Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:42490' (ECDSA) to the list of known hosts. 2026/01/15 14:54:45 fuzzer started 2026/01/15 14:54:45 dialing manager at localhost:35245 syzkaller login: [ 51.590886] cgroup: Unknown subsys name 'net' [ 51.651488] cgroup: Unknown subsys name 'cpuset' [ 51.667807] cgroup: Unknown subsys name 'rlimit' 2026/01/15 14:54:56 syscalls: 202 2026/01/15 14:54:56 code coverage: enabled 2026/01/15 14:54:56 comparison tracing: enabled 2026/01/15 14:54:56 extra coverage: enabled 2026/01/15 14:54:56 setuid sandbox: enabled 2026/01/15 14:54:56 namespace sandbox: enabled 2026/01/15 14:54:56 Android sandbox: enabled 2026/01/15 14:54:56 fault injection: enabled 2026/01/15 14:54:56 leak checking: enabled 2026/01/15 14:54:56 net packet injection: enabled 2026/01/15 14:54:56 net device setup: enabled 2026/01/15 14:54:56 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 14:54:56 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 14:54:56 USB emulation: enabled 2026/01/15 14:54:56 hci packet injection: enabled 2026/01/15 14:54:56 wifi device emulation: enabled 2026/01/15 14:54:56 802.15.4 emulation: enabled 2026/01/15 14:54:56 fetching corpus: 0, signal 0/0 (executing program) 2026/01/15 14:54:57 starting 8 fuzzer processes 14:54:57 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) r9 = syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x900) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000440)) ioctl$RTC_AIE_ON(r4, 0x7001) 14:54:57 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44) getegid() getuid() mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:54:57 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) execveat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000640)='{\x00', &(0x7f0000000680)=',\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='\'(-^:\x00', &(0x7f0000000740)='-#/+!&-+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00\x00\x11\x11\"\"33'], &(0x7f0000000a80)=[&(0x7f0000000840)='\x00\x00\x11\x11\"\"33', &(0x7f0000000880)=',\x00', &(0x7f00000008c0)='+\'!/,\x00', &(0x7f0000000900)='.pending_reads\x00', &(0x7f0000000940)='.pending_reads\x00', &(0x7f0000000980)='.pending_reads\x00', &(0x7f00000009c0)='-]\x00', &(0x7f0000000a00)='.pending_reads\x00', &(0x7f0000000a40)='\x00'], 0x1900) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000b00)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000b40)={@desc={0x1, 0x0, @desc3}}) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:54:57 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) r9 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1c, 0x600440) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000700)=r5) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000009c0)={&(0x7f0000000740), 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf17}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) [ 61.949699] audit: type=1400 audit(1768488897.527:7): avc: denied { execmem } for pid=271 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 14:54:57 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) setgid(r6) r7 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) linkat(r4, &(0x7f0000000740)='./file0\x00', r4, &(0x7f0000000780)='./file0\x00', 0x1000) 14:54:57 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) r7 = openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) openat$incfs(r7, &(0x7f0000000480)='.log\x00', 0xe3768eb4db88eb8e, 0x149) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'veth0_to_batadv\x00', @local}) accept$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, r8, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:54:57 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000640)) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000007c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x101}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x49, 0xa9, @random="1f192a02d07eda7c86b6a46966faad66fece0a70b28f6f1d49a71eb35d1bfd72ebe0419d36b2a876e39632bb3d1d3bb23626100099972cfdb8c5095ea278f3d9bddc575ea1"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9018}]}, 0x98}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 14:54:57 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r2 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000780)=r3) r4 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x82800, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r1) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) [ 63.127600] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.130669] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.132530] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.136808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.139050] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.141696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.147163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.149763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.151781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.159280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.183331] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.188485] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.193695] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.195800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.196871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.198617] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.202263] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.204649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.206297] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.212464] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.287680] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 