Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. 2021/07/14 15:04:49 fuzzer started 2021/07/14 15:04:50 dialing manager at 10.128.0.169:46515 2021/07/14 15:04:55 syscalls: 203 2021/07/14 15:04:55 code coverage: enabled 2021/07/14 15:04:55 comparison tracing: enabled 2021/07/14 15:04:55 extra coverage: enabled 2021/07/14 15:04:55 setuid sandbox: enabled 2021/07/14 15:04:55 namespace sandbox: enabled 2021/07/14 15:04:55 Android sandbox: /sys/fs/selinux/policy does not exist 2021/07/14 15:04:55 fault injection: enabled 2021/07/14 15:04:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/07/14 15:04:55 net packet injection: enabled 2021/07/14 15:04:55 net device setup: enabled 2021/07/14 15:04:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/07/14 15:04:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/07/14 15:04:55 USB emulation: enabled 2021/07/14 15:04:55 hci packet injection: enabled 2021/07/14 15:04:55 wifi device emulation: enabled 2021/07/14 15:04:55 802.15.4 emulation: enabled 2021/07/14 15:04:55 fetching corpus: 0, signal 0/0 (executing program) 2021/07/14 15:04:56 starting 6 fuzzer processes 15:04:56 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r3) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000007040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007000)={&(0x7f0000006fc0)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000011) 15:04:57 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x400000000000, 0x2, 0x0, 0x7, 0x1f, 0x800, 0x16d06a71, 0x100000000}, &(0x7f0000000040)={0x666, 0x1, 0x0, 0x6, 0x401, 0x4, 0x8, 0xed}, &(0x7f0000000080)={0x0, 0x3, 0x561d9e5e, 0xffffffffffff7fff, 0x80, 0x0, 0xbbe, 0x28dc}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x6, 0x7f, 0x0, 0xba0, 0x3ff, 0x0, 0x2}, &(0x7f00000001c0)={0x4, 0x80000000, 0x4, 0xc104, 0x73b7, 0x7f, 0x3f, 0x5}, &(0x7f0000000200)={0x3b6, 0x5, 0x8, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x9}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) clock_getres(0x10c7661327295d8b, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x54, 0xad, 0x101, 0x80, 0x9, 0x4, 0x72a, 0x9}, &(0x7f00000003c0)={0x3, 0x6, 0x8, 0x8, 0x7, 0x9, 0x828b, 0x7fff}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x9, 0xb92e, 0x5, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100]}, 0x8}) pselect6(0x40, &(0x7f0000000500)={0x1, 0x9, 0x100000001, 0x0, 0x7, 0x4, 0x71f, 0x8}, &(0x7f0000000540)={0x3, 0xb3, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x6, 0x7fff}, &(0x7f0000000580)={0x0, 0x2, 0x3e4ab37d, 0x1, 0x3bd, 0x2c8b, 0x20, 0x401}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8001]}, 0x8}) clock_getres(0x3, &(0x7f0000000680)) clock_getres(0x5, &(0x7f00000006c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/32, 0x20}], 0x4, &(0x7f0000000a00)=""/58, 0x3a}, 0x1}], 0x1, 0x40, &(0x7f0000000ac0)={r2, r3+60000000}) chroot(&(0x7f0000000b00)='./file0\x00') syz_mount_image$afs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="0ffd87af8b4763994e8eb29465cc5c8093f7ca4955a0f5a1524ccfdcf6329b3be69c648a58537d2e833f3941487796ef8d7e73372b5425e0a93622bab338d9a0", 0x40, 0x8}], 0x2000000, &(0x7f0000000c40)={[{@flock_write}], [{@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}]}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000c80)=""/98, 0x62}, &(0x7f0000000d00), 0x20}, 0xa0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e00)={0xc1, 0x3, 0xffffffff, 0x400, 0x5, 0xfffffffffffffff8, 0x56f, 0x8}, &(0x7f0000000e40)={0x101, 0x2, 0x6, 0x8001, 0x9, 0x0, 0x4, 0x9}, &(0x7f0000000e80)={0x6, 0x2, 0xb6e7, 0xffffffffffffffff, 0x1db250e2, 0x0, 0x2, 0x2}, &(0x7f0000000f00)={r4, r5+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x3f]}, 0x8}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={0x0, 0x401, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x19, 0xc, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa, 0xd, 0x4, 0x100, 0x4}, @generic={0x80, 0x8, 0x7, 0x8564, 0x7}, @alu={0x4, 0x1, 0xc, 0x6, 0x1, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x3, 0x3, 0x8, 0x3, 0x50, 0x4}, @ldst={0x0, 0x3, 0x0, 0x7, 0x3, 0x20, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xdd}, @exit, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000001080)='syzkaller\x00', 0x8, 0x6, &(0x7f00000010c0)=""/6, 0x40f00, 0x14, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0xe, 0x0, 0xfffffeff}, 0x10}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000001200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/63, 0x3f}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/190, 0xbe}], 0x3, &(0x7f0000001440)=""/38, 0x26}, 0x2}], 0x1, 0x40, 0x0) 15:04:57 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x7fff, 0xe6, 0x2, 0x0, 0x3, 0x8001, 0x1f, 0x1}, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x9, 0x8, 0x101, 0x2, 0x8}, &(0x7f0000000080)={0x9, 0x10001, 0x2fe, 0xe11, 0x6, 0x2, 0x4, 0x4}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_open_dev$ndb(&(0x7f0000005ac0), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) syz_mount_image$f2fs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0xfd6a, 0x3, &(0x7f0000005e00)=[{&(0x7f0000005b80)="600600274116f85d0eec4dbd6324cb148996be0bd022de57c5be97b86556f4b56350e8ca944ac9e745624941476b17a8a35869fc3aed5da9bd2bf0fc8b577544cbb4a2f12875b8e3f2916f6e2ada3fd047110a51b1aead67144788660a1c5d9c180a9dc85675b7eb2a71a4f3247a4e1fa88c683e545dd79944ad3e0f59998cd85b9fd9ef2e5240f6f77613e50717f383ca84a04ed35bb8ac1f", 0x99, 0x5}, {&(0x7f0000005c40)="6770be98c9daaed1a52ee8fd1e267e92f94fec7e096177395108f787aa6e0a071173bca9012a2691d5959347dc5f925c6427f0486febc0b5a3cde762d562f892ee79ef39f5f94f47583871542b6b6fe48b9deca9ee7de9cc109976763774f3be86645ffd6a92db7c0efb598edc8a0e147a265f94a7fd2fbbbe2f73333ad725494ccb7d8b59b638b60f8ab4c6f482c4aec358b2cad8d5157eb6690e3c02330a08c637e27c8e114eeb9e2a462fee47cff2c5a53b4a3173c7a900187bb9e5a20a100f77dc9325aba017312b54081babaee1592c", 0xd2, 0x5}, {&(0x7f0000005d40)="9d9e746f55af3310675204b9af4c77fe85e808d2828e286412a035d7c725ab9bdcbc4c0f545cd65b3664c394e344328de1040ad6a4935b96261b18efb21c04611200df0b15de43365227002d1bc4a1738e32317f41cd2ea69b333d3d04563330bd77ab1b9ec27eaec02fb41f791dfd77a3ad56ed0f86fa11a41e8b79bf36544d161c7a37fe591771843aea53b727d0d2cfd7c8b533069c22b49982c123f3ddd8f53ce527ee216b3c86438496b74c", 0xae, 0xfffffffffffffe01}], 0x8088, &(0x7f0000005e80)={[{@noextent_cache}, {@nodiscard}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd#\x00'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000005ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_rr_get_interval(r3, &(0x7f0000007f00)) r4 = syz_open_dev$vcsa(&(0x7f0000007f40), 0xa49, 0x42a200) r5 = openat2(r4, &(0x7f0000007f80)='./file0\x00', &(0x7f0000007fc0)={0x0, 0x194, 0x11}, 0x18) utime(&(0x7f0000008000)='./file0/file0\x00', &(0x7f0000008040)={0x7fff, 0x4}) syz_mount_image$ntfs(&(0x7f0000008080), &(0x7f00000080c0)='./file0/file1\x00', 0x1ff, 0x1, &(0x7f0000008180)=[{&(0x7f0000008100)="593586d09e907b5e05b4094eb19d8bca0c1929ce808b61907dfa4eaa43a27fc20e218d024e0e0210d7253c46cf22e7dcc4e2ee6ad03de8662890dc8235143ba0b59152675d02434bcbf179d8c9578236c03b1810de5d9bade8b5", 0x5a, 0x7}], 0x2241800, &(0x7f00000081c0)={[{@errors_recover}, {@disable_sparse_yes}, {@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}], [{@appraise}]}) syz_mount_image$befs(&(0x7f0000008240), &(0x7f0000008280)='./file0/file1\x00', 0xffff, 0x4, &(0x7f0000008540)=[{&(0x7f00000082c0)="e4e6182aa25136e0542a5b56585a737a90e58f05088110b603fa035f2459dc63ef", 0x21, 0x7}, {&(0x7f0000008300)="23be246be50cd0a42d9c437e8634e11aea90c4896ef6f39e4003f734e81e71bb2f398bfe1851363d7238ab30b8c4308a315e331bc4f9acc112597c", 0x3b, 0x1f}, {&(0x7f0000008340)="a00143165dbc4ce4147b757b098d45ee22a34a2aaa7cb28e37ba6f0d58347d3b6eb56229b528952a6790b1d31fe47dc36711a3e6550ab21e4bdaf98b701f781586e82d9a822cf2ef83141f517ff8c7a48e5e305f106c64070afad7c404efe2b4431b9a9f041ce586eb1758b60637f946c2e0ed2c8c55e393df8821361f90b58fac90a0b47349f03b90c9e03e57ed9f6dff64e6ddc5d5e2ba20c3669b8ae0d23c38235d6014c2bf0d6687782401bf66e199dcf12ac7f42f62573e1e21b3180ff05f67ff382f2b9867041df422994a4c0da10628137fdb217eae", 0xd9, 0x3ff}, {&(0x7f0000008440)="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", 0xfd, 0x9}], 0x802886, &(0x7f00000085c0)={[{'MAY_EXEC'}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x35, 0x34, 0x38, 0x32, 0x32, 0x34], 0x2d, [0x61, 0x35, 0x38, 0x35], 0x2d, [0x30, 0x31, 0x35, 0x52], 0x2d, [0x30, 0x1, 0x37, 0x38], 0x2d, [0x65, 0x56, 0x33, 0x39, 0x64, 0x63, 0x65, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'system_u'}}]}) recvmsg(r1, &(0x7f0000008ac0)={&(0x7f0000008680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/185, 0xb9}, {&(0x7f00000087c0)=""/102, 0x66}, {&(0x7f0000008840)=""/185, 0xb9}, {&(0x7f0000008900)=""/205, 0xcd}], 0x4, &(0x7f0000008a40)=""/97, 0x61}, 0x60) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000008b40), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000008c00)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xba109c99788e7acc}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000008c80)={&(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x38}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000008cc0)={'#! ', './file0/file0', [{0x20, 'obj_user'}, {0x20, '*/,#'}, {0x20, 'befs\x00'}, {0x20, '@%\\'}, {0x20, 'disable_sparse=yes'}, {0x20, '*'}], 0xa, "c597c7a9b146c4ca72b0cf679dd3208c4899a0e1b71bd168b99ee9cd77d02ae0a9647893a12ea5cff17d72db36bd1839a21edddfdbf553cd4f418fdd1ff08c3c2779e5"}, 0x81) write$FUSE_INTERRUPT(r5, &(0x7f000000adc0)={0x10}, 0x10) 15:04:57 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000900)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000940)) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40094) 15:04:57 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) recvmmsg(r8, &(0x7f0000004700)=[{{&(0x7f0000002d00)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/6, 0x6}, {&(0x7f0000002dc0)=""/251, 0xfb}, {&(0x7f0000002ec0)=""/180, 0xb4}, {&(0x7f0000002f80)=""/123, 0x7b}, {&(0x7f0000003000)=""/65, 0x41}], 0x5, &(0x7f0000003100)=""/44, 0x2c}, 0x27}, {{&(0x7f0000003140)=@xdp, 0x80, &(0x7f0000003200)=[{&(0x7f00000031c0)}], 0x1, &(0x7f0000003240)=""/119, 0x77}, 0x1}, {{&(0x7f00000032c0)=@xdp, 0x80, &(0x7f0000004600)=[{&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/138, 0x8a}, {&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/222, 0xde}], 0x5, &(0x7f0000004680)=""/108, 0x6c}, 0xffffffff}], 0x3, 0x100, &(0x7f00000047c0)={0x0, 0x989680}) [ 62.362690][ T8452] chnl_net:caif_netlink_parms(): no params data found 15:04:58 executing program 5: r0 = getuid() r1 = getuid() r2 = getegid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0xf, r1}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r2}, {0x8, 0x2, 0xee00}, {0x8, 0x4, r3}], {0x10, 0x7}, {0x20, 0x3}}, 0x5c, 0x3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/189, 0xbd}], 0x6, &(0x7f0000000580)=""/123, 0x7b}, 0x40000000) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r4 = getuid() syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ')(-@%,'}}, {@dont_hash}, {@subj_type}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) quotactl(0x40, &(0x7f0000000a40)='./file0\x00', r1, &(0x7f0000000a80)="7ac5df2fc5792325a365c63a191a644c5690c8b80b12574709b55da2a025603c9176e30cbc003a0d84df068a4b8b8da3ad21b50c5bcc7aa5018ccfcd8c73b9f173546965ac2cd33170ac3fa7484fb29ee8efe2ba7f2e05111b7ebbea1462556d0699ae086dbb2b60dcbde054cfc7ceaa1b5f38d355ead74db24d38e38a7cb3307af67f83764d91fe6cce98500e546b40f07c35fe7fbe6cf2df62a0843b9f2a1f596fa101dba4f52e4380661ce539e1fac1eb17425c8e3c7c3e1c61e045400f33a0aaf7cae696da7861d3a6baf4f3165a2610b20578") r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/144, 0x90, 0x2100, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x0, 0x3}}, 0x80) chroot(&(0x7f0000000cc0)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xb0000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xa0b, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003000)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x64040051}, 0x11) [ 62.648680][ T8452] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.706416][ T8452] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.728786][ T8452] device bridge_slave_0 entered promiscuous mode [ 62.761290][ T8452] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.780319][ T8452] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.790310][ T8452] device bridge_slave_1 entered promiscuous mode [ 62.868237][ T8452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.898317][ T8452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.976184][ T8452] team0: Port device team_slave_0 added [ 63.016927][ T8452] team0: Port device team_slave_1 added [ 63.123204][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.135200][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.162025][ T8452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.205357][ T8452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.212332][ T8452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.239794][ T8452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.291740][ T8452] device hsr_slave_0 entered promiscuous mode [ 63.298523][ T8452] device hsr_slave_1 entered promiscuous mode [ 63.379844][ T8454] chnl_net:caif_netlink_parms(): no params data found [ 63.578031][ T8456] chnl_net:caif_netlink_parms(): no params data found [ 63.708343][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 63.770245][ T8454] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.779981][ T8454] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.792325][ T8454] device bridge_slave_0 entered promiscuous mode [ 63.850838][ T8454] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.858838][ T8454] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.868184][ T8454] device bridge_slave_1 entered promiscuous mode [ 64.001680][ T8452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.024570][ T8454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.077940][ T8456] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.088412][ T8456] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.099866][ T8456] device bridge_slave_0 entered promiscuous mode [ 64.116278][ T8452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.147741][ T8454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.164248][ T8456] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.175262][ T8456] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.183039][ T8456] device bridge_slave_1 entered promiscuous mode [ 64.190919][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 64.201329][ T8452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.239974][ T8452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.263767][ T8471] chnl_net:caif_netlink_parms(): no params data