last executing test programs: 6.905348655s ago: executing program 1 (id=139): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001180)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000680)={0x15, 0x110, 0xfa08, {r1, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x2, 0x0}}, @in={0x2, 0x8, @local}}}, 0x118) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0xfff}) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000040)=[0x200, 0x4dc2]) 6.764014979s ago: executing program 1 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x100}, 0x50) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = getpid() fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x0, 0x0, 0xdd, 0xfffffffffffffffe, r3}) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000), &(0x7f0000000240), 0x4, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x90) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000280)={0x0, r5, r1, 0x10001, 0x10, '\x00', {0x6, 0xb3, 0x7, 0xbc1965f, 0x5, 0x4, 0x1, 0xaec7, {0x3, 0x5}, {0x8, 0x6}, {0x5, 0xfe7}, 0x3, 0xd, 0x8, 0x1e5c, 0x3, 0x0, 0x8, 0x71fe, 0x4, 0x947, '\x00', 0x1, 0x2, 0x5, 0x5}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x100}, 0x50) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) getpid() (async) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x0, 0x0, 0xdd, 0xfffffffffffffffe, r3}) (async) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000), &(0x7f0000000240), 0x4, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x69}}}, &(0x7f0000000200)='syzkaller\x00', 0x2}, 0x90) (async) fcntl$dupfd(r0, 0x406, r0) (async) ioctl$XFS_IOC_SWAPEXT(r4, 0xc0c0586d, &(0x7f0000000280)={0x0, r5, r1, 0x10001, 0x10, '\x00', {0x6, 0xb3, 0x7, 0xbc1965f, 0x5, 0x4, 0x1, 0xaec7, {0x3, 0x5}, {0x8, 0x6}, {0x5, 0xfe7}, 0x3, 0xd, 0x8, 0x1e5c, 0x3, 0x0, 0x8, 0x71fe, 0x4, 0x947, '\x00', 0x1, 0x2, 0x5, 0x5}}) (async) 6.604385402s ago: executing program 4 (id=144): pipe2(&(0x7f0000000580)={0xffffffffffffffff}, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x41, 0x2b, r0, 0x0) close(0x3) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = socket(0x28, 0x801, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x90000) tee(r3, r2, 0x80000003, 0x4) write$binfmt_script(r4, &(0x7f0000000340)={'#! ', './file0'}, 0xfffffded) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x5}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 6.603070596s ago: executing program 1 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20) write$smackfs_netlabel(r0, &(0x7f0000000400)=@l1={{0xfffffffffffffeff, 0x2e, 0x41f, 0x2e, 0x2, 0x2e, 0x2}, 0x20, ')!{[]$+\\,+'}, 0x60) 6.455089984s ago: executing program 1 (id=147): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$netlink(0x10, 0x3, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc080661a, &(0x7f0000001080)={@id={0x2, 0x0, @d}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r2, 0x6, 0x19, 0x0, &(0x7f0000002940)) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x399, {0x28000, 0xcbff, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xfffffffffffffff3, 0x1, 0x6, 0x101, 0x8000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) syz_clone3(&(0x7f00000004c0)={0x200, &(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000200), {0x1f}, &(0x7f0000000300)=""/202, 0xca, &(0x7f0000000400)=""/83, &(0x7f0000000480)=[0x0], 0x1}, 0x58) capget(&(0x7f0000000540)={0x20080522, r3}, &(0x7f0000000580)={0xfffffffb, 0xd, 0x4, 0xffffe7fb, 0x5, 0x800}) setgroups(0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="64000000010181010000000000000000000000000c0019800800010008000000100001800c000280040001003a00000034000f80080003400000078c080002400020009f0800024000000009080001400000000408000140fffffe010800034000000003"], 0x64}, 0x1, 0x0, 0x0, 