63.292792] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.294520] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 63.296459] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 63.297682] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 63.299521] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.300773] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 63.303710] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 63.305641] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.306695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 63.308075] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 63.314982] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 63.321760] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 63.332803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 63.335238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 63.340639] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 63.342542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.345581] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.357833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.361280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.220417] Bluetooth: hci2: command tx timeout [ 65.220497] Bluetooth: hci1: command tx timeout [ 65.221422] Bluetooth: hci0: command tx timeout [ 65.283392] Bluetooth: hci3: command tx timeout [ 65.411791] Bluetooth: hci6: command tx timeout [ 65.476978] Bluetooth: hci5: command tx timeout [ 65.477511] Bluetooth: hci7: command tx timeout [ 65.478010] Bluetooth: hci4: command tx timeout [ 67.268308] Bluetooth: hci0: command tx timeout [ 67.268793] Bluetooth: hci1: command tx timeout [ 67.268916] Bluetooth: hci2: command tx timeout [ 67.332401] Bluetooth: hci3: command tx timeout [ 67.460815] Bluetooth: hci6: command tx timeout [ 67.524493] Bluetooth: hci7: command tx timeout [ 67.524784] Bluetooth: hci5: command tx timeout [ 67.524985] Bluetooth: hci4: command tx timeout [ 69.316473] Bluetooth: hci0: command tx timeout [ 69.316525] Bluetooth: hci1: command tx timeout [ 69.317229] Bluetooth: hci2: command tx timeout [ 69.380369] Bluetooth: hci3: command tx timeout [ 69.508405] Bluetooth: hci6: command tx timeout [ 69.571486] Bluetooth: hci5: command tx timeout [ 69.571814] Bluetooth: hci7: command tx timeout [ 69.572221] Bluetooth: hci4: command tx timeout [ 71.363481] Bluetooth: hci1: command tx timeout [ 71.363597] Bluetooth: hci0: command tx timeout [ 71.364255] Bluetooth: hci2: command tx timeout [ 71.427542] Bluetooth: hci3: command tx timeout [ 71.555460] Bluetooth: hci6: command tx timeout [ 71.619897] Bluetooth: hci7: command tx timeout [ 71.620421] Bluetooth: hci5: command tx timeout [ 71.620683] Bluetooth: hci4: command tx timeout [ 94.624273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.638615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.971828] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.972473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.381756] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) r9 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1c, 0x600440) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000700)=r5) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000009c0)={&(0x7f0000000740), 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf17}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) r9 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1c, 0x600440) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000700)=r5) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000009c0)={&(0x7f0000000740), 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf17}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) r9 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1c, 0x600440) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000700)=r5) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000009c0)={&(0x7f0000000740), 0xc, &(0x7f0000000980)={&(0x7f0000000780)={0x1cc, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x14ca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0xa8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf17}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000000}, 0x85) [ 96.760674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.761278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) r9 = syz_open_dev$mouse(&(0x7f00000006c0), 0x1c, 0x600440) ioctl$BTRFS_IOC_WAIT_SYNC(r9, 0x40089416, &(0x7f0000000700)=r5) [ 96.883001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.883728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20004845) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) [ 97.032444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.033044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x80800) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x203, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40814) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) 14:55:32 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) pipe2(&(0x7f0000000480), 0x80800) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) 14:55:32 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) setgid(r6) r7 