found [ 64.276928][ T8456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.291678][ T8454] team0: Port device team_slave_0 added [ 64.321290][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.329642][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.340187][ T8458] device bridge_slave_0 entered promiscuous mode [ 64.353577][ T8456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.389162][ T8456] team0: Port device team_slave_0 added [ 64.396772][ T8454] team0: Port device team_slave_1 added [ 64.423886][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.432463][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.442547][ T8458] device bridge_slave_1 entered promiscuous mode [ 64.461483][ T8456] team0: Port device team_slave_1 added [ 64.505855][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 64.531582][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.540068][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.568302][ T8454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.585658][ T8454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.592634][ T8454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.619700][ T8454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.673146][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.691312][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.704105][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.712049][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.739853][ T8456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.745107][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 64.757169][ T8456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.764258][ T8456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.790708][ T8456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.809507][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.816907][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.824898][ T8471] device bridge_slave_0 entered promiscuous mode [ 64.864115][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.871738][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.881278][ T8471] device bridge_slave_1 entered promiscuous mode [ 64.910457][ T8454] device hsr_slave_0 entered promiscuous mode [ 64.917353][ T8454] device hsr_slave_1 entered promiscuous mode [ 64.924184][ T8454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.932473][ T8454] Cannot create hsr debugfs directory [ 64.963143][ T8458] team0: Port device team_slave_0 added [ 64.983666][ T8458] team0: Port device team_slave_1 added [ 64.989747][ T3764] Bluetooth: hci3: command 0x0409 tx timeout [ 65.019750][ T8456] device hsr_slave_0 entered promiscuous mode [ 65.036883][ T8456] device hsr_slave_1 entered promiscuous mode [ 65.044356][ T8456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.058591][ T8456] Cannot create hsr debugfs directory [ 65.089423][ T8643] chnl_net:caif_netlink_parms(): no params data found [ 65.113649][ T8471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.167924][ T8471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.182013][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.192902][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.221097][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.285046][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.292018][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.320436][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.338194][ T8471] team0: Port device team_slave_0 added [ 65.347464][ T8471] team0: Port device team_slave_1 added [ 65.377520][ T8452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.384887][ T3764] Bluetooth: hci4: command 0x0409 tx timeout [ 65.473367][ T8452] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.483118][ T8458] device hsr_slave_0 entered promiscuous mode [ 65.497038][ T8458] device hsr_slave_1 entered promiscuous mode [ 65.503622][ T8458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.512488][ T8458] Cannot create hsr debugfs directory [ 65.561549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.577002][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.595222][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.602457][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.630017][ T8471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.659914][ T8643] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.668975][ T8643] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.679369][ T8643] device bridge_slave_0 entered promiscuous mode [ 65.700163][ T8643] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.709736][ T8643] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.718803][ T8643] device bridge_slave_1 entered promiscuous mode [ 65.726832][ T8471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.733808][ T8471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.769386][ T8471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.794916][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.803777][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.813023][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.820548][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.829599][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.839127][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.847619][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.854673][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.894283][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.902554][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.916796][ T8643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.930740][ T8643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.966301][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.003286][ T8471] device hsr_slave_0 entered promiscuous mode [ 66.011141][ T8471] device hsr_slave_1 entered promiscuous mode [ 66.021024][ T8471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.028839][ T8471] Cannot create hsr debugfs directory [ 66.030206][ T3159] Bluetooth: hci5: command 0x0409 tx timeout [ 66.056958][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.076624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.110960][ T8454] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.120877][ T8643] team0: Port device team_slave_0 added [ 66.142003][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.151752][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.160780][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.169488][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.178469][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.197033][ T8454] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.217149][ T8643] team0: Port device team_slave_1 added [ 66.242409][ T8454] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.265144][ T9246] Bluetooth: hci0: command 0x041b tx timeout [ 66.272387][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.284328][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.295748][ T8452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.324971][ T8454] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.355287][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.362263][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.389845][ T8643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.421918][ T8456] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.458176][ T8643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.471321][ T8643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.498127][ T8643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.542011][ T8643] device hsr_slave_0 entered promiscuous mode [ 66.549959][ T8643] device hsr_slave_1 entered promiscuous mode [ 66.557861][ T8643] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.567081][ T8643] Cannot create hsr debugfs directory [ 66.572588][ T8456] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.595491][ T3159] Bluetooth: hci1: command 0x041b tx timeout [ 66.619099][ T8456] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.632996][ T8456] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.652589][ T8452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.689157][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.698470][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.725594][ T8458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.750565][ T8458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.785363][ T8458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.800306][ T8458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.827579][ T9246] Bluetooth: hci2: command 0x041b tx timeout [ 66.872483][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.882512][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.923511][ T8452] device veth0_vlan entered promiscuous mode [ 66.953729][ T8454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.967622][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.980606][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.990506][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.003252][ T9717] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.051879][ T8471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 67.069577][ T9717] Bluetooth: hci3: command 0x041b tx timeout [ 67.075628][ T8452] device veth1_vlan entered promiscuous mode [ 67.084967][ T8471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 67.099735][ T8456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.112490][ T8471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 67.123459][ T8471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 67.138134][ T8454] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.147480][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.155987][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.164028][ T4878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.194504][ T8456] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.239996][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.248960][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.258142][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.266955][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.276582][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.285694][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.292743][ T9246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.301517][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.311114][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.320330][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.327485][ T9246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.335660][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.344187][ T9246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.406525][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.414481][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.424418][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.435588][ T9751] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.442757][ T9751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.452155][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.461904][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.474005][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.483929][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.504943][ T9246] Bluetooth: hci4: command 0x041b tx timeout [ 67.527310][ T8643] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 67.547387][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.556915][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.566495][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.575913][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.584291][ T9751] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.591395][ T9751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.599491][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.609352][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.618382][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.627586][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.636767][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.646398][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.656102][ T8452] device veth0_macvtap entered promiscuous mode [ 67.673196][ T8454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.685242][ T8454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.703218][ T8643] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 67.713938][ T8643] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 67.732057][ T8456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.742818][ T8456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.756486][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.764490][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.773479][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.782557][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.792574][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.801486][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.811187][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.820396][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.829284][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.838637][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.848428][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.857463][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.869458][ T8452] device veth1_macvtap entered promiscuous mode [ 67.891038][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.902223][ T8643] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 67.916557][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.924124][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.946224][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.978274][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.987669][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.998830][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.008103][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.016905][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.024344][ T9751] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.035262][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.057851][ T8452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.078748][ T8452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.090170][ T8452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.104568][ T8452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.113732][ T8452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.113823][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 68.143978][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.154436][ T8456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.163318][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.172389][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.182457][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.192545][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.202674][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.209853][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.262624][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.272297][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.283425][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.292899][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.299982][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.308009][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.317636][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.325211][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.332633][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.341430][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.345050][ T5] Bluetooth: hci0: command 0x040f tx timeout [ 68.349860][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.367507][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.395216][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.403996][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.413538][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.422949][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.435884][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.444333][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.454573][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.518285][ T8471] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.545643][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.558599][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.567338][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.577625][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.586798][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.597174][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.610346][ T8458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.626007][ T8456] device veth0_vlan entered promiscuous mode [ 68.638511][ T8456] device veth1_vlan entered promiscuous mode [ 68.652120][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.683434][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.692619][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.707177][ T5] Bluetooth: hci1: command 0x040f tx timeout [ 68.737803][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.760213][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.769301][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.779604][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.789184][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.798275][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.807407][ T9569] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.814460][ T9569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.823033][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.832494][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.841458][ T9569] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.848683][ T9569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.857655][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.887634][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.895161][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.902571][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.905384][ T9751] Bluetooth: hci2: command 0x040f tx timeout [ 68.912653][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.928860][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.938272][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.947214][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.956948][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.995587][ T8643] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.004268][ T8454] device veth0_vlan entered promiscuous mode [ 69.026836][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.036269][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.043873][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.052584][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.061679][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.070452][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.080334][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.089020][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.097763][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.110888][ T8456] device veth0_macvtap entered promiscuous mode [ 69.130217][ T112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.148529][ T8454] device veth1_vlan entered promiscuous mode [ 69.157763][ T5] Bluetooth: hci3: command 0x040f tx timeout [ 69.160794][ T112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.172183][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.190425][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.198681][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.211740][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.221045][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.230605][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.239215][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.247937][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.256846][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.265419][ T3764] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.272468][ T3764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.280625][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.289728][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.298385][ T3764] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.305565][ T3764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.322172][ T8471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.338970][ T8456] device veth1_macvtap entered promiscuous mode [ 69.375125][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.383385][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.392751][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.401746][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.443506][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.456231][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.468841][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.484210][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.493225][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.502260][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.511433][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.520165][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.528263][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.536633][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.545555][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.547814][ T9246] Bluetooth: hci4: command 0x040f tx timeout [ 69.554221][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.569921][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.586351][ T8454] device veth0_macvtap entered promiscuous mode [ 69.602380][ T8471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.613206][ T8456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 69.627135][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.628289][ T8456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.644834][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.646456][ T8456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.663083][ T8643] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 69.682349][ T8643] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.699943][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.709034][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.717866][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.727001][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.736630][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.745560][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.753780][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.762648][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.771133][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.779126][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.788198][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.799827][ T8454] device veth1_macvtap entered promiscuous mode [ 69.818989][ T8456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.829419][ T8456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.838241][ T8456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.847501][ T8456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.860315][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.868962][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.877658][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.893349][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.950538][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 69.985056][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r3) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000007040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007000)={&(0x7f0000006fc0)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000011) [ 70.015107][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 70.053406][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.086512][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.109707][ T8458] device veth0_vlan entered promiscuous mode 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r3) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000007040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007000)={&(0x7f0000006fc0)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000011) [ 70.135309][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.143971][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.169957][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.187769][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.210339][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.219496][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.230322][ T3159] Bluetooth: hci5: command 0x040f tx timeout [ 70.238637][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.250720][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.263575][ T8454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 70.274998][ T8454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r3) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000007040)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000007000)={&(0x7f0000006fc0)={0x30, r7, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000011) [ 70.296392][ T8454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.313631][ T8458] device veth1_vlan entered promiscuous mode 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000004f40), r3) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 70.365750][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.373687][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.395822][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.403908][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 70.445728][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.457667][ T8454] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.469725][ T2947] Bluetooth: hci0: command 0x0419 tx timeout [ 70.489273][ T8454] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.503503][ T8454] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.513952][ T8454] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.542727][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) prctl$PR_GET_FP_MODE(0x2e) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 70.676724][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.695507][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.704304][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.752698][ T2947] Bluetooth: hci1: command 0x0419 tx timeout [ 70.808046][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.851223][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.885669][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready 15:05:06 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) prctl$PR_GET_FP_MODE(0x2e) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 70.896887][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.909328][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.921090][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.964943][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.973050][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.987925][ T3159] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.007799][ T3159] Bluetooth: hci2: command 0x0419 tx timeout [ 71.012099][ T8458] device veth0_macvtap entered promiscuous mode [ 71.048770][ T8471] device veth0_vlan entered promiscuous mode [ 71.110760][ T8458] device veth1_macvtap entered promiscuous mode [ 71.142910][ T8471] device veth1_vlan entered promiscuous mode [ 71.148395][ T3253] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.155799][ T3253] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.197998][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.225702][ T3111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.228686][ T9760] Bluetooth: hci3: command 0x0419 tx timeout [ 71.233784][ T3111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.280504][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.326432][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.345236][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.355805][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.373722][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.383322][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.406708][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.418948][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.429731][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.440533][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.450555][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 71.461468][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.473661][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.487115][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.497994][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.512132][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.534837][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.544668][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 71.580285][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.596110][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.622495][ T8471] device veth0_macvtap entered promiscuous mode [ 71.632750][ T3159] Bluetooth: hci4: command 0x0419 tx timeout [ 71.641700][ T112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.643119][ T9867] loop2: detected capacity change from 0 to 16382 [ 71.653597][ T112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.661071][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.687045][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.696382][ T9867] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 71.704530][ T9867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.715377][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.724186][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.734173][ T9867] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 71.745849][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.755092][ T9867] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 71.771097][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.787907][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.799781][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.818080][ T8458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.845043][ T8458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.856615][ T9864] block nbd2: shutting down sockets [ 71.901405][ T9874] kAFS: unparsable volume name [ 71.904857][ T8458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.945639][ T8458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.956251][ T9870] loop2: detected capacity change from 0 to 16382 [ 71.973444][ T9870] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 71.984001][ T9870] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.994639][ T8471] device veth1_macvtap entered promiscuous mode [ 72.003351][ T9867] block nbd2: shutting down sockets [ 72.006565][ T9873] [ 72.010948][ T9873] ====================================================== [ 72.017962][ T9873] WARNING: possible circular locking dependency detected [ 72.024975][ T9873] 5.14.0-rc1-syzkaller #0 Not tainted [ 72.030341][ T9873] ------------------------------------------------------ [ 72.037355][ T9873] syz-executor.1/9873 is trying to acquire lock: [ 72.043692][ T9873] ffffffff8c7d6b20 (fs_reclaim){+.