_RANGE(r11, 0x40285881, &(0x7f00000016c0)={r10, 0x0, 0x0, 0x7, 0x100000001, 0x4}) write$P9_RSETATTR(r2, &(0x7f0000001700)={0x7, 0x1b, 0x2}, 0x7) (async) write$P9_RSETATTR(r2, &(0x7f0000001700)={0x7, 0x1b, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001780)={&(0x7f0000001740)=[0x0, 0x0], 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000001780)={&(0x7f0000001740)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000001800)={0x2, 0x0, &(0x7f00000017c0)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001900)={&(0x7f00000018c0)=[r12, 0x0, r13, 0x0, 0x0], 0x5}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000001900)={&(0x7f00000018c0)=[r12, 0x0, r13, 0x0, 0x0], 0x5}) 673.64816ms ago: executing program 0 (id=10): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0xfffffffc}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4e}, 0x20) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r2, 0x1, 0xffffffff, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x30, r2, 0x1, 0xffffffff, 0xfffffffe, {{}, {}, {0x14, 0x19, {0x3, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x4}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a00)={'hsr0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c00028005000100000000001400018008000100"], 0x5c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0x0, 0xa}, {0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000c80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b00)={0x134, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x6d, 0x2, 'gretap0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x4068001}, 0xdeeae6769b6b4193) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000884, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x2, 0x28a, &(0x7f00000006c0)="$eJzs3c1qA1UUAOAzzaRJdJEsXInQAV24Kq1P0CIVxIKgZKEutNgUpAmFFgJVMXblE7hx6/O4EV/AB1Dc2YU4ks7kTyctkbQp+n2bHs69J/fM3KHtZm4+eWVwfnpxdXbz5c/RbCaxdRAHcZtEJ7Zi4uuo9NOv1XkA4Jm7zfP4LS80itT14oz6ksp069GbAwAexfzf/033AgA8jfc/+PCdw+Pjo/eyrBkx+GbYTaL4WYwfnsVn0Y9e7EU7/ojIp4r4rbePjyLNxjrx2mA07I4rBx//UH7+4S8Rd/X70Y5Odf1+VpirHw279XihXP+gH713v492vFRd/8as/jYv66O7Ha+/Otf/brTjx0/jIvpxGsX/OpP6r/az7M3829+/+GicHdcno2G3EacLdyqvPfXeAAAAAAAAAAAAAAAAAAAAAADw37WbTXUWz9+ZHPx/z/g95wON5s7n2cuyLE+K+bP6NF5OI93ktQMAAAAAAAAAAAAAAAAAAMBzcXX9+flJv9+7XGswea2/Yij+XMw0ImLJ56QPr7WzaodRK1vrJxGrXVc9GneVD0+urXjHWuN+epdJGmvbgiSZZlrzQztRrDXOtIpgLrPaWt/9c+OacRdMnq7zk2TZ5k6CZtVDsoYgr3j8akurtv+eaZVXUDG5dc/q2y/+q57z9pKhJCLq05tZDrWqJ9fXew+f7ncQAAAAAAAAAAAAAAAAAABQmL30WzF4s4GGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGADZt//v0IwKouXzclr4yCNMrPhSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB/4K8AAAD//wVfaYM=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 550.376223ms ago: executing program 3 (id=11): syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000008e}, 0x0) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x88000, 0x0) listen(r3, 0x2000fff) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000340)={0x28, 0x0, 0x0, @host}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x158) openat(0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x389080, 0x12) syz_mount_image$fuse(0x0, &(0x7f00000005c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f0000000500), 0x4000000000001c0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x20040800) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000002c0)={'caif0\x00', @link_local}) 43.170556ms ago: executing program 4 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='3', 0x4e) clock_gettime(0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r2], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b40d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000a00850000008200000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000980)={r5, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e903a7d6c817027b478a55f52e20", 0x0, 0x702, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000000}, 0x691b5259480aec5a) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_TYPE(r3, 0x0, 0x8011) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15.273994ms ago: executing program 4 (id=13): r0 = socket(0x2c, 0x3, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x6) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ptype\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x118) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='autofs\x00', 0x201000c, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) vmsplice(r3, &(0x7f0000000040)=[{0x0}], 0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000080)=0x4, 0x4) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f00000005c0)={0x2000a210}) 0s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mnt\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt/trace_marker\x00', 0x1, 0x1a) write(r0, &(0x7f0000000100)="0d9ccf1cb8d871123f1c06000000000000009a42ffffff7f0000000057a02c6bb4a8afdd55b057d1b81536fbdd13d4c4fc4e6e3223649035442a47fccedbea", 