last executing test programs: 378.980412ms ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x4a) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1d3042, 0x40) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x8c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xe17c}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x2}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 354.883445ms ago: executing program 4 (id=5): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xffff}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000001240)=ANY=[@ANYBLOB="000000040000010000"], 0xfce) 193.519421ms ago: executing program 1 (id=2): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) r0 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) read$FUSE(r3, &(0x7f0000000500)={0x2020}, 0x2020) bind$inet(r2, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r2, 0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) syz_open_dev$dri(&(0x7f0000000040), 0x8, 0x101a03) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r5, &(0x7f0000000400)='PASV\r\n', 0x6) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000001) r7 = accept4(r2, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000080)="32a2205061737349acfc0858cb864887b7c7600176b7b9e00c15f1832c302c11010e000031333629ed0a000001000068c4beb98a575f00cc9c419f5591310000000000000000001b1079fe7e0c2ee2190200"/94, 0x5e) r8 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r8, &(0x7f0000000600)={0x2, 0x1388, @loopback}, 0x10) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r9, &(0x7f0000000100)={'syz0\x00', {0x0, 0x4, 0x0, 0x1000}, 0x1c, [0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xac, 0xff, 0xeb93], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x7, 0x0, 0x8, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_DEV_CREATE(r9, 0x5501) r10 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCSABS0(r10, 0x401845c0, 0x0) write(r8, &(0x7f0000000700)='PING', 0x4) 135.203827ms ago: executing program 4 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[@ANYBLOB='rodir,shortname=mixed,uni_xlate=1,utf8=0,shortname=win95,shortname=winnt,shortname=winnt,utf8=1,iocharset=iso8859-8,shortname=lower,\x00'], 0x1, 0x242, &(0x7f0000000800)="$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") sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x8004) 133.971271ms ago: executing program 2 (id=7): mlockall(0x2) r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet_udp(0x2, 0x2, 0x0) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) 86.85357ms ago: executing program 4 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select ', 0xf) write(r0, &(0x7f0000000100)='file read /etc/passwd ex/c argv[0]/\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 76.96078ms ago: executing program 3 (id=4): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x26f}], 0x1}, 0x0) madvise(&(0x7f0000800000)=nil, 0x0, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setxattr$security_evm(0x0, &(0x7f0000000140), &(0x7f00000001c0)=@sha1={0x1, "86f74d9b37667014c29cd113a132cc795cbd6d6f"}, 0x15, 0x1) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000800)='0', 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @remote, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x30040000) 61.403653ms ago: executing program 0 (id=1): close(0x3) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002580)='/proc/schedstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) userfaultfd(0x1) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0xfffffffd, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) syz_ublk_setup_io_uring(0x578a, &(0x7f0000000080)={0x0, 0x16a2, 0x800, 0x0, 0x1cc}, 0x0, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000340), &(0x7f00000006c0)='./file0\x00', 0x2000000, &(0x7f0000000d80)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB="2c729e802a8430771f125279a7286f6f746d6f64653d30303030303030303030303030303030303036303030302c757365725f69643d", @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000005,default_permissions,dont_hash,subj_role=,uid=', @ANYRESDEC=0xee00, @ANYBLOB=',obj_role=,\x00'], 0x1, 0x0, &(0x7f0000000b00)="a8ebcb954724644548bbfe8ee5c9c3b44b684605ddf785") r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r7, &(0x7f0000000240)=[{&(0x7f0000000280)=""/179, 0xb3}], 0x1) close(0x3) r8 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000580)={0x0, 0x10, 0x10}, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) sendmsg$nl_crypto(r8, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x120}, 0x1, 0x0, 0x0, 0x20040044}, 0x4000000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000880)="d4396fc52664", 0x6}], 0x1}}], 0x1, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a04010000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000700012800c0001800800010064757000600001800e000100636f6e6e6c696d69740000004c0002800800024000000001080002400000000108000140000008000800014000000001080002400000000008000140000000040800024000000001080002400000000008000140000000020800034000000000580012801800018011000100666c6f775f6f66666c6f61640000000030000180090001006c617374000000002000028008000140000000090c000240000000000000000508000140000000090c000180080001006c6f6700140000001000010000000000000000000084000aa622033be83363692b9f3926213471f70add50cd2e247a74f609ba81e4b5a0fa3a7a64ed2d8fbc1786c4e780eba9b26ffe90cb08d2cc6399e83d4e44fc8af5aa13460de37dcd486df4cd4a8066bf"], 0x12c}}, 0x0) 60.828823ms ago: executing program 4 (id=9): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xfff}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x48}}, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 36.797387ms ago: executing program 2 (id=10): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x0, 0x7fc00100}]}) fsopen(0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) userfaultfd(0x80001) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.888066ms ago: executing program 1 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$kcm(0x21, 0x2, 0x2) socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 0s ago: executing program 4 (id=12): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x400, 0x4) write(r0, &(0x7f0000000000)="01", 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 21.582187][ T4696] cgroup: Unknown subsys name 'net' [ 21.692267][ T4696] cgroup: Unknown subsys name 'cpuset' [ 21.694543][ T4696] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 21.892008][ T4696] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 