+.}-{0:0}, at: __fs_reclaim_acquire+0x0/0x30 [ 72.052690][ T9873] [ 72.052690][ T9873] but task is already holding lock: [ 72.060041][ T9873] ffff8880b9d4d0c8 (lock#2){-.-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 72.068583][ T9873] [ 72.068583][ T9873] which lock already depends on the new lock. [ 72.068583][ T9873] [ 72.078972][ T9873] [ 72.078972][ T9873] the existing dependency chain (in reverse order) is: [ 72.087993][ T9873] [ 72.087993][ T9873] -> #1 (lock#2){-.-.}-{2:2}: [ 72.094855][ T9873] lock_acquire+0x182/0x4a0 [ 72.100056][ T9873] local_lock_acquire+0x23/0x130 [ 72.105522][ T9873] free_unref_page+0x242/0x550 [ 72.110798][ T9873] __mmdrop+0xae/0x3f0 [ 72.115378][ T9873] finish_task_switch+0x221/0x630 [ 72.120917][ T9873] __schedule+0xc0f/0x11f0 [ 72.125892][ T9873] preempt_schedule_irq+0xe3/0x190 [ 72.131516][ T9873] irqentry_exit+0x56/0x90 [ 72.136442][ T9873] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 72.143037][ T9873] lock_acquire+0x1e7/0x4a0 [ 72.148057][ T9873] __fs_reclaim_acquire+0x20/0x30 [ 72.153612][ T9873] fs_reclaim_acquire+0x59/0xf0 [ 72.158973][ T9873] kmem_cache_alloc+0x3a/0x340 [ 72.164342][ T9873] ptlock_alloc+0x1c/0x60 [ 72.169227][ T9873] pte_alloc_one+0xc3/0x320 [ 72.174250][ T9873] do_read_fault+0x2ed/0x650 [ 72.179354][ T9873] handle_mm_fault+0x17e5/0x2500 [ 72.184806][ T9873] do_user_addr_fault+0x8ce/0x10c0 [ 72.190436][ T9873] exc_page_fault+0xa1/0x1e0 [ 72.195674][ T9873] asm_exc_page_fault+0x1e/0x30 [ 72.201041][ T9873] [ 72.201041][ T9873] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 72.208246][ T9873] check_prevs_add+0x4f9/0x5b30 [ 72.213634][ T9873] __lock_acquire+0x4476/0x6100 [ 72.219015][ T9873] lock_acquire+0x182/0x4a0 [ 72.224035][ T9873] __fs_reclaim_acquire+0x20/0x30 [ 72.229593][ T9873] fs_reclaim_acquire+0x59/0xf0 [ 72.234984][ T9873] prepare_alloc_pages+0x151/0x5a0 [ 72.240713][ T9873] __alloc_pages+0x14d/0x5f0 [ 72.245829][ T9873] stack_depot_save+0x361/0x490 [ 72.251207][ T9873] save_stack+0xf9/0x1f0 [ 72.255996][ T9873] __set_page_owner+0x42/0x2f0 [ 72.261278][ T9873] __alloc_pages_bulk+0x9f2/0x1090 [ 72.266903][ T9873] __vmalloc_node_range+0x3ad/0x7f0 [ 72.272630][ T9873] __vmalloc+0x75/0x80 [ 72.277225][ T9873] snd_dma_vmalloc_alloc+0x48/0x70 [ 72.282853][ T9873] snd_dma_alloc_pages+0x104/0x1d0 [ 72.288514][ T9873] snd_pcm_lib_malloc_pages+0x323/0x720 [ 72.294586][ T9873] snd_pcm_hw_params+0x46d/0x1740 [ 72.300250][ T9873] snd_pcm_oss_change_params_locked+0x245a/0x4390 [ 72.307270][ T9873] snd_pcm_oss_sync+0x587/0xee0 [ 72.312638][ T9873] snd_pcm_oss_release+0x119/0x270 [ 72.318265][ T9873] __fput+0x352/0x7b0 [ 72.322760][ T9873] task_work_run+0x146/0x1c0 [ 72.327878][ T9873] exit_to_user_mode_prepare+0x201/0x220 [ 72.334038][ T9873] syscall_exit_to_user_mode+0x26/0x60 [ 72.340022][ T9873] do_syscall_64+0x4c/0xb0 [ 72.344960][ T9873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.351370][ T9873] [ 72.351370][ T9873] other info that might help us debug this: [ 72.351370][ T9873] [ 72.361676][ T9873] Possible unsafe locking scenario: [ 72.361676][ T9873] [ 72.369118][ T9873] CPU0 CPU1 [ 72.374493][ T9873] ---- ---- [ 72.379936][ T9873] lock(lock#2); [ 72.383665][ T9873] lock(fs_reclaim); [ 72.390154][ T9873] lock(lock#2); [ 72.396308][ T9873] lock(fs_reclaim); [ 72.400279][ T9873] [ 72.400279][ T9873] *** DEADLOCK *** [ 72.400279][ T9873] [ 72.408407][ T9873] 2 locks held by syz-executor.1/9873: [ 72.413857][ T9873] #0: ffff888029e84440 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x34b/0xee0 [ 72.424475][ T9873] #1: ffff8880b9d4d0c8 (lock#2){-.-.}-{2:2}, at: local_lock_acquire+0x7/0x130 [ 72.433443][ T9873] [ 72.433443][ T9873] stack backtrace: [ 72.439330][ T9873] CPU: 1 PID: 9873 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 72.448043][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 72.460104][ T9873] Call Trace: [ 72.463387][ T9873] dump_stack_lvl+0x1ae/0x29f [ 72.468068][ T9873] ? show_regs_print_info+0x12/0x12 [ 72.473269][ T9873] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 72.478988][ T9873] ? save_trace+0x5a/0x9f0 [ 72.483407][ T9873] print_circular_bug+0xb17/0xdc0 [ 72.488430][ T9873] ? hlock_conflict+0x1f0/0x1f0 [ 72.493275][ T9873] ? __bfs+0x369/0x700 [ 72.497336][ T9873] ? check_path+0x40/0x40 [ 72.501659][ T9873] ? noop_count+0x30/0x30 [ 72.505988][ T9873] ? save_trace+0x5a/0x9f0 [ 72.510398][ T9873] check_noncircular+0x2cc/0x390 [ 72.515329][ T9873] ? add_chain_block+0x850/0x850 [ 72.520264][ T9873] ? trace_lock_release+0x4f/0x150 [ 72.525370][ T9873] ? lock_release+0x81/0x7b0 [ 72.529966][ T9873] ? stack_trace_save+0x1e0/0x1e0 [ 72.534982][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.539478][ T9873] check_prevs_add+0x4f9/0x5b30 [ 72.544328][ T9873] ? stack_trace_save+0x1e0/0x1e0 [ 72.549353][ T9873] ? stack_trace_save+0x1e0/0x1e0 [ 72.554386][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.558892][ T9873] ? reacquire_held_locks+0x5f0/0x5f0 [ 72.564265][ T9873] ? lockdep_lock+0x102/0x2c0 [ 72.568945][ T9873] ? lockdep_unlock+0x145/0x2e0 [ 72.573816][ T9873] ? lockdep_lock+0x2c0/0x2c0 [ 72.578510][ T9873] ? arch_stack_walk+0x98/0xe0 [ 72.583267][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.587763][ T9873] ? __bfs+0x700/0x700 [ 72.591816][ T9873] ? lockdep_unlock+0x145/0x2e0 [ 72.596660][ T9873] ? trace_lock_acquire+0x190/0x190 [ 72.601856][ T9873] ? __lock_acquire+0x44fa/0x6100 [ 72.606879][ T9873] ? check_prevs_add+0x1f57/0x5b30 [ 72.611985][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.616478][ T9873] ? trace_lock_acquire+0x190/0x190 [ 72.621687][ T9873] ? lockdep_unlock+0x145/0x2e0 [ 72.626530][ T9873] ? __bfs+0x700/0x700 [ 72.630602][ T9873] ? __lock_acquire+0x145b/0x6100 [ 72.635632][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.640133][ T9873] ? lockdep_lock+0x102/0x2c0 [ 72.644804][ T9873] ? lockdep_count_forward_deps+0x240/0x240 [ 72.650717][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.655214][ T9873] ? __rmqueue_pcplist+0x19bc/0x2030 [ 72.660502][ T9873] __lock_acquire+0x4476/0x6100 [ 72.665346][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.669844][ T9873] ? mark_lock+0x199/0x1eb0 [ 72.674343][ T9873] ? trace_lock_acquire+0x190/0x190 [ 72.679880][ T9873] ? rcu_read_lock_sched_held+0x87/0x110 [ 72.685507][ T9873] ? __bfs+0x700/0x700 [ 72.689574][ T9873] ? __lock_acquire+0x145b/0x6100 [ 72.694589][ T9873] ? trace_lock_acquire+0x190/0x190 [ 72.699786][ T9873] ? rcu_read_lock_sched_held+0x87/0x110 [ 72.705501][ T9873] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 72.711477][ T9873] ? __lock_acquire+0x145b/0x6100 [ 72.716506][ T9873] lock_acquire+0x182/0x4a0 [ 72.721007][ T9873] ? warn_alloc+0x340/0x340 [ 72.725523][ T9873] ? read_lock_is_recursive+0x10/0x10 [ 72.730897][ T9873] ? memset+0x1f/0x40 [ 72.735004][ T9873] ? unwind_next_frame+0x13e6/0x1fa0 [ 72.740286][ T9873] __fs_reclaim_acquire+0x20/0x30 [ 72.745309][ T9873] ? warn_alloc+0x340/0x340 [ 72.749828][ T9873] fs_reclaim_acquire+0x59/0xf0 [ 72.754673][ T9873] prepare_alloc_pages+0x151/0x5a0 [ 72.760044][ T9873] __alloc_pages+0x14d/0x5f0 [ 72.764910][ T9873] ? __rmqueue_pcplist+0x2030/0x2030 [ 72.770186][ T9873] ? arch_stack_walk+0xa6/0xe0 [ 72.774991][ T9873] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.781156][ T9873] ? alloc_pages+0x3f3/0x500 [ 72.785743][ T9873] stack_depot_save+0x361/0x490 [ 72.790615][ T9873] save_stack+0xf9/0x1f0 [ 72.794965][ T9873] ? __reset_page_owner+0x1a0/0x1a0 [ 72.800162][ T9873] ? __alloc_pages_bulk+0x9f2/0x1090 [ 72.805623][ T9873] ? __vmalloc_node_range+0x3ad/0x7f0 [ 72.811110][ T9873] ? __vmalloc+0x75/0x80 [ 72.815352][ T9873] ? snd_dma_vmalloc_alloc+0x48/0x70 [ 72.820638][ T9873] ? snd_dma_alloc_pages+0x104/0x1d0 [ 72.825916][ T9873] ? snd_pcm_lib_malloc_pages+0x323/0x720 [ 72.831991][ T9873] ? snd_pcm_hw_params+0x46d/0x1740 [ 72.837182][ T9873] ? snd_pcm_oss_change_params_locked+0x245a/0x4390 [ 72.843881][ T9873] ? snd_pcm_oss_sync+0x587/0xee0 [ 72.849088][ T9873] ? snd_pcm_oss_release+0x119/0x270 [ 72.854374][ T9873] ? __fput+0x352/0x7b0 [ 72.858524][ T9873] ? task_work_run+0x146/0x1c0 [ 72.863287][ T9873] ? exit_to_user_mode_prepare+0x201/0x220 [ 72.869092][ T9873] ? syscall_exit_to_user_mode+0x26/0x60 [ 72.874731][ T9873] ? do_syscall_64+0x4c/0xb0 [ 72.879326][ T9873] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 72.885390][ T9873] ? preempt_count_add+0x66/0x130 [ 72.890495][ T9873] __set_page_owner+0x42/0x2f0 [ 72.895257][ T9873] ? post_alloc_hook+0x102/0x220 [ 72.900274][ T9873] __alloc_pages_bulk+0x9f2/0x1090 [ 72.905418][ T9873] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 72.911001][ T9873] ? rcu_read_lock_sched_held+0x87/0x110 [ 72.916635][ T9873] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 72.922706][ T9873] ? __kmalloc_node+0x29b/0x430 [ 72.927562][ T9873] ? __vmalloc_node_range+0x2c5/0x7f0 [ 72.932949][ T9873] __vmalloc_node_range+0x3ad/0x7f0 [ 72.938194][ T9873] ? snd_dma_vmalloc_alloc+0x48/0x70 [ 72.943654][ T9873] __vmalloc+0x75/0x80 [ 72.947731][ T9873] ? snd_dma_vmalloc_alloc+0x48/0x70 [ 72.953046][ T9873] snd_dma_vmalloc_alloc+0x48/0x70 [ 72.958152][ T9873] snd_dma_alloc_pages+0x104/0x1d0 [ 72.963348][ T9873] snd_pcm_lib_malloc_pages+0x323/0x720 [ 72.968911][ T9873] snd_pcm_hw_params+0x46d/0x1740 [ 72.973943][ T9873] ? snd_pcm_kernel_ioctl+0x106/0x1380 [ 72.979407][ T9873] ? snd_interval_refine+0x625/0xa70 [ 72.984685][ T9873] ? snd_pcm_drop+0xb1/0x290 [ 72.989273][ T9873] snd_pcm_oss_change_params_locked+0x245a/0x4390 [ 72.995715][ T9873] ? snd_pcm_oss_read1+0xe10/0xe10 [ 73.000822][ T9873] ? snd_pcm_oss_sync+0x34b/0xee0 [ 73.005841][ T9873] ? mutex_lock_io_nested+0x60/0x60 [ 73.011045][ T9873] ? __fsnotify_parent+0x483/0x670 [ 73.016501][ T9873] snd_pcm_oss_sync+0x587/0xee0 [ 73.021360][ T9873] snd_pcm_oss_release+0x119/0x270 [ 73.026472][ T9873] ? snd_pcm_oss_open+0x2260/0x2260 [ 73.031667][ T9873] __fput+0x352/0x7b0 [ 73.035651][ T9873] task_work_run+0x146/0x1c0 [ 73.040586][ T9873] exit_to_user_mode_prepare+0x201/0x220 [ 73.046212][ T9873] ? trace_irq_disable_rcuidle+0x11/0x170 [ 73.051942][ T9873] syscall_exit_to_user_mode+0x26/0x60 [ 73.057424][ T9873] do_syscall_64+0x4c/0xb0 [ 73.061839][ T9873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.067731][ T9873] RIP: 0033:0x4193eb [ 73.071618][ T9873] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 73.091216][ T9873] RSP: 002b:00007ffc4d28cc10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 73.099730][ T9873] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004193eb [ 73.107711][ T9873] RDX: 00000000005739b8 RSI: ffffffff81a64552 RDI: 0000000000000003 [ 73.115691][ T9873] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c1232ac [ 73.123767][ T9873] R10: 00000000000010df R11: 0000000000000293 R12: 0000000000011932 [ 73.131749][ T9873] R13: 00000000000003e8 R14: 000000000056bf80 R15: 00000000000118b5 [ 73.139732][ T9873] ? trace_user_enter+0xb2/0x210 [ 73.144675][ T9873] BUG: sleeping function called from invalid context at mm/page_alloc.c:5167 [ 73.153419][ T9873] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 9873, name: syz-executor.1 [ 73.162775][ T9873] INFO: lockdep is turned off. [ 73.167725][ T9873] irq event stamp: 3744 [ 73.171864][ T9873] hardirqs last enabled at (3743): [] _raw_spin_unlock_irqrestore+0x8b/0x120 [ 73.182273][ T9873] hardirqs last disabled at (3744): [] __alloc_pages_bulk+0x801/0x1090 [ 73.192109][ T9873] softirqs last enabled at (3452): [] __irq_exit_rcu+0x21b/0x260 [ 73.201572][ T9873] softirqs last disabled at (2847): [] __irq_exit_rcu+0x21b/0x260 [ 73.210935][ T9873] CPU: 1 PID: 9873 Comm: syz-executor.1 Not tainted 5.14.0-rc1-syzkaller #0 [ 73.219870][ T9873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.230044][ T9873] Call Trace: [ 73.233339][ T9873] dump_stack_lvl+0x1ae/0x29f [ 73.238023][ T9873] ? __irq_exit_rcu+0x21b/0x260 [ 73.242877][ T9873] ? show_regs_print_info+0x12/0x12 [ 73.248079][ T9873] ? log_buf_vmcoreinfo_setup+0x498/0x498 [ 73.253810][ T9873] ___might_sleep+0x4e5/0x6b0 [ 73.258582][ T9873] ? is_module_text_address+0x16/0x130 [ 73.264040][ T9873] ? __might_sleep+0x100/0x100 [ 73.268834][ T9873] ? memset+0x1f/0x40 [ 73.272816][ T9873] ? unwind_next_frame+0x13e6/0x1fa0 [ 73.278111][ T9873] prepare_alloc_pages+0x1c0/0x5a0 [ 73.283226][ T9873] __alloc_pages+0x14d/0x5f0 [ 73.287811][ T9873] ? __rmqueue_pcplist+0x2030/0x2030 [ 73.293089][ T9873] ? arch_stack_walk+0xa6/0xe0 [ 73.297850][ T9873] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.303915][ T9873] ? alloc_pages+0x3f3/0x500 [ 73.308500][ T9873] stack_depot_save+0x361/0x490 [ 73.313351][ T9873] save_stack+0xf9/0x1f0 [ 73.317732][ T9873] ? __reset_page_owner+0x1a0/0x1a0 [ 73.322962][ T9873] ? __alloc_pages_bulk+0x9f2/0x1090 [ 73.328246][ T9873] ? __vmalloc_node_range+0x3ad/0x7f0 [ 73.333620][ T9873] ? __vmalloc+0x75/0x80 [ 73.337852][ T9873] ? snd_dma_vmalloc_alloc+0x48/0x70 [ 73.343131][ T9873] ? snd_dma_alloc_pages+0x104/0x1d0 [ 73.348671][ T9873] ? snd_pcm_lib_malloc_pages+0x323/0x720 [ 73.354395][ T9873] ? snd_pcm_hw_params+0x46d/0x1740 [ 73.359585][ T9873] ? snd_pcm_oss_change_params_locked+0x245a/0x4390 [ 73.366186][ T9873] ? snd_pcm_oss_sync+0x587/0xee0 [ 73.371222][ T9873] ? snd_pcm_oss_release+0x119/0x270 [ 73.376500][ T9873] ? __fput+0x352/0x7b0 [ 73.380656][ T9873] ? task_work_run+0x146/0x1c0 [ 73.385416][ T9873] ? exit_to_user_mode_prepare+0x201/0x220 [ 73.391220][ T9873] ? syscall_exit_to_user_mode+0x26/0x60 [ 73.396866][ T9873] ? do_syscall_64+0x4c/0xb0 [ 73.401461][ T9873] ? entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.407712][ T9873] ? preempt_count_add+0x66/0x130 [ 73.412733][ T9873] __set_page_owner+0x42/0x2f0 [ 73.417599][ T9873] ? post_alloc_hook+0x102/0x220 [ 73.422538][ T9873] __alloc_pages_bulk+0x9f2/0x1090 [ 73.427656][ T9873] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 73.433202][ T9873] ? rcu_read_lock_sched_held+0x87/0x110 [ 73.438850][ T9873] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 73.444850][ T9873] ? __kmalloc_node+0x29b/0x430 [ 73.449690][ T9873] ? __vmalloc_node_range+0x2c5/0x7f0 [ 73.455080][ T9873] __vmalloc_node_range+0x3ad/0x7f0 [ 73.460282][ T9873] ? snd_dma_vmalloc_alloc+0x48/0x70 [ 73.465573][ T9873] __vmalloc+0x75/0x80 [ 73.469633][ T9873] ? snd_dma_vmalloc_alloc+0x48/0x70 [ 73.474909][ T9873] snd_dma_vmalloc_alloc+0x48/0x70 [ 73.480010][ T9873] snd_dma_alloc_pages+0x104/0x1d0 [ 73.485119][ T9873] snd_pcm_lib_malloc_pages+0x323/0x720 [ 73.490899][ T9873] snd_pcm_hw_params+0x46d/0x1740 [ 73.495923][ T9873] ? snd_pcm_kernel_ioctl+0x106/0x1380 [ 73.501375][ T9873] ? snd_interval_refine+0x625/0xa70 [ 73.506652][ T9873] ? snd_pcm_drop+0xb1/0x290 [ 73.511249][ T9873] snd_pcm_oss_change_params_locked+0x245a/0x4390 [ 73.517688][ T9873] ? snd_pcm_oss_read1+0xe10/0xe10 [ 73.522879][ T9873] ? snd_pcm_oss_sync+0x34b/0xee0 [ 73.527894][ T9873] ? mutex_lock_io_nested+0x60/0x60 [ 73.533090][ T9873] ? __fsnotify_parent+0x483/0x670 [ 73.538208][ T9873] snd_pcm_oss_sync+0x587/0xee0 [ 73.543060][ T9873] snd_pcm_oss_release+0x119/0x270 [ 73.548163][ T9873] ? snd_pcm_oss_open+0x2260/0x2260 [ 73.553353][ T9873] __fput+0x352/0x7b0 [ 73.557330][ T9873] task_work_run+0x146/0x1c0 [ 73.561922][ T9873] exit_to_user_mode_prepare+0x201/0x220 [ 73.567557][ T9873] ? trace_irq_disable_rcuidle+0x11/0x170 [ 73.573275][ T9873] syscall_exit_to_user_mode+0x26/0x60 [ 73.578824][ T9873] do_syscall_64+0x4c/0xb0 [ 73.583233][ T9873] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 73.589124][ T9873] RIP: 0033:0x4193eb [ 73.593011][ T9873] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 73.612609][ T9873] RSP: 002b:00007ffc4d28cc10 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 73.621016][ T9873] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00000000004193eb [ 73.628984][ T9873] RDX: 00000000005739b8 RSI: ffffffff81a64552 RDI: 0000000000000003 [ 73.637037][ T9873] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2c1232ac [ 73.645009][ T9873] R10: 00000000000010df R11: 0000000000000293 R12: 0000000000011932 [ 73.652972][ T9873] R13: 00000000000003e8 R14: 000000000056bf80 R15: 00000000000118b5 [ 73.660949][ T9873] ? trace_user_enter+0xb2/0x210 [ 73.688462][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.698621][ T9870] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 73.703842][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.724740][ T9870] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 73.734525][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.761975][ T8643] device veth0_vlan entered promiscuous mode [ 73.771966][ T3159] Bluetooth: hci5: command 0x0419 tx timeout [ 73.816384][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.824145][ T9829] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.859834][ T8643] device veth1_vlan entered promiscuous mode [ 73.874313][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.892816][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:05:09 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x400000000000, 0x2, 0x0, 0x7, 0x1f, 0x800, 0x16d06a71, 0x100000000}, &(0x7f0000000040)={0x666, 0x1, 0x0, 0x6, 0x401, 0x4, 0x8, 0xed}, &(0x7f0000000080)={0x0, 0x3, 0x561d9e5e, 0xffffffffffff7fff, 0x80, 0x0, 0xbbe, 0x28dc}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x6, 0x7f, 0x0, 0xba0, 0x3ff, 0x0, 0x2}, &(0x7f00000001c0)={0x4, 0x80000000, 0x4, 0xc104, 0x73b7, 0x7f, 0x3f, 0x5}, &(0x7f0000000200)={0x3b6, 0x5, 0x8, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x9}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) clock_getres(0x10c7661327295d8b, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x54, 0xad, 0x101, 0x80, 0x9, 0x4, 0x72a, 0x9}, &(0x7f00000003c0)={0x3, 0x6, 0x8, 0x8, 0x7, 0x9, 0x828b, 0x7fff}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x9, 0xb92e, 0x5, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100]}, 0x8}) pselect6(0x40, &(0x7f0000000500)={0x1, 0x9, 0x100000001, 0x0, 0x7, 0x4, 0x71f, 0x8}, &(0x7f0000000540)={0x3, 0xb3, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x6, 0x7fff}, &(0x7f0000000580)={0x0, 0x2, 0x3e4ab37d, 0x1, 0x3bd, 0x2c8b, 0x20, 0x401}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8001]}, 0x8}) clock_getres(0x3, &(0x7f0000000680)) clock_getres(0x5, &(0x7f00000006c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/32, 0x20}], 0x4, &(0x7f0000000a00)=""/58, 0x3a}, 0x1}], 0x1, 0x40, &(0x7f0000000ac0)={r2, r3+60000000}) chroot(&(0x7f0000000b00)='./file0\x00') syz_mount_image$afs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="0ffd87af8b4763994e8eb29465cc5c8093f7ca4955a0f5a1524ccfdcf6329b3be69c648a58537d2e833f3941487796ef8d7e73372b5425e0a93622bab338d9a0", 0x40, 0x8}], 0x2000000, &(0x7f0000000c40)={[{@flock_write}], [{@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}]}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000c80)=""/98, 0x62}, &(0x7f0000000d00), 0x20}, 0xa0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e00)={0xc1, 0x3, 0xffffffff, 0x400, 0x5, 0xfffffffffffffff8, 0x56f, 0x8}, &(0x7f0000000e40)={0x101, 0x2, 0x6, 0x8001, 0x9, 0x0, 0x4, 0x9}, &(0x7f0000000e80)={0x6, 0x2, 0xb6e7, 0xffffffffffffffff, 0x1db250e2, 0x0, 0x2, 0x2}, &(0x7f0000000f00)={r4, r5+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x3f]}, 0x8}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={0x0, 0x401, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x19, 0xc, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa, 0xd, 0x4, 0x100, 0x4}, @generic={0x80, 0x8, 0x7, 0x8564, 0x7}, @alu={0x4, 0x1, 0xc, 0x6, 0x1, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x3, 0x3, 0x8, 0x3, 0x50, 0x4}, @ldst={0x0, 0x3, 0x0, 0x7, 0x3, 0x20, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xdd}, @exit, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000001080)='syzkaller\x00', 0x8, 0x6, &(0x7f00000010c0)=""/6, 0x40f00, 0x14, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0xe, 0x0, 0xfffffeff}, 0x10}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000001200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/63, 0x3f}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/190, 0xbe}], 0x3, &(0x7f0000001440)=""/38, 0x26}, 0x2}], 0x1, 0x40, 0x0) 15:05:09 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f0000003580)=""/75, 0x4b}, {&(0x7f0000003600)=""/180, 0xb4}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/176, 0xb0}, {&(0x7f0000003800)}, {&(0x7f0000003840)=""/75, 0x4b}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x7, &(0x7f0000004940)=""/230, 0xe6}, 0x7}, {{&(0x7f0000004a40)=@phonet, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)=""/243, 0xf3}, {&(0x7f0000004bc0)=""/247, 0xf7}], 0x2, &(0x7f0000004d00)=""/226, 0xe2}, 0x7f910}], 0x2, 0x2020, &(0x7f0000004ec0)={r4, r5+10000000}) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 73.914739][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.936328][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.953460][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.970878][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.981398][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 73.997444][ T9887] kAFS: unparsable volume name [ 73.998632][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.018453][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.074504][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.091172][ T9760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.111635][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.126793][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.137965][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.150186][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.161601][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.173356][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.184078][ T8471] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.196108][ T8471] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.208812][ T8471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.225242][ T8458] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 74.232983][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.243616][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.267538][ T8471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.276460][ T8471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.285489][ T8471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.294407][ T8471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.321664][ T8643] device veth0_macvtap entered promiscuous mode [ 74.339826][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.349933][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.358975][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.370368][ T8643] device veth1_macvtap entered promiscuous mode [ 74.393050][ T3111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.403646][ T8471] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 74.410536][ T3111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.421498][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.442838][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.453416][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.466494][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.476598][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.487663][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.498045][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.509883][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.520975][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 74.531884][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.543215][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.552675][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.563428][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.571378][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.581211][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.595196][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.607753][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.618435][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.629757][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.640467][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.651916][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.662094][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.673193][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.685090][ T8643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 74.695748][ T8643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.707116][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.718679][ T8458] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 74.736334][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.746369][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.758450][ T8643] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.768423][ T8643] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.777848][ T8643] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.786893][ T8643] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.806080][ T8471] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 74.807195][ T3111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.838825][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.841509][ T3111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.849506][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.888162][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.897919][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.937514][ T8643] ieee80211 phy13: Selected rate control algorithm 'minstrel_ht' [ 74.954022][ T3111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.969752][ T3111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 15:05:11 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000900)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000940)) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40094) [ 74.998251][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.010684][ T3111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.037642][ T3111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.043964][ T8643] ieee80211 phy14: Selected rate control algorithm 'minstrel_ht' [ 75.056736][ T9765] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.105770][ T9960] fuse: Bad value for 'fd' [ 75.108173][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.126226][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.137993][ T9964] fuse: Bad value for 'fd' 15:05:11 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) recvmmsg(r8, &(0x7f0000004700)=[{{&(0x7f0000002d00)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/6, 0x6}, {&(0x7f0000002dc0)=""/251, 0xfb}, {&(0x7f0000002ec0)=""/180, 0xb4}, {&(0x7f0000002f80)=""/123, 0x7b}, {&(0x7f0000003000)=""/65, 0x41}], 0x5, &(0x7f0000003100)=""/44, 0x2c}, 0x27}, {{&(0x7f0000003140)=@xdp, 0x80, &(0x7f0000003200)=[{&(0x7f00000031c0)}], 0x1, &(0x7f0000003240)=""/119, 0x77}, 0x1}, {{&(0x7f00000032c0)=@xdp, 0x80, &(0x7f0000004600)=[{&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/138, 0x8a}, {&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/222, 0xde}], 0x5, &(0x7f0000004680)=""/108, 0x6c}, 0xffffffff}], 0x3, 0x100, &(0x7f00000047c0)={0x0, 0x989680}) [ 75.159141][ T9569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 15:05:11 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) clock_gettime(0x0, &(0x7f0000004e80)) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) 