last executing test programs: 4.547184198s ago: executing program 0 (id=108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@local, @in=@remote, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@remote, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff, 0xfffffffffffffffc, 0xebe2}, {0x2}, 0x70bd2c, 0x0, 0xa, 0x1, 0x0, 0x58}, [@encap={0x1c, 0x4, {0x7, 0x4e26, 0x4e20, @in=@multicast2}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x84}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x7, [@enum={0xf, 0x1, 0x0, 0x6, 0x4, [{0xe, 0x9}]}, @enum={0x6, 0x5, 0x0, 0x6, 0x4, [{0x3}, {0xd, 0x6c}, {0x2, 0x6}, {0xa, 0x8}, {0x0, 0xb}]}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x34, 0x0, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0x7}, @ptr={0x8, 0x0, 0x0, 0x2, 0x4}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @enum={0xe, 0x8, 0x0, 0x6, 0x4, [{0x7, 0x6}, {0x9, 0x7}, {0xd, 0x60000}, {0xc}, {0xf, 0x5}, {0x2, 0x10001}, {0x2, 0x6}, {0x10, 0x2}]}, @enum={0x7, 0x1, 0x0, 0x6, 0x4, [{0xf, 0x7}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x61, 0x61]}}, &(0x7f00000001c0)=""/29, 0x107, 0x1d, 0x1, 0x5}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fstat(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) 4.48709505s ago: executing program 0 (id=110): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) socket$inet(0xa, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 32) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (rerun: 32) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) getpriority(0x0, 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) (async) getrlimit(0xe, &(0x7f0000000240)) sendmsg$NFT_BATCH(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000600)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000640)=""/153, 0x41000, 0x8d, '\x00', 0x0, @cgroup_skb}, 0x94) 3.867106349s ago: executing program 0 (id=122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x10022, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000944) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0x11000000}, 0x588) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002b40)={0x2020}, 0x2020) 3.299375888s ago: executing program 4 (id=130): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x1, 0x65bd, 0x6, 0x0, 0x1, 0xcb00}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000140), 0xf130180240813cb9}, 0x20) 3.288059004s ago: executing program 4 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r3}}]}, {0x4}, {0xffffffffffffff45, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c00024000000000000000020400048018000480140003006772653a0000000000000000000000000a000700726f757465"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 3.287206279s ago: executing program 3 (id=132): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x1) r1 = socket(0x10, 0x803, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0xc001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 3.199108561s ago: executing program 3 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) (async) socket$unix(0x1, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r5) (async) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) (async) fsetxattr$trusted_overlay_redirect(r5, &(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x8, 0x2) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10) (async) 3.19828065s ago: executing program 4 (id=134): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4b8, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x48c, 0x2, [@TCA_BPF_ACT={0x488, 0x1, [@m_bpf={0x130, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0xd1, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d91028270a2722b141a9140c47e37d068e7193d463a6444e424bc792ab1295f79842a501700a5cc2f71eefaf131a98821e712b03d552c87"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0xd0, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0x79, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xfc, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x0, 0x9, 0xffff0000}, {0xb, 0xf6, 0x5, 0xfffffffc}, {0x401, 0xb0, 0x32}, {0x6092, 0x70, 0x6, 0x1ff}, {0xfff9, 0x2, 0xf7}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb4, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x81, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0xd4, 0x13, 0x0, 0x0, {{0x7}, {0xac, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x9, 'nat\x00', 0xef, 0x7}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x2a, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd}}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x4b8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x48084) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.04215429s ago: executing program 4 (id=139): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000480)={[{@abort}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@noquota}, {@dioread_lock}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x5}}], [{@appraise_type}, {@dont_hash}]}, 0x1, 0x476, &(0x7f0000000700)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)={0x26, 0x3, 0x0, {0x5, 0x5, 0x0, 'bsddf'}}, 0x26) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x3, @desc4}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r3 = syz_open_pts(r2, 0x42) r4 = dup3(r3, r2, 0x0) read$watch_queue(r4, &(0x7f0000000080)=""/134, 0x86) write(r1, &(0x7f0000000480)='\"lgo=\"', 0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file1\x00', r1, 0x4000, r0}, 0x18) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5be2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x0, 0x2, 0x2, 0x6, 0x3, 0xffffffffffffff68, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x2, 0x7, 0x664e2baea951f3a8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xafa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0xd, 0x9a, &(0x7f00000005c0)=""/154, 0x0, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000680)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x218da, r4, 0x6, &(0x7f00000006c0)=[r4, r1, r4, r1, r1, r1], &(0x7f0000000d80)=[{0x1, 0x5, 0x1, 0x5}, {0x5, 0x3, 0x6, 0x5}, {0x5, 0x1, 0xe}, {0x5, 0x4, 0xf, 0x3e1f7ca9426d4031}, {0x3, 0x1, 0xd, 0x3}, {0x1, 0x5, 0x6, 0x5}], 0x10, 0x2}, 0x94) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000ec0)={{r5}, "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"}) setxattr$security_ima(&(0x7f0000000400)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)=ANY=[], 0x700, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000180)={[{@block_validity}, {}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}, {@jqfmt_vfsold}, {@min_batch_time}]}, 0x3, 0x57b, &(0x7f0000000800)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000480)={[{@abort}, {@usrjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@noquota}, {@dioread_lock}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x5}}], [{@appraise_type}, {@dont_hash}]}, 0x1, 0x476, &(0x7f0000000700)="$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") (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000280)={0x26, 0x3, 0x0, {0x5, 0x5, 0x0, 'bsddf'}}, 0x26) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x1, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) file_getattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280), 0x18, 0x100) (async) write$binfmt_aout(r2, &(0x7f0000000400)=ANY=[], 0xff2e) (async) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000240)=@v1={0x0, @aes128, 0x3, @desc4}) (async) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) (async) syz_open_pts(r2, 0x42) (async) dup3(r3, r2, 0x0) (async) read$watch_queue(r4, &(0x7f0000000080)=""/134, 0x86) (async) write(r1, &(0x7f0000000480)='\"lgo=\"', 0x6) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file1\x00', r1, 0x4000, r0}, 0x18) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_tracing={0x1a, 0x1b, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5be2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ldst={0x0, 0x2, 0x2, 0x6, 0x3, 0xffffffffffffff68, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @jmp={0x5, 0x1, 0x8, 0x2, 0x7, 0x664e2baea951f3a8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xafa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0xd, 0x9a, &(0x7f00000005c0)=""/154, 0x0, 0x2, '\x00', 0x0, 0x1c, r1, 0x8, &(0x7f0000000680)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x218da, r4, 0x6, &(0x7f00000006c0)=[r4, r1, r4, r1, r1, r1], &(0x7f0000000d80)=[{0x1, 0x5, 0x1, 0x5}, {0x5, 0x3, 0x6, 0x5}, {0x5, 0x1, 0xe}, {0x5, 0x4, 0xf, 0x3e1f7ca9426d4031}, {0x3, 0x1, 0xd, 0x3}, {0x1, 0x5, 0x6, 0x5}], 0x10, 0x2}, 0x94) (async) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, &(0x7f0000000ec0)={{r5}, "53e59735e3534c8bfe1bd830d9473c3150eaa74e1425221b28514cd26699896adb6231988556ea46f0e74bd6c68b90b991da081e011d44423a4f2a74364be61f5f4ef99e4c6478861e2c7553a455febb3697fe30b27b9f0c1296f808a9c2b05ff932d0eac996846f22f993fb69a7d46244f263e8dcda730360d3735becc72c652f7ee7656a208155be38e2248cf3eebfd65c8f9334c42f05f481cf92faa0119454a380b7244b26acbe920710a8636a99813a6423e6026e49065edaf56d113f4d375e1c1e8483294e43a94095e929a420686f0d336d6f43db6abcb9bb1a3792ffbe4827f6b4f823b86e020da26437df7eea9b2c0e79d3c9ecfc29c20cc0f787ded97c2d848c63a1eb843ae88f05ce047eba622a9cc16a30895bffc510a8a22e4b3802231947b3ed869fd6ced088af919ded2d79cb2b5923cd8b8ecca9821e02d771387359f44b0d76dd8d744f9885faff0d80fb2d4bcfea8234cb18cdcc2457307bc95d3115d852cfea27cf9917b924c6d32acc18c8fd80c009729198838496a54c96b641d117f164d1f0522d164cb34e3c724ed15a9f717debc9205064d1fff72c80d7c64d7cd72e6ebb03575318315dd1ea05683c66a0450b6a7e0e1ac77d20c2b8c4696c0d97615ea5dc5fb1728f6aa1153fce0badd2d4b06d96fb119230991e09d4a23f4c2308a0c4434e118abb6ac4c3aab6a86a7cf60fa6fc50bb3d21d2c5f1725ed20e8e6428f7a18ca2bb860d8f5221e0b562f99e6399e31798080541dbba63c50cde920bee0c7892f22283ebb8fbd78615934063aaec5d5259915e3a564833ce64289ac87eecd4d4710e9acda23d06ef872d56b4706246ebe97cdf4ee4a4b5de80975be99d0dfcf2150855a71a2218715637f47a2037f93632a023ff2804c3526eb24370a854485724133d288054b4b75e15592bb4fb648879fd6b139d36109a36d22590aa601cc5a5638d368e2bb18a41ec88e9c567c4ac1903772a8fa1d4cffec0d6c23e9e65e8b6ef29c21226a0a144df10f735d100c926ddd8bee9897aa9ef8c02910c929123ee005206f6ae9d09666f52178970563eee231e100e457acf02cf173a8917b7a5b325d7a20c2a145961415895c203ed0e9de108be6cac70a563deb13d48a32fcd413c286db0e8eed13550b9fdc8a7c793c985224234e0f28b7f394bae66b88ec289391048d58357aca22e1497f240f894cbf8ed7449d0c293532918daef58f14cb9edfb99b00e417749b020b6e8631ea49544548daa3e3c5f2543be9451ef0781e6c43d112da2d0eeab917fceff74fecb7526ebaf60f4ada9036b8b37b9294bfd0e74fc789399635c6a21555a5cc32ee8e9fd930900ec5cc66394bc73109500db663dca4a555bb99dcc7f81df34cf36e96c4d957559c96772b93544e1e888ff1715da2c1530375bd549610aed5a2de3f6f5eef77e87ce74ea853e9ec1d38dc7a9562080effb14adb735a21422a50725d26c31469a5ad1938167f8a3b63a9e629e812d4ca9d3ab7a7c5336b261aadf9e405f71d64777858b2e1d58585ac10cf5d91d85f0e705df969af6fb2f5a5562084900ab0cd53a48e12abb30923d8e93cd9b4f51067cc66ab077f64cc77b74d26f8955be2ed75413d44d55dbbc0ec360f510c718300c8882c451f265a76980af41611344fe945a60713417465afebbd3496fda10f48ded67e335d75920fc990014347aeec2e01d4978e3f3c50bf36758b544f13ea5ae2c185db3fe570fdcaa0acb337b8a3df34f19ae285010ef2a337d275bfcaa7516c90d81c6881261f8dd4c10791480edca4b41d291a76ff1b44e76f28959822486a93858b6d60e2864289739e1adce4a0f91d0e4ac770b6553c10bf0dcc295f458c1fb72d76077f0d8883b67897c59eb36324d55690956c7bff43c028d41b178ccf5148ef19e7070e2ca174ae4fc3c95fe2c7fae996a0d36b9720d07bc6fd74d18ff4ea1426b13c655407ca26a7d570f722937101455a7890f1fa3a0b1c67e2bdfc043e4099e0fd984b68af3bf96ea5a64ed7b0d438a3e140d210e71cb9b238cd417b20d13632cdd4c3fb3671568c8843d5eaffb365eef330f548a4ccd21758772ef5ec1c194147cf35685fc4b8845cc4fec687883f7bcec61cbb28cb1f7b99c6a951f0759bad0dfee9f32499d82e75ad60a77b78432134a1a22284a1fed11f98163af9d3cb3fdc94d777d5fdc86ed8c257206febc4b928138f92973a01e7819a06b4b6db02bf9ea9923f8f45d29580b4d22296e2b0da559d86088537c63a86f1c6d8d229eca134321ecd733f77b3930ff9a6afe132f3c31446f92c1a0047c2c9013da37e33b7f2fdbc197df74edb572a8e993cf083a0eca01f3a31b2398c901e31da3b3634a080834eebee400229cc5a3644b710262f66a9b90ac63114486d15f448316043fba996a6f29587176a7f9c71cf8ddc944f5696ce00c4fb7676e444ba70e26f183266ba7e2c414a28c504ddc86c4ac169d50233f544c96c463b85255d1b1b96be89e266c100d139ff5f64df7ca07541f9f14ce9ac2e8a223ad7675473deead8edd5210e31a365cc40db0f117cbdb929102bef030a62dc1501a2c9bb83dd0bafd135a6f2b43c45cee2b5c6b68b91973bdc01b231e174a53f0079f6ed55ba3eff63e6e9e3724710168fd5072bb5e3f1fca0dbcc89298df618c7aa0c0da38f320d52157a059dba9736e6e4f8cbd60f787aeefa1d2f1e6b174a20ae20e34a35c6a30802ae7523d5b2c977d83003331730dbcb912c7fd70f14b25b29b69bab7f23c0f72d3d934b2da91604dda84fedff21c801175730b7777e6c749c4c0f815be3b48dc0a4aa9e88277cc0f77e16d82b8227c980c368b4b8275da20b82f0d1f6ace4a2676d5daca480b2caebe1d3fd0dff544aafcab477b82d9afc282ca65a9d81ab74b7d600e4e29fd0aeb32b3d3f738240b7e1162646e67037e3a9522e1758c9d27a67eb246b6a3784996e67b8821b653b1b900bc3bdecf7654a8c7c60187c1732d8da00ac25060e8d5d86275784c1228210a8989c05f6f90ef79f6d2d66afc7cd3c7d60a400ff7bbe87906c532e037af6c68a39099834e4a91e687f0f809cea8b3a8da3af6e9da0e9dfa152f305d118877d5da0348da90d78f3feca06dc15311d8d0fd33b4d4a3e8c75ee29b0425b5056c4ba31748c6747b95dc796a98d916d658ff415134a357ecd47dbc6caa8be5c77557a70c3e4c03a60f96105afe11361c6d84a140254a2f829877e55b9358906c3041901165862e594fb2801e61c3e6e334ff43671b71d4f44f57bb49e65d87a15fadb4e9401a9de16479307e5be21d2aa731eab9442882098fce8771a8a522a33a78cabe06924c67dc02e83c4d39db223c50e06dcd48f16e6c4af6be9108dce013415c3accabf384954b4ea9b366f9a106741a6ca3f6bc339e9f6b0d9eb1fd8e7e91b707b06dd148d61415be03039b34c3c7d7cfd45edf3d75ed52f0a9117c8b69cfccf952413ccb163c68ea8ad44d07c6e6731128badcf9d5e0b2a7ffade11e1f94988fcb93363062681ebcd3f7468b27c4ecfdf3f239e2eae56937cb8f60c5c5f9d23237e617f9f6b68bf00f06f61648a03ff94999