0x2c004805}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d00000005002b000000080000000400a1aa000093fc05000201aaaaaaaaaaaa0a0001007770616e30000000"], 0x3c}}, 0x20048840) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r8, 0x2) recvfrom(r9, &(0x7f0000000500)=""/57, 0x39, 0x40002040, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 6.087724928s ago: executing program 1 (id=150): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff], 'ipvlan1\x00', 'batadv0\x00', {}, {}, 0x0, 0x26, 0x7, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x3, 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x1, 0x1ff, 0x9, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x2, 0x10], 0x9, 0x1, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @remote, @mcast1, @local, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1], 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x2, 0x0, 'pptp\x00', {0x80}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00075f12f5f5000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 5.456303791s ago: executing program 4 (id=155): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) setuid(0xee01) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x1, 0x394a, 0x5b, 0x80, 0x80, 0x1, 0x9, 0x7, 0x7c, 0x2, 0x3, 0x0, 0xa, 0x1, 0x1, 0x8, 0x2, 0x5, 0x1, 0x6, 0x10, 0xffff, 0x6, 0x400, 0x7}) 5.307410292s ago: executing program 1 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20) write$smackfs_netlabel(r0, &(0x7f0000000400)=@l1={{0xfffffffffffffeff, 0x2e, 0x41f, 0x2e, 0x2, 0x2e, 0x2}, 0x20, ')!{[]$+\\,+'}, 0x60) 5.114665409s ago: executing program 32 (id=157): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='dev_mnt\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='dev_mnt/zram0\x00', 0x2, 0x0) write(r0, &(0x7f0000000580)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20) write$smackfs_netlabel(r0, &(0x7f0000000400)=@l1={{0xfffffffffffffeff, 0x2e, 0x41f, 0x2e, 0x2, 0x2e, 0x2}, 0x20, ')!{[]$+\\,+'}, 0x60) 4.414144425s ago: executing program 4 (id=166): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000010000000000000000000000611224000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5914fae9d6dcd3292ea8000b6effb35282a2758da0985db2681545048697bec98a70d27c98386c30adc49494ec24cd315210e6034", 0xffffffffffffff95) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000000)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) recvmsg$can_j1939(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000000600)=""/17, 0x11}, {&(0x7f0000000640)=""/65, 0x41}], 0x2}, 0x121) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xc, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) 4.152384945s ago: executing program 2 (id=167): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x448, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff], 'ipvlan1\x00', 'batadv0\x00', {}, {}, 0x0, 0x26, 0x7, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x3, 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x1, 0x1ff, 0x9, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x2, 0x10], 0x9, 0x1, 0x1, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, @local, @remote, @mcast1, @local, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private0, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private1], 0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x2, 0x0, 'pptp\x00', {0x80}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4a8) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00075f12f5f5000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 3.952923991s ago: executing program 4 (id=169): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x7fff, 0x2, 0x1000, 0x8, 0x7, 0x80, {0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x39}}}, 0xf81, 0x9, 0x4}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r3, 