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) linkat(r4, &(0x7f0000000740)='./file0\x00', r4, &(0x7f0000000780)='./file0\x00', 0x1000) [ 97.268124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.268822] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.304907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.310365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.403699] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.404293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.445327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.446449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.570515] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.571122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.736537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.737161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.799736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.800351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.917575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.918184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.964253] audit: type=1400 audit(1768488933.542:8): avc: denied { map } for pid=3906 comm="syz-executor.3" path="pipe:[4064]" dev="pipefs" ino=4064 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=fifo_file permissive=1 [ 97.970294] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.971122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.053036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.053751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.092681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.093296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 14:55:44 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) io_uring_enter(r6, 0x4d57, 0x5cab, 0x3, &(0x7f0000000440)={[0x1ff]}, 0x8) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) 14:55:44 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r2 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000780)=r3) r4 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x82800, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r1) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 14:55:44 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) r9 = syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x900) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000440)) ioctl$RTC_AIE_ON(r4, 0x7001) 14:55:44 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) setgid(r6) r7 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) linkat(r4, &(0x7f0000000740)='./file0\x00', r4, &(0x7f0000000780)='./file0\x00', 0x1000) 14:55:44 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000640)) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000007c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x101}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x49, 0xa9, @random="1f192a02d07eda7c86b6a46966faad66fece0a70b28f6f1d49a71eb35d1bfd72ebe0419d36b2a876e39632bb3d1d3bb23626100099972cfdb8c5095ea278f3d9bddc575ea1"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9018}]}, 0x98}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 14:55:44 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44) getegid() getuid() mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:55:44 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) execveat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000640)='{\x00', &(0x7f0000000680)=',\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='\'(-^:\x00', &(0x7f0000000740)='-#/+!&-+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00\x00\x11\x11\"\"33'], &(0x7f0000000a80)=[&(0x7f0000000840)='\x00\x00\x11\x11\"\"33', &(0x7f0000000880)=',\x00', &(0x7f00000008c0)='+\'!/,\x00', &(0x7f0000000900)='.pending_reads\x00', &(0x7f0000000940)='.pending_reads\x00', &(0x7f0000000980)='.pending_reads\x00', &(0x7f00000009c0)='-]\x00', &(0x7f0000000a00)='.pending_reads\x00', &(0x7f0000000a40)='\x00'], 0x1900) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000b00)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000b40)={@desc={0x1, 0x0, @desc3}}) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:55:44 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) r7 = openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) openat$incfs(r7, &(0x7f0000000480)='.log\x00', 0xe3768eb4db88eb8e, 0x149) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'veth0_to_batadv\x00', @local}) accept$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, r8, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:55:44 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000640)) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000007c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x101}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x49, 0xa9, @random="1f192a02d07eda7c86b6a46966faad66fece0a70b28f6f1d49a71eb35d1bfd72ebe0419d36b2a876e39632bb3d1d3bb23626100099972cfdb8c5095ea278f3d9bddc575ea1"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9018}]}, 0x98}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 14:55:44 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r2 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000780)=r3) r4 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x82800, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r1) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 14:55:53 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44) getegid() getuid() mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:55:53 