last executing test programs: 5.145140505s ago: executing program 4 (id=181): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000100039048af402f5029224e100000000fcffffff000000007b5ed7509216099e92041fd8e408d40900fa5793aa3d42eec2d45887780f558100d52e3bcf2480e2086a119d97aaf80dd995482d2ce4c15e0ab820c8af03c2efe199ad5b05d95c272a05e796ce1033777ea5650a9e4f64478a22d773479a27084ffdfd733bf12871c9e2fda9c2807ac4a9475439eb9b39f75fb379cf525f4e447d651de2bd5d596818846150bf0d360982d742b102efc99091bbe2976fd0", @ANYRES32=r2, @ANYBLOB="01980000050002002000128008000100677265001400028008000700ac1414bb08000100", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x439, 0x0, 0x3, {0x0, 0x0, 0x0, r2, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x101}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 5.081593108s ago: executing program 4 (id=183): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000200081dc000000000300000002000000000000e0df000000050016000400000008000200ac1414bb080017004e224e2208"], 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x500) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010003904ffffffff00000000001cf5c1", @ANYRES32=0x0, @ANYBLOB="01980000131300001c0012800900010069706970000000000c00028008000300ac1e0001"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 4.236074896s ago: executing program 4 (id=198): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) r0 = socket(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000080), 0x90800) sendmsg$unix(r0, &(0x7f0000003780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0xc000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) listen(r1, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x402) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff), 0x0, 0xe0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1ff, 0xf806, 0x5, 0x0, 0x1}, 0x14) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800010, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r7, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) recvfrom$inet(r7, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) shutdown(r7, 0x1) 2.993086674s ago: executing program 1 (id=204): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000010c0)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x40000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="0000000001000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f0000000040)="0000000001000000", 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r1, 0x5) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000100)="0000000001000000", 0x8) (async) setsockopt(r2, 0x84, 0x81, &(0x7f0000000140)="0000000001000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x0, @loopback}], 0x10) (async) connect(r2, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x80) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x0, @local}], 0x10) 2.574734596s ago: executing program 0 (id=206): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x815, &(0x7f0000000180)={[{@data_err_ignore}, {@resgid}, {@abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@nobarrier}]}, 0x9, 0x624, &(0x7f0000001340)="$eJzs3ctvVNUfAPDvvZ0+aH8/W4hB2UgTYyBRWlrAEGMixC0h+Ni5qrQQpFBCa7RIQklwozFuXJi4ciH+F0ri1oVbF25cGEPSGMNCDMqYO71TZjqddvqYmT4+n+S299G553vbfHvOnDnn3gB2rcHsSxpxICKuJRH9FccKkR8cXPi5B3/ePJ8tSRSLb/2RxM1byVzluZL8e1/+4n/7I/kpjdjXUVvu9OyNy2OTkxPX8+3hmSvXhqdnbxy5dGXs4sTFiaujL4+ePHH8xMmRoxu6vkLF+pk7733Q/8nZd7756lEy8u0vZ5M4FY/z2LLrWvra7g2VnP3OBqO44OGTvWnp68kNnnur+Ku/+necSZbuYMu6EBH7I6IzIp6J/uio+Gv2x8dvtDU4oKmKSZTrKGDXSVbP/87aXT3NCQZooXI7oPzefrn3wbXSJrdKgFaYP73QSbaQ+50RUc7/wkLfYPSU+gZ6HyRV/TxJRGysZ25BVsaPP5y9ky1Rpx8OaI652+Ve7qX1f1LKzYHoKW31Pkir8j+tWLL9b66z/MEl2/IfWmfudkQ8m9f/XbHu/H93neXLfwAAAAAAANg8905HxEvLjf9LF8f/dC0z/qcvIk5tQvmrf/6X3s9Xkk0oDqgwfzri1Zrxv/9Ujg4e6Mg/5/9/aTxAZ3rh0uTE0Yh4KiIOR2d3tj1SfdqqAcJHPtv3Zb3yK8f/ZUtWfnksYH6q+4UlE3HHx2bGNufqYXebvx3xsDT+92C+p3r8T1b/JzX1/6evZwl+rcEy9r1w91zVjt+e/HtYPf+BZil+HXFo2fk/T5rbycr35xgutQeGy62CWs999Pl39cqX/9A+Wf3fu3L+dyeV9+uZXtv5uyLi2GyhWO/4etv/XcnbHeXzZz4cm5m5PhLRlZyp3T+6tphhpyrnQzlfsvw//PzK/X+L7f+KPNwTEXMNlrn/cd+v9Y6p/6F9svwfX7n+H6iu/9e60hOjdwe+z28xVuNcQ/X/8VKdfjjfo/8PKtXej6PRBG1LuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwzaUR8b9I0qHF9TQdGoroi4inozednJqeefHC1PtXx7Nj1c//71/YTsrP/x+o2B5dsn0sIvZGxBcde0rbQ+enJsfbffEAAAAAAAAAAAAAAAAAAACwRfSV5vwXu5fO/8/83tHu6ICmK+Tf5TvsPoV1v7LYvamBAC23/vwHtrvG87+zqXEArVc//x8+Kpa0NByghbT/YfdaZ/77uAB2APU/7FYN9un1NDsOoB0arv/nmxsHAAAAAACwKfYevPdzEhFzr+wpLZmu/JjB/rCzpe0OAGgbY3hh9ypMtTsCoF28xweSxbW/l53sX3/0f9KcgAAAAAAAAAAAAACAGocOrH3+/5xJg7AjpBErPMLb2H7YyVaoypdLfjU/7CD1H/3RSN2faCHANmb+P7BaPb7x+f/FW2sKCAAAAAAAAAAAAACo1XPj8tjk5MT16dntt/La1ghjbStzY1sijE1debzaz5QfM7+2M3dGxNa4wFavlG/B0cYw2vg/CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqPJfAAAA//8MwS/R") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x4}, @NHA_FDB={0x4}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x200, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f0000000280)={0x10001, 0x2, 0xe, 0x9, 0x8, 0x6}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shmget$private(0x0, 0x800000, 0x200, &(0x7f0000800000/0x800000)=nil) r3 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ffc000/0x4000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x2000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000880)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf251c00000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000a75000/0x3000)=nil, 0x3000, 0x4) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fchown(0xffffffffffffffff, 0xee00, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x15, &(0x7f0000000340)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.117163326s ago: executing program 1 (id=207): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x77359400}, &(0x7f0000000040)) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='/\x00', 0xc0, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x8]}, {0x5, 0x8, 0xffffffff, 0x2}}, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x9}) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000200)={0x0, 0xffff, 0x8, &(0x7f00000001c0)}) (async) ioctl$UBLK_U_CMD_GET_FEATURES(0xffffffffffffffff, 0x80207513, &(0x7f0000000200)={0x0, 0xffff, 0x8, &(0x7f00000001c0)}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000280)={r2, 0xffff, 0x0, 0x0, r0}) 1.723316601s ago: executing program 2 (id=210): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) memfd_create(&(0x7f0000000000)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r4 = syz_io_uring_setup(0x7db0, &(0x7f0000000540)={0x0, 0xd52b, 0x1, 0x5, 0x2400051, 0x0, r3}, &(0x7f0000000040)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000014c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x80) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 1.699932425s ago: executing program 1 (id=211): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "f78bcf", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e20, 0x8}}}}}}, &(0x7f0000000280)={0x1, 0x3, [0xd43, 0x1cf, 0xc5c, 0x791]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0403"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 1.627919479s ago: executing program 0 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES16=r1, @ANYBLOB="38030600400202002c0012801100010056726964672c0b79ba617665000000001400058008002a00", @ANYRES32=0x0, @ANYBLOB="069100"], 0x4c}, 0x1, 0x0, 0x0, 0x80d5}, 0x40040c4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) r3 = fsopen(&(0x7f0000000180)='ext4\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1806000002000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000008b70300000000004017000000bb000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x3d, 0x9, &(0x7f0000000200)="0883e80a023a4990a7600149b44345f3f55f208735cac0c42ba4b90ff951a649f23f4431238ae8f24a12c440e50c5d99985504fb571ff1f90dbee74460", &(0x7f0000000240)=""/9, 0x13b, 0x0, 0x0, 0x44, &(0x7f0000000280), &(0x7f00000002c0)="383255c3fc7cd64b27e9afde898ad7bab7e73ed9b50e35ebeb9ee07498197f3a62163ff1d3e8305fce7e150a4a7a6ef51e0073dd97bc103bb2a00d2e1c1444b4561f3a3d", 0x6, 0x0, 0x9}, 0x50) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280), 0x4) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.537638966s ago: executing program 2 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1001, 0xfffffffffffffffd}) dup3(r0, r2, 0x80000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 1.537341358s ago: executing program 0 (id=214): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xa100, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002080)=0x58, 0x12) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xa0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 1.512892566s ago: executing program 2 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000080)={0x400}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r4 = memfd_secret(0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x5, 0x0, 0x1, 0x73}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r5}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000040000000004000000850000002b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x20001, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc4}, 0x94) 1.503164755s ago: executing program 0 (id=216): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) recvmmsg(0xffffffffffffffff, &(0x7f0000002240)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2100, 0x0) lseek(r0, 0x2000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f0000000480)={0x1, @pix={0x0, 0x6, 0x31364d4e, 0x0, 0x0, 0x9, 0x1, 0xfeedcafe, 0x3, 0x4, 0x1}}) 1.33758882s ago: executing program 4 (id=217): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x72, 