0x2}, &(0x7f00000001c0)=0x8) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0xff}, &(0x7f00000002c0)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000300)={r4, 0x4, 0x20, 0x1, 0x3}, &(0x7f0000000340)=0x18) ioctl$BTRFS_IOC_SCRUB_CANCEL(r7, 0x941c, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000380)={0x8, 0xff, 0x8204, 0xb1d, 0x7, 0x7, 0x0, 0x0, r6}, 0x20) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000003c0)={r8, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, &(0x7f0000000480)=0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000740)={'batadv_slave_1\x00', 0x0}) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x7, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0xff}}, @fwd={0xa}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x10, 0x4}]}, @ptr={0x9, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0xc9c851c96c61ac4b, 0x30, 0x30, 0x0, 0x61]}}, &(0x7f0000000840)=""/20, 0x8b, 0x14, 0x0, 0x800, 0x10000, @value=r7}, 0x28) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000940)='/proc/partitions\x00', 0x0, 0x0) r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x16, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x80}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @jmp={0x5, 0x1, 0xd, 0x6, 0x3, 0x30, 0x1}, @call={0x85, 0x0, 0x0, 0xb7}, @generic={0x1, 0x2, 0x2, 0x4, 0xcb7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xb2, &(0x7f0000000680)=""/178, 0x40e00, 0x11, '\x00', r10, 0x25, r11, 0x8, &(0x7f00000008c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x1, 0xc, 0x8001, 0x13}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000980)=[r12, 0x1], &(0x7f00000009c0)=[{0x5, 0x5, 0x9}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001c40)={r13, 0x0, 0x1d, 0x1b, &(0x7f0000000ac0)="c76a3b793724dcf666c9d5a791dfba39f45c16d86ae0d7d553eb2dcfbf", &(0x7f0000000b00)=""/27, 0x1ff, 0x0, 0xda, 0x1000, &(0x7f0000000b40)="fe73d4a295378b112824a97389bb31321dba824b3fd0fd616319f7398aec1b0b688ae501e9c24e88360a000587e47021530d544e75371a957f90e86c3768d5f59bc4490e312ab22ced9e17d21e11fc05e0988cbb0112a7101705f1b57edaf47a91214ecacca51d7a74904787f46c5fba3d3fda9280c98528c409df0fab18830718d8f2899896ed166639df6ff22fd6b9db56f538dd3a8abd6ed01be23d94e4697522765fede179d42d56209d2dd2da68d53b40922f63c89dbcacf1928fe76ab6aff233b0f14f51102c0146647418906549b114d48a740c02a799", &(0x7f0000000c40)="86c669e5e49ccab3d307c01c3d0adafbe70693d3f1583152a2fd7a116bab57a48cddeb2a0d70d88c79a3fc49df535f4e0c7a2db425271cc142a9c22bf8fba3bfabd0d92b21372a917be97cd2b5bab198bdade8c1e7215c092f969bfd878f2065186ae1d214cf75474d081e5b9fd941349eb32d778964b72eab54b3a7fe3d05e87eff20c869a72890776df6f70fd744ec09a3e1e6f12271cac96ff5cd499a40347425b4cf4938137a28e869de85a993550d08d096072abb1685e8d08ddf14db962ad8da8fc941ceb4f2902fd5f7cd0a4cb4a719a708ad87853045f9c398a012b57ac87d5d19458b1130eeaaca35aff089047329bf2b8f21bd236fd499d5ec31713df25190c448b689364594580a9c399e93b2acd38f55b49b449bb30471eef70358094191e7fe17d1adbd48cd328b22ea057b447c2bb12c2cf020566845350d6afbec21ddecfcd8157d0d80878e6063cb4a0b17d9c263ab76ae4354b84cecdf8e8e2376bd697800164324f2b1d6f270f83a6b560ea1d4e33663bb28cb306118b13f79b1a04b2bf9eebabd7cd85071c6c119b11ddb4bb4e7f98ed9d110ef48623008140b6bcbf20b341951a5ffcd4f2224a59578c12498ad4b95be67f9c6f1e0fb2b02a395e0155ce5c8b2d66fa5b133ed9330b8731b8442e15c02a834c6ac4be4402e383bf5d27a2da2aaba890a1f957e153406bd38acc6559658b2b4a9445a080d0b8b02b1b527b7aa39d50d7845de6047f6cea786fc26f114f3b46474edd9ce83fd27cf4aef43951518c909240e1bcadec0df7dd17a2d7b9a4b79f4bfc41a0954bc2b37b0dba27b7d004c57aeaaa926fa6035d2f2c1864d2280b41a0d3328ea92b3f0fb758d167f7d6f5f91c326e8c79422f768169acba314bd365e5d2e96fcd62695637f7a605cda5f04081f8faf252c6d2dd6c868ec3c987ce975d3f3317292f3dc3e12754662e20aab86cba0e11fdef0d6f38c28fc3bcab44f2c8feeb43b8f86688d9199dffa54b31906d308267faf587a2cf99743083a7c59d4acaa9ab1edb3f9211a4415b94e53fab80c0a9955882114295d679c439d987703244a5309a3c9044ff54b26ee