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) r6 = syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000a, 0x4000010, r6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) 14:55:53 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r2 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000780)=r3) r4 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x82800, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r1) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x54, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 14:55:53 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000640)) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f00000007c0)={0xfffffffffffffffc, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x101}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x49, 0xa9, @random="1f192a02d07eda7c86b6a46966faad66fece0a70b28f6f1d49a71eb35d1bfd72ebe0419d36b2a876e39632bb3d1d3bb23626100099972cfdb8c5095ea278f3d9bddc575ea1"}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x9018}]}, 0x98}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 14:55:53 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) r9 = syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x900) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000440)) ioctl$RTC_AIE_ON(r4, 0x7001) 14:55:53 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) execveat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000640)='{\x00', &(0x7f0000000680)=',\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='\'(-^:\x00', &(0x7f0000000740)='-#/+!&-+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00\x00\x11\x11\"\"33'], &(0x7f0000000a80)=[&(0x7f0000000840)='\x00\x00\x11\x11\"\"33', &(0x7f0000000880)=',\x00', &(0x7f00000008c0)='+\'!/,\x00', &(0x7f0000000900)='.pending_reads\x00', &(0x7f0000000940)='.pending_reads\x00', &(0x7f0000000980)='.pending_reads\x00', &(0x7f00000009c0)='-]\x00', &(0x7f0000000a00)='.pending_reads\x00', &(0x7f0000000a40)='\x00'], 0x1900) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000b00)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000b40)={@desc={0x1, 0x0, @desc3}}) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:55:53 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) r7 = openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) openat$incfs(r7, &(0x7f0000000480)='.log\x00', 0xe3768eb4db88eb8e, 0x149) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'veth0_to_batadv\x00', @local}) accept$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, r8, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:55:53 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) setgid(r6) r7 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) linkat(r4, &(0x7f0000000740)='./file0\x00', r4, &(0x7f0000000780)='./file0\x00', 0x1000) 14:55:53 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000640)) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:55:53 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) setgid(r6) r7 = openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) 14:55:53 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r2 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000780)=r3) r4 = openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x82800, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r1) 14:55:53 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) r9 = syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x900) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000440)) ioctl$RTC_AIE_ON(r4, 0x7001) 14:55:53 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44) getegid() getuid() mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:55:53 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) syz_open_dev$mouse(&(0x7f0000000400), 0x0, 0x100) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) 14:55:53 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) execveat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000640)='{\x00', &(0x7f0000000680)=',\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='\'(-^:\x00', &(0x7f0000000740)='-#/+!&-+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00\x00\x11\x11\"\"33'], &(0x7f0000000a80)=[&(0x7f0000000840)='\x00\x00\x11\x11\"\"33', &(0x7f0000000880)=',\x00', &(0x7f00000008c0)='+\'!/,\x00', &(0x7f0000000900)='.pending_reads\x00', &(0x7f0000000940)='.pending_reads\x00', &(0x7f0000000980)='.pending_reads\x00', &(0x7f00000009c0)='-]\x00', &(0x7f0000000a00)='.pending_reads\x00', &(0x7f0000000a40)='\x00'], 0x1900) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000b00)) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffff9c, 0xc080661a, &(0x7f0000000b40)={@desc={0x1, 0x0, @desc3}}) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:55:54 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000640)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:55:54 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44) getegid() mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:56:02 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) r9 = syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x900) ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000000440)) 14:56:02 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) r7 = openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) openat$incfs(r7, &(0x7f0000000480)='.log\x00', 0xe3768eb4db88eb8e, 0x149) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'veth0_to_batadv\x00', @local}) accept$packet(r2, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, r8, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:56:02 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r5, 0x29, 0x15, &(0x7f0000000340)=""/68, &(0x7f00000003c0)=0x44) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:56:02 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f00000003c0)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)=r5) 14:56:02 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) execveat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000640)='{\x00', &(0x7f0000000680)=',\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='\'(-^:\x00', &(0x7f0000000740)='-#/+!