0xa800) syz_clone3(&(0x7f0000000080)={0x803400, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) setuid(0xee01) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@dellink={0x28, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x8040}, [@IFLA_GSO_MAX_SIZE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004040}, 0x4000800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/options/bin\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000080)=0x3, 0x12) (async) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x2, 0x6, 0x0, {0xa, 0x4e23, 0x9, @mcast1, 0x97}}}, 0x80, 0x0}, 0x2000f765) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="0400"}) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0x18, 0x2b, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {0x3c00, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xb4}}, 0x20050800) 1.336827716s ago: executing program 2 (id=218): r0 = socket(0x23, 0x80805, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000780)="a31853a6", 0x4}], 0x1) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) listen(r1, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100250070020000000000000000df450f9d095b3895f424f3453a54fb7dd8ff9ac9916ffcd75180ce0ba7", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x20000000) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000057780000"], 0x0) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x5, 0x81) syz_emit_ethernet(0xe4, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffff352e59acb38bd01dd6000141400aa0601fe8000005807000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB="504000009078000ec524dd923cd0097a7d85d0aa543ef24c4787ed2ffe7badf440da309aac06281fa017b86c2e1b190e23f81c3e4f768b40f7070c10b02dfdcb4b9a11a44bc25cd5ce1e76e086ffff000000000000b1b7d675ae05e4d7b40aca8e639138b77f7d79a482b100000000000000633b6b577e76ac35822beeb68e942177f6c465c5945e5e650aa685fd5411705b138d587a5038e34e63a10590"], 0x0) r5 = accept$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) getsockname$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) 1.066784732s ago: executing program 4 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x40) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000000c0)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000001000)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000401000)}, 0x400000}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000200)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) r3 = socket$inet(0x2, 0x3, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0x7, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x40042}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'nicvf0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0003000000000000000304fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c429955608b9952bed40ce4a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000080049", 0x34}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x1015, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x368) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x8440, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x40000004}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x4000084) 1.043656348s ago: executing program 1 (id=223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000003c0)={0x1, @sliced={0x5, [0xa46, 0x7e, 0x4, 0x23, 0xd, 0x401, 0x9, 0xcf, 0x8000, 0x3, 0xfffb, 0x101, 0x9, 0x9, 0xfffa, 0xfffa, 0xc85c, 0x4, 0x101, 0x7, 0x8, 0xa, 0x8, 0x80, 0x2, 0x7, 0x81, 0x94b, 0x17, 0x7, 0x7, 0x2, 0xffff, 0x8, 0x5, 0x2, 0x3, 0x7ff, 0x7, 0x5, 0x0, 0x1, 0x200, 0x98, 0x2, 0x4, 0x8, 0x7], 0xe}}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f00000000c0)=0xd, 0x4) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r8, 0xc0345642, &(0x7f0000000000)={0x7, "8f45bfe47dcd1beb1e8d446b7b140011d007502dc6ab93a9ebbad6a8088c4bba", 0x2}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r6, 0x8914, 0x0) write$tun(r4, 0x0, 0x78) read(r3, 0x0, 0x0) 950.319ms ago: executing program 3 (id=224): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000080)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000100)={0x0, 0x1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r1, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 589.644102ms ago: executing program 3 (id=225): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r1}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x107}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000005c0)='./file1\x00', 0x1000649, &(0x7f0000000600)={[{@data_writeback}, {@stripe={'stripe', 0x3d, 0x39fd}}, {@nombcache}, {@grpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@nobh}, {@minixdf}, {@mblk_io_submit}]}, 0x0, 0x614, &(0x7f0000001480)="$eJzs3c9rXFsdAPDvvZOkSRtNK1JsQQy4aEGaH7VQddV2YxcuCnYh4qKhSUropA1NirYWTHcWXIi4FenGf8C9FLfuRFB3LlwJVSSPt3jv0XncO/e28yYz6XSa+ZHezwdm5txz78w53zlzcs+dmzM3gMqaz+7SiDMRcSuJmGtZNxvNlfPFdnv/f3I7uyXRaPzwf0kkRV65/avi8UR2l0RMR8Rfr0V8pba/3O1Hj++u1BtNv4hY3NncWtx+9PjCxubKnbU7a/eWL37n0uWl7y5fWj6UOMu4povH9b/VLyRxJW5O/nw12uI4LPMxH6+KEFvzJyLicpbo8L4cNWUIyYjrQX9qxedxMiJOx1zU8qWmudj41UgrBwxUoxbRACoq0f+hospxQHlsP4jj4HH28mrzAGh//BPN70ZiOj82Or6XtBwZNY93Tx5C+VkZnz05+7vsFl2+h5g4hHK62X0aEV/rFH+S1+1k8Y3J8b000pbnZemliJgq3ou0z/Ln25aH/fl7l/hb2yGL90rxmOVf67P8UccPQDW9uFrsyHezpTf7v2xkWI5/osP4Z7bDvqsfo97/dR//lfv76fw78rRtHJaNeW50fsnJ9ox/Pbv+m27lt47/sltWfjkWHIaXTyPOtsX/y3wwl7xu/6RD+2eb3OqxjO///b/Xu63rP/7DOePUeB5xruPxT/KFkhZ3NrfKvLbzk4vrG/W1peZ9xzL+9Jef/KFb+ePQ/tEl/oPaP8vb6rGMP954vtlt3exb40//M5XczFNTRc7PVnZ2HixHTCU/KDZpyb94cF3KbcrXyOI//83O/f+A+POG3u0x/q0f3d1rpto/s8d6b/99f1Vyrxo91qGbLP7VPtv/1z2W8fGPH369LWumTBwU/8z+l0p6fc8BAAAAAACgitL8HGySLrxOp+nCQnMO71fjeFq/v73zrfX7D++tRpzP/x9yMi3PdM81l5Nsebn4f9hy+WLb8rcj4lRE/LY2ky8v3L5fXx118AAAAAAAAAAAAAAAAAAAADAmThTz/8vrVH9Ua87/78nO6QHXDhi4QV5gDhhv+j9UV97/+72CK3Ck2f9Dden/UF36P1SX/g/Vpf9DdfXU/6cGXw9g+Oz/obr0fwAAAAD4IJ36xot/JhGx+72Z/BYtZ/omR1ozYNDevY/PD6QewPDVhvo0YJy8PvVv+j9UTk/j/0+KHwccfHWAEUg6ZeaDg8bBnf9Fx2f26tn7PBkAAAAAAAAAAAAAqubcGfP/oarS+POoqwCMyHtM5PcbAHDE+el/qC7H+MDbZvFPd1vxfvP/AQAAAAAAAAAAAIB3MJvfknShuATobKTpwkLElyLiZEwm6xv1taWI+HJE/KM2eSxbXh51pQEAAAAAAAAAAAAAAAAAAOADs/3o8d2Ven3tQWvi0305H1zi3z9tib28Cuo4VKw9EcnwC52JiHGIfTCJiZacJGI3a/mxqNiD7RiLaqR5NUb8hwkAAAAAAAAAAAAAAAAAACqoZe5xZ2d/P+QaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDwvbn+f/+J5C2vM+oYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICj6fMAAAD//1WONsU=") sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_newvlan={0x34, 0x70, 0x400, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xe}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}]}, 0x34}}, 0x48810) 585.473215ms ago: executing program 4 (id=226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setreuid(0x0, 0xee01) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x44}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) utimensat(r0, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2000000000002) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001080)='./proc\x00', &(0x7f00000010c0)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000080)=0x1e, 0x4) openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/modules\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1000804, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xff, 0x28e, &(0x7f0000000f40)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./proc\x00', 0x1ff) 582.7218ms ago: executing program 3 (id=227): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000180)=0x0) unshare(0x24060400) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000000000000600000000b5080000000000007b8af0ff00000000bfa100000000000007010000f807040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b3000000850000007d0000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800700, &(0x7f0000000080)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nodiscard}, {@bsdgroups}, {@sysvgroups}, {@bsdgroups}, {@quota}]}, 0x2, 0x450, &(0x7f0000000880)="$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") 582.062075ms ago: executing program 0 (id=228): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, 0x0, 0x0, 0x400000) r0 = socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x3, 0x0, 0x1020}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e22}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x40080) 577.427519ms ago: executing program 3 (id=229): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x100000) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r0, &(0x7f0000000140)=""/46, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=in7-N:3/3N\x00']) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x400102, 0x62) mknodat(r1, &(0x7f00000000c0)='./file0\x00', 0x40, 0x7) 549.715453ms ago: executing program 0 (id=230): socket$tipc(0x1e, 0x2, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x1) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) unshare(0x8000280) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$EXT4_IOC_MIGRATE(r2, 0xff07) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x167a4000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x4, &(0x7f0000000440)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) (async) r8 = memfd_create(0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x2) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r0], 0x0) (async) socket(0xf, 0x80805, 0xfffffffd) (async) execveat(r8, 0x0, 0x0, 0x0, 0x1000) ppoll(&(0x7f00000002c0)=[{r6, 0x80}], 0x1, &(0x7f0000000340), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) (async) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000000000000", 0x39}], 0x1) 501.703862ms ago: executing program 3 (id=231): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@multicast, @remote, @val={@val={0x88a8, 0x2, 0x1, 0x4}}, {@ipv6={0x86dd, @udp={0xd, 0x6, "f78bcf", 0x8, 0x11, 0x0, @local, @mcast2, {[], {0x4e23, 0x4e20, 0x8}}}}}}, &(0x7f0000000280)={0x1, 0x3, [0xd43, 0x1cf, 0xc5c, 0x791]}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0xa8002, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 466.989975ms ago: executing program 2 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x80000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x200}]}, 0x30}}, 0x24002000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x2b, 0x0, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0}, 0x40) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r5) (async) lseek(r5, 0x1, 0x4) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@fallback=r0, r3, 0x38, 0x2000, r2, @value=r5, @void, @void, @void, r4}, 0x20) 397.826683ms ago: executing program 2 (id=233): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000100)={'veth1_vlan\x00', @local}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x4, 0x200, &(0x7f0000000880)="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"}) 85.741861ms ago: executing program 1 (id=234): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) listen(r0, 0x0) write(0xca, &(0x7f0000000040)="0404e70000000004de92050000", 0xd) 48.779401ms ago: executing program 1 (id=235): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x6, 0x7965, 0x6, 0x2, 0x50]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xe]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xa}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffff8000}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6a4b}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0xa, 0x4) sendmmsg$inet(r1, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e97", 0x501, 0x6000000000000000, 0x0, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) r4 = memfd_create(&(0x7f0000000280)=',\'+\x00', 0x0) r5 = memfd_create(&(0x7f00000002c0)='\x00', 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000700), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0x9, 0xbb20000, 0x40000, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x5}, 0x50) sendmsg$NLBL_MGMT_C_PROTOCOLS(r7, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_DOMAIN={0x22, 0x1, 'blkio.bfq.io_merged_recursive\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r8 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0xc, 0x2, 0x47425247, 0x1, 0x2, 0x6, 0x2, 0x9, 0x0, 0x0, 0x2, 0x4}}) r9 = memfd_create(&(0x7f0000000300)='\x00', 0x4) ioctl$UDMABUF_CREATE_LIST(r2, 0x40087543, &(0x7f0000000500)={0x0, 0x5, [{r3, 0x0, 0xfffff000, 0x4000}, {r4, 0x0, 0xfffffffffffff000, 0x8000}, {r5, 0x0, 0xfffffffffffff000, 0x10000}, {r6, 0x0, 0x10000, 0x1000}, {r9, 0x0, 0x0, 0x1000000000000}]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@polexpire={0xd4, 0x1b, 0x1, 0x0, 0x0, {{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x3, 0x0, 0x80, 0x20}, {0x8, 0x0, 0x2, 0x0, 0x40000000000000, 0x0, 0x800000000, 0xffffffffffffffff}, {0x100000000, 0x200, 0x367b}, 0x0, 0x6e6bb0, 0x0, 0x1, 0x3}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @policy_type={0xa}]}, 0xd4}}, 0x40040c0) 0s ago: executing program 3 (id=236): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000003300), 0x40002, 0x0) write$rfkill(r0, &(0x7f0000003340)={0x0, 0x2, 0x2, 0xfe, 0x1}, 0x8) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) madvise(&(0x7f00005dd000/0x4000)=nil, 0x4000, 0x1) mremap(&(0x7f000043e000/0x2000)=nil, 0x2000, 0x600000, 0x7, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. [ 28.528297][ T4706] cgroup: Unknown subsys name 'net' [ 28.677757][ T4706] cgroup: Unknown subsys name 'cpuset' [ 28.679084][ T4706] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.827899][ T4706] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.694969][ T4730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.695432][ T4731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.695732][ T4731] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.695762][ T4730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.696659][ T4731] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.697029][ T4731] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.697190][ T4731] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.697410][ T4731] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.697608][ T4731] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.697767][ T4731] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.698037][ T4730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.698175][ T4731] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.698335][ T4730] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.698624][ T4730] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.699179][ T4731] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.699603][ T4731] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.699711][ T4731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.700608][ T4731] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.700961][ T4731] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.701518][ T4731] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.701656][ T4731] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.702507][ T4731] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.706860][ T4731] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.707543][ T4731] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.742237][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.992893][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.993218][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.993282][ T4721] bridge_slave_0: entered allmulticast mode [ 29.993767][ T4721] bridge_slave_0: entered promiscuous mode [ 30.006560][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.006614][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.006674][ T4721] bridge_slave_1: entered allmulticast mode [ 30.007112][ T4721] bridge_slave_1: entered promiscuous mode [ 30.037507][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.053713][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.053907][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.053977][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.054031][ T4717] bridge_slave_0: entered allmulticast mode [ 30.054444][ T4717] bridge_slave_0: entered promiscuous mode [ 30.055833][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.055854][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.055904][ T4717] bridge_slave_1: entered allmulticast mode [ 30.057008][ T4717] bridge_slave_1: entered promiscuous mode [ 30.065536][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.067612][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.088067][ T4721] team0: Port device team_slave_0 added [ 30.089787][ T4721] team0: Port device team_slave_1 added [ 30.103784][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.103796][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.103807][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.114522][ T4717] team0: Port device team_slave_0 added [ 30.117749][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.117761][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.117776][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.120737][ T4717] team0: Port device team_slave_1 added [ 30.131173][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.131185][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.131199][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.131732][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.131739][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.131753][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.165825][ T4717] hsr_slave_0: entered promiscuous mode [ 30.166193][ T4717] hsr_slave_1: entered promiscuous mode [ 30.171617][ T4721] hsr_slave_0: entered promiscuous mode [ 30.171904][ T4721] hsr_slave_1: entered promiscuous mode [ 30.172096][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 30.172138][ T4721] Cannot create hsr debugfs directory [ 30.231354][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.231467][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.231534][ T4716] bridge_slave_0: entered allmulticast mode [ 30.231997][ T4716] bridge_slave_0: entered promiscuous mode [ 30.235321][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.235352][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.235413][ T4716] bridge_slave_1: entered allmulticast mode [ 30.235828][ T4716] bridge_slave_1: entered promiscuous mode [ 30.269758][ T4716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.271942][ T4716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.291023][ T4727] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.291094][ T4727] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.291154][ T4727] bridge_slave_0: entered allmulticast mode [ 30.291583][ T4727] bridge_slave_0: entered promiscuous mode [ 30.295631][ T4727] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.295656][ T4727] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.295725][ T4727] bridge_slave_1: entered allmulticast mode [ 30.296143][ T4727] bridge_slave_1: entered promiscuous mode [ 30.301177][ T4716] team0: Port device team_slave_0 added [ 30.302373][ T4716] team0: Port device team_slave_1 added [ 30.330348][ T4727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.345131][ T4727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.351229][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.351245][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.351264][ T4716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.361466][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.361563][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.361634][ T4724] bridge_slave_0: entered allmulticast mode [ 30.362071][ T4724] bridge_slave_0: entered promiscuous mode [ 30.362802][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.362830][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.362910][ T4724] bridge_slave_1: entered allmulticast mode [ 30.363292][ T4724] bridge_slave_1: entered promiscuous mode [ 30.370048][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.370968][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.377726][ T4724] team0: Port device team_slave_0 added [ 30.378511][ T4724] team0: Port device team_slave_1 added [ 30.387826][ T4716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.387839][ T4716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.387853][ T4716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.411317][ T4716] hsr_slave_0: entered promiscuous mode [ 30.411625][ T4716] hsr_slave_1: entered promiscuous mode [ 30.411796][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 30.411806][ T4716] Cannot create hsr debugfs directory [ 30.413008][ T4727] team0: Port device team_slave_0 added [ 30.413286][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.413294][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.413306][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.414114][ T4727] team0: Port device team_slave_1 added [ 30.427990][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.428000][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.428014][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.441562][ T4724] hsr_slave_0: entered promiscuous mode [ 30.441831][ T4724] hsr_slave_1: entered promiscuous mode [ 30.442011][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 30.442021][ T4724] Cannot create hsr debugfs directory [ 30.453804][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.453817][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.453832][ T4727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.469607][ T4721] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.472102][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.472596][ T4727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.472606][ T4727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.472620][ T4727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.492635][ T4721] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.493804][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.494370][ T4721] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.495373][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.509923][ T4727] hsr_slave_0: entered promiscuous mode [ 30.510217][ T4727] hsr_slave_1: entered promiscuous mode [ 30.510411][ T4727] debugfs: 'hsr0' already exists in 'hsr' [ 30.510421][ T4727] Cannot create hsr debugfs directory [ 30.510480][ T4721] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.512108][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.549622][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.549658][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.549849][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.549888][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.558227][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.560219][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.560644][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.563219][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.573502][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.574529][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.574846][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.575875][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.595440][ T4724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.598112][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.598473][ T4724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.599421][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.611118][ T4724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.612561][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.612914][ T4724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.613840][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.630944][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.630973][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.631047][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.631083][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.647501][ T4716] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.648869][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.649557][ T4716] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.650731][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.651157][ T4716] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.653433][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.655884][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.655917][ T4724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.655998][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.656026][ T4724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.664114][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.671585][ T4716] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.673489][ T4716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.685939][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.688655][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.689892][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.690165][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.694552][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.694823][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.705410][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.712546][ T3443] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.712584][ T3443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.719939][ T4727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.721098][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.721473][ T4727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.723045][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.729910][ T4727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.732002][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.732315][ T4727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.734263][ T4727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.744681][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.746213][ T3443] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.746279][ T3443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.765371][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.765389][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.776177][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.781357][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.790194][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.790220][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.790540][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.790557][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.809377][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.825059][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.825077][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.825985][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.825998][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.839110][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.839141][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.839490][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.839508][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.847953][ T4716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.850105][ T4727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.853094][ T4727] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.866031][ T4727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.866049][ T4727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.879090][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.879123][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.885864][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.885896][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.911501][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.923220][ T1194] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.923247][ T1194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.923790][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.923809][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.958615][ T4716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.060674][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.085152][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.094423][ T4721] veth0_vlan: entered promiscuous mode [ 31.109617][ T4721] veth1_vlan: entered promiscuous mode [ 31.120075][ T4721] veth0_macvtap: entered promiscuous mode [ 31.121238][ T4721] veth1_macvtap: entered promiscuous mode [ 31.130819][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.131903][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.145179][ T4727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.145657][ T4717] veth0_vlan: entered promiscuous mode [ 31.153552][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.156120][ T4717] veth1_vlan: entered promiscuous mode [ 31.178897][ T4727] veth0_vlan: entered promiscuous mode [ 31.181788][ T4717] veth0_macvtap: entered promiscuous