789b239397448b721ef3d67f4b9eb11696543433e0a0128695a0df041ac5c440178ea72a377ffe53df66f5aa724fde93589c3e1317b45fa498cf7e6af75ed2c3926af0dc5a9e0113059ac2b4687604c69d5d2a48fe959113736dc9b14da4894e9e79169a1f280c2d2e1fcc38fb27e84f21a131ef155b686923932c90a26a89f6a8fd6fc8fe21a1ec8b051f17d67edb0bfa3a6e33c14c832a4f2435fd43febd53e61bdebd909ddfba564cedc38312ada3d534e63cb454786b84aa1809d98f4ab32912a378b2e1379dfc6f11506f3371974bcb72ccb38911fb29b4e6f69fd89fc34f1eaa692e519d0aa6b2f3cb558680413ccbc972d561419937146ea034c81b12f4b5f40be5bc4d218f6eeb22a387d4d97108db10340406df84f7c3d3b3ff7355fe5db317cee4c6c88c02ec831b638b38bbad6b2194d058152a386636fba7f2367f2c19fa7fc140456c0e27257635aad669a201003659af3730721e63f58dc0344936d410a392ed2280a4af59c3b32bb8a8ee2c96b981ebf211631e0f9f1799bc4371f8ed39fcb9ef0b8340e07ae38527d70d77a0475a04bf1633370ad11ba75e158a09f5a46af1a6cd899cffbc4a910abbc31dc7f9ddd7bbdc929ccd30505b9f12417fdcfb465d544b97ec7444a63a3d37bf5df2226547313e03e32cbc13292dcae96addda513b0e8aa8469dfe4f46700b2632bf273255393e6a79cb9a29e5607fb1b91c627f73be25a0e33a99860958dd0af15cf570909b2956555f34cb41b0d246e88db733b2e7fea38b5c637f93a98561c6d2d4a2dc0c53b3c6d8800e55c51ba592d4586060b9dbef313869338e092f76e2a4eb8fc8375bb4af661fbfcf23718d359845c2cbce2b06f26902a6a356897e69b5b0b51883c25fa8c91f88f342464f186415b7d5cb59060d915e7eaaf15882850fa199a052bf89ed383e4ca61791c8e9d23e486e0959d8e89f80d6e245bc3fd2088b367d6513973beaa445992f83d15e3def060b05daa8cb98f519a07d404431943864af80e877288edfcd9de33aa7875c13c351d3365e1bbaaa981e2468391c2c2a5d7b8a33bfa58a9bbba32d8be9e3c35c07edab852c2dfdde48cdba9465ee6e70daeaf7683daabdc9e339326a8182a43e2d0d8d0a3ba6c493a5638c7c45129c16c92fdc9be49a2b350342e3c82fcaf52472ac83be467f1b5f01509191e51868369af997cd49906600854582be2481c86039b157a547d653edf499402b4c9d6a9d4ba24fc6eedaa56975fba2b43c95389a777da485aee2c32dabc0afefb270ad346dccff04bf3c093951b42a1e727c05d1e2de0c60e7af636ee9220fba93c8202bee7f9e7c773cdd2d400a2b7b914f759a7958fd09c2f1fe9dcffd411db06717bedbf91c69f9b86bb08fd5e3ee38316a90f153bb032958a27264f475f1b247ceb6188267066e68ecd651f733ae722fc1961c044913d0bf61d42dc65ef1a9b0dda133c3c93e22fa5e4d39e7e0fc1342e9b4cd2f368f55b2ee63042071f2c873a50a865e4c90ed6763d7bdd32e75e622eced51d8b984e281987a7c734d09fbeef22879abebed381219454462cf424b017ae7a9581e38b18329ed0add238db0817738f1d4daadfaa70b1f2fa46c8614da559d5032a0f3524b3e25fc1f81047b0f69da7683d1584c8763d28270dc558287c90d9427a7ef36f7a63cc75be4a00016689599193ac1104dcf233d0c949cef2c0de2f7bdaaa56ee13e84d09693aae546002bb2fc1a5db18c10869012449036147ccf94a75222778b17ea5a812e667447d30331441345f16197ef187c863ddb8486172521dc40ee0ee8c2b896b373807abaf7148118e04fba64a76d5c4a304fe6a0e3ac399d720abbf077edb627242ea87b4d644e17aeb7e492bb00e75b187a2587685b5994aaaba812fbf6e13c6792124d4a68dc0c792a6c1d541eaaff37edbe4bfa152531171b35f06212fff63430b97255d1a1c05ce26e4d0c273d48a51055bfa4457ede1653bf3ab082bb20b198b0f11ecd2dce848e7d814167e0e7b0ce7034dc87fa4218d767e664221302c16debbd63072cf4f07f9cf82b814a1a0821c877a146f1bf8297633bc3bd7d38e0395aca59844783997f144ab480724bd0401de177a85682c93f75b9bb473f02f600e348ea9b94ab125f80c5699e85"}) (async) setxattr$security_ima(&(0x7f0000000400)='./file1\x00', &(0x7f0000000140), &(0x7f0000000440)=ANY=[], 0x700, 0x0) (async) 3.041708278s ago: executing program 3 (id=140): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48814}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000001940)={0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4, 0x1}, @in={0x2, 0x4e22, @multicast2}, 0x2, 0x0, 0x0, 0x0, 0xbb, 0x0, 0x4, 0x7ff, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0xf0, 0x1}}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="050000000500000002c38ae6d9000000000011e2b2f202aad345f213e80000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040001018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8e000000080bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xffffffffffffff15, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="17000000040000001e0e00000400000000200000", @ANYRES32=r9, @ANYBLOB='\x00\x000\x00'/20, @ANYRES32=r7, @ANYRES32, @ANYBLOB="0479c86c9800000202000000000000001f0b00000000000008000000175d6980ff6080e55367b2445a084a645d04209eaaceacc38bc05467beda78949c69"], 0x50) close_range(r0, r10, 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r11, r7, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfe43, &(0x7f0000000200)=ANY=[@ANYRES32=r9, @ANYBLOB="690259be30cb9d55ffb4601baf3abc8b333f7a827ed3fc61", @ANYRES32=r12, @ANYRES32=0x0], 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r15, @ANYBLOB="1600530000200000"], 0x24}}, 0x4000000) connect$can_j1939(r0, &(0x7f0000000300)={0x1d, r3, 0x0, {0x0, 0x1, 0x3}, 0xff}, 0x18) r16 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r16, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r16, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000001780)="4dfb0cf0d556f1327d", 0x9}, 0x1, 0x0, 0x0, 0x4c040}, 0xee) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=@newtfilter={0x2c, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xb}, {0x5, 0x10}, {0xd, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 3.028993084s ago: executing program 0 (id=141): recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x20013126, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000e80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'cp862'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@utf8no}, {@uni_xlateno}, {@uni_xlateno}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@utf8}, {@shortname_winnt}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@utf8no}]}, 0xfd, 0x2b2, &(0x7f00000005c0)="$eJzs3UFrY1UUAODz0jSJukgWrkTxLVy4GqbzC1KkA4NZKVmoCxVnBmQShCkUqmLsShAENy79BYLQnX/Cjf9AcCu4s4vClZe815fUJDXQtOp836an997z7rkvry1d5OSDl8dPHubx+OTzX6PTyaLRj36cZdGLRlS+jAX9bwMA+C87Syn+SDOb5GUR0dleWQDAFm389/906yUBAFv29jvvvrk/GBy8leeduD/+6mhY/GdffJ3N7z+Oj2MUj+JudOM8Il2YxfdTSpNmXujFa+PJ0bDIHL//c3n9/d8jpvl70Y3edGgx/8HgYC+fmcufFHU8X+7fL/LvRTdeXLL/g8HBvSX5MWzF6/HbN1lV/53oxi8fxScxiofTIur8L/by/I303Z+fvVeUV+Rnk6Nhe7qulnZu+KUBAAAAAAAAAAAAAAAAAAAAAOB/7E7ZO6cd0/49xVDZf2fnvPhmN/JKb7E/zyw/qy50qT/QJMX3VX+du3mep3Jhnd+Ml5rRvJ1TAwAAAAAAAAAAAAAAAAAAwL/L4fGnTz4cjR49vZag6gZQva1/8+ucTrP6cyOvxvqsdr1XowzXbBE71ZosYm09xSGu6bZcFTy3quYfftz0gp2r1+wWe3Wu8RTVyz03EtVItvweti8Wd6qH5KdqJKWUWvEPd2+tmkobPX6tpVPdje9G64VpMFmzJrJVhX39Sv1zWU5ll0/RWrjPC8FuGcylX3o2Nnqe//67ItOtAwAAAAAAAAAAAAAAAAAAtqp+0++SyZO1qY3U3lpZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCj6s//P26WQ/XIqmBSrly3pgxa8fTwFo8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAM+KvAAAA//9X6Fqp") writev(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) syz_emit_ethernet(0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaa8baaaaaaaaaaaabb0800450000240000000000849078ac1414bbac1414aa4e214e20000000000000000008000004"], 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/bond0/bonding/arp_interval\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)="5c41afe82f065523d45df0ccae1b1da1a4d3b4b6265afd3b2da33459a4dbe47792d48f51c105c8c005c957f9b3813840ec3b929f46b724ca594c7431b474b5db3ff536bf7465ce55c92dd9ee3de6a7467a76c7b512e7d386b3a4c2baf687be553db5d571c1568588dc0d97eee86b37aa4e33c69f4b815b285a67cd7493273b7717ded5a2ff6d995c6e09a703ece6237c5b387d2cea0a", 0x96) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000e7100001040000000801000000d51b8800", @ANYRES64=r0, @ANYRES32=r1], 0x40}}, 0x4000010) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000240)={0x0, 0x37, ""/55}) 2.925430769s ago: executing program 0 (id=143): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r1 = accept(r0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x8, 0x448896331fef6638, [0x0, 0x0, 0x0], [0x4f4a, 0x5, 0x9, 0x5], [0x2, 0x80000001, 0x7ff, 0xb988], [0x9, 0x0, 0x65, 0x7]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000440)={r3}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$FE_GET_INFO(r5, 0x80a86f3d, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980), 0x0, 0x2, 0x0, 0x0, r4}) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x8000) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000300)=""/71) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000240)={0x0, r6, r8}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@private1}}, &(0x7f0000000580)=0xe8) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000502, r9, &(0x7f00000005c0)) 2.819660435s ago: executing program 4 (id=146): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) r1 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x14, 0x4}) 2.769187674s ago: executing program 1 (id=147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000050000000c00020000000000000000000c00060000000000000000000400078008000100", @ANYRES32=r1], 0x38}}, 0x0) clock_adjtime(0x17, &(0x7f00000001c0)={0x4008b8d, 0x40, 0xb, 0x0, 0x8, 0x1, 0x0, 0xfffffffffffffffd, 0xc4ed, 0xffffffffffffffff, 0xf423f, 0x0, 0x8, 0x1, 0x0, 0xe5a, 0x6, 0x5, 0x3, 0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x400000}) r2 = socket(0x2b, 0x805, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r4, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x6}, {{&(0x7f0000000540)=@x25, 0x80, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000980)=""/170, 0xaa}, {&(0x7f0000000780)=""/240, 0xf0}], 0x3}, 0x9}], 0x2, 0x12222, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r7, &(0x7f0000000000), 0x0, 0x0) recvfrom(r8, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0xa00300, &(0x7f0000000380)={[{@grpjquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@resgid}, {@noinit_itable}, {@errors_continue}, {@minixdf}, {@usrjquota}, {@test_dummy_encryption_v1}, {@discard}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r9, &(0x7f0000004200)={0x2020}, 0x2020) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000340)={0x0, 0xffff, 0x0, 0x0, 0x0}) ptrace(0x10, r10) 2.615606528s ago: executing program 0 (id=149): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x3095c1821143af15, 0x2, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x278, '\x00'/632}, &(0x7f0000000300)=0x2a0) 2.570569177s ago: executing program 32 (id=149): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket(0x3095c1821143af15, 0x2, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x3000, 0x1}) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004679100000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x50) (async) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'filter\x00', 0x278, '\x00'/632}, &(0x7f0000000300)=0x2a0) 1.855133144s ago: executing program 1 (id=152): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000001180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@alu={0x7, 0x0, 0x4, 0x2, 0x3, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) 1.734612905s ago: executing program 1 (id=153): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=ANY=[@ANYBLOB="0400080010000108fdffffff0005000000000000", @ANYRES32=0x0, @ANYBLOB="000000002000000008001b000000000014001a80100002800c00018008001d0001000000"], 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r2, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000170a010300000000000000000000000809000100"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x439, 0x70bd23, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x1b8c1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r5, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @local}, 0x14) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="c187000000000000140012800a000100767863616e000000", @ANYRES32, @ANYBLOB="080013"], 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20004050) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc2, '\x00', 0x0, 0x0, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 1.600091382s ago: executing program 1 (id=156): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)={[&(0x7f0000000ec0)=' wO\xd5\xce\x82\x89r\xa0\x03\xc4Z\x15\xfds\x17g(\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\'@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#EWP\xb5\x96`\x19\xee\xeb\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m\xd3d\xec\x7f\x13\x046\xf7\'\x18C\xf8\"f/\xe1\xe7\xb8\xcf\xdb\xe4\x95r0\x8d\xce\x1d\xcc\xd8`\xd9mV\xbdEY\xbb?