&-+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00\x00\x11\x11\"\"33'], &(0x7f0000000a80)=[&(0x7f0000000840)='\x00\x00\x11\x11\"\"33', &(0x7f0000000880)=',\x00', &(0x7f00000008c0)='+\'!/,\x00', &(0x7f0000000900)='.pending_reads\x00', &(0x7f0000000940)='.pending_reads\x00', &(0x7f0000000980)='.pending_reads\x00', &(0x7f00000009c0)='-]\x00', &(0x7f0000000a00)='.pending_reads\x00', &(0x7f0000000a40)='\x00'], 0x1900) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r3, 0x40106614, &(0x7f0000000b00)) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:56:02 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0) setgid(r6) openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) 14:56:02 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r1 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000780)=r2) openat$incfs(r0, &(0x7f00000007c0)='.pending_reads\x00', 0x82800, 0x2) 14:56:02 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000600)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:56:02 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) ioctl$TUNSETGROUP(r4, 0x400454ce, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:56:02 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x1b, &(0x7f0000000380)=0x6, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)) 14:56:02 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) execveat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000800)=[&(0x7f0000000640)='{\x00', &(0x7f0000000680)=',\x00', &(0x7f00000006c0)='.pending_reads\x00', &(0x7f0000000700)='\'(-^:\x00', &(0x7f0000000740)='-#/+!&-+\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='\x00\x00\x11\x11\"\"33'], &(0x7f0000000a80)=[&(0x7f0000000840)='\x00\x00\x11\x11\"\"33', &(0x7f0000000880)=',\x00', &(0x7f00000008c0)='+\'!/,\x00', &(0x7f0000000900)='.pending_reads\x00', &(0x7f0000000940)='.pending_reads\x00', &(0x7f0000000980)='.pending_reads\x00', &(0x7f00000009c0)='-]\x00', &(0x7f0000000a00)='.pending_reads\x00', &(0x7f0000000a40)='\x00'], 0x1900) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:56:02 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r1 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000780)=r2) 14:56:11 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) getresgid(&(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)) openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) 14:56:11 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x400, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:56:11 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0xc080661a, &(0x7f0000000580)={@desc={0x1, 0x0, @desc1}}) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:56:11 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r1 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) 14:56:11 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) r7 = openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) openat$incfs(r7, &(0x7f0000000480)='.log\x00', 0xe3768eb4db88eb8e, 0x149) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000004c0)={'veth0_to_batadv\x00', @local}) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:56:11 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() socket$inet6_udplite(0xa, 0x2, 0x88) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:56:11 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x148, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8e0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xb9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa9c7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4f}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3f00000}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000001}, 0x8011) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)) 14:56:11 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) syz_open_dev$usbmon(&(0x7f0000000400), 0x6, 0x900) 14:56:11 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540)={0xffffffffffffffff}, 0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f0000000580)) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:56:11 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) syz_open_dev$mouse(&(0x7f0000000600), 0x4, 0x60081) openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) 14:56:11 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) geteuid() mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:56:11 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) pipe2(&(0x7f0000000100), 0x800) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)) 14:56:11 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) syz_open_dev$usbmon(&(0x7f00000003c0), 0x9, 0x200) 14:56:11 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r1 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) 