23.328028][ T4724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 23.328829][ T4724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 23.329063][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 23.329469][ T4724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 23.329707][ T4724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 23.329945][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 23.330101][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 23.330510][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 23.330977][ T4724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 23.332810][ T4724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 23.332915][ T4724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 23.334298][ T4720] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 23.340951][ T4724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 23.342476][ T4720] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 23.344128][ T4724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 23.348129][ T4720] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 23.357554][ T4723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 23.360290][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 23.365441][ T4723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 23.367005][ T4723] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 23.368363][ T4723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 23.369986][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 23.371771][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 23.373407][ T4723] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 23.375802][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 23.655717][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.657379][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.658801][ T4718] bridge_slave_0: entered allmulticast mode [ 23.660432][ T4718] bridge_slave_0: entered promiscuous mode [ 23.666357][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.667734][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.669099][ T4718] bridge_slave_1: entered allmulticast mode [ 23.670644][ T4718] bridge_slave_1: entered promiscuous mode [ 23.703850][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.706589][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.734887][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.734989][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.735311][ T4721] bridge_slave_0: entered allmulticast mode [ 23.735757][ T4721] bridge_slave_0: entered promiscuous mode [ 23.742132][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.742219][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.742287][ T4721] bridge_slave_1: entered allmulticast mode [ 23.742730][ T4721] bridge_slave_1: entered promiscuous mode [ 23.744456][ T4718] team0: Port device team_slave_0 added [ 23.745249][ T4718] team0: Port device team_slave_1 added [ 23.763323][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.763361][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.763372][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.764196][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.764204][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.764220][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.774559][ T4718] hsr_slave_0: entered promiscuous mode [ 23.774897][ T4718] hsr_slave_1: entered promiscuous mode [ 23.805673][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.819632][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.827162][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.828586][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.830951][ T4710] bridge_slave_0: entered allmulticast mode [ 23.832583][ T4710] bridge_slave_0: entered promiscuous mode [ 23.842911][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.842970][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.843199][ T4710] bridge_slave_1: entered allmulticast mode [ 23.843632][ T4710] bridge_slave_1: entered promiscuous mode [ 23.856967][ T4721] team0: Port device team_slave_0 added [ 23.857846][ T4721] team0: Port device team_slave_1 added [ 23.861962][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.873805][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.885957][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.885984][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.885996][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.886559][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.886565][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.886577][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.903643][ T4710] team0: Port device team_slave_0 added [ 23.914476][ T4710] team0: Port device team_slave_1 added [ 23.914576][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.914785][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.914884][ T4712] bridge_slave_0: entered allmulticast mode [ 23.915320][ T4712] bridge_slave_0: entered promiscuous mode [ 23.916548][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.916574][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.916667][ T4712] bridge_slave_1: entered allmulticast mode [ 23.917106][ T4712] bridge_slave_1: entered promiscuous mode [ 23.918936][ T4721] hsr_slave_0: entered promiscuous mode [ 23.919235][ T4721] hsr_slave_1: entered promiscuous mode [ 23.919469][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 23.919507][ T4721] Cannot create hsr debugfs directory [ 23.926283][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.926311][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.926400][ T4711] bridge_slave_0: entered allmulticast mode [ 23.926860][ T4711] bridge_slave_0: entered promiscuous mode [ 23.928111][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.928140][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.928228][ T4711] bridge_slave_1: entered allmulticast mode [ 23.928791][ T4711] bridge_slave_1: entered promiscuous mode [ 23.964698][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 23.964729][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.965349][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 23.966032][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 23.966039][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 23.966055][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 