\"\x8c\x15\x95\xfe\x9d\vq\x94ei\xf5\xb8\xf0K\x17\x13\xc6\x1e`D\xbd\x9e\xa2\xa7\xa1&f\xb3\x90\nU~\x16~^\xf2\x04\xfe\x01\\QK>\xe0\x86\x86\x83\x88\xa1I\xad\x0e\xdf&\xd0\xd0\xa9\x8fb\x1ej\xc7}\xec/\xe5\x023\xc5\xe4\t\x8cn\x18v\xebX\x80\xee\x82Ab\x81\xda\xc20\xdbep\xaa\xb82`\x81\xc5\x14aG\xb6*\x18g\x17\xd5A\xb7/\xd6\x8d\x148\xb3\x86*\x9b\x05\x85\xef\x9b\x9f\xd2\xf7\re\xce\xc6\x8d\x7f\x945^\x10C\x98\x1a\xce\xfd\x855\x06\xa4\xdf<\xc0D\xd2\x82^\xf1\xa4\xf9\b', &(0x7f0000000480)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, &(0x7f0000000c80)={[&(0x7f0000000700)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000640)=@newtfilter={0x48, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0xfffffffffffffe76, 0x1, {0xe, 0xe}}]}}]}, 0x48}}, 0x24040084) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount(0x0, 0x0, 0x0, 0x210011, 0x0) pivot_root(0x0, 0x0) capset(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144}, 0x48) kexec_load(0x6, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="b1d0e3eea3d26e878eaba7a9e1bd17ccef250466b6db8272edcc99c17ee95791688c31ff3ad332750685ee5592e031da121e0a45ecffe0ef70eeadaea63d0e7761aea34e654d1bc4a11cd45c58467e7d0921b03130a447742cd2aefb69df1fd04dfc194f3e6855f731e045d0521e6d8911c8c1d8b772a92633cb816b9f56b4018c3b64243a451538ba0c95baf7a5d28f3d6e252b730b4609096f60f7bee4813825ca76d4f424d654b180debeda79ed87f011b95b2c2467a37224d23835", 0xbd, 0x1, 0x2}, {&(0x7f0000000140)="c0a19982f02d6d63b6e9dea4adfac9d55f64f594da9ce42c628b36171659c37ea440a4bf0a1da5f441ffedf590a35e581559b3d149974cbfc206b758e84d33386c094a82d5b3dcb517e952cbcc117bde1ebb3faf9e0bb96d2d19769ac042bcf12af37ff49c5978c0b7cf4cdca5b12f924d86bf785adfd259cdaa77da1c9ebe", 0x7f, 0xb, 0xffff}, {&(0x7f00000001c0)="f8c2631496324863da3242e47c4032d04b2071b55f6b58dfbe2e6d82c5a30650dcf16b8a347f1cec4d9344510966f4a6f5c4ce", 0x33, 0x1, 0x1}, {&(0x7f0000000200)="4d7309a709102b73f1ca80388e511b57ba154b7ab60a4fd760bacc0e2a939889c23f7943989b56ac95fa8f3388dd8d2c5ce20c7bd4abd3f84e0ab9be97ffb465a58bb250bda10a395e76a717efa389cce23537f229188961a033aa5230fc84914cbaabdfe0ee4556e8bd8d924999f050ad491626c3fba8727fb60d3b14b80a67dba7b4a84434dc3f5852ac433fd48a04631ca4b1c6cdc11d6b855fa31efb4d4f5a0cd156c386237521ddb0d8ee7de799cbc825f802639a9a00b8a58aeb73586a43456b890b79565d360dcd7b66e96c3f49d3bb866e0bbe78f05f2fca57464b321bb44339ed0b76de55af7126bb9f82007638c6e3775adfc65f4ec760b1", 0xfd, 0xfffffffffffffffb, 0x1}], 0xa0000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mkdirat(r1, &(0x7f0000000380)='./file0\x00', 0x140) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, 0x0, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r4, &(0x7f00000003c0)='\x00\x00\x00\x00\x00', &(0x7f0000000000)=@udp6}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) 1.554282015s ago: executing program 2 (id=157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r1, 0x0, &(0x7f0000001780)=""/4096}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000400)=0xffffffffffffffff, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff00000000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff0000000009000000000000000a00000000000000000000000000000000000000000000000000000000000400"]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x3, 0x0}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x3, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x7, 0x0, 0x2, 0xa, 0x0, 0x2, 0x1}], &(0x7f00000000c0)='GPL\x00', 0x9, 0x59, &(0x7f0000000100)=""/89, 0x40f00, 0xc, '\x00', r2, @fallback=0x7, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x0, 0xe, 0xfff, 0x7}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[r5, r0, r0, r1, r1], &(0x7f0000000300)=[{0x4, 0x5, 0xf, 0x2}, {0x1, 0x4, 0x5}], 0x10, 0x7}, 0x94) 1.503589395s ago: executing program 2 (id=158): r0 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0xa, 0x800, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_emit_ethernet(0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) request_key(0x0, 0x0, &(0x7f00000004c0)='{\x00', 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e22e0000002925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000a00000091119200002a940000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_io_uring_complete(0x0, r0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f0000000780)=[{&(0x7f00000003c0)="452e2e7c8bd8018d531b716aa99b2f5ac1", 0x11}], 0x1) openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) 1.443268617s ago: executing program 1 (id=159): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0x30280) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000300)=[{0x6, 0xb5, 0x1, 0x5}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r2, 0x0) 1.073491673s ago: executing program 3 (id=160): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000700)={[{@errors_remount}, {@minixdf}, {@oldalloc}, {@data_ordered}]}, 0x1, 0x51b, &(0x7f00000001c0)="$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") getsockopt$inet_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) 1.047048207s ago: executing program 2 (id=161): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc9, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000080)) sendmsg$nl_route_sched(r2, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_bpf={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xfffffffffffffffb}, {0xc}}}]}]}, 0x6c}}, 0x0) 967.134373ms ago: executing program 2 (id=162): sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16, @ANYBLOB="050026bd1de1d0a790f36b45000008000300", @ANYRES32=r0], 0x98}}, 0x20000014) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf250b00000008000300", @ANYRES32=r0, @ANYBLOB="05000800010000000800370000000000450400280009000700fe2c51aca200000008003700010000"], 0x44}, 0x1, 0x0, 0x0, 0x4044820}, 0x20040090) syz_emit_vhci(0x0, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000008060500000000000000000002000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a3200000000180007800c00018008000140e0000001080008000000000005"], 0x64}, 0x1, 0x0, 0x0, 0x4810}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x71) add_key(&(0x7f00000001c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, 0x0) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000100)={0x980900, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x5, 0x1) setuid(0xee01) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000cdf000/0x3000)=nil) 905.084602ms ago: executing program 3 (id=163): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockopt$IP_SET_OP_GET_FNAME(r6, 0x1, 0x53, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000480), 0x0, 0x10022, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x20000944) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8, 0xffffffa7}, 0x588) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000002b40)={0x2020}, 0x2020) 520.242075ms ago: executing program 4 (id=164): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000001600)=[{&(0x7f00000000c0)='7\t3', 0x3}], 0x1, 0xb) splice(r2, &(0x7f0000000040)=0x10, r3, 0x0, 0x807, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x181800, 0x0) pread64(r4, 0x0, 0x0, 0x4) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xaef, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffdf9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) memfd_secret(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) 467.203365ms ago: executing program 1 (id=165): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r1, 0x804c4700, 0xfffffffffffffffe) recvmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x102) syz_emit_ethernet(0x154, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "00fb0f", 0x11e, 0x3c, 0x0, @private0, @mcast2, {[@hopopts={0x8, 0x3, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0xddff}]}], {0x2, 0x0, 0xfe, 0x0, @gue={{0x2, 0x1, 0x0, 0x14, 0x0, @val=0x80}, "ce51924a9598eca583809bffc481fc17959e6a1bbc86e1828fbb936c1d8b19fe615f7add58fe0ff62f0cddea2fe64c7ca0a0b378d203f08bcd829c3d0762235b2bfdf03de0b629b8b63b879406d04e772b241392cfcde63ded720c1aa3877dfededaf025faa3239a8915a7eae341bef2c17a8f46be584e4d72a8a0e9ff8642f35ebacf53f64dcea54e996216711ffe7e737e24768241a5094a2198982f72a9b5663dee203af2b3ded03dd5b197319b146d2dcc9a95ba7cc090f3325c40a2b6d3f496acb9af317902552cb0de9a40459ec79eacc3e69157372ea712d3a0380a4ac29024b3dbfae8ea20524120bdc9"}}}}}}}, 0x0) 395.802401ms ago: executing program 33 (id=164): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000840)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000001a40)="a1"}) syz_clone(0x84800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r3, &(0x7f0000001600)=[{&(0x7f00000000c0)='7\t3', 0x3}], 0x1, 0xb) splice(r2, &(0x7f0000000040)=0x10, r3, 0x0, 0x807, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x181800, 0x0) pread64(r4, 0x0, 0x0, 0x4) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104}}}, &(0x7f0000000300)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xaef, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffdf9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$can_raw(0x1d, 0x3, 0x1) socket$igmp6(0xa, 0x3, 0x2) memfd_secret(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000007, 0x8010, 0xffffffffffffffff, 0x0) 343.178916ms ago: executing program 5 (id=150): r0 = socket$inet(0xa, 0x2, 0x80000000) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x6) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x0, 0x4b1}, 0x8) r2 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0xc0c00) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x40, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x202, 0x9}, 0x8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x38, r5, 0x1, 0x70bd2c, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x4002}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 301.155858ms ago: executing program 5 (id=167): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0xfffffffffffffffe) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10, 0x103) 219.146121ms ago: executing program 5 (id=168): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0xc0189436, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x15}}) (async) prlimit64(0x0, 0x7, &(0x7f0000000480)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@nodelalloc}, {@nombcache}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f0000000940)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x1000, @local, 0x1}, 0x1c) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2000001, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd\a\x00\x00\x00no=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x2808080, &(0x7f0000000140)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756d61736b3d303030303030303030303030303030303030303035302c756e695f786c6174653d302c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6eb5e45c0f86837fc661696c3d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e39352c00"/209, @ANYRES16=r1], 0x81, 0x2af, &(0x7f0000000280)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x9, 0x7}, &(0x7f00000005c0)=0x8) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r4, 0x84, 0x1c, 0xfffffffffffffffe, &(0x7f0000000100)=0x40) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000600)={r3, 0x101, 0x3, [0x400, 0x9, 0x971]}, &(0x7f0000000640)=0xe) 211.649483ms ago: executing program 5 (id=169): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x24040851}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x106f) r3 = syz_open_dev$media(&(0x7f0000000040), 0x4, 0x142040) ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000380)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r3, 0xc1007c01, &(0x7f0000000080)={r4}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000340)={0x80000000, &(0x7f0000000040), &(0x7f00000002c0)=[{{0x80000000, 0x0}}]}) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet6_tcp_TLS_RX(r0, 0x11a, 0x2, &(0x7f0000001680)=@gcm_256={{0x304}, "df67e91414c69472", "2da71b4ea108d09da0a581e04ef426c157955da7c81b7fcd55706bf2ce222818", "a7ef776e", "469bea5f0042013f"}, 0x38) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) syz_clone3(&(0x7f00000002c0)={0x22001500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000b40)={0x0, 0x7, 0x0, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000640), 0x3, 0x0, &(0x7f0000000a40)=[{0x0, 0x80000000}, {}, {}], 0x6666666666666b0, 0x0, &(0x7f0000000ac0)=[{}, {}, {}]}) r7 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000080)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000000)={r8, &(0x7f0000000040)=[{}, {0x80000000}], 0x0}) ioctl$MEDIA_IOC_ENUM_LINKS(r7, 0xc0287c02, &(0x7f0000000200)={r10, 0x0, &(0x7f0000000180)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r7, 0xc0347c03, &(0x7f0000000280)={{r11, r9, 0x7, [0x7ff, 0x3]}, {r10, 0x0, 0x3, [0x36, 0x80000000]}, 0x0, [0x0, 0x80000001]}) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000bc0)={{r4, r5, 0x0, [0xfff, 0x6]}, {r6, r9, 0x5, [0x80, 0x80]}, 0x0, [0x6, 0x8]}) r12 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r14 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1076c1, 0x0) bind$alg(r14, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(des)\x00'}, 0x58) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000e40)) sendmsg$NFT_BATCH(r13, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 132.066139ms ago: executing program 2 (id=170): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="bb", 0x1}], 0x1}, 0x80) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000b7b2e135dea3a080af6e38f39e7e5dfd979ceffffed13c1d564d17af812c92598097048414299e31aaa9ddbbf646f54acaea30ec8391349b41048de3e7e1a220e7834a5f0498105021c3df2ab42731354910bab82fbc0d7872869c5774c467fe9fe83e19880566ae17dedd4b5703b3aab18bdd3e40b50d01920fc2f57da1a74bff4c749b7e0f2667ea34efc12225a0de68004d024ac764ee02392de55e", @ANYRES16=r3, @ANYBLOB="01032abd7000fddbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1c, 0x0, 0x5, 0x0, 0xb, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) socket$inet6_sctp(0xa, 0x801, 0x84) (async) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000001280)={&(0x7f0000000140)={0xa, 0x4e23, 0x2, @private0, 0x6}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000000c0)="bb", 0x1}], 0x1}, 0x80) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) shutdown(r0, 0x1) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x8, 0x2, 0x819}, 0x14) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="00000000b7b2e135dea3a080af6e38f39e7e5dfd979ceffffed13c1d564d17af812c92598097048414299e31aaa9ddbbf646f54acaea30ec8391349b41048de3e7e1a220e7834a5f0498105021c3df2ab42731354910bab82fbc0d7872869c5774c467fe9fe83e19880566ae17dedd4b5703b3aab18bdd3e40b50d01920fc2f57da1a74bff4c749b7e0f2667ea34efc12225a0de68004d024ac764ee02392de55e", @ANYRES16=r3, @ANYBLOB="01032abd7000fddbdf2516000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c4) (async) socket$nl_audit(0x10, 0x3, 0x9) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdbff, {0x60, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x1c, 0x0, 0x5, 0x0, 0xb, 0x3, 0x1}}, {0x6, 0x2, [0x2]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) (async) 3.111167ms ago: executing program 2 (id=171): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000040), 0x4, 