mode [ 31.194334][ T4727] veth1_vlan: entered promiscuous mode [ 31.202754][ T4727] veth0_macvtap: entered promiscuous mode [ 31.204002][ T4727] veth1_macvtap: entered promiscuous mode [ 31.209709][ T4717] veth1_macvtap: entered promiscuous mode [ 31.211664][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.212858][ T4727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.213761][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.215292][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.216709][ T3373] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.216893][ T3373] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.216922][ T3373] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.216946][ T3373] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.216972][ T3373] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.216996][ T3373] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.217019][ T3373] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.226331][ T3373] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.246127][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.246141][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.261357][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.278784][ T3276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.299266][ T4716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.311887][ T3276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.311901][ T3276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.313139][ T4716] veth0_vlan: entered promiscuous mode [ 31.332351][ T4716] veth1_vlan: entered promiscuous mode [ 31.344590][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.344604][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.355649][ T4724] veth0_vlan: entered promiscuous mode [ 31.361038][ T4721] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.361872][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.361880][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.370655][ T4724] veth1_vlan: entered promiscuous mode [ 31.391677][ T4716] veth0_macvtap: entered promiscuous mode [ 31.401028][ T4724] veth0_macvtap: entered promiscuous mode [ 31.407443][ T4716] veth1_macvtap: entered promiscuous mode [ 31.408203][ T4724] veth1_macvtap: entered promiscuous mode [ 31.409451][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.409495][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.409502][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.409670][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.412605][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.413631][ T4716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.429411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.429424][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.454229][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.455231][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.514831][ T4910] loop3: detected capacity change from 0 to 512 [ 31.528512][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528568][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.528596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.528603][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.542721][ T4912] loop2: detected capacity change from 0 to 512 [ 31.543098][ T4912] EXT4-fs: Ignoring removed bh option [ 31.559152][ T3373] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.561969][ T4910] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 31.561987][ T4910] FAT-fs (loop3): Filesystem has been set read-only [ 31.562130][ T4910] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 31.562157][ T4910] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 31.562375][ T3276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.562594][ T3276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.567857][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.568213][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.570456][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.587267][ T3276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.587279][ T3276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.590290][ T4912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.638146][ T3276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.638158][ T3276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.661110][ T3373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.661126][ T3373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.711959][ T4923] 9p: Bad value for 'rfdno' [ 31.768064][ T4729] Bluetooth: hci2: command tx timeout [ 31.768202][ T4729] Bluetooth: hci4: command tx timeout [ 31.768269][ T4729] Bluetooth: hci3: command tx timeout [ 31.768339][ T4729] Bluetooth: hci1: command tx timeout [ 31.768400][ T4729] Bluetooth: hci0: command tx timeout [ 31.793075][ T4925] loop4: detected capacity change from 0 to 4096 [ 31.805514][ T4925] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.830942][ T4925] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.5: corrupted inode contents [ 31.832217][ T4925] EXT4-fs error (device loop4): ext4_dirty_inode:6736: inode #15: comm syz.4.5: mark_inode_dirty error [ 31.832556][ T4925] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.5: corrupted inode contents [ 31.832812][ T4925] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.5: mark_inode_dirty error [ 31.833099][ T4925] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.5: corrupted inode contents [ 31.833235][ T4925] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm syz.4.5: mark_inode_dirty error [ 31.833386][ T4925] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.5: corrupted inode contents [ 31.834011][ T4925] EXT4-fs error (device loop4): ext4_truncate:4721: inode #15: comm syz.4.5: mark_inode_dirty error [ 31.834231][ T4925] EXT4-fs error (device loop4) in ext4_setattr:6247: Corrupt filesystem [ 31.862510][ T4925] EXT4-fs error (device loop4): ext4_do_update_inode:5801: inode #15: comm syz.4.5: corrupted inode contents [ 31.894522][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.894959][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.895432][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.896053][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.909940][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.910484][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.910894][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.911667][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.912489][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 31.925521][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3106: inode #12: comm syz-executor: directory missing '..' [ 32.223187][ T4938] fuse: Bad value for 'fd' [ 32.383636][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.562171][ T4949] loop1: detected capacity change from 0 to 512 [ 32.621244][ T4949] bond1: entered allmulticast mode [ 32.621451][ T4949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 32.629613][ T4949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 32.630960][ T4949] macvlan2: entered allmulticast mode [ 32.630971][ T4949] bond0: entered allmulticast mode [ 32.630978][ T4949] bond_slave_0: entered allmulticast mode [ 32.630989][ T4949] bond_slave_1: entered allmulticast mode [ 32.631036][ T4949] bond_slave_0: entered promiscuous mode [ 32.631048][ T4949] bond_slave_1: entered promiscuous mode [ 32.631393][ T4949] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 32.688847][ T4949] ip6gretap1: entered allmulticast mode [ 32.689187][ T4949] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 32.693365][ T4949] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16'. [ 32.713450][ T4949] bond_slave_0: left promiscuous mode [ 32.713490][ T4949] bond_slave_1: left promiscuous mode [ 32.728015][ T4949] bond0 (unregistering): left allmulticast mode [ 32.728032][ T4949] bond_slave_0: left allmulticast mode [ 32.728044][ T4949] bond_slave_1: left allmulticast mode [ 32.737854][ T4949] bond1: (slave macvlan2): Removing an active aggregator [ 32.737913][ T4949] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 32.738107][ T4949] bond1: (slave macvlan2): Releasing backup interface [ 32.738116][ T4949] bond1: (slave macvlan2): the permanent HWaddr of slave - 92:2f:cd:40:fd:90 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 32.763640][ T4957] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 32.763657][ T4957] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 32.767039][ T4949] macvlan2 (unregistering): left allmulticast mode [ 32.773994][ T4949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.812428][ T4949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.848148][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 32.848863][ T4949] bond0 (unregistering): Released all slaves [ 33.846456][ T4729] Bluetooth: hci1: command tx timeout [ 33.846480][ T4729] Bluetooth: hci4: command tx timeout [ 33.846493][ T4729] Bluetooth: hci2: command tx timeout [ 33.846609][ T4720] Bluetooth: hci0: command tx timeout [ 34.228935][ T4724] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.229550][ T4724] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.232131][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.256979][ T1238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.261192][ T1238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.340336][ T1238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.410485][ T1238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.528381][ T1238] bridge_slave_1: left allmulticast mode [ 35.528407][ T1238] bridge_slave_1: left promiscuous mode [ 35.528669][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.531321][ T1238] bridge_slave_0: left allmulticast mode [ 35.531339][ T1238] bridge_slave_0: left promiscuous mode [ 35.531404][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.592722][ T1238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.599803][ T1238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.638201][ T1238] bond0 (unregistering): Released all slaves [ 35.752807][ T4409] 8021q: adding VLAN 0 to HW filter on device eth0 [ 35.911801][ T4409] 8021q: adding VLAN 0 to HW filter on device eth1 [ 35.915163][ T1238] hsr_slave_0: left promiscuous mode [ 35.915453][ T1238] hsr_slave_1: left promiscuous mode [ 35.915730][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.915744][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.917398][ T1238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.917410][ T1238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.922922][ T1238] veth1_macvtap: left promiscuous mode [ 35.922955][ T1238] veth0_macvtap: left promiscuous mode [ 35.923002][ T1238] veth1_vlan: left promiscuous mode [ 35.923043][ T1238] veth0_vlan: left promiscuous mode [ 35.936371][ T4720] Bluetooth: hci0: command tx timeout [ 35.936391][ T4720] Bluetooth: hci2: command tx timeout [ 35.936406][ T4720] Bluetooth: hci4: command tx timeout [ 35.936420][ T4720] Bluetooth: hci1: command tx timeout [ 36.012442][ T1238] team0 (unregistering): Port device team_slave_1 removed [ 36.016116][ T1238] team0 (unregistering): Port device team_slave_0 removed [ 36.182272][ T4409] 8021q: adding VLAN 0 to HW filter on device eth2 [ 36.315389][ T4409] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.006356][ T51] Bluetooth: hci1: command tx timeout [ 38.006385][ T51] Bluetooth: hci2: command tx timeout [ 38.006394][ T4729] Bluetooth: hci0: command tx timeout [ 38.006436][ T4720] Bluetooth: hci4: command tx timeout [ 59.053100][ T5157] fuse: Unknown parameter '€' [ 59.053545][ T5155] loop2: detected capacity change from 0 to 512 [ 59.053914][ T5157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 59.082211][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 59.085550][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 59.085857][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 59.086180][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 59.086555][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.130257][ T5155] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 59.130280][ T5155] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.139555][ T5155] EXT4-fs (loop2): 1 truncate cleaned up [ 59.140005][ T5155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.454964][ T5174] lo: entered promiscuous mode [ 59.455281][ T5174] tunl0: entered promiscuous mode [ 59.455563][ T5174] gre0: entered promiscuous mode [ 59.455963][ T5174] gretap0: entered promiscuous mode [ 59.456192][ T5174] erspan0: entered promiscuous mode [ 59.465734][ T5174] ip_vti0: entered promiscuous mode [ 59.465980][ T5174] ip6_vti0: entered promiscuous mode [ 59.473052][ T5174] sit0: entered promiscuous mode [ 59.473407][ T5174] ip6tnl0: entered promiscuous mode [ 59.473652][ T5174] ip6gre0: entered promiscuous mode [ 59.473964][ T5174] syz_tun: entered promiscuous mode [ 59.488880][ T5174] ip6gretap0: entered promiscuous mode [ 59.489199][ T5174] bridge0: entered promiscuous mode [ 59.489459][ T5174] vcan0: entered promiscuous mode [ 59.492013][ T5174] bond0: entered promiscuous mode [ 59.492029][ T5174] bond_slave_0: entered promiscuous mode [ 59.492106][ T5174] bond_slave_1: entered promiscuous mode [ 59.493156][ T5174] team0: entered promiscuous mode [ 59.493166][ T5174] team_slave_0: entered promiscuous mode [ 59.493232][ T5174] team_slave_1: entered promiscuous mode [ 59.493726][ T5174] dummy0: entered promiscuous mode [ 59.505404][ T5174] nlmon0: entered promiscuous mode [ 59.514478][ T5174] batadv0: entered promiscuous mode [ 59.514864][ T5174] vxcan0: entered promiscuous mode [ 59.515071][ T5174] vxcan1: entered promiscuous mode [ 59.521743][ T5174] veth0: entered promiscuous mode [ 59.521994][ T5174] veth1: entered promiscuous mode [ 59.523431][ T5174] wg0: entered promiscuous mode [ 59.523671][ T5174] wg1: entered promiscuous mode [ 59.523907][ T5174] wg2: entered promiscuous mode [ 59.527674][ T5180] infiniband syz1: set active [ 59.527683][ T5180] infiniband syz1: added syz_tun [ 59.538735][ T5174] veth0_to_bridge: entered promiscuous mode [ 59.541277][ T5174] veth1_to_bridge: entered promiscuous mode [ 59.542848][ T5174] veth0_to_bond: entered promiscuous mode [ 59.543308][ T5174] veth1_to_bond: entered promiscuous mode [ 59.546755][ T5174] veth0_to_team: entered promiscuous mode [ 59.555247][ T5174] veth1_to_team: entered promiscuous mode [ 59.558810][ T5174] veth0_to_batadv: entered promiscuous mode [ 59.559055][ T5174] batadv_slave_0: entered promiscuous mode [ 59.559275][ T5174] veth1_to_batadv: entered promiscuous mode [ 59.559486][ T5174] batadv_slave_1: entered promiscuous mode [ 59.561041][ T5174] xfrm0: entered promiscuous mode [ 59.561304][ T5174] veth0_to_hsr: entered promiscuous mode [ 59.564935][ T5174] veth1_to_hsr: entered promiscuous mode [ 59.577608][ T5174] hsr0: entered promiscuous mode [ 59.577839][ T5174] veth1_virt_wifi: entered promiscuous mode [ 59.578058][ T5174] veth0_virt_wifi: entered promiscuous mode [ 59.582749][ T5174] virt_wifi0: entered promiscuous mode [ 59.591113][ T5174] vlan0: entered promiscuous mode [ 59.591398][ T5174] vlan1: entered promiscuous mode [ 59.598118][ T5180] RDS/IB: syz1: added [ 59.598240][ T5180] smc: adding ib device syz1 with port count 1 [ 59.598273][ T5180] smc: ib device syz1 port 1 has no pnetid [ 59.599668][ T5174] macvlan0: entered promiscuous mode [ 59.599957][ T5174] macvlan1: entered promiscuous mode [ 59.604209][ T5174] ipvlan0: entered promiscuous mode [ 59.615255][ T5174] ipvlan1: entered promiscuous mode [ 59.623472][ T5174] macvtap0: entered promiscuous mode [ 59.623855][ T5174] macsec0: entered promiscuous mode [ 59.624133][ T5174] geneve0: entered promiscuous mode [ 59.624353][ T5174] geneve1: entered promiscuous mode [ 59.624588][ T5174] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 59.626015][ T5174] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 59.635413][ T5174] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 59.635690][ T5174] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 59.635944][ T5174] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 59.642132][ T5174] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 59.723380][ T3276] IPVS: starting estimator thread 0... [ 59.770962][ T5193] loop0: detected capacity change from 0 to 512 [ 59.775959][ T5193] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 59.784202][ T5193] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 59.784248][ T5193] System zones: 1-12 [ 59.785800][ T5193] EXT4-fs (loop0): 1 truncate cleaned up [ 59.790729][ T5193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.808498][ T5191] IPVS: using max 60 ests per chain, 144000 per kthread [ 59.879923][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.891934][ T5155] Zero length message leads to an empty skb [ 59.964991][ T5196] tipc: Started in network mode [ 59.965006][ T5196] tipc: Node identity 4, cluster identity 4711 [ 59.965013][ T5196] tipc: Node number set to 4 [ 60.015481][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.054237][ T5199] netlink: 'syz.2.37': attribute type 1 has an invalid length. [ 60.070192][ T5199] veth0_virt_wifi: entered promiscuous mode [ 60.089561][ T5204] loop0: detected capacity change from 0 to 1024 [ 60.093759][ T5204] ======================================================= [ 60.093759][ T5204] WARNING: The mand mount option has been deprecated and [ 60.093759][ T5204] and is ignored by this kernel. Remove the mand [ 60.093759][ T5204] option from the mount to silence this warning. [ 60.093759][ T5204] ======================================================= [ 60.094304][ T5199] dlm: Unknown command passed to DLM device : 0 [ 60.094304][ T5199] [ 60.117326][ T5204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.189060][ T5199] mmap: syz.2.37 (5199) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.209764][ T5165] infiniband syz0: set active [ 60.210699][ T5165] infiniband syz0: added syz_tun [ 60.227736][ T5165] RDS/IB: syz0: added [ 60.227761][ T5165] smc: adding ib device syz0 with port count 1 [ 60.227773][ T5165] smc: ib device syz0 port 1 has no pnetid [ 60.385584][ T5216] overlayfs: conflicting options: userxattr,redirect_dir=on [ 60.501192][ T5208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'. [ 60.502562][ T5208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.39'. [ 60.568000][ T5230] loop2: detected capacity change from 0 to 2048 [ 60.571600][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.572215][ T5159] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.572291][ T5159] bridge_slave_0: entered allmulticast mode [ 60.574270][ T5159] bridge_slave_0: entered promiscuous mode [ 60.577028][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.577050][ T5159] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.577099][ T5159] bridge_slave_1: entered allmulticast mode [ 60.577650][ T5159] bridge_slave_1: entered promiscuous mode [ 60.594746][ T5230] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.595797][ T5159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.606890][ T5159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.642793][ T5159] team0: Port device team_slave_0 added [ 60.651616][ T5159] team0: Port device team_slave_1 added [ 60.674754][ T5159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.674774][ T5159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.674785][ T5159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.675434][ T5159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.675441][ T5159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.675453][ T5159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.699801][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.819173][ T5159] hsr_slave_0: entered promiscuous mode [ 60.819868][ T5159] hsr_slave_1: entered promiscuous mode [ 60.820064][ T5159] debugfs: 'hsr0' already exists in 'hsr' [ 60.820074][ T5159] Cannot create hsr debugfs directory [ 60.957178][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 61.167326][ T4731] Bluetooth: hci3: command tx timeout [ 61.495883][ T5283] fuse: Bad value for 'fd' [ 61.527216][ T5289] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 61.596001][ T5303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.52'. [ 61.673962][ T5159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.679718][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.681416][ T5159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.692132][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.692490][ T5159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.700197][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.700526][ T5159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.707457][ T5159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.769032][ T5338] capability: warning: `syz.2.57' uses 32-bit capabilities (legacy support in use) [ 61.795953][ T5159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.802462][ T5159] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.805151][ T3276] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.805180][ T3276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.805690][ T3276] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.805709][ T3276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.831505][ T5159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.831521][ T5159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.845965][ T5347] loop1: detected capacity change from 0 to 256 [ 61.859123][ T5347] vfat: Unknown parameter 'ÿÿ' [ 61.924051][ T5340] loop0: detected capacity change from 0 to 512 [ 62.045107][ T5361] overlayfs: conflicting options: userxattr,redirect_dir=on [ 62.391522][ T5159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.470934][ T5397] loop0: detected capacity change from 0 to 256 [ 62.569267][ T5159] veth0_vlan: entered promiscuous mode [ 62.574745][ T5159] veth1_vlan: entered promiscuous mode [ 62.601156][ T5159] veth0_macvtap: entered promiscuous mode [ 62.607990][ T5159] veth1_macvtap: entered promiscuous mode [ 62.611246][ T5159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.612186][ T5159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.639727][ T1238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.650968][ T5419] fuse: Bad value for 'fd' [ 62.706056][ T1238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.782200][ T1238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.797103][ T1238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.991399][ T5416] input: syz0 as /devices/virtual/input/input3 [ 63.031359][ T1238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.031376][ T1238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.035474][ T5416] loop2: detected capacity change from 0 to 512 [ 63.065893][ T5434] loop0: detected capacity change from 0 to 512 [ 63.069352][ T5416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.083687][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.083701][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.085389][ T5434] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.100991][ T5434] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 63.206674][ T4731] Bluetooth: hci3: command tx timeout [ 63.295271][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.618274][ T5485] usb usb5: selecting invalid altsetting 1 [ 63.665755][ T5498] loop0: detected capacity change from 0 to 256 [ 63.667686][ T5498] vfat: Bad value for 'shortname' [ 63.753262][ T5506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 63.754476][ T5507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 63.802855][ T5510] syz.3.88 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.855510][ T4827] atkbd serio0: keyboard reset failed on [ 64.118101][ T5534] loop0: detected capacity change from 0 to 256 [ 64.314811][ T5552] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 64.314830][ T5552] overlayfs: overlapping lowerdir path [ 64.411363][ T5563] random: crng reseeded on system resumption [ 64.488828][ T10] cfg80211: failed to load regulatory.db [ 64.493010][ T1588] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.493043][ T1588] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.624503][ T5587] netlink: 'syz.4.103': attribute type 9 has an invalid length. [ 64.706704][ T5595] netlink: 32 bytes leftover after parsing attributes in process `syz.2.104'. [ 64.709120][ T5595] bond0: invalid ARP target specified [ 64.772003][ T5597] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 65.286979][ T4731] Bluetooth: hci3: command tx timeout [ 65.400944][ T5602] capability: warning: `syz.1.106' uses deprecated v2 capabilities in a way that may be insecure [ 65.529807][ T30] audit: type=1400 audit(65.510:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=5606 comm="syz.4.108" src=65532 dest=20002 netif=wpan0 [ 65.536394][ T5613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.109'. [ 65.536642][ T5613] netlink: 48 bytes leftover after parsing attributes in process `syz.2.109'. [ 65.536652][ T5613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.109'. [ 65.548966][ T5613] loop2: detected capacity change from 0 to 512 [ 65.553048][ T5613] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 65.553225][ T5613] EXT4-fs (loop2): external journal has bad superblock [ 65.560644][ T5615] binder: 5610:5615 tried to acquire reference to desc 0, got 1 instead [ 65.560666][ T5615] binder: 5610:5615 ioctl c0306201 200000c0 returned -14 [ 65.560899][ T5615] binder: 5610:5615 got transaction with out-of-order buffer fixup [ 65.560997][ T5615] binder: 5610:5615 transaction call to 5610:0 failed 5/29201/-22, code 0 size 104-24 line 3630 [ 65.561732][ T4827] binder: undelivered TRANSACTION_ERROR: 29201 [ 65.653618][ T5616] process 'syz.4.108' launched './file1' with NULL argv: empty string added [ 65.694263][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.694362][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.694419][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.694468][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.694516][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.694561][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.113'. [ 65.759138][ T5609] cgroup: fork rejected by pids controller in /syz4 [ 65.785850][ T5668] gtp0: entered allmulticast mode [ 65.900207][ T5707] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.900833][ T5707] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.963990][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.969510][ T5707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.990178][ T5717] netlink: 'syz.1.117': attribute type 10 has an invalid length. [ 65.990417][ T5731] netlink: 'syz.1.117': attribute type 3 has an invalid length. [ 66.010130][ T5748] tmpfs: Bad value for 'nr_inodes' [ 66.040591][ T5758] loop0: detected capacity change from 0 to 512 [ 66.048039][ T5762] syz.3.124 uses obsolete (PF_INET,SOCK_PACKET) [ 66.114786][ T5770] loop0: detected capacity change from 0 to 1024 [ 66.115543][ T5770] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 66.115585][ T5770] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 66.123317][ T5770] EXT4-fs (loop0): invalid journal inode [ 66.123383][ T5770] EXT4-fs (loop0): can't get journal size [ 66.124231][ T5770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 66.165541][ T5766] tipc: Started in network mode [ 66.165561][ T5766] tipc: Node identity d6d1484910c4, cluster identity 4711 [ 66.165653][ T5766] tipc: Enabled bearer , priority 1 [ 66.171998][ T5721] tipc: Resetting bearer [ 66.182457][ T5721] tipc: Disabling bearer [ 66.219285][ T3443] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.222348][ T5700] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.222376][ T5700] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.222393][ T5700] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.273779][ T4716] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.337583][ T5787] syzkaller0: entered promiscuous mode [ 66.337602][ T5787] syzkaller0: entered allmulticast mode [ 66.364109][ T5788] tc action pedit 'at' offset 5 out of bounds [ 66.470823][ T30] audit: type=1326 audit(66.