0x3f) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r1, &(0x7f0000000d40)=""/16384, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x14, 0x4, 0x8, 0x2d04}, 0x50) 0s ago: executing program 2 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000000203010000000000000000000000000008000100010000220900020c0000ffff02000000"], 0x28}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x10001, @mcast1}, 0x1c, 0x0}}], 0x1, 0x20002040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24008801}, 0x24040008) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x18, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x1c, 0x16, 0x1, 0x70bd2a, 0x25dfdbfe, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x0) r6 = openat$dm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket(0x9, 0x3, 0xbe) ioctl$DM_DEV_CREATE(r6, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x4200, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'LVM-syz', 0x0, '1\x00'}}}) r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$MEMISLOCKED(r7, 0x80084d17, &(0x7f0000000040)={0x3, 0x40}) ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000001980)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '1\x00'}}, [@snapshot={0x0, 0x800, 0x0, 0x48, 'snapshot-merge\x00', {@ram={'/dev/ram', 0x0}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'p', 0x20, '64'}}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) ioctl$DM_TABLE_LOAD(r6, 0xc138fd09, &(0x7f0000001b00)={0x4, 0x0, 0x0, 0x208, 0x138, 0x1, 0x0, 0x400, 0x0, 0x0, @by_dev={r8}, [@crypt={0x0, 0x2800, 0x0, 0xd0, 'crypt\x00', {'aes-cbc-benbi', 0x20, @hex48=[0x38, 0x34, 0x62, 0x61, 0x34, 0x30, 0x35, 0x32, 0x30, 0x62, 0x33, 0x39, 0x35, 0x36, 0x33, 0x39, 0x31, 0x37, 0x37, 0x39, 0x30, 0x39, 0x30, 0x37, 0x63, 0x61, 0x61, 0x36, 0x63, 0x37, 0x65, 0x31, 0x62, 0x8ceba3bfe9a68578, 0x38, 0x37, 0x61, 0x64, 0x31, 0x66, 0x65, 0x33, 0x909182fddcf7693c, 0x0, 0x34, 0x63, 0x30, 0x26, 0x39, 0x37, 0x64, 0x63, 0x62, 0x30, 0x35, 0x36, 0x25, 0x37, 0x37, 0x36, 0x39, 0x31, 0x34, 0x30, 0x66, 0x31, 0x32, 0x34, 0x63, 0x37, 0x66, 0x35, 0x36, 0x65, 0x4b, 0x61, 0x36, 0x62, 0x35, 0x66, 0x63, 0x33, 0x66, 0x7, 0x33, 0x34, 0x37, 0xa25cdea7ddb20090, 0x65, 0x34, 0x64, 0x38, 0xc, 0x66, 0x32, 0x39], 0x20, '8191', 0x20, {@ram_num={'1:', 0x0}, 0x20, '128'}, ' 1 integrity:8:none'}}]}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000000700)=""/4096, 0x1000, 0x0, &(0x7f0000001700)=""/69, 0x45}}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r11 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_DEFRAG_RANGE(r9, 0x40309410, &(0x7f0000000000)={0xd, 0x9, 0x3, 0x5, 0x3, [0x1, 0x8352, 0x3, 0x2]}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcff1f00000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000181a0000", @ANYRES32=r9, @ANYRES8=r9], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.113' (ED25519) to the list of known hosts. [ 28.598691][ T4727] cgroup: Unknown subsys name 'net' [ 28.738741][ T4727] cgroup: Unknown subsys name 'cpuset' [ 28.740025][ T4727] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.919791][ T4727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.715354][ T4753] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.715672][ T4752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.715929][ T4753] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.716415][ T4753] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.716537][ T4752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.716617][ T4753] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.717130][ T4753] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.717402][ T4753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.717626][ T4753] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.717931][ T4753] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.718021][ T4752] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.718354][ T4752] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.718521][ T4752] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.718857][ T4752] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.719084][ T4752] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.721038][ T4751] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.721148][ T4751] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.721595][ T4752] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.724238][ T4752] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.725890][ T4751] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.727549][ T4754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.729378][ T4755] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.753909][ T4742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.754976][ T4742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.755185][ T4742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.900357][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.900642][ T4738] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.911798][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.912222][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.932258][ T4748] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.966751][ T4744] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.969278][ T4741] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.991984][ T4740] infiniband rxe0: set active [ 29.993251][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.993312][ T4740] infiniband rxe0: added rxe_eth0 [ 30.002706][ T4744] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.019984][ T4740] RDS/IB: rxe0: added [ 30.020050][ T4740] smc: adding ib device rxe0 with port count 1 [ 30.020072][ T4740] smc: ib device rxe0 port 1 has no pnetid [ 30.038768][ T4414] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.066042][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.133887][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.161418][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.161451][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.161591][ T4738] bridge_slave_0: entered allmulticast mode [ 30.162183][ T4738] bridge_slave_0: entered promiscuous mode [ 30.163854][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.164029][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.164081][ T4738] bridge_slave_1: entered allmulticast mode [ 30.164632][ T4738] bridge_slave_1: entered promiscuous mode [ 30.181184][ T4738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.182287][ T4738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.216855][ T4738] team0: Port device team_slave_0 added [ 30.218716][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.246566][ T4738] team0: Port device team_slave_1 added [ 30.258586][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.258598][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.258620][ T4738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.263653][ T4738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.263662][ T4738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.263677][ T4738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.305306][ T4740] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.341534][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.341593][ T4741] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.341675][ T4741] bridge_slave_0: entered allmulticast mode [ 30.342079][ T4741] bridge_slave_0: entered promiscuous mode [ 30.343442][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.343471][ T4741] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.343528][ T4741] bridge_slave_1: entered allmulticast mode [ 30.343907][ T4741] bridge_slave_1: entered promiscuous mode [ 30.350787][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.350810][ T4748] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.350898][ T4748] bridge_slave_0: entered allmulticast mode [ 30.351267][ T4748] bridge_slave_0: entered promiscuous mode [ 30.354993][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.355015][ T4748] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.355110][ T4748] bridge_slave_1: entered allmulticast mode [ 30.355506][ T4748] bridge_slave_1: entered promiscuous mode [ 30.382647][ T4741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.384348][ T4738] hsr_slave_0: entered promiscuous mode [ 30.384705][ T4738] hsr_slave_1: entered promiscuous mode [ 30.385416][ T4744] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.385480][ T4744] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.385585][ T4744] bridge_slave_0: entered allmulticast mode [ 30.385981][ T4744] bridge_slave_0: entered promiscuous mode [ 30.386787][ T4744] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.386812][ T4744] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.386894][ T4744] bridge_slave_1: entered allmulticast mode [ 30.397741][ T4744] bridge_slave_1: entered promiscuous mode [ 30.404414][ T4741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.405701][ T4748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.406639][ T4748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.421403][ T4741] team0: Port device team_slave_0 added [ 30.424767][ T4741] team0: Port device team_slave_1 added [ 30.448023][ T4744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.448748][ T4748] team0: Port device team_slave_0 added [ 30.449379][ T4744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.449942][ T4748] team0: Port device team_slave_1 added [ 30.459074][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.459084][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.459096][ T4741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.459646][ T4741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.459652][ T4741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.459664][ T4741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.490131][ T4744] team0: Port device team_slave_0 