23.967890][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.968996][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.973087][ T4718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 23.979556][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 23.979957][ T4718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 23.982336][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 23.983928][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 23.985013][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 23.998522][ T4712] team0: Port device team_slave_0 added [ 24.000889][ T4712] team0: Port device team_slave_1 added [ 24.001953][ T4718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 24.004243][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.018662][ T4718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 24.021839][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.028764][ T4711] team0: Port device team_slave_0 added [ 24.037206][ T4710] hsr_slave_0: entered promiscuous mode [ 24.037541][ T4710] hsr_slave_1: entered promiscuous mode [ 24.037730][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 24.037740][ T4710] Cannot create hsr debugfs directory [ 24.040720][ T4711] team0: Port device team_slave_1 added [ 24.044678][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.044702][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.044717][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.045437][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.045443][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.045454][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.054487][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.054498][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.054514][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.057642][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.057651][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.057661][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.085758][ T4712] hsr_slave_0: entered promiscuous mode [ 24.087384][ T4712] hsr_slave_1: entered promiscuous mode [ 24.088219][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 24.088232][ T4712] Cannot create hsr debugfs directory [ 24.089678][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.089709][ T4718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.089840][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.089867][ T4718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.110557][ T4711] hsr_slave_0: entered promiscuous mode [ 24.111156][ T4711] hsr_slave_1: entered promiscuous mode [ 24.111997][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 24.112009][ T4711] Cannot create hsr debugfs directory [ 24.164790][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 24.167152][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.168981][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 24.171637][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.183591][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 24.185816][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.186192][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 24.187992][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.234674][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.234723][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.234818][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.234855][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.236950][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 24.238797][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.239444][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 24.242066][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.242363][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 24.243648][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.249786][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 24.251927][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.259013][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.275865][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 24.279882][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.282300][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 24.284287][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.285950][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 24.288021][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.289855][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.289896][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.289977][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.290008][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.297028][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 24.299344][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.305688][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.307077][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.309268][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.310989][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.313053][ T15] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.314620][ T15] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.322034][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.327977][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.328050][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.343073][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.346972][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.347015][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.351620][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.366814][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.379388][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.379443][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.389438][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.392619][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.392668][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.400549][ T4712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 24.403597][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 24.405767][ T4712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 24.408385][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 24.420159][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.424110][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.430885][ T4712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 24.433940][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 24.438887][ T4712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 24.442585][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 24.445851][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.454250][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.470831][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.470882][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.471717][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.471740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.501531][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.536616][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 24.540317][ T1247] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.540375][ T1247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.540763][ T1247] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.540785][ T1247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.564938][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 24.567015][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 24.574777][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.598807][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 24.613464][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.613516][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.614096][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.614272][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.637517][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.659199][ T4721] veth0_vlan: entered promiscuous mode [ 24.673635][ T4721] veth1_vlan: entered promiscuous mode [ 24.698705][ T4721] veth0_macvtap: entered promiscuous mode [ 24.719646][ T4721] veth1_macvtap: entered promiscuous mode [ 24.725067][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.736865][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.753375][ T4718] veth0_vlan: entered promiscuous mode [ 24.755017][ T4718] veth1_vlan: entered promiscuous mode [ 24.761723][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.763638][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.765323][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.766780][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.773589][ T4718] veth0_macvtap: entered promiscuous mode [ 24.781926][ T4718] veth1_macvtap: entered promiscuous mode [ 24.808641][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.818686][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.860615][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.862355][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.866593][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.866632][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.871154][ T1247] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.871286][ T1247] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.871377][ T1247] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.871465][ T1247] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 24.899316][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 24.904693][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.904724][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.917404][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.917438][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.924884][ T4711] veth0_vlan: entered promiscuous mode [ 24.927511][ T1247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 24.927542][ T1247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 24.934787][ T4712] veth0_vlan: entered promiscuous mode [ 24.937778][ T4711] veth1_vlan: entered promiscuous mode [ 24.948505][ T4711] veth0_macvtap: entered promiscuous mode [ 24.960136][ T4712] veth1_vlan: entered promiscuous mode [ 24.964373][ T4711] veth1_macvtap: entered promiscuous mode [ 24.969744][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 24.976688][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 24.982075][ T4710] veth0_vlan: entered promiscuous mode [ 24.989673][ T4710] veth1_vlan: entered promiscuous mode [ 24.993866][ T4712] veth0_macvtap: entered promiscuous mode [ 25.006724][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.010040][ T4712] veth1_macvtap: entered promiscuous mode [ 25.017992][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.024731][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.024849][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.024872][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.033782][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.042452][ T1247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.042488][ T1247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.059954][ T4891] loop2: detected capacity change from 0 to 1024 [ 25.063825][ T4891] ======================================================= [ 25.063825][ T4891] WARNING: The mand mount option has been deprecated and [ 25.063825][ T4891] and is ignored by this kernel. Remove the mand [ 25.063825][ T4891] option from the mount to silence this warning. [ 25.063825][ T4891] ======================================================= [ 25.066196][ T4710] veth0_macvtap: entered promiscuous mode [ 25.094114][ T4891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 25.102604][ T4710] veth1_macvtap: entered promiscuous mode [ 25.106571][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 25.107802][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 25.110484][ T4891] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3: bg 0: block 112: padding at end of block bitmap is not set [ 25.119311][ T4891] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 25.124776][ T4891] EXT4-fs (loop2): This should not happen!! Data will be lost [ 25.124776][ T4891] [ 25.126933][ T4891] EXT4-fs (loop2): Total free blocks count 0 [ 25.130658][ T4891] EXT4-fs (loop2): Free/Dirty block details [ 25.130709][ T4891] EXT4-fs (loop2): free_blocks=0 [ 25.130909][ T4891] EXT4-fs (loop2): dirty_blocks=64 [ 25.130925][ T4891] EXT4-fs (loop2): Block reservation details [ 25.130939][ T4891] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 25.136172][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.136183][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.151381][ T148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.151521][ T148] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.151649][ T148] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.151762][ T148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.151918][ T148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.152097][ T148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.152118][ T148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.152140][ T148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.152161][ T148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 25.167373][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.167398][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.169080][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.176085][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.179207][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.179548][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.179734][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.179901][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.180553][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.182437][ T4890] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.182777][ T4891] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.3: lblock 0 mapped to illegal pblock 0 (length 1) [ 25.224688][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.224720][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.242311][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.242348][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.252286][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 25.252312][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 25.267770][ T4891] Zero length message leads to an empty skb [ 25.274035][ T4907] loop4: detected capacity change from 0 to 128 [ 25.279189][ T4819] IPVS: starting estimator thread 0... [ 25.300700][ T4905] input: syz0 as /devices/virtual/input/input2 [ 25.300698][ T4721] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 25.306205][ T4721] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 25.362720][ T4908] IPVS: using max 60 ests per chain, 144000 per kthread [ 25.371336][ T4715] Bluetooth: hci0: command tx timeout [ 25.371572][ T50] Bluetooth: hci4: command tx timeout [ 25.383238][ T50] Bluetooth: hci3: command tx timeout [ 25.437370][ T4920] fuse: fd is not a fuse device [ 25.453974][ T4927] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 25.462272][ T4715] Bluetooth: hci1: command tx timeout [ 25.462539][ T50] Bluetooth: hci2: command tx timeout [ 25.466499 ** replaying previous printk message ** [ 25.466499][ T4926] ------------[ cut here ]------------ [ 25.466531][ T4926] skb_assert_len [ 25.466731][ T4926] WARNING: ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x18ec/0x2bc0, CPU#0: syz.4.12/4926 [ 25.470914][ T4926] Modules linked in: [ 25.471623][ T4926] CPU: 0 UID: 0 PID: 4926 Comm: syz.4.12 Not tainted syzkaller #0 PREEMPT [ 25.473174][ T4926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 25.475013][ T4926] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 25.476396][ T4926] pc : __dev_queue_xmit+0x18ec/0x2bc0 [ 25.477320][ T4926] lr : __dev_queue_xmit+0x18ec/0x2bc0 [ 25.478248][ T4926] sp : ffff800094447300 [ 25.478988][ T4926] x29: ffff800094447550 x28: 1fffe00018c7ca86 x27: dfff800000000000 [ 25.480429][ T4926] x26: ffff700012888e78 x25: 1fffe00018c7ca92 x24: ffff0000c63e5430 [ 25.481924][ T4926] x23: ffff0000dbee8000 x22: 1fffe00018c7ca7a x21: ffff80008a19d000 [ 25.483330][ T4926] x20: ffff0000c63e53c0 x19: ffff0000c63e53d0 x18: 00000000ffffffff [ 25.484755][ T4926] x17: ffff80008a7d6000 x16: 0000000000000002 x15: ffff800080c9a684 [ 25.486258][ T4926] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 25.487716][ T4926] x11: 0000000000000000 x10: 0000000000080000 x9 : 25b697c6da270c00 [ 25.489209][ T4926] x8 : 25b697c6da270c00 x7 : ffff80008048c5b8 x6 : 0000000000000000 [ 25.490654][ T4926] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000802f6830 [ 25.492138][ T4926] x2 : 0000000100000000 x1 : ffff0000ccf18000 x0 : 0000000000000001 [ 25.493627][ T4926] Call trace: [ 25.494224][ T4926] __dev_queue_xmit+0x18ec/0x2bc0 (P) [ 25.495227][ T4926] packet_xmit+0x6c/0x314 [ 25.496050][ T4926] packet_sendmsg+0x1858/0x3df0 [ 25.496943][ T4926] __sock_sendmsg+0xc8/0x17c [ 25.497775][ T4926] sock_write_iter+0x220/0x310 [ 25.498630][ T4926] vfs_write+0x51c/0xa0c [ 25.499362][ T4926] ksys_write+0x12c/0x228 [ 25.500084][ T4926] __arm64_sys_write+0x84/0x98 [ 25.500923][ T4926] invoke_syscall+0x98/0x244 [ 25.501748][ T4926] el0_svc_common+0xec/0x23c [ 25.502578][ T4926] do_el0_svc+0x4c/0x5c [ 25.503312][ T4926] el0_svc+0x64/0x260 [ 25.503994][ T4926] el0t_64_sync_handler+0x44/0x104 [ 25.504897][ T4926] el0t_64_sync+0x198/0x19c [ 25.505674][ T4926] irq event stamp: 300 [ 25.505798][ T4929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 25.507810][ T4926] hardirqs last enabled at (299): [] __arm64_exit_to_kernel_mode+0x64/0x78 [ 25.509624][ T4926] hardirqs last disabled at (300): [] el1_brk64+0x20/0x54 [ 25.511146][ T4926] softirqs last enabled at (286): [] __alloc_skb+0x1c0/0x610 [ 25.512698][ T4926] softirqs last disabled at (284): [] __alloc_skb+0x1a8/0x610 [ 25.514223][ T4926] ---[ end trace 0000000000000000 ]--- [ 25.521640][ T4926] skb len=0 data_len=0 headroom=160 headlen=0 tailroom=224 [ 25.521640][ T4926] end-tail=224 mac=(160,0) mac_len=0 net=(160,-1) trans=-1 [ 25.521640][ T4926] shinfo(txflags=0 nr_frags=0 gso(size=0 type=0 segs=0)) [ 25.521640][ T4926] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 25.521640][ T4926] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 25.521640][ T4926] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 25.521640][ T4926] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 25.532655][ T4926] dev name=tunl0 feat=0x0000000e401d4869 [ 25.534223][ T4926] sk family=17 type=2 proto=0 [ 27.450790][ T50] Bluetooth: hci3: command tx timeout [ 27.450810][ T4715] Bluetooth: hci4: command tx timeout [ 27.450839][ T4715] Bluetooth: hci0: command tx timeout [ 27.530800][ T4714] Bluetooth: hci1: command tx timeout [ 27.530932][ T50] Bluetooth: hci2: command tx timeout [ 29.531132][ T50] Bluetooth: hci3: command tx timeout [ 29.531441][ T4714] Bluetooth: hci0: command tx timeout [ 29.531465][ T4714] Bluetooth: hci4: command tx timeout [ 29.611011][ T50] Bluetooth: hci2: command tx timeout [ 29.611152][ T4715] Bluetooth: hci1: command tx timeout [ 31.610807][ T50] Bluetooth: hci3: command tx timeout [ 31.610820][ T4715] Bluetooth: hci4: command tx timeout [ 31.610848][ T50] Bluetooth: hci0: command tx timeout [ 31.690780][ T50] Bluetooth: hci2: command tx timeout [ 31.700799][ T50] Bluetooth: hci1: command tx timeout