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5810 comm="syz.3.133" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff91779368 code=0x0 [ 66.472706][ T5821] netlink: 'syz.4.136': attribute type 1 has an invalid length. [ 66.897562][ T5865] binder: 5864:5865 tried to acquire reference to desc 0, got 1 instead [ 66.897738][ T5865] binder: 5864:5865 got transaction with invalid offset (2, min 0 max 72) or object. [ 66.897767][ T5865] binder: 5864:5865 transaction call to 5864:0 failed 10/29201/-22, code 0 size 72-24 line 3524 [ 66.898020][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 67.308974][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.309170][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.363277][ T5877] loop0: detected capacity change from 0 to 256 [ 67.363585][ T5877] vfat: Unknown parameter 'mnt' [ 67.367999][ T4731] Bluetooth: hci3: command tx timeout [ 67.393755][ T5877] loop0: detected capacity change from 0 to 256 [ 67.393963][ T5877] vfat: Unknown parameter 'mnt' [ 67.395383][ T5877] loop0: detected capacity change from 0 to 256 [ 67.396075][ T5877] vfat: Unknown parameter 'mnt' [ 67.407780][ T5877] loop0: detected capacity change from 0 to 256 [ 67.408041][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.409463][ T5877] loop0: detected capacity change from 0 to 256 [ 67.409636][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.411060][ T5877] loop0: detected capacity change from 0 to 256 [ 67.411224][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.425816][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.430231][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.431891][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.433491][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.435049][ T5877] vfat: Unknown parameter 'q.io_merged_recursive' [ 67.462164][ T5883] netlink: 'syz.1.147': attribute type 1 has an invalid length. [ 67.470682][ T5877] vfat: Unknown parameter 'x' [ 67.472375][ T5878] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 67.503508][ T5877] vfat: Unknown parameter 'x' [ 67.571313][ T5877] vfat: Unknown parameter 'x' [ 67.573092][ T5877] vfat: Unknown parameter 'x' [ 67.586728][ T5877] vfat: Unknown parameter 'x' [ 67.588565][ T5877] vfat: Unknown parameter 'x' [ 67.590258][ T5877] vfat: Unknown parameter 'x' [ 67.591874][ T5877] vfat: Unknown parameter 'x' [ 67.593488][ T5877] vfat: Unknown parameter 'x' [ 67.595098][ T5877] vfat: Unknown parameter 'x' [ 67.688227][ T12] IPVS: starting estimator thread 0... [ 67.799343][ T5892] IPVS: using max 58 ests per chain, 139200 per kthread [ 67.892464][ T30] audit: type=1400 audit(67.870:4): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=w pid=5893 comm="syz.1.152" name="001" dev="devtmpfs" ino=708 [ 67.953811][ T5744] hid-sensor-hub 0003:1234:5678.0001: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 68.132360][ T5912] fido_id[5912]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.179883][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.180055][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.004721][ T5957] usb usb2: usbfs: process 5957 (syz.2.166) did not claim interface 0 before use [ 69.084024][ T5961] futex_wake_op: syz.0.167 tries to shift op by 144; fix this program [ 69.127892][ T5966] syzkaller0: entered promiscuous mode [ 69.127913][ T5966] syzkaller0: entered allmulticast mode [ 69.365259][ T5993] set_capacity_and_notify: 18 callbacks suppressed [ 69.365273][ T5993] loop2: detected capacity change from 0 to 1024 [ 69.365639][ T5993] ext2: Unknown parameter 'euid>000000000000' [ 69.371146][ T5993] Soft offlining pfn 0x137107 at process virtual address 0x20ffe000 [ 69.376902][ T5993] Soft offlining pfn 0x139374 at process virtual address 0x20fff000 [ 69.454109][ T6006] 9p: Bad value for 'wfdno' [ 69.460253][ T6007] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 69.460253][ T6007] The task syz.1.174 (6007) triggered the difference, watch for misbehavior. [ 70.131650][ T6041] loop2: detected capacity change from 0 to 512 [ 70.134880][ T6041] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 70.135531][ T6041] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 70.135712][ T6041] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.136038][ T6041] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 70.136137][ T6041] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.147018][ T6041] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 70.147616][ T6041] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 70.148793][ T6041] EXT4-fs (loop2): Remounting filesystem read-only [ 70.148946][ T6041] EXT4-fs (loop2): 1 truncate cleaned up [ 70.157241][ T6041] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.178357][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.197949][ T6044] loop2: detected capacity change from 0 to 512 [ 70.198241][ T6044] ext4: Bad value for 'debug_want_extra_isize' [ 70.298344][ T6053] loop2: detected capacity change from 0 to 512 [ 70.395359][ T6053] __nla_validate_parse: 72 callbacks suppressed [ 70.395374][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 70.405133][ T6066] loop1: detected capacity change from 0 to 8 [ 70.484094][ T6072] warning: `syz.3.195' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.581560][ T6083] loop0: detected capacity change from 0 to 1024 [ 70.583065][ T6083] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 70.583081][ T6083] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 70.583088][ T6083] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 71.690759][ T6100] veth0: entered promiscuous mode [ 71.721739][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 71.891736][ T4731] Bluetooth: hci1: Malformed LE Event: 0x1d [ 72.074739][ T6116] loop0: detected capacity change from 0 to 256 [ 72.150233][ T6119] loop0: detected capacity change from 0 to 1024 [ 72.166207][ T6119] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 72.167337][ T6119] JBD2: no valid journal superblock found [ 72.170654][ T6119] EXT4-fs (loop0): Could not load journal inode [ 72.607020][ T6096] veth0: left promiscuous mode [ 72.994323][ T6135] loop2: detected capacity change from 0 to 512 [ 73.002918][ T6135] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.009309][ T6135] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 73.009380][ T6135] System zones: 1-12 [ 73.018390][ T6135] EXT4-fs (loop2): 1 truncate cleaned up [ 73.018852][ T6135] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.095756][ T4731] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 73.100969][ T6142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.212'. [ 73.122373][ T4727] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.163543][ T6146] binder: 6145:6146 ioctl c0306201 20000080 returned -14 [ 73.165602][ T6146] binder: 6145:6146 ioctl c0306201 200003c0 returned -14 [ 73.166060][ T6146] binder: 6145:6146 got transaction to invalid handle, 1 [ 73.166074][ T6146] binder: 6145:6146 cannot find target node [ 73.166088][ T6146] binder: 6145:6146 transaction call to 0:0 failed 14/29201/-22, code 0 size 0-0 line 3252 [ 73.169151][ T5744] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.653900][ T6177] fuse: Bad value for 'fd' [ 73.791719][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 73.795251][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 73.797702][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 73.799916][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 73.800651][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.224'. [ 74.177221][ T4731] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 74.241670][ T6209] loop4: detected capacity change from 0 to 256 [ 74.267229][ T6212] Driver unsupported XDP return value 0 on prog (id 107) dev N/A, expect packet loss! [ 74.734060][ T6224] ------------[ cut here ]------------ [ 74.734071][ T6224] WARNING: mm/slub.c:7022 at __kvmalloc_node_noprof+0x6e0/0x7fc, CPU#0: syz.1.235/6224 [ 74.737015][ T6224] Modules linked in: [ 74.737809][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.1.235 Not tainted syzkaller #0 PREEMPT [ 74.739539][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.741572][ T6224] pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 74.743118][ T6224] pc : __kvmalloc_node_noprof+0x6e0/0x7fc [ 74.744250][ T6224] lr : __kvmalloc_node_noprof+0x400/0x7fc [ 74.745293][ T6224] sp : ffff800098887930 [ 74.746042][ T6224] x29: ffff800098887980 x28: 00000000ffffffff x27: 0000001000000000 [ 74.747543][ T6224] x26: 0001000000000000 x25: 0000000000000000 x24: 00000000000028c0 [ 74.749117][ T6224] x23: ffff800082631c9c x22: ffff0000dcd65588 x21: 00000080000000e8 [ 74.750832][ T6224] x20: ffff700013110f58 x19: 0000000000000000 x18: 0000000000000000 [ 74.752374][ T6224] x17: ffff800080166554 x16: ffff800080cd9118 x15: ffff800082631a14 [ 74.753921][ T6224] x14: 0000000000000001 x13: 0000000000000005 x12: 0000000000000000 [ 74.755381][ T6224] x11: 0000000000000000 x10: 0000000000000003 x9 : ffff800088a10ae0 [ 74.756796][ T6224] x8 : 0000000000000cc0 x7 : 0000000000000000 x6 : ffff800080b83658 [ 74.758341][ T6224] x5 : 00000000ffffffff x4 : 00000000000028c0 x3 : 0000010000000000 [ 74.759775][ T6224] x2 : 00000080000000e8 x1 : ffff0000dc44d880 x0 : 0000000000000001 [ 74.761200][ T6224] Call trace: [ 74.761782][ T6224] __kvmalloc_node_noprof+0x6e0/0x7fc (P) [ 74.762786][ T6224] udmabuf_create+0x220/0xb34 [ 74.763602][ T6224] udmabuf_ioctl+0x24c/0x2b4 [ 74.764384][ T6224] __arm64_sys_ioctl+0x154/0x1cc [ 74.765271][ T6224] invoke_syscall+0x98/0x244 [ 74.766084][ T6224] el0_svc_common+0xec/0x23c [ 74.766927][ T6224] do_el0_svc+0x4c/0x5c [ 74.767715][ T6224] el0_svc+0x60/0x1d8 [ 74.768433][ T6224] el0t_64_sync_handler+0x44/0x104 [ 74.769374][ T6224] el0t_64_sync+0x198/0x19c [ 74.770285][ T6224] irq event stamp: 2340 [ 74.771038][ T6224] hardirqs last enabled at (2339): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 74.772990][ T6224] hardirqs last disabled at (2340): [] el1_brk64+0x20/0x54 [ 74.774628][ T6224] softirqs last enabled at (2312): [] fpsimd_restore_current_state+0x39c/0x9c8 [ 74.776568][ T6224] softirqs last disabled at (2310): [] fpsimd_restore_current_state+0x44/0x9c8 [ 74.778436][ T6224] ---[ end trace 0000000000000000 ]---