added [ 30.490923][ T4744] team0: Port device team_slave_1 added [ 30.496506][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.496513][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.496526][ T4744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.497053][ T4744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.497060][ T4744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.497074][ T4744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.501508][ T4741] hsr_slave_0: entered promiscuous mode [ 30.501785][ T4741] hsr_slave_1: entered promiscuous mode [ 30.501962][ T4741] debugfs: 'hsr0' already exists in 'hsr' [ 30.501997][ T4741] Cannot create hsr debugfs directory [ 30.508346][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.508355][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.508372][ T4748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.508908][ T4748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.508915][ T4748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.508929][ T4748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.519053][ T4748] hsr_slave_0: entered promiscuous mode [ 30.519605][ T4748] hsr_slave_1: entered promiscuous mode [ 30.519795][ T4748] debugfs: 'hsr0' already exists in 'hsr' [ 30.519805][ T4748] Cannot create hsr debugfs directory [ 30.553418][ T4744] hsr_slave_0: entered promiscuous mode [ 30.553735][ T4744] hsr_slave_1: entered promiscuous mode [ 30.553929][ T4744] debugfs: 'hsr0' already exists in 'hsr' [ 30.553939][ T4744] Cannot create hsr debugfs directory [ 30.641660][ T4740] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.641732][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.641829][ T4740] bridge_slave_0: entered allmulticast mode [ 30.642228][ T4740] bridge_slave_0: entered promiscuous mode [ 30.649050][ T4740] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.649074][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.649132][ T4740] bridge_slave_1: entered allmulticast mode [ 30.649546][ T4740] bridge_slave_1: entered promiscuous mode [ 30.663335][ T4740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.671171][ T4740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.678779][ T4740] team0: Port device team_slave_0 added [ 30.679459][ T4740] team0: Port device team_slave_1 added [ 30.693495][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.693507][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.693519][ T4740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.695405][ T4740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.695411][ T4740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.695424][ T4740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.703133][ T4738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.706981][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.715111][ T4740] hsr_slave_0: entered promiscuous mode [ 30.715374][ T4740] hsr_slave_1: entered promiscuous mode [ 30.715595][ T4740] debugfs: 'hsr0' already exists in 'hsr' [ 30.715605][ T4740] Cannot create hsr debugfs directory [ 30.723226][ T4738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.724407][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.724730][ T4738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.725603][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.736960][ T4738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.740025][ T4738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.748387][ T4741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.750618][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.754102][ T4741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.755437][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.765766][ T4741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.766789][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.767128][ T4741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.769332][ T4741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.796569][ T4748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.800305][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.800637][ T4748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.801633][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.801901][ T4748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.802821][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.804279][ T4741] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.804319][ T4741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.804467][ T4741] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.804506][ T4741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.820312][ T4748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.821239][ T4748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.833710][ T4738] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.833747][ T4738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.833823][ T4738] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.833850][ T4738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.842361][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.842395][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.842465][ T4748] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.842502][ T4748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.855045][ T4744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.860069][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.860395][ T4744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.861644][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.861976][ T4744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.862930][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.875119][ T4744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.876176][ T4744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.889403][ T4748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.894101][ T4748] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.895354][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.908706][ T4741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.912512][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.913113][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.914932][ T1257] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.915185][ T1257] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.932921][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.934932][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.934963][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.958781][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.958808][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.975744][ T4740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.978356][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.978705][ T4740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.979991][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.984880][ T4738] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.984894][ T4738] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.990281][ T4740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.994353][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.994677][ T4740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.003664][ T4740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.005672][ T4741] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.015486][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.015514][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.019887][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.019978][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.064594][ T4744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.073592][ T4744] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.098085][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.098112][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.098500][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.098520][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.121600][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.125090][ T4740] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.126595][ T1257] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.126622][ T1257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.134427][ T1257] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.134462][ T1257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.153399][ T4740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.222937][ T4738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.252060][ T4738] veth0_vlan: entered promiscuous mode [ 31.263528][ T4748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.270528][ T4744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.273433][ T4738] veth1_vlan: entered promiscuous mode [ 31.295042][ T4738] veth0_macvtap: entered promiscuous mode [ 31.296158][ T4738] veth1_macvtap: entered promiscuous mode [ 31.306419][ T4744] veth0_vlan: entered promiscuous mode [ 31.309943][ T4744] veth1_vlan: entered promiscuous mode [ 31.321536][ T4744] veth0_macvtap: entered promiscuous mode [ 31.322787][ T4744] veth1_macvtap: entered promiscuous mode [ 31.326976][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.332566][ T4744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.335764][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.336225][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.358953][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.363242][ T4738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.396395][ T4741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.397576][ T3683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.397587][ T3683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.418676][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.418690][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.418781][ T3683] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.419547][ T3683] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.419616][ T3683] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.419702][ T3683] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.438729][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.439797][ T4741] veth0_vlan: entered promiscuous mode [ 31.457398][ T3683] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.468994][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.469007][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.482195][ T4741] veth1_vlan: entered promiscuous mode [ 31.485938][ T4744] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.500508][ T4740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.505196][ T4748] veth0_vlan: entered promiscuous mode [ 31.508312][ T4748] veth1_vlan: entered promiscuous mode [ 31.509153][ T4741] veth0_macvtap: entered promiscuous mode [ 31.514946][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.514959][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.525041][ T4741] veth1_macvtap: entered promiscuous mode [ 31.534363][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.550213][ T4740] veth0_vlan: entered promiscuous mode [ 31.551805][ T4741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.554040][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554086][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554117][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554142][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.557138][ T4748] veth0_macvtap: entered promiscuous mode [ 31.563652][ T4740] veth1_vlan: entered promiscuous mode [ 31.574262][ T4748] veth1_macvtap: entered promiscuous mode [ 31.595444][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.616015][ T4748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.620825][ T4740] veth0_macvtap: entered promiscuous mode [ 31.621983][ T4740] veth1_macvtap: entered promiscuous mode [ 31.634592][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.652417][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.652431][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.670431][ T4740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.677298][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.677530][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.677683][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.677789][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.687712][ T4937] loop0: detected capacity change from 0 to 1024 [ 31.703249][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.703265][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.705415][ T4936] FAULT_INJECTION: forcing a failure. [ 31.705415][ T4936] name failslab, interval 1, probability 0, space 0, times 1 [ 31.705431][ T4936] CPU: 0 UID: 0 PID: 4936 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT [ 31.705441][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.705446][ T4936] Call trace: [ 31.705448][ T4936] show_stack+0x2c/0x3c (C) [ 31.705462][ T4936] __dump_stack+0x30/0x40 [ 31.705474][ T4936] dump_stack_lvl+0xd8/0x12c [ 31.705482][ T4936] dump_stack+0x1c/0x28 [ 31.705490][ T4936] should_fail_ex+0x418/0x58c [ 31.705500][ T4936] should_failslab+0xc4/0x120 [ 31.705510][ T4936] __kmalloc_noprof+0x108/0x6c8 [ 31.705521][ T4936] tomoyo_realpath_from_path+0xbc/0x4dc [ 31.705530][ T4936] tomoyo_path_number_perm+0x1f0/0x500 [ 31.705541][ T4936] tomoyo_path_mkdir+0xac/0xf8 [ 31.705548][ T4936] security_path_mkdir+0x160/0x318 [ 31.705558][ T4936] filename_mkdirat+0x1b8/0x3f4 [ 31.705569][ T4936] __arm64_sys_mkdirat+0x9c/0xc0 [ 31.705579][ T4936] invoke_syscall+0x98/0x244 [ 31.705587][ T4936] el0_svc_common+0xec/0x23c [ 31.705594][ T4936] do_el0_svc+0x4c/0x5c [ 31.705602][ T4936] el0_svc+0x60/0x1d8 [ 31.705610][ T4936] el0t_64_sync_handler+0x44/0x104 [ 31.705617][ T4936] el0t_64_sync+0x198/0x19c [ 31.705626][ T4936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 31.737605][ T4937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.743355][ T3683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.743367][ T3683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.747636][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748416][ T3683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748571][ T3683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748726][ T3683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.763492][ T4928] FAULT_INJECTION: forcing a failure. [ 31.763492][ T4928] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.763512][ T4928] CPU: 0 UID: 0 PID: 4928 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT [ 31.763526][ T4928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 31.763532][ T4928] Call trace: [ 31.763535][ T4928] show_stack+0x2c/0x3c (C) [ 31.763551][ T4928] __dump_stack+0x30/0x40 [ 31.763560][ T4928] dump_stack_lvl+0xd8/0x12c [ 31.763568][ T4928] dump_stack+0x1c/0x28 [ 31.763576][ T4928] should_fail_ex+0x418/0x58c [ 31.763587][ T4928] should_fail+0x14/0x24 [ 31.763596][ T4928] should_fail_usercopy+0x20/0x30 [ 31.763606][ T4928] read_fpsimd_context+0xa4/0x344 [ 31.763614][ T4928] restore_fpsimd_context+0xb4/0x1d8 [ 31.763623][ T4928] __arm64_sys_rt_sigreturn+0x13f4/0x27d0 [ 31.763632][ T4928] invoke_syscall+0x98/0x244 [ 31.763641][ T4928] el0_svc_common+0xec/0x23c [ 31.763649][ T4928] do_el0_svc+0x4c/0x5c [ 31.763657][ T4928] el0_svc+0x60/0x1d8 [ 31.763665][ T4928] el0t_64_sync_handler+0x44/0x104 [ 31.763673][ T4928] el0t_64_sync+0x198/0x19c [ 31.770323][ T4742] Bluetooth: hci4: command tx timeout [ 31.770432][ T4742] Bluetooth: hci0: command tx timeout [ 31.770498][ T4742] Bluetooth: hci1: command tx timeout [ 31.812691][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.812702][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.831373][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.831401][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.847461][ T4746] Bluetooth: hci3: command tx timeout [ 31.847631][ T4746] Bluetooth: hci2: command tx timeout [ 31.883254][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.883272][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.931522][ T4946] Invalid source name [ 31.931535][ T4946] UBIFS error (pid: 4946): cannot open "./file0", error -22 [ 31.946142][ T4946] loop4: detected capacity change from 0 to 512 [ 31.962139][ T4946] EXT4-fs: Ignoring removed nobh option [ 31.974818][ T4946] EXT4-fs (loop4): Test dummy encryption mode enabled [ 31.974837][ T4946] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 31.974842][ T4946] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.974847][ T4946] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.983255][ T4946] EXT4-fs (loop4): 1 truncate cleaned up [ 31.983679][ T4946] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.002736][ T4946] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.065641][ T4947] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 32.072910][ T4947] overlay: ./file1 is not a directory [ 32.085800][ T4956] loop2: detected capacity change from 0 to 512 [ 32.090769][ T4956] EXT4-fs: Mount option(s) incompatible with ext3 [ 32.103884][ T4956] ip_tables: iptables: counters copy to user failed while replacing table [ 32.132151][ T4744] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.228438][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.228635][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.228861][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.229108][ T4962] hsr_slave_0: left promiscuous mode [ 32.236039][ T4962] hsr_slave_1: left promiscuous mode [ 32.282581][ T4961] loop0: detected capacity change from 0 to 256 [ 32.711404][ T4748] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.754262][ T4972] FAULT_INJECTION: forcing a failure. [ 32.754262][ T4972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.754284][ T4972] CPU: 1 UID: 0 PID: 4972 Comm: syz.4.12 Not tainted syzkaller #0 PREEMPT [ 32.754295][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.754301][ T4972] Call trace: [ 32.754305][ T4972] show_stack+0x2c/0x3c (C) [ 32.754322][ T4972] __dump_stack+0x30/0x40 [ 32.754332][ T4972] dump_stack_lvl+0xd8/0x12c [ 32.754349][ T4972] dump_stack+0x1c/0x28 [ 32.754358][ T4972] should_fail_ex+0x418/0x58c [ 32.754371][ T4972] should_fail+0x14/0x24 [ 32.754392][ T4972] should_fail_usercopy+0x20/0x30 [ 32.754404][ T4972] put_timespec64+0xc8/0x208 [ 32.754420][ T4972] __arm64_sys_clock_gettime+0x1f0/0x260 [ 32.754433][ T4972] invoke_syscall+0x98/0x244 [ 32.754443][ T4972] el0_svc_common+0xec/0x23c [ 32.754453][ T4972] do_el0_svc+0x4c/0x5c [ 32.754462][ T4972] el0_svc+0x60/0x1d8 [ 32.754472][ T4972] el0t_64_sync_handler+0x44/0x104 [ 32.754486][ T4972] el0t_64_sync+0x198/0x19c [ 32.764412][ T4972] x_tables: unsorted entry at hook 1 [ 32.820215][ T4976] No control pipe specified [ 32.862290][ T4978] ================================================================== [ 32.862301][ T4978] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x4ec/0x1030 [ 32.862318][ T4978] Read of size 8 at addr ffff0000dd8c0918 by task syz.2.15/4978 [ 32.862326][ T4978] [ 32.862330][ T4978] CPU: 1 UID: 0 PID: 4978 Comm: syz.2.15 Not tainted syzkaller #0 PREEMPT [ 32.862340][ T4978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 32.862345][ T4978] Call trace: [ 32.862348][ T4978] show_stack+0x2c/0x3c (C) [ 32.862359][ T4978] __dump_stack+0x30/0x40 [ 32.862367][ T4978] dump_stack_lvl+0xd8/0x12c [ 32.862375][ T4978] print_address_description+0xb0/0x238 [ 32.862401][ T4978] print_report+0x68/0x84 [ 32.862410][ T4978] kasan_report+0x8c/0xc4 [ 32.862422][ T4978] __asan_report_load8_noabort+0x20/0x2c [ 32.862435][ T4978] snapshot_ctr+0x4ec/0x1030 [ 32.862442][ T4978] dm_table_add_target+0x44c/0xb18 [ 32.862451][ T4978] table_load+0x27c/0x764 [ 