14:56:11 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) [ 136.144164] [ 136.144478] ===================================== [ 136.145167] WARNING: bad unlock balance detected! [ 136.145865] 6.19.0-rc5-next-20260115 #1 Not tainted [ 136.146583] ------------------------------------- [ 136.147277] syz-executor.6/4055 is trying to release lock (rcu_read_lock) at: [ 136.150110] [] __wait_on_freeing_inode+0x105/0x350 [ 136.153147] but there are no more locks to release! [ 136.155235] [ 136.155235] other info that might help us debug this: [ 136.157041] 4 locks held by syz-executor.6/4055: [ 136.157730] #0: ffff88800f5403f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 136.159019] #1: ffff88801c51b388 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 136.160451] #2: ffff88800f544950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 136.161742] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 136.163078] [ 136.163078] stack backtrace: [ 136.163732] CPU: 0 UID: 0 PID: 4055 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 136.163758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.163770] Call Trace: [ 136.163777] [ 136.163785] dump_stack_lvl+0xca/0x120 [ 136.163828] ? __wait_on_freeing_inode+0x105/0x350 [ 136.163854] print_unlock_imbalance_bug+0x118/0x130 [ 136.163880] ? __wait_on_freeing_inode+0x105/0x350 [ 136.163907] lock_release+0x1ee/0x270 [ 136.163933] __wait_on_freeing_inode+0x10a/0x350 [ 136.163960] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 136.163988] ? __pfx_var_wake_function+0x10/0x10 [ 136.164020] ? lock_is_held_type+0x9e/0x120 [ 136.164041] insert_inode_locked+0x25f/0x890 [ 136.164072] __ext4_new_inode+0x223d/0x4cd0 [ 136.164103] ? __pfx___ext4_new_inode+0x10/0x10 [ 136.164129] ? __pfx___dquot_initialize+0x10/0x10 [ 136.164161] ? __pfx_avc_has_perm+0x10/0x10 [ 136.164189] ext4_symlink+0x623/0xb40 [ 136.164223] ? __pfx_ext4_symlink+0x10/0x10 [ 136.164252] ? security_inode_permission+0x72/0xe0 [ 136.164276] vfs_symlink+0x44b/0x840 [ 136.164305] filename_symlinkat+0x158/0x440 [ 136.164331] ? __pfx_filename_symlinkat+0x10/0x10 [ 136.164356] ? strncpy_from_user+0x21b/0x2f0 [ 136.164386] __x64_sys_symlink+0x82/0x110 [ 136.164411] do_syscall_64+0xbf/0x420 [ 136.164434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.164456] RIP: 0033:0x7f757dcf5427 [ 136.164472] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 136.164492] RSP: 002b:00007ffeef07c548 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 136.164512] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f757dcf5427 [ 136.164525] RDX: 00007ffeef07c623 RSI: 00007f757dd50022 RDI: 00007ffeef07c610 [ 136.164539] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffeef07c3e0 [ 136.164552] R10: 00007ffeef07c297 R11: 0000000000000206 R12: 0000000000000001 [ 136.164565] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeef07c610 [ 136.164584] [ 136.192636] ------------[ cut here ]------------ [ 136.193323] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.6/4055 [ 136.248069] Modules linked in: [ 136.249671] CPU: 0 UID: 0 PID: 4055 Comm: syz-executor.6 Not tainted 6.19.0-rc5-next-20260115 #1 PREEMPT(lazy) [ 136.333602] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 136.368999] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 136.398631] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 136.447025] RSP: 0018:ffff8880406679a0 EFLAGS: 00010286 [ 136.485051] RAX: 00000000ffffffff RBX: ffff8880431d0000 RCX: ffffffff815660f7 [ 136.526593] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff8880431d03fc [ 136.568426] RBP: ffff8880431d0000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 136.604148] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880431d0000 [ 136.637866] R13: 0000000000000001 R14: ffffffff85c0e4b0 R15: ffff88801c777578 [ 136.672316] FS: 0000555566088400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 136.888320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 136.964945] CR2: 00007f79f5062018 CR3: 00000000443d9000 CR4: 0000000000350ef0 [ 137.002238] Call Trace: [ 137.036465] [ 137.037231] __wait_on_freeing_inode+0x10f/0x350 [ 137.072029] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 137.106110] ? __pfx_var_wake_function+0x10/0x10 [ 137.126245] ? lock_is_held_type+0x9e/0x120 [ 137.144171] insert_inode_locked+0x25f/0x890 [ 137.194852] __ext4_new_inode+0x223d/0x4cd0 [ 137.233762] ? __pfx___ext4_new_inode+0x10/0x10 [ 137.235945] ? __pfx___dquot_initialize+0x10/0x10 [ 137.236743] ? __pfx_avc_has_perm+0x10/0x10 [ 137.238541] ext4_symlink+0x623/0xb40 [ 137.240821] ? __pfx_ext4_symlink+0x10/0x10 [ 137.241844] ? security_inode_permission+0x72/0xe0 [ 137.243536] vfs_symlink+0x44b/0x840 [ 137.244812] filename_symlinkat+0x158/0x440 [ 137.245942] ? __pfx_filename_symlinkat+0x10/0x10 [ 137.246728] ? strncpy_from_user+0x21b/0x2f0 [ 137.248614] __x64_sys_symlink+0x82/0x110 [ 137.249322] do_syscall_64+0xbf/0x420 [ 137.250139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.250688] RIP: 0033:0x7f757dcf5427 [ 137.251061] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 137.252554] RSP: 002b:00007ffeef07c548 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 137.253163] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f757dcf5427 [ 137.253776] RDX: 00007ffeef07c623 RSI: 00007f757dd50022 RDI: 00007ffeef07c610 [ 137.254394] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffeef07c3e0 [ 137.254978] R10: 00007ffeef07c297 R11: 