15:05:11 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x7fff, 0xe6, 0x2, 0x0, 0x3, 0x8001, 0x1f, 0x1}, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x9, 0x8, 0x101, 0x2, 0x8}, &(0x7f0000000080)={0x9, 0x10001, 0x2fe, 0xe11, 0x6, 0x2, 0x4, 0x4}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_open_dev$ndb(&(0x7f0000005ac0), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) syz_mount_image$f2fs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0xfd6a, 0x3, &(0x7f0000005e00)=[{&(0x7f0000005b80)="600600274116f85d0eec4dbd6324cb148996be0bd022de57c5be97b86556f4b56350e8ca944ac9e745624941476b17a8a35869fc3aed5da9bd2bf0fc8b577544cbb4a2f12875b8e3f2916f6e2ada3fd047110a51b1aead67144788660a1c5d9c180a9dc85675b7eb2a71a4f3247a4e1fa88c683e545dd79944ad3e0f59998cd85b9fd9ef2e5240f6f77613e50717f383ca84a04ed35bb8ac1f", 0x99, 0x5}, {&(0x7f0000005c40)="6770be98c9daaed1a52ee8fd1e267e92f94fec7e096177395108f787aa6e0a071173bca9012a2691d5959347dc5f925c6427f0486febc0b5a3cde762d562f892ee79ef39f5f94f47583871542b6b6fe48b9deca9ee7de9cc109976763774f3be86645ffd6a92db7c0efb598edc8a0e147a265f94a7fd2fbbbe2f73333ad725494ccb7d8b59b638b60f8ab4c6f482c4aec358b2cad8d5157eb6690e3c02330a08c637e27c8e114eeb9e2a462fee47cff2c5a53b4a3173c7a900187bb9e5a20a100f77dc9325aba017312b54081babaee1592c", 0xd2, 0x5}, {&(0x7f0000005d40)="9d9e746f55af3310675204b9af4c77fe85e808d2828e286412a035d7c725ab9bdcbc4c0f545cd65b3664c394e344328de1040ad6a4935b96261b18efb21c04611200df0b15de43365227002d1bc4a1738e32317f41cd2ea69b333d3d04563330bd77ab1b9ec27eaec02fb41f791dfd77a3ad56ed0f86fa11a41e8b79bf36544d161c7a37fe591771843aea53b727d0d2cfd7c8b533069c22b49982c123f3ddd8f53ce527ee216b3c86438496b74c", 0xae, 0xfffffffffffffe01}], 0x8088, &(0x7f0000005e80)={[{@noextent_cache}, {@nodiscard}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd#\x00'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000005ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_rr_get_interval(r3, &(0x7f0000007f00)) r4 = syz_open_dev$vcsa(&(0x7f0000007f40), 0xa49, 0x42a200) r5 = openat2(r4, &(0x7f0000007f80)='./file0\x00', &(0x7f0000007fc0)={0x0, 0x194, 0x11}, 0x18) utime(&(0x7f0000008000)='./file0/file0\x00', &(0x7f0000008040)={0x7fff, 0x4}) syz_mount_image$ntfs(&(0x7f0000008080), &(0x7f00000080c0)='./file0/file1\x00', 0x1ff, 0x1, &(0x7f0000008180)=[{&(0x7f0000008100)="593586d09e907b5e05b4094eb19d8bca0c1929ce808b61907dfa4eaa43a27fc20e218d024e0e0210d7253c46cf22e7dcc4e2ee6ad03de8662890dc8235143ba0b59152675d02434bcbf179d8c9578236c03b1810de5d9bade8b5", 0x5a, 0x7}], 0x2241800, &(0x7f00000081c0)={[{@errors_recover}, {@disable_sparse_yes}, {@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}], [{@appraise}]}) syz_mount_image$befs(&(0x7f0000008240), &(0x7f0000008280)='./file0/file1\x00', 0xffff, 0x4, &(0x7f0000008540)=[{&(0x7f00000082c0)="e4e6182aa25136e0542a5b56585a737a90e58f05088110b603fa035f2459dc63ef", 0x21, 0x7}, {&(0x7f0000008300)="23be246be50cd0a42d9c437e8634e11aea90c4896ef6f39e4003f734e81e71bb2f398bfe1851363d7238ab30b8c4308a315e331bc4f9acc112597c", 0x3b, 0x1f}, {&(0x7f0000008340)="a00143165dbc4ce4147b757b098d45ee22a34a2aaa7cb28e37ba6f0d58347d3b6eb56229b528952a6790b1d31fe47dc36711a3e6550ab21e4bdaf98b701f781586e82d9a822cf2ef83141f517ff8c7a48e5e305f106c64070afad7c404efe2b4431b9a9f041ce586eb1758b60637f946c2e0ed2c8c55e393df8821361f90b58fac90a0b47349f03b90c9e03e57ed9f6dff64e6ddc5d5e2ba20c3669b8ae0d23c38235d6014c2bf0d6687782401bf66e199dcf12ac7f42f62573e1e21b3180ff05f67ff382f2b9867041df422994a4c0da10628137fdb217eae", 0xd9, 0x3ff}, {&(0x7f0000008440)="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", 0xfd, 0x9}], 0x802886, &(0x7f00000085c0)={[{'MAY_EXEC'}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x35, 0x34, 0x38, 0x32, 0x32, 0x34], 0x2d, [0x61, 0x35, 0x38, 0x35], 0x2d, [0x30, 0x31, 0x35, 0x52], 0x2d, [0x30, 0x1, 0x37, 0x38], 0x2d, [0x65, 0x56, 0x33, 0x39, 0x64, 0x63, 0x65, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'system_u'}}]}) recvmsg(r1, &(0x7f0000008ac0)={&(0x7f0000008680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/185, 0xb9}, {&(0x7f00000087c0)=""/102, 0x66}, {&(0x7f0000008840)=""/185, 0xb9}, {&(0x7f0000008900)=""/205, 0xcd}], 0x4, &(0x7f0000008a40)=""/97, 0x61}, 0x60) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000008b40), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000008c00)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xba109c99788e7acc}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000008c80)={&(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x38}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000008cc0)={'#! ', './file0/file0', [{0x20, 'obj_user'}, {0x20, '*/,#'}, {0x20, 'befs\x00'}, {0x20, '@%\\'}, {0x20, 'disable_sparse=yes'}, {0x20, '*'}], 0xa, "c597c7a9b146c4ca72b0cf679dd3208c4899a0e1b71bd168b99ee9cd77d02ae0a9647893a12ea5cff17d72db36bd1839a21edddfdbf553cd4f418fdd1ff08c3c2779e5"}, 0x81) write$FUSE_INTERRUPT(r5, &(0x7f000000adc0)={0x10}, 0x10) 15:05:11 executing program 5: r0 = getuid() r1 = getuid() r2 = getegid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0xf, r1}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r2}, {0x8, 0x2, 0xee00}, {0x8, 0x4, r3}], {0x10, 0x7}, {0x20, 0x3}}, 0x5c, 0x3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/189, 0xbd}], 0x6, &(0x7f0000000580)=""/123, 0x7b}, 0x40000000) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r4 = getuid() syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ')(-@%,'}}, {@dont_hash}, {@subj_type}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) quotactl(0x40, &(0x7f0000000a40)='./file0\x00', r1, &(0x7f0000000a80)="7ac5df2fc5792325a365c63a191a644c5690c8b80b12574709b55da2a025603c9176e30cbc003a0d84df068a4b8b8da3ad21b50c5bcc7aa5018ccfcd8c73b9f173546965ac2cd33170ac3fa7484fb29ee8efe2ba7f2e05111b7ebbea1462556d0699ae086dbb2b60dcbde054cfc7ceaa1b5f38d355ead74db24d38e38a7cb3307af67f83764d91fe6cce98500e546b40f07c35fe7fbe6cf2df62a0843b9f2a1f596fa101dba4f52e4380661ce539e1fac1eb17425c8e3c7c3e1c61e045400f33a0aaf7cae696da7861d3a6baf4f3165a2610b20578") r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/144, 0x90, 0x2100, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x0, 0x3}}, 0x80) chroot(&(0x7f0000000cc0)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xb0000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xa0b, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003000)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x64040051}, 0x11) 15:05:11 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x400000000000, 0x2, 0x0, 0x7, 0x1f, 0x800, 0x16d06a71, 0x100000000}, &(0x7f0000000040)={0x666, 0x1, 0x0, 0x6, 0x401, 0x4, 0x8, 0xed}, &(0x7f0000000080)={0x0, 0x3, 0x561d9e5e, 0xffffffffffff7fff, 0x80, 0x0, 0xbbe, 0x28dc}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x6, 0x7f, 0x0, 0xba0, 0x3ff, 0x0, 0x2}, &(0x7f00000001c0)={0x4, 0x80000000, 0x4, 0xc104, 0x73b7, 0x7f, 0x3f, 0x5}, &(0x7f0000000200)={0x3b6, 0x5, 0x8, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x9}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) clock_getres(0x10c7661327295d8b, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x54, 0xad, 0x101, 0x80, 0x9, 0x4, 0x72a, 0x9}, &(0x7f00000003c0)={0x3, 0x6, 0x8, 0x8, 0x7, 0x9, 0x828b, 0x7fff}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x9, 0xb92e, 0x5, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100]}, 0x8}) pselect6(0x40, &(0x7f0000000500)={0x1, 0x9, 0x100000001, 0x0, 0x7, 0x4, 0x71f, 0x8}, &(0x7f0000000540)={0x3, 0xb3, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x6, 0x7fff}, &(0x7f0000000580)={0x0, 0x2, 0x3e4ab37d, 0x1, 0x3bd, 0x2c8b, 0x20, 0x401}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8001]}, 0x8}) clock_getres(0x3, &(0x7f0000000680)) clock_getres(0x5, &(0x7f00000006c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/32, 0x20}], 0x4, &(0x7f0000000a00)=""/58, 0x3a}, 0x1}], 0x1, 0x40, &(0x7f0000000ac0)={r2, r3+60000000}) chroot(&(0x7f0000000b00)='./file0\x00') syz_mount_image$afs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="0ffd87af8b4763994e8eb29465cc5c8093f7ca4955a0f5a1524ccfdcf6329b3be69c648a58537d2e833f3941487796ef8d7e73372b5425e0a93622bab338d9a0", 0x40, 0x8}], 0x2000000, &(0x7f0000000c40)={[{@flock_write}], [{@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}]}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000c80)=""/98, 0x62}, &(0x7f0000000d00), 0x20}, 0xa0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e00)={0xc1, 0x3, 0xffffffff, 0x400, 0x5, 0xfffffffffffffff8, 0x56f, 0x8}, &(0x7f0000000e40)={0x101, 0x2, 0x6, 0x8001, 0x9, 0x0, 0x4, 0x9}, &(0x7f0000000e80)={0x6, 0x2, 0xb6e7, 0xffffffffffffffff, 0x1db250e2, 0x0, 0x2, 0x2}, &(0x7f0000000f00)={r4, r5+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x3f]}, 0x8}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={0x0, 0x401, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x19, 0xc, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa, 0xd, 0x4, 0x100, 0x4}, @generic={0x80, 0x8, 0x7, 0x8564, 0x7}, @alu={0x4, 0x1, 0xc, 0x6, 0x1, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x3, 0x3, 0x8, 0x3, 0x50, 0x4}, @ldst={0x0, 0x3, 0x0, 0x7, 0x3, 0x20, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xdd}, @exit, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000001080)='syzkaller\x00', 0x8, 0x6, &(0x7f00000010c0)=""/6, 0x40f00, 0x14, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0xe, 0x0, 0xfffffeff}, 0x10}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000001200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/63, 0x3f}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/190, 0xbe}], 0x3, &(0x7f0000001440)=""/38, 0x26}, 0x2}], 0x1, 0x40, 0x0) 15:05:11 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000900)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000940)) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40094) 15:05:11 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) recvmmsg(r8, &(0x7f0000004700)=[{{&(0x7f0000002d00)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/6, 0x6}, {&(0x7f0000002dc0)=""/251, 0xfb}, {&(0x7f0000002ec0)=""/180, 0xb4}, {&(0x7f0000002f80)=""/123, 0x7b}, {&(0x7f0000003000)=""/65, 0x41}], 0x5, &(0x7f0000003100)=""/44, 0x2c}, 0x27}, {{&(0x7f0000003140)=@xdp, 0x80, &(0x7f0000003200)=[{&(0x7f00000031c0)}], 0x1, &(0x7f0000003240)=""/119, 0x77}, 0x1}, {{&(0x7f00000032c0)=@xdp, 0x80, &(0x7f0000004600)=[{&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/138, 0x8a}, {&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/222, 0xde}], 0x5, &(0x7f0000004680)=""/108, 0x6c}, 0xffffffff}], 0x3, 0x100, &(0x7f00000047c0)={0x0, 0x989680}) [ 75.210568][ T9969] fuse: Bad value for 'fd' [ 75.220727][ T9970] fuse: Bad value for 'fd' [ 75.243322][ T9972] fuse: Bad value for 'fd' [ 75.330902][ T9981] kAFS: unparsable volume name [ 75.332366][ T9985] fuse: Bad value for 'fd' [ 75.339818][ T9984] fuse: Bad value for 'fd' [ 75.355714][ T9982] loop2: detected capacity change from 0 to 16382 15:05:11 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000900)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000940)) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x40094) 15:05:11 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000003500)=""/29, &(0x7f0000003540)=0x1d) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) 15:05:11 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) recvmmsg(r8, &(0x7f0000004700)=[{{&(0x7f0000002d00)=@alg, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d80)=""/6, 0x6}, {&(0x7f0000002dc0)=""/251, 0xfb}, {&(0x7f0000002ec0)=""/180, 0xb4}, {&(0x7f0000002f80)=""/123, 0x7b}, {&(0x7f0000003000)=""/65, 0x41}], 0x5, &(0x7f0000003100)=""/44, 0x2c}, 0x27}, {{&(0x7f0000003140)=@xdp, 0x80, &(0x7f0000003200)=[{&(0x7f00000031c0)}], 0x1, &(0x7f0000003240)=""/119, 0x77}, 0x1}, {{&(0x7f00000032c0)=@xdp, 0x80, &(0x7f0000004600)=[{&(0x7f0000003340)=""/61, 0x3d}, {&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f0000004380)=""/138, 0x8a}, {&(0x7f0000004440)=""/154, 0x9a}, {&(0x7f0000004500)=""/222, 0xde}], 0x5, &(0x7f0000004680)=""/108, 0x6c}, 0xffffffff}], 0x3, 0x100, &(0x7f00000047c0)={0x0, 0x989680}) [ 75.381670][ T9982] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.421169][ T9982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock 15:05:11 executing program 5: r0 = getuid() r1 = getuid() r2 = getegid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0xf, r1}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r2}, {0x8, 0x2, 0xee00}, {0x8, 0x4, r3}], {0x10, 0x7}, {0x20, 0x3}}, 0x5c, 0x3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/189, 0xbd}], 0x6, &(0x7f0000000580)=""/123, 0x7b}, 0x40000000) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r4 = getuid() syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ')(-@%,'}}, {@dont_hash}, {@subj_type}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) quotactl(0x40, &(0x7f0000000a40)='./file0\x00', r1, &(0x7f0000000a80)="7ac5df2fc5792325a365c63a191a644c5690c8b80b12574709b55da2a025603c9176e30cbc003a0d84df068a4b8b8da3ad21b50c5bcc7aa5018ccfcd8c73b9f173546965ac2cd33170ac3fa7484fb29ee8efe2ba7f2e05111b7ebbea1462556d0699ae086dbb2b60dcbde054cfc7ceaa1b5f38d355ead74db24d38e38a7cb3307af67f83764d91fe6cce98500e546b40f07c35fe7fbe6cf2df62a0843b9f2a1f596fa101dba4f52e4380661ce539e1fac1eb17425c8e3c7c3e1c61e045400f33a0aaf7cae696da7861d3a6baf4f3165a2610b20578") r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/144, 0x90, 0x2100, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x0, 0x3}}, 0x80) chroot(&(0x7f0000000cc0)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xb0000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xa0b, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003000)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x64040051}, 0x11) [ 75.444568][ T9982] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.488975][ T9982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 75.498955][ T9994] fuse: Bad value for 'fd' 15:05:11 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x400000000000, 0x2, 0x0, 0x7, 0x1f, 0x800, 0x16d06a71, 0x100000000}, &(0x7f0000000040)={0x666, 0x1, 0x0, 0x6, 0x401, 0x4, 0x8, 0xed}, &(0x7f0000000080)={0x0, 0x3, 0x561d9e5e, 0xffffffffffff7fff, 0x80, 0x0, 0xbbe, 0x28dc}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x6, 0x7f, 0x0, 0xba0, 0x3ff, 0x0, 0x2}, &(0x7f00000001c0)={0x4, 0x80000000, 0x4, 0xc104, 0x73b7, 0x7f, 0x3f, 0x5}, &(0x7f0000000200)={0x3b6, 0x5, 0x8, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x9}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) clock_getres(0x10c7661327295d8b, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x54, 0xad, 0x101, 0x80, 0x9, 0x4, 0x72a, 0x9}, &(0x7f00000003c0)={0x3, 0x6, 0x8, 0x8, 0x7, 0x9, 0x828b, 0x7fff}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x9, 0xb92e, 