32.862461][ T4978] dm_ctl_ioctl+0x884/0xbbc [ 32.862471][ T4978] __arm64_sys_ioctl+0x154/0x1cc [ 32.862487][ T4978] invoke_syscall+0x98/0x244 [ 32.862496][ T4978] el0_svc_common+0xec/0x23c [ 32.862505][ T4978] do_el0_svc+0x4c/0x5c [ 32.862512][ T4978] el0_svc+0x60/0x1d8 [ 32.862521][ T4978] el0t_64_sync_handler+0x44/0x104 [ 32.862529][ T4978] el0t_64_sync+0x198/0x19c [ 32.862538][ T4978] [ 32.862540][ T4978] Allocated by task 4978: [ 32.862544][ T4978] kasan_save_track+0x40/0x78 [ 32.862553][ T4978] kasan_save_alloc_info+0x40/0x50 [ 32.862564][ T4978] __kasan_kmalloc+0x9c/0xb4 [ 32.862572][ T4978] __kmalloc_cache_node_noprof+0x39c/0x618 [ 32.862582][ T4978] dm_get_table_device+0x1f0/0x62c [ 32.862591][ T4978] dm_get_device+0x2b0/0x634 [ 32.862597][ T4978] snapshot_ctr+0x258/0x1030 [ 32.862603][ T4978] dm_table_add_target+0x44c/0xb18 [ 32.862609][ T4978] table_load+0x27c/0x764 [ 32.862617][ T4978] dm_ctl_ioctl+0x884/0xbbc [ 32.862625][ T4978] __arm64_sys_ioctl+0x154/0x1cc [ 32.862632][ T4978] invoke_syscall+0x98/0x244 [ 32.862639][ T4978] el0_svc_common+0xec/0x23c [ 32.862645][ T4978] do_el0_svc+0x4c/0x5c [ 32.862651][ T4978] el0_svc+0x60/0x1d8 [ 32.862657][ T4978] el0t_64_sync_handler+0x44/0x104 [ 32.862663][ T4978] el0t_64_sync+0x198/0x19c [ 32.862669][ T4978] [ 32.862671][ T4978] Freed by task 4978: [ 32.862674][ T4978] kasan_save_track+0x40/0x78 [ 32.862682][ T4978] kasan_save_free_info+0x54/0x6c [ 32.862693][ T4978] __kasan_slab_free+0x74/0xa4 [ 32.862701][ T4978] kfree+0x188/0x658 [ 32.862708][ T4978] dm_put_table_device+0x238/0x2a0 [ 32.862717][ T4978] dm_get_device+0x468/0x634 [ 32.862723][ T4978] snapshot_ctr+0x3d0/0x1030 [ 32.862729][ T4978] dm_table_add_target+0x44c/0xb18 [ 32.862736][ T4978] table_load+0x27c/0x764 [ 32.862743][ T4978] dm_ctl_ioctl+0x884/0xbbc [ 32.862752][ T4978] __arm64_sys_ioctl+0x154/0x1cc [ 32.862759][ T4978] invoke_syscall+0x98/0x244 [ 32.862765][ T4978] el0_svc_common+0xec/0x23c [ 32.862772][ T4978] do_el0_svc+0x4c/0x5c [ 32.862778][ T4978] el0_svc+0x60/0x1d8 [ 32.862783][ T4978] el0t_64_sync_handler+0x44/0x104 [ 32.862789][ T4978] el0t_64_sync+0x198/0x19c [ 32.862795][ T4978] [ 32.862797][ T4978] The buggy address belongs to the object at ffff0000dd8c0900 [ 32.862797][ T4978] which belongs to the cache kmalloc-96 of size 96 [ 32.862804][ T4978] The buggy address is located 24 bytes inside of [ 32.862804][ T4978] freed 96-byte region [ffff0000dd8c0900, ffff0000dd8c0960) [ 32.862812][ T4978] [ 32.862814][ T4978] The buggy address belongs to the physical page: [ 32.862818][ T4978] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d8c0 [ 32.862825][ T4978] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 32.862833][ T4978] page_type: f5(slab) [ 32.862840][ T4978] raw: 05ffc00000000000 ffff0000c0001280 dead000000000100 dead000000000122 [ 32.862847][ T4978] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 32.862851][ T4978] page dumped because: kasan: bad access detected [ 32.862855][ T4978] [ 32.862856][ T4978] Memory state around the buggy address: [ 32.862860][ T4978] ffff0000dd8c0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 32.862866][ T4978] ffff0000dd8c0880: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 32.862871][ T4978] >ffff0000dd8c0900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 32.862875][ T4978] ^ [ 32.862879][ T4978] ffff0000dd8c0980: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 32.862884][ T4978] ffff0000dd8c0a00: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 32.862888][ T4978] ================================================================== [ 32.862951][ T4978] Disabling lock debugging due to kernel taint [ 32.862957][ T4978] device-mapper: table: 248:0: device 1:4 not in table devices list [ 32.862975][ T4978] device-mapper: table: 248:0: snapshot-merge: COW device cannot be the same as origin device (-EINVAL) [ 32.862983][ T4978] device-mapper: ioctl: error adding target to table [ 32.862991][ T4978] device-mapper: table: 248:0: dm_table_destroy: dm_put_device call missing for 1:4 [ 33.847232][ T4742] Bluetooth: hci1: command tx timeout [ 33.847253][ T4742] Bluetooth: hci0: command tx timeout [ 33.847265][ T4742] Bluetooth: hci4: command tx timeout [ 33.927810][ T4746] Bluetooth: hci2: command tx timeout [ 33.927832][ T4746] Bluetooth: hci3: command tx timeout [ 35.927407][ T4742] Bluetooth: hci4: command tx timeout [ 35.927431][ T4742] Bluetooth: hci0: command tx timeout [ 35.927444][ T4742] Bluetooth: hci1: command tx timeout [ 36.007410][ T4746] Bluetooth: hci3: command tx timeout [ 36.007432][ T4746] Bluetooth: hci2: command tx timeout [ 38.007249][ T4746] Bluetooth: hci0: command tx timeout [ 38.007272][ T4746] Bluetooth: hci4: command tx timeout [ 38.007313][ T4742] Bluetooth: hci1: command tx timeout [ 38.087284][ T4747] Bluetooth: hci3: command tx timeout [ 38.087312][ T4742] Bluetooth: hci2: command tx timeout [ 40.466599][ T24] rxe_eth0 speed is unknown, defaulting to 1000