0xbdc, &(0x7f0000000f00)="$eJzs3M9rHNcdAPDvjKSVZKtduZRSl4JVSrGh7Vp2kalNoXZx6aWHQnstWMgrI7T+gaTiStZh1f4Dpe250EuhrUnwIT77kkCuuSTONSaHgAmKlUAIicLsD0mxdvXLu5qN9fnA23lv3sy+73dHy7wHOwrgyBrLXtKIkxFxLYkoNvanEVGo1YYiqvXj1laXpz5ZXZ5KYn399x8mkUTEs9XlqeZ7JY3t8UZjKCLe+lUS3/rr9nHnF5dmJyuV8lyjfXbh5p2z84tLP525OXmjfKN869yFn0+cn7gwfnGiY7l++t7lhx//4DfvVz/73+f3P/rHf5K4HCONvq15dMpYjG18Jlv1R8RkpwfLSV8jn615Jv27nJR2OSgAANpKt8zhvhPF6IvNyVsxXn871+AAAACAjljvi1gHAAAAXnKJ9T8AAAC85Jq/A3i2ujzVLPn+IuFwPb0SEaP1/Ncapd7TH9XadigGIuLYsyS2Ptaa1E97YWMR8eTdi69mJbr0HPJOqisR8d1W1z+p5T9ae4p7e/5pRIx3YPyx59q9lv9PCu3zv9yB8fPOH4Cj6dGV+o1s+/0v3Zj/RIv7X3+Le9dB5H3/a87/1rbN/zbz72sz//vdHse4999/3W3Xl+X/i4e/fqVZsvGz7QsltQ9PVyK+198q/2Qj/6RN/tf2OEbxi7vldn1557/+74jT0Tr/pmTn/090dnqmUh6vv7YcY+XNif+3Gz/v/LPrf6xN/rtd/zt7HOOPV68+aNe3e/7pB4XkD7VaobHnz5MLC3PnIgrJb7fvP994oL2N5jHN98jyP/PDnb//rfLPhqg2PodsLbDS2Gbtvzw35i/v33ttp/yztV9+1//7te1Brv/f9jjGj974+5l2fVvXv1nJxn+S1NfCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCURsRIJGlpo56mpVLE8Yj4dhxLK7fnF348fftPt65nfRGjMZBOz1TK4xFRrLeTrH2uVt9sn3+u/bOIOBER/ywO19qlqduV63knDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIbjETESSVqKiDQi1oppWirlHRUAAADQcaMt9w4eehwAAABAVwxH2/U/AAAA8DKx/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDLTpx69DiJiOql4VrJFBp9A7lGBnRbmncAQG76DnbaUKfjAA5ff94BALnZ5xr/gNMFoJclu/S3n/APdjwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrX6ZOPHicRUb00XCuZQqNvoOUZpw4xOqCb0rwDAHLTt1Nn/+HFARw+X3E4ulqv8du60q04gPwku/QPbR5T/WrPYNdiAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKD3jNRKkpYiIq3V07RUivhGRIzGQDI9UymPR8Q3I+Kd4sBg1h7MO2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6bn5xaXayUinP7bMSBzqru5WIrg0x3BMJfp0rhcYfXK/E04uVpDfCaH6bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4euYXl2YnK5Xy3HzekQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5m19cmp2sVMpze6g82M/BWyp55wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH6+DAAA//9juQkA") (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000040), 0x4, 0xbdc, &(0x7f0000000f00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa2480, 0x160) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x1, 'batadv_slave_1\x00', {}, 0x5}) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smack_current(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x20) setreuid(0x0, 0xee00) fchown(r0, 0x0, 0xee00) (async) fchown(r0, 0x0, 0xee00) 2.563051ms ago: executing program 5 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000a00)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c856f6469722c636865636b3d72656c617865642c757466383d312c6e6e6f6e756d7461696c3d312c6e6f6e756d7461696c3d302c6e66733d7374616c655f72772c73686f77657865632c73686f72746e616d653d6d697865642c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c757466383d302c696f636861727365743d6d616363726f617469616e2c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',utf8=1,shortname=mixed,\x00'], 0x7, 0x2b1, &(0x7f0000000740)="$eJzs3UFrI2UYAOB3mkmb6CE9eBJhB/Tgadn6C1pkBbUgKDmoBy1uFiRTFhIIpCvGPfkL/AX+GE9exKMXf4DiTQ/iyGQmadJOu6butkt5nktf3u975/2+ydCc5svnrx0PHzwaP3zy1a/R6SSxtR/7j3+INd9Eo59/b84DAC+4v4oi/igqO1Vquj6jfUFluvXcFwcAPBer3/9rA77dAeDW+ujjT94/ODy8/2GWdSKOv530k6j+VuMHD+PLyGMQ96IXf0cUS2WcxTvvHt6PNCvtxhvHs0m/rDz+7Mf6+ge/Rczr96IXu2fri6Ks38sqK/WzSb8dL9X99/MYfPB99OKVsuaX9xZrX9S/1VAf/e148/WV9d+NXvz0RTyKPB6cqf96L8veLr778/GnZbasT2aT/s5yXj27dV2fCQAAAAAAAAAAAAAAAAAAAAAAt9/dbGl3/fydxcH/l4yfPx+ouzjgZ7Zyvs+9LMuKpJp/Wp/Gq2mkN7l3AAAAAAAAAAAAAAAAAAAAeFGMpyfDo7wbEfMgH4yqTD6NiPXMBsHitf6GofhnMBq3T7vvRMRVWlTBnU2rolW3zpNyy+347+Xt2JlXPn1ya8NdlLc/H4ySNK56w88HyTLTrYLYihiN70TVq8x0q2Al87+7d6LqVRseJU/7cDtND8kzCIqGx69VBen5B3v7bKZb76Dhyt1Lum+/fKU1F70LhpKIaC9v5uXXaT/be3g9/38AAAAAAAAAAAAAAAAAAIBT4+nJcGv+0m/D4JMbWBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3IDx9GR4NP/9/w2CWV180ZyiVQZp1JmGttvXvE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABuuX8DAAD//7wvVHk=") socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/ieee80211/phy1/netdev:wlan1/active_links\x00', 0x2, 0x0) mlock(&(0x7f0000588000/0x3000)=nil, 0x3000) write(r2, &(0x7f0000000500)='3\x00', 0x2) 0s ago: executing program 3 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000072009fb329bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="08000180"], 0x20}, 0x1, 0x0, 0x0, 0x28044010}, 0x20041040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f00000004c0)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe}, 0x80, 0x0}, 0xe07e872420dfafca) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001480), 0x408000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000140)) getpid() socket$inet(0x2, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0xb9, 0x505800) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002cbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffe200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xf}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x74}, 0x1, 0x0, 0x0, 0x4801}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.51' (ED25519) to the list of known hosts. [ 29.409901][ T4704] cgroup: Unknown subsys name 'net' [ 29.501051][ T4704] cgroup: Unknown subsys name 'cpuset' [ 29.503316][ T4704] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.651257][ T4704] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.443372][ T4728] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.444034][ T4728] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.444510][ T4728] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.445015][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.445222][ T4728] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.445467][ T4728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.445674][ T4728] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.445862][ T4728] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.446343][ T4728] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.446696][ T4728] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.446866][ T4728] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.447059][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.447759][ T4728] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.448100][ T4728] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.448247][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.449399][ T4728] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.449656][ T4728] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.450048][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.450427][ T4728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.452832][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.456126][ T4720] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.457556][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.469852][ T4720] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.475195][ T4726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.475373][ T4728] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.795529][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.797297][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.799062][ T4718] bridge_slave_0: entered allmulticast mode [ 30.800926][ T4718] bridge_slave_0: entered promiscuous mode [ 30.806370][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.807808][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.809456][ T4718] bridge_slave_1: entered allmulticast mode [ 30.811110][ T4718] bridge_slave_1: entered promiscuous mode [ 30.857485][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.861024][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.881451][ T4718] team0: Port device team_slave_0 added [ 30.895998][ T4718] team0: Port device team_slave_1 added [ 30.904812][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.906335][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.907789][ T4714] bridge_slave_0: entered allmulticast mode [ 30.909639][ T4714] bridge_slave_0: entered promiscuous mode [ 30.911728][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.912825][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.912911][ T4714] bridge_slave_1: entered allmulticast mode [ 30.913374][ T4714] bridge_slave_1: entered promiscuous mode [ 30.920579][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.920632][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.920698][ T4719] bridge_slave_0: entered allmulticast mode [ 30.921158][ T4719] bridge_slave_0: entered promiscuous mode [ 30.922478][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.922499][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.922551][ T4719] bridge_slave_1: entered allmulticast mode [ 30.922951][ T4719] bridge_slave_1: entered promiscuous mode [ 30.933129][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.937018][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.957369][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.957398][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.957719][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.964392][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.964403][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.964416][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.973550][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.974563][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.983277][ T4714] team0: Port device team_slave_0 added [ 30.986710][ T4714] team0: Port device team_slave_1 added [ 30.992031][ T4719] team0: Port device team_slave_0 added [ 30.992835][ T4719] team0: Port device team_slave_1 added [ 31.007129][ T4718] hsr_slave_0: entered promiscuous mode [ 31.007520][ T4718] hsr_slave_1: entered promiscuous mode [ 31.022429][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.023840][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.028988][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.034516][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.034547][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.034562][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.046564][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.046589][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.046603][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.047220][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.047228][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.047241][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.050429][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.050785][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.050867][ T4721] bridge_slave_0: entered allmulticast mode [ 31.051353][ T4721] bridge_slave_0: entered promiscuous mode [ 31.052669][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.052692][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.052791][ T4721] bridge_slave_1: entered allmulticast mode [ 31.053285][ T4721] bridge_slave_1: entered promiscuous mode [ 31.070408][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.070736][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.070800][ T4715] bridge_slave_0: entered allmulticast mode [ 31.071241][ T4715] bridge_slave_0: entered promiscuous mode [ 31.088793][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.090203][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.091584][ T4715] bridge_slave_1: entered allmulticast mode [ 31.093216][ T4715] bridge_slave_1: entered promiscuous mode [ 31.096395][ T4719] hsr_slave_0: entered promiscuous mode [ 31.096700][ T4719] hsr_slave_1: entered promiscuous mode [ 31.096910][ T4719] debugfs: 'hsr0' already exists in 'hsr' [ 31.096955][ T4719] Cannot create hsr debugfs directory [ 31.099675][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.110945][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.131068][ T4714] hsr_slave_0: entered promiscuous mode [ 31.131396][ T4714] hsr_slave_1: entered promiscuous mode [ 31.131597][ T4714] debugfs: 'hsr0' already exists in 'hsr' [ 31.131608][ T4714] Cannot create hsr debugfs directory [ 31.143045][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.145912][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.148954][ T4721] team0: Port device team_slave_0 added [ 31.162604][ T4721] team0: Port device team_slave_1 added [ 31.181774][ T4715] team0: Port device team_slave_0 added [ 31.182690][ T4715] team0: Port device team_slave_1 added [ 31.199415][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.200794][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.205713][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.208447][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.209729][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.214484][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.225227][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.225263][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.225277][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.245921][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.245950][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.246141][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.246609][ T4718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.254730][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.255100][ T4718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.257179][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.262000][ T4721] hsr_slave_0: entered promiscuous mode [ 31.262357][ T4721] hsr_slave_1: entered promiscuous mode [ 31.262568][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 31.262578][ T4721] Cannot create hsr debugfs directory [ 31.274480][ T4718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.276842][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.283749][ T4718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.287471][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.317007][ T4715] hsr_slave_0: entered promiscuous mode [ 31.318977][ T4715] hsr_slave_1: entered promiscuous mode [ 31.320412][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 31.321572][ T4715] Cannot create hsr debugfs directory [ 