0x5, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100]}, 0x8}) pselect6(0x40, &(0x7f0000000500)={0x1, 0x9, 0x100000001, 0x0, 0x7, 0x4, 0x71f, 0x8}, &(0x7f0000000540)={0x3, 0xb3, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x6, 0x7fff}, &(0x7f0000000580)={0x0, 0x2, 0x3e4ab37d, 0x1, 0x3bd, 0x2c8b, 0x20, 0x401}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8001]}, 0x8}) clock_getres(0x3, &(0x7f0000000680)) clock_getres(0x5, &(0x7f00000006c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/32, 0x20}], 0x4, &(0x7f0000000a00)=""/58, 0x3a}, 0x1}], 0x1, 0x40, &(0x7f0000000ac0)={r2, r3+60000000}) chroot(&(0x7f0000000b00)='./file0\x00') syz_mount_image$afs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="0ffd87af8b4763994e8eb29465cc5c8093f7ca4955a0f5a1524ccfdcf6329b3be69c648a58537d2e833f3941487796ef8d7e73372b5425e0a93622bab338d9a0", 0x40, 0x8}], 0x2000000, &(0x7f0000000c40)={[{@flock_write}], [{@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}]}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000c80)=""/98, 0x62}, &(0x7f0000000d00), 0x20}, 0xa0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e00)={0xc1, 0x3, 0xffffffff, 0x400, 0x5, 0xfffffffffffffff8, 0x56f, 0x8}, &(0x7f0000000e40)={0x101, 0x2, 0x6, 0x8001, 0x9, 0x0, 0x4, 0x9}, &(0x7f0000000e80)={0x6, 0x2, 0xb6e7, 0xffffffffffffffff, 0x1db250e2, 0x0, 0x2, 0x2}, &(0x7f0000000f00)={r4, r5+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x3f]}, 0x8}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={0x0, 0x401, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x19, 0xc, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xa, 0xd, 0x4, 0x100, 0x4}, @generic={0x80, 0x8, 0x7, 0x8564, 0x7}, @alu={0x4, 0x1, 0xc, 0x6, 0x1, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x3, 0x3, 0x8, 0x3, 0x50, 0x4}, @ldst={0x0, 0x3, 0x0, 0x7, 0x3, 0x20, 0x8}, @map_val={0x18, 0x6, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xdd}, @exit, @call={0x85, 0x0, 0x0, 0x46}]}, &(0x7f0000001080)='syzkaller\x00', 0x8, 0x6, &(0x7f00000010c0)=""/6, 0x40f00, 0x14, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000001100)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001140)={0x0, 0xe, 0x0, 0xfffffeff}, 0x10}, 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000001200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/63, 0x3f}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/190, 0xbe}], 0x3, &(0x7f0000001440)=""/38, 0x26}, 0x2}], 0x1, 0x40, 0x0) 15:05:11 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000900)=0x2c, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000940)) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) 15:05:11 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f00000034c0)={&(0x7f00000033c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x4c, 0x1407, 0x439, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004051}, 0x14000000) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 75.536851][ T9999] fuse: Bad value for 'fd' [ 75.590669][ T9974] block nbd2: shutting down sockets [ 75.623217][T10007] kAFS: unparsable volume name 15:05:11 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x7fff, 0xe6, 0x2, 0x0, 0x3, 0x8001, 0x1f, 0x1}, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x9, 0x8, 0x101, 0x2, 0x8}, &(0x7f0000000080)={0x9, 0x10001, 0x2fe, 0xe11, 0x6, 0x2, 0x4, 0x4}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_open_dev$ndb(&(0x7f0000005ac0), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) syz_mount_image$f2fs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0xfd6a, 0x3, &(0x7f0000005e00)=[{&(0x7f0000005b80)="600600274116f85d0eec4dbd6324cb148996be0bd022de57c5be97b86556f4b56350e8ca944ac9e745624941476b17a8a35869fc3aed5da9bd2bf0fc8b577544cbb4a2f12875b8e3f2916f6e2ada3fd047110a51b1aead67144788660a1c5d9c180a9dc85675b7eb2a71a4f3247a4e1fa88c683e545dd79944ad3e0f59998cd85b9fd9ef2e5240f6f77613e50717f383ca84a04ed35bb8ac1f", 0x99, 0x5}, {&(0x7f0000005c40)="6770be98c9daaed1a52ee8fd1e267e92f94fec7e096177395108f787aa6e0a071173bca9012a2691d5959347dc5f925c6427f0486febc0b5a3cde762d562f892ee79ef39f5f94f47583871542b6b6fe48b9deca9ee7de9cc109976763774f3be86645ffd6a92db7c0efb598edc8a0e147a265f94a7fd2fbbbe2f73333ad725494ccb7d8b59b638b60f8ab4c6f482c4aec358b2cad8d5157eb6690e3c02330a08c637e27c8e114eeb9e2a462fee47cff2c5a53b4a3173c7a900187bb9e5a20a100f77dc9325aba017312b54081babaee1592c", 0xd2, 0x5}, {&(0x7f0000005d40)="9d9e746f55af3310675204b9af4c77fe85e808d2828e286412a035d7c725ab9bdcbc4c0f545cd65b3664c394e344328de1040ad6a4935b96261b18efb21c04611200df0b15de43365227002d1bc4a1738e32317f41cd2ea69b333d3d04563330bd77ab1b9ec27eaec02fb41f791dfd77a3ad56ed0f86fa11a41e8b79bf36544d161c7a37fe591771843aea53b727d0d2cfd7c8b533069c22b49982c123f3ddd8f53ce527ee216b3c86438496b74c", 0xae, 0xfffffffffffffe01}], 0x8088, &(0x7f0000005e80)={[{@noextent_cache}, {@nodiscard}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd#\x00'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000005ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_rr_get_interval(r3, &(0x7f0000007f00)) r4 = syz_open_dev$vcsa(&(0x7f0000007f40), 0xa49, 0x42a200) r5 = openat2(r4, &(0x7f0000007f80)='./file0\x00', &(0x7f0000007fc0)={0x0, 0x194, 0x11}, 0x18) utime(&(0x7f0000008000)='./file0/file0\x00', &(0x7f0000008040)={0x7fff, 0x4}) syz_mount_image$ntfs(&(0x7f0000008080), &(0x7f00000080c0)='./file0/file1\x00', 0x1ff, 0x1, &(0x7f0000008180)=[{&(0x7f0000008100)="593586d09e907b5e05b4094eb19d8bca0c1929ce808b61907dfa4eaa43a27fc20e218d024e0e0210d7253c46cf22e7dcc4e2ee6ad03de8662890dc8235143ba0b59152675d02434bcbf179d8c9578236c03b1810de5d9bade8b5", 0x5a, 0x7}], 0x2241800, &(0x7f00000081c0)={[{@errors_recover}, {@disable_sparse_yes}, {@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}], [{@appraise}]}) syz_mount_image$befs(&(0x7f0000008240), &(0x7f0000008280)='./file0/file1\x00', 0xffff, 0x4, &(0x7f0000008540)=[{&(0x7f00000082c0)="e4e6182aa25136e0542a5b56585a737a90e58f05088110b603fa035f2459dc63ef", 0x21, 0x7}, {&(0x7f0000008300)="23be246be50cd0a42d9c437e8634e11aea90c4896ef6f39e4003f734e81e71bb2f398bfe1851363d7238ab30b8c4308a315e331bc4f9acc112597c", 0x3b, 0x1f}, {&(0x7f0000008340)="a00143165dbc4ce4147b757b098d45ee22a34a2aaa7cb28e37ba6f0d58347d3b6eb56229b528952a6790b1d31fe47dc36711a3e6550ab21e4bdaf98b701f781586e82d9a822cf2ef83141f517ff8c7a48e5e305f106c64070afad7c404efe2b4431b9a9f041ce586eb1758b60637f946c2e0ed2c8c55e393df8821361f90b58fac90a0b47349f03b90c9e03e57ed9f6dff64e6ddc5d5e2ba20c3669b8ae0d23c38235d6014c2bf0d6687782401bf66e199dcf12ac7f42f62573e1e21b3180ff05f67ff382f2b9867041df422994a4c0da10628137fdb217eae", 0xd9, 0x3ff}, {&(0x7f0000008440)="005da86f4cba8e3f64869d5f3251cb95b15f0e48cdf90697a2e141c605019f71b0b0c47830456a877c741be748dcd06f1961a3723345c4fa5bfc795b19c053ae956183b41ea110ab1ab7d4b21184403860f1d4cd64a0744fb800f8c3cce34b7d83e631af83c8675a012dcc1c86ab04f776d438caa1f9f5a96e798606c866350abc361319bb15a595c5e3dd2dbd623fa4ac189a52c629296ada67d8943a4755c4f1c552c99bb3b6c764e5180dfb86cd94f6c9454fcc264fcc6995cfa954fd7043b0b1ce3eaeab12a2fa26d6a2f1b199d4d04515dd352a4b7ecb3270875292af4d4c4897b72660967dd7b4c59da6141754a4f5dc549fe611441bca50830e", 0xfd, 0x9}], 0x802886, &(0x7f00000085c0)={[{'MAY_EXEC'}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x35, 0x34, 0x38, 0x32, 0x32, 0x34], 0x2d, [0x61, 0x35, 0x38, 0x35], 0x2d, [0x30, 0x31, 0x35, 0x52], 0x2d, [0x30, 0x1, 0x37, 0x38], 0x2d, [0x65, 0x56, 0x33, 0x39, 0x64, 0x63, 0x65, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'system_u'}}]}) recvmsg(r1, &(0x7f0000008ac0)={&(0x7f0000008680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/185, 0xb9}, {&(0x7f00000087c0)=""/102, 0x66}, {&(0x7f0000008840)=""/185, 0xb9}, {&(0x7f0000008900)=""/205, 0xcd}], 0x4, &(0x7f0000008a40)=""/97, 0x61}, 0x60) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000008b40), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000008c00)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xba109c99788e7acc}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000008c80)={&(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x38}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000008cc0)={'#! ', './file0/file0', [{0x20, 'obj_user'}, {0x20, '*/,#'}, {0x20, 'befs\x00'}, {0x20, '@%\\'}, {0x20, 'disable_sparse=yes'}, {0x20, '*'}], 0xa, "c597c7a9b146c4ca72b0cf679dd3208c4899a0e1b71bd168b99ee9cd77d02ae0a9647893a12ea5cff17d72db36bd1839a21edddfdbf553cd4f418fdd1ff08c3c2779e5"}, 0x81) write$FUSE_INTERRUPT(r5, &(0x7f000000adc0)={0x10}, 0x10) 15:05:11 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) 15:05:11 executing program 5: r0 = getuid() r1 = getuid() r2 = getegid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0xf, r1}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r2}, {0x8, 0x2, 0xee00}, {0x8, 0x4, r3}], {0x10, 0x7}, {0x20, 0x3}}, 0x5c, 0x3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/189, 0xbd}], 0x6, &(0x7f0000000580)=""/123, 0x7b}, 0x40000000) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r4 = getuid() syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ')(-@%,'}}, {@dont_hash}, {@subj_type}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) quotactl(0x40, &(0x7f0000000a40)='./file0\x00', r1, &(0x7f0000000a80)="7ac5df2fc5792325a365c63a191a644c5690c8b80b12574709b55da2a025603c9176e30cbc003a0d84df068a4b8b8da3ad21b50c5bcc7aa5018ccfcd8c73b9f173546965ac2cd33170ac3fa7484fb29ee8efe2ba7f2e05111b7ebbea1462556d0699ae086dbb2b60dcbde054cfc7ceaa1b5f38d355ead74db24d38e38a7cb3307af67f83764d91fe6cce98500e546b40f07c35fe7fbe6cf2df62a0843b9f2a1f596fa101dba4f52e4380661ce539e1fac1eb17425c8e3c7c3e1c61e045400f33a0aaf7cae696da7861d3a6baf4f3165a2610b20578") r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/144, 0x90, 0x2100, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x0, 0x3}}, 0x80) chroot(&(0x7f0000000cc0)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xb0000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xa0b, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020}, 0x2020) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000003100)={&(0x7f0000002f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003000)={0x84, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x64040051}, 0x11) 15:05:11 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000900)=0x2c, 0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) 15:05:11 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) socket$l2tp(0x2, 0x2, 0x73) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 75.716050][T10015] fuse: Bad value for 'fd' 15:05:11 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) [ 75.748154][T10016] loop2: detected capacity change from 0 to 16382 [ 75.758566][T10020] fuse: Bad value for 'fd' [ 75.773814][T10016] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) 15:05:11 executing program 5: r0 = getuid() r1 = getuid() r2 = getegid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0xf, r1}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r2}, {0x8, 0x2, 0xee00}, {0x8, 0x4, r3}], {0x10, 0x7}, {0x20, 0x3}}, 0x5c, 0x3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/189, 0xbd}], 0x6, &(0x7f0000000580)=""/123, 0x7b}, 0x40000000) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r4 = getuid() syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ')(-@%,'}}, {@dont_hash}, {@subj_type}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) quotactl(0x40, &(0x7f0000000a40)='./file0\x00', r1, &(0x7f0000000a80)="7ac5df2fc5792325a365c63a191a644c5690c8b80b12574709b55da2a025603c9176e30cbc003a0d84df068a4b8b8da3ad21b50c5bcc7aa5018ccfcd8c73b9f173546965ac2cd33170ac3fa7484fb29ee8efe2ba7f2e05111b7ebbea1462556d0699ae086dbb2b60dcbde054cfc7ceaa1b5f38d355ead74db24d38e38a7cb3307af67f83764d91fe6cce98500e546b40f07c35fe7fbe6cf2df62a0843b9f2a1f596fa101dba4f52e4380661ce539e1fac1eb17425c8e3c7c3e1c61e045400f33a0aaf7cae696da7861d3a6baf4f3165a2610b20578") r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/144, 0x90, 0x2100, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x0, 0x3}}, 0x80) chroot(&(0x7f0000000cc0)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xb0000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xa0b, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000000ec0)={0x2020}, 0x2020) 15:05:11 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x400000000000, 0x2, 0x0, 0x7, 0x1f, 0x800, 0x16d06a71, 0x100000000}, &(0x7f0000000040)={0x666, 0x1, 0x0, 0x6, 0x401, 0x4, 0x8, 0xed}, &(0x7f0000000080)={0x0, 0x3, 0x561d9e5e, 0xffffffffffff7fff, 0x80, 0x0, 0xbbe, 0x28dc}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x6, 0x7f, 0x0, 0xba0, 0x3ff, 0x0, 0x2}, &(0x7f00000001c0)={0x4, 0x80000000, 0x4, 0xc104, 0x73b7, 0x7f, 0x3f, 0x5}, &(0x7f0000000200)={0x3b6, 0x5, 0x8, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x9}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) clock_getres(0x10c7661327295d8b, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x54, 0xad, 0x101, 0x80, 0x9, 0x4, 0x72a, 0x9}, &(0x7f00000003c0)={0x3, 0x6, 0x8, 0x8, 0x7, 0x9, 0x828b, 0x7fff}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x9, 0xb92e, 0x5, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100]}, 0x8}) pselect6(0x40, &(0x7f0000000500)={0x1, 0x9, 0x100000001, 0x0, 0x7, 0x4, 0x71f, 0x8}, &(0x7f0000000540)={0x3, 0xb3, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x6, 0x7fff}, &(0x7f0000000580)={0x0, 0x2, 0x3e4ab37d, 0x1, 0x3bd, 0x2c8b, 0x20, 0x401}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8001]}, 0x8}) clock_getres(0x3, &(0x7f0000000680)) clock_getres(0x5, &(0x7f00000006c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/32, 0x20}], 0x4, &(0x7f0000000a00)=""/58, 0x3a}, 0x1}], 0x1, 0x40, &(0x7f0000000ac0)={r2, r3+60000000}) chroot(&(0x7f0000000b00)='./file0\x00') syz_mount_image$afs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="0ffd87af8b4763994e8eb29465cc5c8093f7ca4955a0f5a1524ccfdcf6329b3be69c648a58537d2e833f3941487796ef8d7e73372b5425e0a93622bab338d9a0", 0x40, 0x8}], 0x2000000, &(0x7f0000000c40)={[{@flock_write}], [{@fowner_gt}, {@context={'context', 0x3d, 'user_u'}}]}) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000d40)={@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, {&(0x7f0000000c80)=""/98, 0x62}, &(0x7f0000000d00), 0x20}, 0xa0) clock_gettime(0x0, &(0x7f0000000ec0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000e00)={0xc1, 0x3, 0xffffffff, 0x400, 0x5, 0xfffffffffffffff8, 0x56f, 0x8}, &(0x7f0000000e40)={0x101, 0x2, 0x6, 0x8001, 0x9, 0x0, 0x4, 0x9}, &(0x7f0000000e80)={0x6, 0x2, 0xb6e7, 0xffffffffffffffff, 0x1db250e2, 0x0, 0x2, 0x2}, &(0x7f0000000f00)={r4, r5+60000000}, &(0x7f0000000f80)={&(0x7f0000000f40)={[0x3f]}, 0x8}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000fc0)={0x0, 0x401, 0x18}, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000001480)=[{{&(0x7f0000001200)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001280)=""/63, 