0000000000000206 R12: 0000000000000001 [ 137.255591] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffeef07c610 [ 137.258259] [ 137.258498] irq event stamp: 349 [ 137.258791] hardirqs last enabled at (349): [] irqentry_exit+0x17b/0x650 [ 137.259596] hardirqs last disabled at (348): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 137.260448] softirqs last enabled at (342): [] kernel_fpu_end+0x59/0x70 [ 137.261177] softirqs last disabled at (340): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 137.262005] ---[ end trace 0000000000000000 ]--- 14:56:11 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) r7 = openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) openat$incfs(r7, &(0x7f0000000480)='.log\x00', 0xe3768eb4db88eb8e, 0x149) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:56:21 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) 14:56:21 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) openat$incfs(r5, &(0x7f0000000440)='.pending_reads\x00', 0x9fbbc9120d8038f3, 0x8) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) 14:56:21 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000005c0)) openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) 14:56:21 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r1 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000680)={"f51338f29bb8c4d2a279d1bc60e47ed9", 0x0, 0x0, {0x1, 0x1}, {0x2, 0x7ff}, 0xff, [0xf5a, 0x4, 0xfffffffffffffffd, 0xb8d0, 0x7, 0x0, 0xff, 0x80000000, 0x8, 0xfffffffffffffffb, 0x8, 0x9, 0x0, 0x1, 0x4, 0x4]}) 14:56:21 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) pipe2(&(0x7f0000000540), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:56:21 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000000c0)=[r1, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x7) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)) 14:56:21 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:56:21 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:56:21 executing program 5: write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x62, 0x12) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@val={0x0, 0x60}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @remote, @remote, @empty, @mcast1}}, 0x38) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan1\x00'}) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000140)={'bridge0\x00'}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x80) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34e8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x57}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"15039702e6699688d921d9e766c6c037", 0x0, 0x0, {0x3f, 0x18c49ec0}, {0x0, 0x9}, 0x1, [0xe8d4, 0x0, 0x1ff, 0x6, 0x0, 0x7fffffff, 0x4, 0x2, 0x9, 0x100000000, 0x9, 0x101, 0x5a, 0xf0d, 0x5, 0x5]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000440)={"3d664bddccc19b6973a9723708998e11", r2, 0x0, {0x7fffffff}, {0x3, 0x8000}, 0x3, [0x0, 0x7, 0x48d, 0x8, 0x400, 0x7fffffff, 0x20, 0x4, 0xdc08, 0x2, 0x5, 0x80000001, 0x50000000000000, 0x8, 0x9, 0x10001]}) ioctl$RTC_UIE_ON(r0, 0x7003) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000680), 0x400100, 0x0) 14:56:21 executing program 6: io_uring_enter(0xffffffffffffffff, 0x52f9, 0xac1a, 0x0, &(0x7f0000000000)={[0x66]}, 0x8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) rt_sigpending(&(0x7f0000000080), 0x8) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x1000) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x278, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7865a674}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xfaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3bb, @remote, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x7fff, @local, 0x8}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2022}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x790}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xe0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b0de907}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7f}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x4000}, 0x200440c0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_enter(r0, 0x6609, 0x70, 0x2, &(0x7f0000000400)={[0x9]}, 0x8) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000004c0)={0x9, &(0x7f0000000440)=[{0xd4e, 0x1, 0x8, 0x8}, {0x4, 0x3a, 0x7f, 0x9}, {0x0, 0x0, 0x30, 0x3}, {0x3ff, 0x9, 0x8}, {0x80, 0x1f, 0x6, 0x1000}, {0xfff, 0x1, 0x32, 0x1}, {0x7b7f, 0x3, 0x5, 0x3ff}, {0x1, 0x1f, 0x74}, {0x7, 0x5, 0x5, 0x7}]}, 0x10) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000500)={0x1b, 0x3b, 0x10, 0xa, 0x5, 0x10, 0x1, 0x138}) r1 = io_uring_setup(0x66ce, &(0x7f0000000540)={0x0, 0x4, 0x10, 0x3, 0xe7, 0x0, r0}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000640)={0xa, &(0x7f00000005c0)=[{0xf801, 0x8, 0x80, 0xffffffff}, {0x9, 0x14, 0x0, 0x2}, {0xdc, 0x3f, 0x32, 0x52b0000}, {0x8, 0x8, 0xf7, 0x1f}, {0x5, 0xfb, 0x5, 0x9}, {0x6, 0x3f, 0x7, 0x9}, {0x7, 0x2, 0x20, 0x5}, {0x101, 0xb5, 0x1}, {0x277c, 0xd4, 0x1}, {0x2, 0x20, 0x7f, 0x6}]}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000780)) 14:56:21 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x36c, 0x400) ioctl$TUNSETOWNER(r0, 0x400454cc, 0xee00) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x20003) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000080)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x20000) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000100)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000140)=0x1) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f00000001c0)) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r6, r3], 