31.368291][ T4719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.371646][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.378006][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.378074][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.378232][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.378273][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.384506][ T4719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.387481][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.397699][ T4719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.400023][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.407058][ T4719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.409885][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.434138][ T4714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.437125][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.440711][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.440771][ T4719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.440850][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.440889][ T4719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.446819][ T4714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.450165][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.455068][ T4714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.457485][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.459987][ T4714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.462288][ T4714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.470306][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.486458][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.488101][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.490839][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.491195][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.493075][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.494860][ T1928] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.496205][ T1928] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.500630][ T1928] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.502477][ T1928] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.514462][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.516868][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.518899][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.521285][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.533019][ T1833] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.533084][ T1833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.533454][ T1833] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.533474][ T1833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.550892][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.555439][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.567779][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.567815][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.580520][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.580577][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.602370][ T4715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.604709][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.605242][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.605269][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.610133][ T4715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.612646][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.613583][ T4715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.615009][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.616781][ T4715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.619374][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.647746][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.654054][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.674274][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.676470][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.700645][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.703301][ T4714] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.730175][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.730220][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.730884][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.730917][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.731999][ T1928] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.732023][ T1928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.732835][ T1928] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.732857][ T1928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.772949][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.786202][ T4715] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.788184][ T4715] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.802974][ T1928] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.803026][ T1928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.803803][ T1928] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.803825][ T1928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.808035][ T4714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.813135][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.854334][ T4718] veth0_vlan: entered promiscuous mode [ 31.859170][ T4718] veth1_vlan: entered promiscuous mode [ 31.865849][ T4718] veth0_macvtap: entered promiscuous mode [ 31.869110][ T4718] veth1_macvtap: entered promiscuous mode [ 31.876339][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.879597][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.884816][ T1833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884927][ T1833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884954][ T1833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.918571][ T40] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.941825][ T1928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.941867][ T1928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.967492][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.992275][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.992315][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.037498][ T4718] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.125784][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.138072][ T4719] veth0_vlan: entered promiscuous mode [ 32.140486][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.147698][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.154000][ T4719] veth1_vlan: entered promiscuous mode [ 32.162370][ T4715] veth0_vlan: entered promiscuous mode [ 32.164492][ T4715] veth1_vlan: entered promiscuous mode [ 32.173234][ T4721] veth0_vlan: entered promiscuous mode [ 32.177826][ T4721] veth1_vlan: entered promiscuous mode [ 32.198225][ T4719] veth0_macvtap: entered promiscuous mode [ 32.210983][ T4719] veth1_macvtap: entered promiscuous mode [ 32.215615][ T4715] veth0_macvtap: entered promiscuous mode [ 32.219771][ T4715] veth1_macvtap: entered promiscuous mode [ 32.220633][ T4714] veth0_vlan: entered promiscuous mode [ 32.225083][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.234352][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.237526][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.241890][ T4714] veth1_vlan: entered promiscuous mode [ 32.252346][ T4721] veth0_macvtap: entered promiscuous mode [ 32.254539][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.256769][ T4721] veth1_macvtap: entered promiscuous mode [ 32.271698][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.273514][ T1688] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298721][ T4714] veth0_macvtap: entered promiscuous mode [ 32.300662][ T4904] capability: warning: `syz.1.7' uses 32-bit capabilities (legacy support in use) [ 32.310302][ T4714] veth1_macvtap: entered promiscuous mode [ 32.330097][ T1923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.330124][ T1923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.336382][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.338011][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.352966][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353174][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353257][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353314][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353499][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353651][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.365665][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.366802][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.382359][ T1688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.382399][ T1688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.403889][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.403930][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.441027][ T4908] mmap: syz.1.8 (4908): VmData 25870336 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 32.457072][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.457115][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.469574][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470124][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470164][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.470171][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.470262][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470666][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470749][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470772][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470790][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.470803][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.491897][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.491936][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.497927][ T1688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.497960][ T1688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.511691][ T50] Bluetooth: hci0: command tx timeout [ 32.511818][ T50] Bluetooth: hci4: command tx timeout [ 32.511877][ T50] Bluetooth: hci3: command tx timeout [ 32.511932][ T50] Bluetooth: hci2: command tx timeout [ 32.511986][ T50] Bluetooth: hci1: command tx timeout [ 32.556290][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.556333][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.614821][ T4919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 32.624467][ T4927] openvswitch: netlink: Duplicate or invalid key (type 0). [ 32.626089][ T4927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 32.686466][ T4922] syzkaller0: entered promiscuous mode [ 32.687641][ T4922] syzkaller0: entered allmulticast mode [ 32.692724][ T4922] netlink: 260 bytes leftover after parsing attributes in process `syz.0.10'. [ 32.712041][ T4937] capability: warning: `syz.2.14' uses deprecated v2 capabilities in a way that may be insecure [ 33.173091][ T4967] loop2: detected capacity change from 0 to 2048 [ 33.173885][ T4967] EXT4-fs: Ignoring removed i_version option [ 33.201788][ T4967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.225199][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.332032][ T4986] loop2: detected capacity change from 0 to 256 [ 33.334459][ T4986] vfat: Deprecated parameter 'posix' [ 33.335899][ T4986] FAT-fs: "posix" option is obsolete, not supported now [ 33.409065][ T4986] IPv6: addrconf: prefix option has invalid lifetime [ 33.409103][ T4986] IPv6: addrconf: prefix option has invalid lifetime [ 33.419494][ T4986] process 'syz.2.18' launched './file2' with NULL argv: empty string added [ 33.527023][ T4998] loop1: detected capacity change from 0 to 512 [ 33.535129][ T4998] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.535170][ T4998] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.573956][ T4998] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #17: comm syz.1.19: corrupted in-inode xattr: e_name out of bounds [ 33.574034][ T4998] loop1: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 33.577409][ T4998] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.19: couldn't read orphan inode 17 (err -117) [ 33.577484][ T4998] loop1: lost filesystem error report for type 5 error -117 [ 33.579479][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 33.579494][ C0] EXT4-fs (loop1): initial error at time 33: ext4_iget_extra_inode:5180: inode 17 [ 33.579513][ C0] EXT4-fs (loop1): last error at time 33: ext4_orphan_get:1404 [ 33.596442][ T4998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.599676][ T4998] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.1.19: path /5/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 33.636809][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.654560][ T5018] loop2: detected capacity change from 0 to 4096 [ 33.654927][ T5018] ext4: Unknown parameter 'uid<00000000000000000000' [ 33.795574][ T5049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.30'. [ 33.831744][ T5053] loop2: detected capacity change from 0 to 512 [ 33.852686][ T5051] syz.1.31 uses obsolete (PF_INET,SOCK_PACKET) [ 33.863520][ T5053] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 33.867059][ T5053] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 33.871788][ T5053] EXT4-fs (loop2): mount failed [ 33.876578][ T5059] loop3: detected capacity change from 0 to 1024 [ 33.890133][ T5059] EXT4-fs: inline encryption not supported [ 33.890986][ T5059] EXT4-fs: Ignoring removed bh option [ 33.891349][ T5059] /dev/loop3: Can't open blockdev [ 33.906034][ T5059] loop3: detected capacity change from 0 to 512 [ 33.906397][ T5059] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.949904][ T5059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.987481][ T1793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.031839][ T5077] nfs: Unknown parameter 'mountproto-tcp' [ 34.042722][ T5060] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 34.053012][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 34.055386][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 34.055590][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 34.055907][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 34.056118][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 34.063258][ T5058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 34.214751][ T5102] binder: BINDER_SET_CONTEXT_MGR already set [ 34.214785][ T5102] binder: 5101:5102 ioctl 4018620d 20000040 returned -16 [ 34.215170][ T5102] binder: 5101:5102 got transaction to invalid handle, 1 [ 34.215196][ T5102] binder: 5101:5102 cannot find target node [ 34.215216][ T5102] binder: 5101:5102 transaction async to 0:0 failed 2/29201/-22, code 0 size 0-0 line 3252 [ 34.361553][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.361634][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.361711][ T5079] bridge_slave_0: entered allmulticast mode [ 34.362157][ T5079] bridge_slave_0: entered promiscuous mode [ 34.362874][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.362900][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.362963][ T5079] bridge_slave_1: entered allmulticast mode [ 34.363380][ T5079] bridge_slave_1: entered promiscuous mode [ 34.371341][ T5079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.372299][ T5079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.379439][ T5079] team0: Port device team_slave_0 added [ 34.380250][ T5079] team0: Port device team_slave_1 added [ 34.386359][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.386383][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.386398][ T5079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.386984][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.386998][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.387016][ T5079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.397667][ T5079] hsr_slave_0: entered promiscuous mode [ 34.397990][ T5079] hsr_slave_1: entered promiscuous mode [ 34.398189][ T5079] debugfs: 'hsr0' already exists in 'hsr' [ 34.398205][ T5079] Cannot create hsr debugfs directory [ 34.469243][ T10] binder: undelivered TRANSACTION_ERROR: 29201 [ 34.590477][ T50] Bluetooth: hci1: command tx timeout [ 34.590519][ T50] Bluetooth: hci2: command tx timeout [ 34.590548][ T50] Bluetooth: hci3: command tx timeout [ 34.590570][ T50] Bluetooth: hci0: command tx timeout [ 34.635316][ T5154] loop0: detected capacity change from 0 to 256 [ 34.682150][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.724627][ T5164] loop2: detected capacity change from 0 to 256 [ 34.724991][ T5164] ======================================================= [ 34.724991][ T5164] WARNING: The mand mount option has been deprecated and [ 34.724991][ T5164] and is ignored by this kernel. Remove the mand [ 34.724991][ T5164] option from the mount to silence this warning. [ 34.724991][ T5164] ======================================================= [ 34.734494][ T5164] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 34.734535][ T5164] FAT-fs (loop2): Filesystem has been set read-only [ 34.767557][ T5164] bond1: (slave gretap0): Device is not bonding slave [ 34.770123][ T5164] bond1: option active_slave: invalid value (gretap0) [ 34.822432][ T5164] bond1 (unregistering): Released all slaves [ 34.881645][ T5170] loop0: detected capacity change from 0 to 8192 [ 34.930537][ T1793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.995383][ T5178] netlink: 16 bytes leftover after parsing attributes in process `syz.0.54'. [ 35.002709][ T5178] veth1_to_team: entered promiscuous mode [ 35.005887][ T5178] gretap0: entered promiscuous mode [ 35.009275][ T5178] hsr1: entered promiscuous mode [ 35.060917][ T5193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 35.100189][ T5192] EXT4-fs: inline encryption not supported [ 35.110121][ T5192] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.110164][ T5192] EXT4-fs (loop0): Test dummy encryption mode enabled [ 35.116072][ T5192] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 35.116138][ T5192] System zones: 0-5 [ 35.120818][ T5192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.144150][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 35.223214][ T5213] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 35.225479][ T5213] FAT-fs (loop2): Filesystem has been set read-only [ 35.233609][ T5213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 35.250952][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.352649][ T1793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.393808][ T5241] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 35.438070][ T1793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.450574][ T5246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.462069][ T5250] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #3: comm syz.3.68: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 35.462117][ T5250] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 35.466075][ T5250] EXT4-fs error (device loop3): ext4_quota_enable:7235: comm syz.3.68: Bad quota inode: 3, type: 0 [ 35.466110][ T5250] loop3: lost filesystem error report for type 5 error -117 [ 35.470368][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 35.470384][ C0] EXT4-fs (loop3): initial error at time 35: ext4_ext_check_inode:521: inode 3 [ 35.470408][ C0] EXT4-fs (loop3): last error at time 35: ext4_quota_enable:7235 [ 35.485136][ T5250] EXT4-fs warning (device loop3): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.485380][ T5250] EXT4-fs (loop3): mount failed [ 35.537335][ T4715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.566248][ T5250] binder: 5248:5250 got reply transaction with no transaction stack [ 35.567858][ T5250] binder: 5248:5250 transaction reply to 0:0 failed 4/29201/-71, code 0 size 72-24 line 3155 [ 35.581505][ T5250] binder: BINDER_SET_CONTEXT_MGR already set [ 35.581533][ T5250] binder: 5248:5250 ioctl 4018620d 20000040 returned -16 [ 35.613783][ T5250] binder: 5248:5250 got transaction to invalid handle, 1 [ 35.613823][ T5250] binder: 5248:5250 cannot find target node [ 35.613935][ T5250] binder: 5248:5250 transaction async to 0:0 failed 5/29201/-22, code 0 size 0-0 line 3252 [ 36.109775][ T4728] Bluetooth: hci4: command tx timeout [ 36.322123][ T4813] binder: undelivered TRANSACTION_ERROR: 29201 [ 36.384646][ T5263] x_tables: duplicate underflow at hook 2 [ 36.500452][ T1793] bridge_slave_1: left allmulticast mode [ 36.500497][ T1793] bridge_slave_1: left promiscuous mode [ 36.500864][ T1793] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.519349][ T1793] bridge_slave_0: left allmulticast mode [ 36.519389][ T1793] bridge_slave_0: left promiscuous mode [ 36.519471][ T1793] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.598493][ T5276] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.669087][ T50] Bluetooth: hci3: command 0x040f tx timeout [ 36.669465][ T50] Bluetooth: hci2: command tx timeout [ 36.669498][ T50] Bluetooth: hci1: command tx timeout [ 36.674322][ T4728] Bluetooth: hci0: command tx timeout [ 36.894268][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.931920][ T1793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.951665][ T5297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 36.960021][ T1793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.966343][ T5299] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.79: inode has both inline data and extents flags [ 36.966374][ T5299] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.969023][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 36.969037][ C1] EXT4-fs (loop2): initial error at time 36: ext4_orphan_get:1399: inode 15 [ 36.969054][ C1] EXT4-fs (loop2): last error at time 36: ext4_orphan_get:1399: inode 15 [ 36.971694][ T1793] bond0 (unregistering): Released all slaves [ 36.982225][ T5299] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.79: couldn't read orphan inode 15 (err -117) [ 36.982271][ T5299] loop2: lost filesystem error report for type 5 error -117 [ 36.989077][ T5299] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.046297][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.123882][ T5316] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.165539][ T5323] netlink: 152 bytes leftover after parsing attributes in process `syz.2.83'. [ 37.167744][ T5323] openvswitch: netlink: Flow key attr not present in new flow. [ 37.173376][ T5323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.83'. [ 37.181241][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.232695][ T1793] hsr_slave_0: left promiscuous mode [ 37.236388][ T1793] hsr_slave_1: left promiscuous mode [ 37.238754][ T1793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.241449][ T1793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.251950][ T1793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.254266][ T1793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.290758][ T1793] veth1_macvtap: left promiscuous mode [ 37.298824][ T1793] veth0_macvtap: left promiscuous mode [ 37.298911][ T1793] veth1_vlan: left promiscuous mode [ 37.298968][ T1793] veth0_vlan: left promiscuous mode [ 37.374344][ T5349] EXT4-fs: Ignoring removed i_version option [ 37.376283][ T5349] EXT4-fs: Ignoring removed bh option [ 37.385388][ T5349] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.87: inode #13: comm syz.1.87: iget: illegal inode # [ 37.385427][ T5349] loop1: lost filesystem error report for type 5 error -117 [ 37.385849][ T5349] EXT4-fs (loop1): Remounting filesystem read-only [ 37.397055][ T5349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.417653][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.485461][ T1793] team0 (unregistering): Port device team_slave_1 removed [ 37.501694][ T1793] team0 (unregistering): Port device team_slave_0 removed [ 37.510202][ T5365] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.91: inode has both inline data and extents flags [ 37.510252][ T5365] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.510679][ T5365] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.91: couldn't read orphan inode 15 (err -117) [ 37.510711][ T5365] loop3: lost filesystem error report for type 5 error -117 [ 37.511228][ T5365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.517480][ T5365] overlay: Unknown parameter 'rootcontext' [ 37.659890][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.827345][ T5079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.845005][ T5079] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.853909][ T5079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.855921][ T5402] vhci_hcd vhci_hcd.2: invalid port number 255 [ 37.856306][ T5402] vhci_hcd vhci_hcd.2: invalid port number 255 [ 37.866344][ T5407] vhci_hcd vhci_hcd.2: invalid port number 255 [ 37.866380][ T5407] vhci_hcd vhci_hcd.2: invalid port number 255 [ 37.870976][ T5079] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.871341][ T5079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.881330][ T5079] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.882738][ T5079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.912589][ T5079] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.964724][ T5418] binder: 5412 BINDER_GET_NODE_INFO_FOR_REF: only handle may be non-zero. [ 37.964753][ T5418] binder: 5412:5418 ioctl c018620c 200000c0 returned -22 [ 37.976906][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.987074][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.995570][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.995631][ T1688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.998190][ T5424] logitech-hidpp-device 0005:046D:B012.0001: received hid++ report of bad size (4096) [ 38.003022][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.003069][ T1688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.043783][ T5428] netlink: 32 bytes leftover after parsing attributes in process `syz.2.103'. [ 38.057326][ T5079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.075067][ T5428] geneve2: entered promiscuous mode [ 38.075109][ T5428] geneve2: entered allmulticast mode [ 38.181702][ T5441] xt_NFQUEUE: number of total queues is 0 [ 38.210732][ T5079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.259615][ T4727] Bluetooth: hci4: command tx timeout [ 38.758021][ T10] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 38.758486][ T4727] Bluetooth: hci0: command tx timeout [ 38.758511][ T4727] Bluetooth: hci1: command tx timeout [ 38.758529][ T4727] Bluetooth: hci2: command tx timeout [ 38.758543][ T4727] Bluetooth: hci3: command 0x040f tx timeout [ 38.800236][ T5455] fido_id[5455]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.839897][ T5079] veth0_vlan: entered promiscuous mode [ 38.849933][ T5463] xt_cluster: you have exceeded the maximum number of cluster nodes (128 > 32) [ 38.852415][ T5079] veth1_vlan: entered promiscuous mode [ 38.874458][ T5079] veth0_macvtap: entered promiscuous mode [ 38.878821][ T5079] veth1_macvtap: entered promiscuous mode [ 38.890587][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.896374][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.928144][ T5471] tmpfs: Unknown parameter '18446744073709551615' [ 38.930128][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.930333][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.930372][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.930388][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934527][ T5471] set_capacity_and_notify: 11 callbacks suppressed [ 38.934538][ T5471] loop1: detected capacity change from 0 to 8 [ 38.947220][ T5471] SQUASHFS error: Failed to read block 0x6e6: -5 [ 38.947250][ T5471] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 38.947271][ T5471] SQUASHFS error: Unable to read directory block [6aa:26] [ 38.986367][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.986408][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.005684][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.005730][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.024626][ T5479] loop1: detected capacity change from 0 to 512 [ 39.051721][ T5479] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.111: bad orphan inode 13 [ 39.051759][ T5479] loop1: lost filesystem error report for type 5 error -117 [ 39.052114][ T5479] ext4_test_bit(bit=12, block=4) = 1 [ 39.052139][ T5479] is_bad_inode(inode)=0 [ 39.052355][ T5479] NEXT_ORPHAN(inode)=0 [ 39.052379][ T5479] max_ino=32 [ 39.052391][ T5479] i_nlink=1 [ 39.052903][ T5479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.055219][ T5482] loop3: detected capacity change from 0 to 512 [ 39.064392][ T5479] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.111: Hash code is SIPHASH, but hash not in dirent [ 39.067230][ T5479] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.111: Corrupt directory, running e2fsck is recommended [ 39.067533][ T5479] EXT4-fs warning (device loop1): dx_probe:813: inode #2: comm syz.1.111: Hash code is SIPHASH, but hash not in dirent [ 39.067554][ T5479] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.111: Corrupt directory, running e2fsck is recommended [ 39.067591][ T5479] EXT4-fs error (device loop1): ext4_find_dest_de:2050: inode #2: block 13: comm syz.1.111: bad entry in directory: directory entry overrun - offset=24, inode=0, rec_len=131076, size=1024 fake=0 [ 39.077145][ T5482] loop3: detected capacity change from 0 to 8192 [ 39.139129][ T4349] loop3: p1 < > p3 < p5 > p4 [ 39.141045][ T4349] loop3: p4 size 3081 extends beyond EOD, truncated [ 39.142585][ T4349] loop3: p5 size 3081 extends beyond EOD, truncated [ 39.151597][ T5487] netlink: 'syz.2.113': attribute type 21 has an invalid length. [ 39.151629][ T5487] netlink: 'syz.2.113': attribute type 7 has an invalid length. [ 39.153265][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 39.153659][ T5482] loop3: p1 < > p3 < p5 > p4 [ 39.157847][ T5482] loop3: p4 size 3081 extends beyond EOD, truncated [ 39.159493][ T5482] loop3: p5 size 3081 extends beyond EOD, truncated [ 39.200125][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.113'. [ 39.213808][ T5489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 39.252923][ T5489] bond1 (unregistering): Released all slaves [ 39.300613][ T4739] udevd[4739]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 39.302634][ T4707] udevd[4707]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.305450][ T4737] udevd[4737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.307510][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.324968][ T4739] udevd[4739]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 39.326079][ T4737] udevd[4737]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 39.327016][ T4707] udevd[4707]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 39.327340][ T4706] udevd[4706]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.387308][ T5498] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 39.388842][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.476519][ T5507] loop3: detected capacity change from 0 to 128 [ 39.476857][ T5507] vfat: Unknown parameter 'flh' [ 39.479502][ T5507] fuse: Unknown parameter ' [ 39.479502][ T5507] ' [ 39.586662][ T5517] loop3: detected capacity change from 0 to 512 [ 39.589024][ T5517] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.870805][ T5517] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 39.924499][ T5527] loop1: detected capacity change from 0 to 512 [ 40.050168][ T5532] loop3: detected capacity change from 0 to 512 [ 40.056162][ T5532] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.061977][ T5532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.092191][ T5532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.147410][ T5546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 40.147449][ T5546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.131'. [ 40.153983][ T4714] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.171069][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 40.183044][ T5551] netlink: 112 bytes leftover after parsing attributes in process `syz.3.132'. [ 40.189762][ T5549] syzkaller0: entered promiscuous mode [ 40.189796][ T5549] syzkaller0: entered allmulticast mode [ 40.215213][ T5554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.133'. [ 40.278813][ T4728] Bluetooth: hci4: command tx timeout [ 40.304119][ T5564] loop2: detected capacity change from 0 to 256 [ 40.310043][ T5565] loop1: detected capacity change from 0 to 128 [ 40.394465][ T5569] EXT4-fs: Ignoring removed orlov option [ 40.432177][ T5569] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.447561][ T5571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.140'. [ 40.450837][ T5569] EXT4-fs error (device loop4): __ext4_new_inode:1287: comm syz.4.139: failed to insert inode 12: doubly allocated? [ 40.457840][ T5569] overlayfs: failed to create directory ./bus/work (errno: 5); mounting read-only [ 40.462341][ T5575] vlan2: entered promiscuous mode [ 40.463353][ T5575] bond0: entered promiscuous mode [ 40.464425][ T5575] bond_slave_0: entered promiscuous mode [ 40.465620][ T5575] bond_slave_1: entered promiscuous mode [ 40.490539][ T5578] bond0: option arp_interval: invalid value (\A/U#]̮Ӵ&Z;-4YwԏQW8@;F$YLt1t?6teU-=FzvǵӆºU=qVܗk7N3ƟK[(Zgt';wբm\n #|[8},) [ 40.490584][ T5578] bond0: option arp_interval: allowed values 0 - 2147483647 [ 40.511588][ T4715] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 40.513566][ T4715] FAT-fs (loop0): Filesystem has been set read-only [ 40.515168][ T4715] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 40.624564][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.631764][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.633020][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.635356][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.637395][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.639585][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.642167][ T5586] EXT4-fs: Ignoring removed i_version option [ 40.642530][ T5079] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 40.642911][ T5079] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 40.644046][ T5079] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 40.663769][ T5586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.695020][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.766761][ T5597] EXT4-fs (loop1): Test dummy encryption mode enabled [ 40.779995][ T5597] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.147: corrupted in-inode xattr: invalid ea_ino [ 40.780035][ T5597] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 40.782667][ T5597] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.147: couldn't read orphan inode 15 (err -117) [ 40.782696][ T5597] loop1: lost filesystem error report for type 5 error -117 [ 40.788716][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 40.788746][ C0] EXT4-fs (loop1): initial error at time 40: ext4_iget_extra_inode:5180: inode 15 [ 40.788783][ C0] EXT4-fs (loop1): last error at time 40: ext4_orphan_get:1404 [ 40.796827][ T5597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.829073][ T4728] Bluetooth: hci3: command 0x040f tx timeout [ 40.874062][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.907902][ T4727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 40.910647][ T4727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 40.911334][ T4727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 40.911684][ T4727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 40.911902][ T4727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 41.212752][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.296310][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.334466][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.334521][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.334589][ T5603] bridge_slave_0: entered allmulticast mode [ 41.335025][ T5603] bridge_slave_0: entered promiscuous mode [ 41.336097][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.336143][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.336200][ T5603] bridge_slave_1: entered allmulticast mode [ 41.336742][ T5603] bridge_slave_1: entered promiscuous mode [ 41.347715][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.349541][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.356416][ T5603] team0: Port device team_slave_0 added [ 41.357530][ T5603] team0: Port device team_slave_1 added [ 41.365534][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.365564][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.365580][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.366187][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.366194][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.366205][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.381353][ T5603] hsr_slave_0: entered promiscuous mode [ 41.382139][ T5603] hsr_slave_1: entered promiscuous mode [ 41.382358][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 41.382368][ T5603] Cannot create hsr debugfs directory [ 41.396495][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.446948][ T5603] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.449939][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 41.450323][ T5603] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.453753][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 41.454380][ T5603] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.456048][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 41.456590][ T5603] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.459293][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.470554][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.470596][ T5603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.470682][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.470721][ T5603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.496167][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.514099][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.516325][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.520583][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.529809][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.529865][ T1688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.545340][ T12] bridge_slave_1: left allmulticast mode [ 41.545380][ T12] bridge_slave_1: left promiscuous mode [ 41.545470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.548053][ T12] bridge_slave_0: left allmulticast mode [ 41.548065][ T12] bridge_slave_0: left promiscuous mode [ 41.548123][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.552799][ T4718] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.605954][ T12] gretap0 (unregistering): left promiscuous mode [ 41.620071][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.650068][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.689815][ T12] bond0 (unregistering): Released all slaves [ 41.697578][ T1688] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.697640][ T1688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.719224][ C1] vcan0: j1939_tp_rxtimer: 0x000000001b7092ad: rx timeout, send abort [ 41.834143][ T5651] block nbd2: not configured, cannot reconfigure [ 41.863286][ T5651] bridge0: entered promiscuous mode [ 41.863330][ T5651] bridge0: entered allmulticast mode [ 41.934267][ T12] veth1_to_team: left promiscuous mode [ 41.969289][ T30] audit: type=1326 audit(41.930:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5671 comm="syz.1.159" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b79228 code=0x0 [ 41.980175][ T12] hsr_slave_0: left promiscuous mode [ 41.981959][ T12] hsr_slave_1: left promiscuous mode [ 41.983244][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.984963][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.986938][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.988546][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.993376][ T12] veth1_macvtap: left promiscuous mode [ 41.994547][ T12] veth0_macvtap: left promiscuous mode [ 41.995785][ T12] veth1_vlan: left promiscuous mode [ 41.997061][ T12] veth0_vlan: left promiscuous mode [ 42.110891][ T12] team0 (unregistering): Port device team_slave_1 removed [ 42.115255][ T12] team0 (unregistering): Port device team_slave_0 removed [ 42.219864][ C1] vcan0: j1939_tp_rxtimer: 0x000000001b7092ad: abort rx timeout. Force session deactivation [ 42.398957][ T4406] 8021q: adding VLAN 0 to HW filter on device eth0 [ 42.407645][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.465773][ T5685] EXT4-fs: Ignoring removed oldalloc option [ 42.492622][ T5685] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 42.603651][ T5603] veth0_vlan: entered promiscuous mode [ 42.611782][ T5603] veth1_vlan: entered promiscuous mode [ 42.623669][ T5603] veth0_macvtap: entered promiscuous mode [ 42.626279][ T5603] veth1_macvtap: entered promiscuous mode [ 42.906492][ T5079] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.919332][ T4727] Bluetooth: hci3: command 0x040f tx timeout [ 42.934991][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.937709][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.988829][ T4727] Bluetooth: hci1: command tx timeout [ 