0x3f}, {&(0x7f00000012c0)=""/96, 0x60}, {&(0x7f0000001340)=""/190, 0xbe}], 0x3, &(0x7f0000001440)=""/38, 0x26}, 0x2}], 0x1, 0x40, 0x0) 15:05:11 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44000}, 0xd0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) 15:05:11 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000003380)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x40001) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) [ 75.822488][T10016] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 75.852864][T10016] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 75.878791][T10027] fuse: Bad value for 'fd' [ 75.890118][T10016] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock 15:05:11 executing program 0: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xab18848a76c18683}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x43}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4014040}, 0x1) r1 = socket(0x27, 0x5, 0xfffffffe) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000003240)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x1a6089ade98a35af}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb125}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000003280)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000004f80)={0x2020}, 0x2020) 15:05:11 executing program 4: sched_rr_get_interval(0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x5, 0x2a8, 0x400, 0x7fff, 0x1cc, 0x3, 0xa1, 0x9}, &(0x7f0000000080)={0xf71, 0x80000000, 0xffff00, 0x9, 0x2, 0x6d, 0x1ff, 0x6}, &(0x7f00000000c0)={0x6, 0x9032, 0x8, 0x20, 0x2, 0x3ff, 0x8, 0xadbf}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000200)={0x6, 0x8, 0x8, 0x2, 0x1ff, 0x7, 0x3, 0x7}, &(0x7f0000000240)={0xcb2b, 0xa5, 0x0, 0x0, 0x2, 0x8001, 0x8000}, &(0x7f0000000280)={0x7, 0x0, 0xd76d, 0x2, 0x8, 0x1, 0x6f5, 0x6}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xffffffffffffffff]}, 0x8}) r1 = geteuid() setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000380)={0xc04f, 0x5, 0x3, 0x40, 0x3f, 0xc1, 0x8}, 0xc) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0xc) pselect6(0x40, &(0x7f0000000440)={0x6, 0x3, 0x4c3, 0x2, 0x72, 0x7f, 0x10000, 0x1}, &(0x7f0000000480)={0x5, 0x5a, 0x20, 0x3, 0x4, 0x39b, 0x0, 0x2}, &(0x7f00000004c0)={0x1, 0x5, 0xb3, 0x9, 0x3, 0x9, 0x80000000, 0x4}, &(0x7f0000000500)={0x77359400}, &(0x7f0000000580)={&(0x7f0000000540)={[0x5]}, 0x8}) clock_getres(0x1, &(0x7f00000005c0)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = getegid() setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_access\x00', &(0x7f00000026c0)={{}, {0x1, 0x4}, [{0x2, 0x6, r1}], {0x4, 0x4}, [{0x8, 0x0, r3}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x0, r5}], {0x10, 0x5}, {0x20, 0x1}}, 0x44, 0x2) sched_rr_get_interval(r4, &(0x7f0000002740)) clock_gettime(0x0, &(0x7f0000002840)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002780)={0x80000000, 0x1, 0x574aff08, 0xfffffffffffffffb, 0xc4c, 0x2, 0x8000, 0x3}, &(0x7f00000027c0)={0x7ff, 0x2, 0x7, 0x200, 0x800, 0x6, 0x5, 0xffff}, &(0x7f0000002800)={0x6, 0x81, 0x7fff, 0x80, 0x1, 0x8001, 0xbb}, &(0x7f0000002880)={r6, r7+60000000}, &(0x7f0000002900)={&(0x7f00000028c0)={[0x9e2]}, 0x8}) r8 = syz_open_dev$vcsa(&(0x7f00000029c0), 0x1, 0x10102) syz_mount_image$fuse(&(0x7f0000002940), &(0x7f0000002980)='./file0\x00', 0x0, 0x0, 0x0, 0x38990c8, &(0x7f0000002a00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x7}}], [{@measure}]}}) clock_gettime(0xf, &(0x7f0000002b40)) syz_mount_image$fuse(&(0x7f0000002b80), &(0x7f0000002bc0)='./file0\x00', 0x0, 0x0, 0x0, 0x10000, &(0x7f0000002c00)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x3000}}, {@allow_other}], [{@defcontext={'defcontext', 0x3d, 'system_u'}}, {@uid_gt={'uid>', r2}}, {@fsname={'fsname', 0x3d, '(^'}}, {@subj_role}]}}) [ 75.922801][T10036] fuse: Bad value for 'fd' [ 75.924298][T10031] kAFS: unparsable volume name [ 76.000681][T10014] block nbd2: shutting down sockets 15:05:12 executing program 2: pselect6(0x40, &(0x7f0000000000)={0x7fff, 0xe6, 0x2, 0x0, 0x3, 0x8001, 0x1f, 0x1}, &(0x7f0000000040)={0x5, 0x20, 0x1, 0x9, 0x8, 0x101, 0x2, 0x8}, &(0x7f0000000080)={0x9, 0x10001, 0x2fe, 0xe11, 0x6, 0x2, 0x4, 0x4}, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r2 = syz_open_dev$ndb(&(0x7f0000005ac0), 0x0, 0x2) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) syz_mount_image$f2fs(&(0x7f0000005b00), &(0x7f0000005b40)='./file0\x00', 0xfd6a, 0x3, &(0x7f0000005e00)=[{&(0x7f0000005b80)="600600274116f85d0eec4dbd6324cb148996be0bd022de57c5be97b86556f4b56350e8ca944ac9e745624941476b17a8a35869fc3aed5da9bd2bf0fc8b577544cbb4a2f12875b8e3f2916f6e2ada3fd047110a51b1aead67144788660a1c5d9c180a9dc85675b7eb2a71a4f3247a4e1fa88c683e545dd79944ad3e0f59998cd85b9fd9ef2e5240f6f77613e50717f383ca84a04ed35bb8ac1f", 0x99, 0x5}, {&(0x7f0000005c40)="6770be98c9daaed1a52ee8fd1e267e92f94fec7e096177395108f787aa6e0a071173bca9012a2691d5959347dc5f925c6427f0486febc0b5a3cde762d562f892ee79ef39f5f94f47583871542b6b6fe48b9deca9ee7de9cc109976763774f3be86645ffd6a92db7c0efb598edc8a0e147a265f94a7fd2fbbbe2f73333ad725494ccb7d8b59b638b60f8ab4c6f482c4aec358b2cad8d5157eb6690e3c02330a08c637e27c8e114eeb9e2a462fee47cff2c5a53b4a3173c7a900187bb9e5a20a100f77dc9325aba017312b54081babaee1592c", 0xd2, 0x5}, {&(0x7f0000005d40)="9d9e746f55af3310675204b9af4c77fe85e808d2828e286412a035d7c725ab9bdcbc4c0f545cd65b3664c394e344328de1040ad6a4935b96261b18efb21c04611200df0b15de43365227002d1bc4a1738e32317f41cd2ea69b333d3d04563330bd77ab1b9ec27eaec02fb41f791dfd77a3ad56ed0f86fa11a41e8b79bf36544d161c7a37fe591771843aea53b727d0d2cfd7c8b533069c22b49982c123f3ddd8f53ce527ee216b3c86438496b74c", 0xae, 0xfffffffffffffe01}], 0x8088, &(0x7f0000005e80)={[{@noextent_cache}, {@nodiscard}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd#\x00'}}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000005ec0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_rr_get_interval(r3, &(0x7f0000007f00)) r4 = syz_open_dev$vcsa(&(0x7f0000007f40), 0xa49, 0x42a200) r5 = openat2(r4, &(0x7f0000007f80)='./file0\x00', &(0x7f0000007fc0)={0x0, 0x194, 0x11}, 0x18) utime(&(0x7f0000008000)='./file0/file0\x00', &(0x7f0000008040)={0x7fff, 0x4}) syz_mount_image$ntfs(&(0x7f0000008080), &(0x7f00000080c0)='./file0/file1\x00', 0x1ff, 0x1, &(0x7f0000008180)=[{&(0x7f0000008100)="593586d09e907b5e05b4094eb19d8bca0c1929ce808b61907dfa4eaa43a27fc20e218d024e0e0210d7253c46cf22e7dcc4e2ee6ad03de8662890dc8235143ba0b59152675d02434bcbf179d8c9578236c03b1810de5d9bade8b5", 0x5a, 0x7}], 0x2241800, &(0x7f00000081c0)={[{@errors_recover}, {@disable_sparse_yes}, {@nls={'nls', 0x3d, 'macroman'}}, {@nls={'nls', 0x3d, 'cp860'}}], [{@appraise}]}) syz_mount_image$befs(&(0x7f0000008240), &(0x7f0000008280)='./file0/file1\x00', 0xffff, 0x4, &(0x7f0000008540)=[{&(0x7f00000082c0)="e4e6182aa25136e0542a5b56585a737a90e58f05088110b603fa035f2459dc63ef", 0x21, 0x7}, {&(0x7f0000008300)="23be246be50cd0a42d9c437e8634e11aea90c4896ef6f39e4003f734e81e71bb2f398bfe1851363d7238ab30b8c4308a315e331bc4f9acc112597c", 0x3b, 0x1f}, {&(0x7f0000008340)="a00143165dbc4ce4147b757b098d45ee22a34a2aaa7cb28e37ba6f0d58347d3b6eb56229b528952a6790b1d31fe47dc36711a3e6550ab21e4bdaf98b701f781586e82d9a822cf2ef83141f517ff8c7a48e5e305f106c64070afad7c404efe2b4431b9a9f041ce586eb1758b60637f946c2e0ed2c8c55e393df8821361f90b58fac90a0b47349f03b90c9e03e57ed9f6dff64e6ddc5d5e2ba20c3669b8ae0d23c38235d6014c2bf0d6687782401bf66e199dcf12ac7f42f62573e1e21b3180ff05f67ff382f2b9867041df422994a4c0da10628137fdb217eae", 0xd9, 0x3ff}, {&(0x7f0000008440)="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", 0xfd, 0x9}], 0x802886, &(0x7f00000085c0)={[{'MAY_EXEC'}], [{@dont_appraise}, {@fsuuid={'fsuuid', 0x3d, {[0x65, 0x64, 0x35, 0x34, 0x38, 0x32, 0x32, 0x34], 0x2d, [0x61, 0x35, 0x38, 0x35], 0x2d, [0x30, 0x31, 0x35, 0x52], 0x2d, [0x30, 0x1, 0x37, 0x38], 0x2d, [0x65, 0x56, 0x33, 0x39, 0x64, 0x63, 0x65, 0x37]}}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_user={'obj_user', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'root'}}, {@subj_type={'subj_type', 0x3d, 'MAY_EXEC'}}, {@context={'context', 0x3d, 'system_u'}}]}) recvmsg(r1, &(0x7f0000008ac0)={&(0x7f0000008680)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000008a00)=[{&(0x7f0000008700)=""/185, 0xb9}, {&(0x7f00000087c0)=""/102, 0x66}, {&(0x7f0000008840)=""/185, 0xb9}, {&(0x7f0000008900)=""/205, 0xcd}], 0x4, &(0x7f0000008a40)=""/97, 0x61}, 0x60) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000008b40), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000008c00)={&(0x7f0000008b00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000008bc0)={&(0x7f0000008b80)={0x14, r6, 0x800, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xba109c99788e7acc}, 0x80) bpf$OBJ_GET_PROG(0x7, &(0x7f0000008c80)={&(0x7f0000008c40)='./file0/file0\x00', 0x0, 0x38}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) write$binfmt_script(r7, &(0x7f0000008cc0)={'#! ', './file0/file0', [{0x20, 'obj_user'}, {0x20, '*/,#'}, {0x20, 'befs\x00'}, {0x20, '@%\\'}, {0x20, 'disable_sparse=yes'}, {0x20, '*'}], 0xa, "c597c7a9b146c4ca72b0cf679dd3208c4899a0e1b71bd168b99ee9cd77d02ae0a9647893a12ea5cff17d72db36bd1839a21edddfdbf553cd4f418fdd1ff08c3c2779e5"}, 0x81) write$FUSE_INTERRUPT(r5, &(0x7f000000adc0)={0x10}, 0x10) 15:05:12 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x6, &(0x7f0000000040)=@raw=[@generic={0x3f, 0x2, 0x3, 0x2, 0xff}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @generic={0x40, 0x1, 0x5, 0x3, 0x4}, @call={0x85, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x3, 0x1c, &(0x7f00000000c0)=""/28, 0x40f00, 0x1f, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x6, 0x5, 0x3}, 0x10, r0}, 0x78) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x90000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8001) r3 = openat2(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0xc00, 0x4, 0x11}, 0x18) r4 = getpgid(0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000020}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xac}}, 0x800) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x643}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x9}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, r6, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}}, 0x40008000) lremovexattr(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)=@random={'system.', '0000:00:10.0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x58, r6, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "c0c84f1d0214cc1e595d35498db07c9e"}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x240040c8) 15:05:12 executing program 5: r0 = getuid() r1 = getuid() r2 = getegid() r3 = getegid() setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x1}, [{0x2, 0x1, 0xee01}, {0x2, 0x4, r0}, {0x2, 0xf, r1}], {0x4, 0x4}, [{0x8, 0x3, 0xee00}, {0x8, 0x1, r2}, {0x8, 0x2, 0xee00}, {0x8, 0x4, r3}], {0x10, 0x7}, {0x20, 0x3}}, 0x5c, 0x3) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000001c0)=""/47, 0x2f}, {&(0x7f0000000200)=""/242, 0xf2}, {&(0x7f0000000300)=""/84, 0x54}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/189, 0xbd}], 0x6, &(0x7f0000000580)=""/123, 0x7b}, 0x40000000) removexattr(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)=@known='trusted.overlay.nlink\x00') getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) r4 = getuid() syz_mount_image$fuse(&(0x7f0000000800), &(0x7f0000000840)='./file0\x00', 0x0, 0x0, 0x0, 0x18, &(0x7f0000000880)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xf00}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x8}}, {@default_permissions}], [{@fsname={'fsname', 0x3d, ')(-@%,'}}, {@dont_hash}, {@subj_type}, {@obj_user={'obj_user', 0x3d, 'system.posix_acl_access\x00'}}, {@fowner_gt={'fowner>', r4}}]}}) quotactl(0x40, &(0x7f0000000a40)='./file0\x00', r1, &(0x7f0000000a80)="7ac5df2fc5792325a365c63a191a644c5690c8b80b12574709b55da2a025603c9176e30cbc003a0d84df068a4b8b8da3ad21b50c5bcc7aa5018ccfcd8c73b9f173546965ac2cd33170ac3fa7484fb29ee8efe2ba7f2e05111b7ebbea1462556d0699ae086dbb2b60dcbde054cfc7ceaa1b5f38d355ead74db24d38e38a7cb3307af67f83764d91fe6cce98500e546b40f07c35fe7fbe6cf2df62a0843b9f2a1f596fa101dba4f52e4380661ce539e1fac1eb17425c8e3c7c3e1c61e045400f33a0aaf7cae696da7861d3a6baf4f3165a2610b20578") r5 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom(0xffffffffffffffff, &(0x7f0000000b80)=""/144, 0x90, 0x2100, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @local}, 0x2, 0x1, 0x0, 0x3}}, 0x80) chroot(&(0x7f0000000cc0)='./file0\x00') inotify_add_watch(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0xb0000000) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x3c, 0x0, 0xa0b, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) [ 76.046473][T10044] fuse: Bad value for 'fd' 15:05:12 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x400000000000, 0x2, 0x0, 0x7, 0x1f, 0x800, 0x16d06a71, 0x100000000}, &(0x7f0000000040)={0x666, 0x1, 0x0, 0x6, 0x401, 0x4, 0x8, 0xed}, &(0x7f0000000080)={0x0, 0x3, 0x561d9e5e, 0xffffffffffff7fff, 0x80, 0x0, 0xbbe, 0x28dc}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000140)={&(0x7f0000000100)={[0x1]}, 0x8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x10001, 0x6, 0x7f, 0x0, 0xba0, 0x3ff, 0x0, 0x2}, &(0x7f00000001c0)={0x4, 0x80000000, 0x4, 0xc104, 0x73b7, 0x7f, 0x3f, 0x5}, &(0x7f0000000200)={0x3b6, 0x5, 0x8, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x9}, &(0x7f0000000280)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x4]}, 0x8}) clock_getres(0x10c7661327295d8b, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000380)={0x54, 0xad, 0x101, 0x80, 0x9, 0x4, 0x72a, 0x9}, &(0x7f00000003c0)={0x3, 0x6, 0x8, 0x8, 0x7, 0x9, 0x828b, 0x7fff}, &(0x7f0000000400)={0x6, 0x9, 0x4, 0x9, 0xb92e, 0x5, 0xffffffffffffffff, 0x7fff}, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x100]}, 0x8}) pselect6(0x40, &(0x7f0000000500)={0x1, 0x9, 0x100000001, 0x0, 0x7, 0x4, 0x71f, 0x8}, &(0x7f0000000540)={0x3, 0xb3, 0x2, 0x9, 0x0, 0xfffffffffffffffb, 0x6, 0x7fff}, &(0x7f0000000580)={0x0, 0x2, 0x3e4ab37d, 0x1, 0x3bd, 0x2c8b, 0x20, 0x401}, &(0x7f00000005c0)={0x77359400}, &(0x7f0000000640)={&(0x7f0000000600)={[0x8001]}, 0x8}) clock_getres(0x3, &(0x7f0000000680)) clock_getres(0x5, &(0x7f00000006c0)) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000740)) clock_gettime(0x0, &(0x7f0000000a80)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/239, 0xef}, {&(0x7f0000000900)}, {&(0x7f0000000940)=""/35, 0x23}, {&(0x7f0000000980)=""/32, 0x20}], 0x4, &(0x7f0000000a00)=""/58, 0x3a}, 0x1}], 0x1, 0x40, &(0x7f0000000ac0)={r2, r3+60000000}) chroot(&(0x7f0000000b00)='./file0\x00') syz_mount_image$afs(&(0x7f0000000b40), &(0x7f0000000b80)='./file0\x00', 0x3, 0x1, &(0x7f0000000c00)=[{&(0x7f0000000bc0)="0ffd87af8b4763994e8eb29465cc5c8093f7ca4955a0f5a1524ccfdcf6329b3be69c648a58537d2e833f3941487796ef8d7e73372b5425e0a93622bab338d9a0", 0x40,