0x3) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f00000002c0)={0x6, 0x0, &(0x7f0000000280)=[r6]}, 0x1) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x4240, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000340)=0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r7, 0x40089416, &(0x7f0000000380)=r8) 14:56:21 executing program 2: io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x2}, 0x0) r0 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80040, 0x4) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, &(0x7f0000000700)) 14:56:21 executing program 3: getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) getuid() r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x200000, 0x193) r1 = geteuid() ioctl$TUNSETOWNER(r0, 0x400454cc, r1) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)) geteuid() getdents(r0, &(0x7f0000000140)=""/254, 0xfe) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000280)={@id={0x2, 0x0, @a}}) msgget(0x2, 0x8c) getuid() r4 = msgget$private(0x0, 0x8) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000002c0)=""/101) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r3, 0x10000000) 14:56:21 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x400) renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000001c0)={0xb, 0x2b, 0x17, 0x3, 0x8, 0x2, 0x1, 0x161}) symlinkat(&(0x7f0000000200)='./file0\x00', r2, &(0x7f0000000240)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000280)={"7e258cfe064b606cd6d148fc8be5b26d", 0x0, 0x0, {0x7, 0x678db685}, {0x1, 0x8}, 0x5, [0x0, 0x4, 0x8000, 0x1, 0x80000001, 0x3f, 0xed, 0x5, 0x1, 0x7ff, 0x7fff, 0x6, 0x1, 0x4, 0xfffffffffffffff9, 0x83c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d430721c96d0e4cbbe0a2f78cb9550d3", 0x0, r3, {0x0, 0x8}, {0x47c, 0x1}, 0xe59, [0x7, 0x9, 0x5, 0x3, 0x3, 0x5, 0x78, 0xfffffffffffff74e, 0x3, 0x3, 0x6, 0x0, 0x25c, 0x101, 0x6]}) r4 = syz_open_dev$mouse(&(0x7f0000000480), 0x4, 0x20400) ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000004c0)) getuid() r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x100, 0x0) linkat(r5, &(0x7f0000000540)='./file0\x00', r0, &(0x7f0000000580)='./file0\x00', 0x1000) openat$incfs(r1, &(0x7f0000000700)='.pending_reads\x00', 0x80200, 0x180) 14:56:21 executing program 1: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.pending_reads\x00', 0x80, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x9000, &(0x7f0000000080)={0x2, 0x10000a, 0x360000, {r0}}, 0x20) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000000c0)=[r0], 0x1) getdents(r0, &(0x7f0000000100)=""/218, 0xda) name_to_handle_at(r0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x9, 0x69, 0xff, 0xb7a}}, &(0x7f0000000280), 0x1000) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000002c0)={0x1f, 0x7, 0x0, 0x14, 0x9, 0x6, 0x0, 0x64, 0xffffffffffffffff}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x40, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100800) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000400)=0x1) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000440)={0x2a, 0x20, 0x8, 0x15, 0x4, 0x200, 0x2, 0xee, 0x1}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000480)=[r1], 0x1) rt_sigpending(&(0x7f00000004c0), 0x8) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x101400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x20800, 0x4) renameat2(r1, &(0x7f0000000bc0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000c40)='./file1\x00', 0x0) 14:56:21 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8, 0x400100) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = socket$packet(0x11, 0x1, 0x300) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000080)=[r0, r0, r1, r2, r0, r0, r3], 0x7) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x3}, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000140)) r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3fb, 0x101800) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000001c0)={0x3, 0x5}, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8caa}, {0x8, 0x13, 0x3a}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x16) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x81) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000400)={0x4, &(0x7f00000003c0)=[{0x6, 0x9a, 0x8, 0x3}, {0x9, 0x0, 0x3, 0x6}, {0xac3f, 0x1c, 0x5, 0x1}, {0x2, 0x80, 0x4, 0x2}]}, 0x10) recvfrom$packet(r5, &(0x7f0000000500)=""/47, 0x2f, 0x1, &(0x7f00000005c0)={0x11, 0x8, 0x0, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, 0x14) VM DIAGNOSIS: 14:56:11 Registers: info registers vcpu 0 RAX=0000000000000065 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff8880406674a8 R8 =0000000000000000 R9 =ffffed10016eb046 R10=0000000000000065 R11=6666666666663c5b R12=0000000000000065 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555566088400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f79f5062018 CR3=00000000443d9000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801ae57b40 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff110035caf69 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801ae57b78 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555593135400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffd29b2ffa8 CR3=000000000e9d8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000