42.989464][ T39] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.990324][ T1688] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.990556][ T1688] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.990611][ T1688] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.016893][ T4406] 8021q: adding VLAN 0 to HW filter on device eth1 [ 43.022763][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.022803][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.040266][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.040299][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.089124][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.123237][ T4728] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 43.124168][ T4728] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 43.124656][ T4728] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 43.125087][ T4728] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 43.125777][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 43.169744][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.244641][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.339453][ T4406] 8021q: adding VLAN 0 to HW filter on device eth2 [ 43.343945][ T5753] Zero length message leads to an empty skb [ 43.351017][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.480308][ T5772] vfat: Unknown parameter 'odir' [ 43.492154][ T5766] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.546663][ T13] ------------[ cut here ]------------ [ 43.546698][ T13] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 43.550214][ T13] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x5ec/0xb88, CPU#0: kworker/u8:1/13 [ 43.552276][ T13] Modules linked in: [ 43.553014][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT [ 43.554986][ T13] Tainted: [L]=SOFTLOCKUP [ 43.555781][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 43.557638][ T13] Workqueue: events_unbound cfg80211_wiphy_work [ 43.558824][ T13] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 43.560323][ T13] pc : ieee80211_set_active_links+0x5ec/0xb88 [ 43.561416][ T13] lr : ieee80211_set_active_links+0x5ec/0xb88 [ 43.562554][ T13] sp : ffff80008eca7950 [ 43.563272][ T13] x29: ffff80008eca7960 x28: 1fffe00018342b88 x27: ffff800088b3a000 [ 43.564757][ T13] x26: dfff800000000000 x25: ffff80008a19d000 x24: ffff0000c9d71918 [ 43.566163][ T13] x23: 0000000000000000 x22: ffff0000c9ed0f60 x21: 0000000000000000 [ 43.567692][ T13] x20: ffff0000c9d72c70 x19: 0000000000000003 x18: 1fffe00034bb7428 [ 43.569175][ T13] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 43.570711][ T13] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 43.572242][ T13] x11: ffff80008a5d5e28 x10: 0000000000000003 x9 : d8bb6ad185934300 [ 43.573744][ T13] x8 : d8bb6ad185934300 x7 : 0000000000000000 x6 : 0000000000000000 [ 43.575268][ T13] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff80008015611c [ 43.576658][ T13] x2 : 0000000000000006 x1 : ffff0000c1a157c0 x0 : 0000000000000001 [ 43.578013][ T13] Call trace: [ 43.578576][ T13] ieee80211_set_active_links+0x5ec/0xb88 (P) [ 43.579669][ T13] ieee80211_if_parse_active_links+0xe0/0x150 [ 43.580766][ T13] ieee80211_if_write_sdata_handler+0x6c/0x84 [ 43.581895][ T13] wiphy_locked_debugfs_write_work+0xe8/0x12c [ 43.582990][ T13] cfg80211_wiphy_work+0x278/0x588 [ 43.583960][ T13] process_scheduled_works+0x788/0x10b8 [ 43.584946][ T13] worker_thread+0x798/0xbd0 [ 43.585795][ T13] kthread+0x304/0x3d4 [ 43.586534][ T13] ret_from_fork+0x10/0x20 [ 43.587345][ T13] irq event stamp: 175258 [ 43.588089][ T13] hardirqs last enabled at (175257): [] finish_task_switch+0x234/0x858 [ 43.589848][ T13] hardirqs last disabled at (175258): [] el1_brk64+0x20/0x54 [ 43.591448][ T13] softirqs last enabled at (175194): [] batadv_forw_packet_steal+0x11c/0x13c [ 43.593358][ T13] softirqs last disabled at (175192): [] batadv_forw_packet_steal+0x38/0x13c [ 43.595263][ T13] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 43.617866][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.975311][ T5781] lo speed is unknown, defaulting to 1000 [ 43.975381][ T5781] lo speed is unknown, defaulting to 1000 [ 43.976093][ T5781] lo speed is unknown, defaulting to 1000 [ 43.977072][ T5781] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.978904][ T5781] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 44.053204][ T12] bridge_slave_1: left allmulticast mode [ 44.054411][ T12] bridge_slave_1: left promiscuous mode [ 44.055735][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.074116][ T12] bridge_slave_0: left allmulticast mode [ 44.075287][ T12] bridge_slave_0: left promiscuous mode [ 44.076415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.161344][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.203065][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.239530][ T12] bond0 (unregistering): Released all slaves [ 44.241936][ T5781] lo speed is unknown, defaulting to 1000 [ 44.256542][ T4406] 8021q: adding VLAN 0 to HW filter on device eth3 [ 44.269213][ T5781] lo speed is unknown, defaulting to 1000 [ 44.269657][ T5781] lo speed is unknown, defaulting to 1000 [ 44.270055][ T5781] lo speed is unknown, defaulting to 1000 [ 44.270447][ T5781] lo speed is unknown, defaulting to 1000 [ 44.270943][ T5781] lo speed is unknown, defaulting to 1000 [ 44.436046][ T4406] 8021q: adding VLAN 0 to HW filter on device eth4 [ 44.584352][ T4406] 8021q: adding VLAN 0 to HW filter on device eth5 [ 44.706176][ T12] hsr_slave_0: left promiscuous mode [ 44.707577][ T12] hsr_slave_1: left promiscuous mode [ 44.716564][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.716639][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.718608][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.718619][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.723983][ T12] veth1_macvtap: left promiscuous mode [ 44.724010][ T12] veth0_macvtap: left promiscuous mode [ 44.724062][ T12] veth1_vlan: left promiscuous mode [ 44.724093][ T12] veth0_vlan: left promiscuous mode [ 44.826920][ T12] team0 (unregistering): Port device team_slave_1 removed [ 44.830821][ T12] team0 (unregistering): Port device team_slave_0 removed [ 44.889310][ T4406] 8021q: adding VLAN 0 to HW filter on device eth6 [ 45.017657][ T4406] 8021q: adding VLAN 0 to HW filter on device eth7 [ 45.246370][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.934385][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.125412][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.172741][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.376132][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.440701][ T4406] 8021q: adding VLAN 0 to HW filter on device eth8 [ 46.474161][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.523279][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.566090][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.569427][ T4406] 8021q: adding VLAN 0 to HW filter on device eth9 [ 46.692508][ T4406] 8021q: adding VLAN 0 to HW filter on device eth10 [ 46.720269][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.804529][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.813246][ T4406] 8021q: adding VLAN 0 to HW filter on device eth11 [ 46.853089][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.927427][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.933005][ T4406] 8021q: adding VLAN 0 to HW filter on device eth12 [ 47.030631][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.061871][ T4406] 8021q: adding VLAN 0 to HW filter on device eth14 [ 47.089194][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.165851][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.177138][ T4406] 8021q: adding VLAN 0 to HW filter on device eth13 [ 47.234859][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.313072][ T4406] 8021q: adding VLAN 0 to HW filter on device eth15 [ 47.316048][ T12] bridge_slave_1: left allmulticast mode [ 47.316085][ T12] bridge_slave_1: left promiscuous mode [ 47.316166][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.320905][ T12] bridge_slave_0: left allmulticast mode [ 47.320933][ T12] bridge_slave_0: left promiscuous mode [ 47.321042][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.327373][ T12] bridge_slave_1: left allmulticast mode [ 47.327402][ T12] bridge_slave_1: left promiscuous mode [ 47.327472][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.334761][ T12] bridge_slave_0: left allmulticast mode [ 47.334786][ T12] bridge_slave_0: left promiscuous mode [ 47.334851][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.345617][ T12] bridge_slave_1: left allmulticast mode [ 47.345649][ T12] bridge_slave_1: left promiscuous mode [ 47.345737][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.350389][ T12] bridge_slave_0: left allmulticast mode [ 47.350412][ T12] bridge_slave_0: left promiscuous mode [ 47.350470][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.359587][ T12] bridge_slave_1: left allmulticast mode [ 47.359612][ T12] bridge_slave_1: left promiscuous mode [ 47.359679][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.363623][ T12] bridge_slave_0: left allmulticast mode [ 47.363646][ T12] bridge_slave_0: left promiscuous mode [ 47.363704][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.454708][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.462267][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.464878][ T12] bond0 (unregistering): Released all slaves [ 47.502301][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.514085][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.519284][ T12] bond0 (unregistering): Released all slaves [ 47.557274][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.599604][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.649961][ T12] bond0 (unregistering): Released all slaves [ 47.668489][ T12] bond0 (unregistering): Released all slaves [ 47.714781][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.748526][ T12] bond_slave_0: left promiscuous mode [ 47.750059][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.779339][ T12] bond_slave_1: left promiscuous mode [ 47.780035][ T12] bond0 (unregistering): Released all slaves [ 47.951442][ T4406] 8021q: adding VLAN 0 to HW filter on device eth16 [ 48.084831][ T4406] 8021q: adding VLAN 0 to HW filter on device eth19 [ 48.255645][ T4406] 8021q: adding VLAN 0 to HW filter on device eth17 [ 48.374879][ T4406] 8021q: adding VLAN 0 to HW filter on device eth18 [ 48.501776][ T4406] 8021q: adding VLAN 0 to HW filter on device eth20 [ 48.508283][ T12] hsr_slave_0: left promiscuous mode [ 48.512250][ T12] hsr_slave_1: left promiscuous mode [ 48.512629][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.512641][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.513572][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.513582][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.520923][ T12] hsr_slave_0: left promiscuous mode [ 48.522093][ T12] hsr_slave_1: left promiscuous mode [ 48.522472][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.522486][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.523480][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.523489][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.532343][ T12] hsr_slave_0: left promiscuous mode [ 48.533369][ T12] hsr_slave_1: left promiscuous mode [ 48.533752][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.533762][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.534690][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.534699][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.541713][ T12] hsr_slave_0: left promiscuous mode [ 48.542825][ T12] hsr_slave_1: left promiscuous mode [ 48.543040][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.543051][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.544023][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.544032][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.560176][ T12] veth1_macvtap: left promiscuous mode [ 48.560223][ T12] veth0_macvtap: left promiscuous mode [ 48.560267][ T12] veth1_vlan: left promiscuous mode [ 48.560301][ T12] veth0_vlan: left promiscuous mode [ 48.564344][ T12] veth1_macvtap: left promiscuous mode [ 48.564664][ T12] veth0_macvtap: left promiscuous mode [ 48.564712][ T12] veth1_vlan: left promiscuous mode [ 48.564755][ T12] veth0_vlan: left promiscuous mode [ 48.568077][ T12] veth1_macvtap: left promiscuous mode [ 48.568228][ T12] veth0_macvtap: left promiscuous mode [ 48.568282][ T12] veth1_vlan: left promiscuous mode [ 48.568363][ T12] veth0_vlan: left promiscuous mode [ 48.572485][ T12] veth1_macvtap: left promiscuous mode [ 48.572521][ T12] veth0_macvtap: left promiscuous mode [ 48.572567][ T12] veth1_vlan: left promiscuous mode [ 48.572691][ T12] veth0_vlan: left promiscuous mode [ 48.768082][ T12] team0 (unregistering): Port device team_slave_1 removed [ 48.772177][ T12] team0 (unregistering): Port device team_slave_0 removed [ 48.873512][ T12] team0 (unregistering): Port device team_slave_1 removed [ 48.877659][ T12] team0 (unregistering): Port device team_slave_0 removed [ 49.001624][ T12] team0 (unregistering): Port device team_slave_1 removed [ 49.005352][ T12] team0 (unregistering): Port device team_slave_0 removed [ 49.130510][ T12] team0 (unregistering): Port device team_slave_1 removed [ 49.134167][ T12] team0 (unregistering): Port device team_slave_0 removed [ 49.183857][ T9] lo speed is unknown, defaulting to 1000 [ 49.183896][ T9] infiniband syz0: ib_query_port failed (-19) [ 49.306297][ T4406] 8021q: adding VLAN 0 to HW filter on device eth21 [ 49.432795][ T4406] 8021q: adding VLAN 0 to HW filter on device eth22 [ 49.558161][ T4406] 8021q: adding VLAN 0 to HW filter on device eth23