3dff37385d3c9a6811dea2932d6dcbaca07bc6b42254db0939218597e954b1188244c8ab327e398d769da4307dd27474db0edb61aa37c495935c1ef8c25c8b5e694515afa3af4e1f7d7e7b57c6d298c5ea529a2143e01be7184bf1f91aa94abd92b7d9beb647d2bb9d3e87805129285a1b3073d07fbb2a40d0d5b3de662d6c78605c8b68ea7f189b781aa3c014aba7517c30c7493d2cfaab114d4b1ad3a17e6a4a180478d537bf7b7ea9cc9ea1beebf4a537c3f772ab2e704254ae3f6c8c3f3f5fbd66251effe7eea6e594096274cf42b67d7e4967ecb966f860f9c657f386fdc6b654a946736cb3620a8e44d6023da3932063ea016e3ba269938ce01c699bb69542974552476ff89f1c8b28e8a297bcada4f9fd293d38c66bb47382a88953945e76eb6b6655416e3af295a11c2b360d1b2a798f587e6379bcaed89a03f700171f9597e5803fb6d9ca9a1956a488b222b61cf9bff4feb85c2b09802c0cee8943ffbf601266224162dde7f377f6419a5fb0461c4dab901655b8c40ed27095bf3e72e43a98df9b860901af53845894a807c4da514a2d05896d58a351539cb7262451c98876f4e753f40b461f3ddb5aeea1eafe3312abfd21512f6fa5422cb73e696404c9861e5a72c29239bdc4da372f53fd961bc354b5fcbd153c481484c3d0a9a2ba859ed91711e6d32637c22f44301e7aaf2b279c77e6fea73e48a1ba1c6420ae3fa62f8be28d19924087190919a5656ae56f27340782ff7f07aa1cc1c79dec6fc6aacc0550bce81fe5e06d1aec928d10b84b971600072e223314b0e531e5846116e2859af1d3eb9bd1d83602a03b9daf9799bc30d44859a3ceea0fa2cb77ef22ee5457fc8f66c93acd9cad9ad79a2abec6748267422c7a84637edccca85a1ca379f14ecbe51e8cf25df58ba4e5099b4c4e45e4d0a33019651fa815e1e3f2124cda8af4f97b2406ebd3fa1726357c1076ebeacc570fce6c40fd403ae726178058c3bde9597db9be90b6eff76c5411599ad8d54942489b4398451823f247af90b089fe06436c5074d7b8fd5cc02b144dd96a04c3cad3c223331e400a63aeae7a377f27005f5cf364a873dde960a6110958713619dab952d06e4180f3a648590423d10a8e261bf628e514110d90900a5469ee1012b8bfb6b54919ac3861a0ea58436561910b82b46a38b178eab223d578a5c500e4f4d6933d7f28b2f5a09e56d0df47dcec03a0cce7762ff7d2b23a8724941beb7e953456d17dae4f4537ed6bf9a1a932dad8a9b1666d1a049b0802b575471c0949cd2f5edb3acbf8f883a5fd2931e434c624867dfbb47e764d9d9306a92f46997ff3b2d74f0f6b000605b0787cd0d7fe51ee9872ab533475377c8185c8c6751169796fd371839e88608c2c93843dd570b4e4c8529cf3ecca70b79a4e746a01d32b0bccdaa918290c9913e64f661662e1f8aa1ec8ce6a535c1b64514f99796a91d3fe80ad22d34db509a09e10750e21f855744c7ce5092b055b2ad69c579a3e955e4322d80b642d2895d0613aac0fee8ce929caa68adb80dbdc7d91bf65086f8dfe09f2815ba981533307164483b74bf48bc682ef267d0641bb0e4504c1b54f6e11f486a04cef214cb89a4f26f7ea3fe8f1cf521c75b75e1c6932c97a7cb1ec4148dbe0d8d49a81caeacced87178c2aa2a43ba01bf9ac1302fa98be42acc0caa0659a6ce021c99e8d191914832897839d950e597b121dac199adea0da3642445a65941b13f70fd21041dfd69e2942b8c3dc4e97fcc6cf782a2d4696c7dfd383ba405815e2b7bc9b01ab54aaad9a4ef5f6cda730d3c57c124032ce90f7c651012e3808798a08cbaa8e43427bd2a85c3653ea51b73f3ed8c344225eb2f7aa4de36b3a9e108f152b214ff7a2da664ce09945d8cb9497b0c3618ae8c0e5ae141713b257bdebeddaa91b8b3f8a2c0cf7e42f6fec5afc5629ce876ab3d919209cf5ee65ce4519525e67fefae704674a2792c0dd952ceaae8560002edd49a4a48fe6fa51a1b18507668e64977d0a1c21bde2127e4ccb8f4a1185136c7d0da2662cdc8c0e967bcfdd9a225f08a299ef8f22f49db7a40567545650c1713f53a1391743830232ca642bf8c16df15087499a7cdf741f330f45828011136d1944954be6464b02910cad723791c771add243bff9c40749dec7d610963633e99f3f5a54dce0e774e97f7f80e3317d1946e2470dc89e50531dd07a25de3c40e20ac5c844991d6d9fcd5a2528c2dc6124d14ef137357fbe984f03f0ac8201f5920692f04ed14eb4c550a5a53dafd9cffb9ecf104bc576f80c5d7585b9572e0537f090dac5856175036d6d081f2a7684910a52e98e2fbeee44da1ac2ff5c896d5925bda0bee566271f21b705f513b38896ff3e8451b37e73e47a6b570fe2e66a40140fca822a2c6f11873e4ceaf492d846749452251d78d018d5186af55ba1631b17e89db0457162aeab2aa6b344789c7a0b8f799823572c75d185e7dae357ddd7231901c64b6821bdfa13e71a1c01dcfd3a06cbadd710e8f03e3127a71f4a93c20a6c14f080c4656de44aa7f7da34c34c03b4c382eb607e7c8242fb919d8f4a17f7e7bd7d4f0cf8b6e738e37234b04d82c2e064f18651e14aee6557ebf83b078e6a6716d10ab839fff065e5a7691e03a1e6b13f8a9cc644826c81786bbac21a02ca2fc7d79cc6a43114d6008e8502bc49796c628222bbb5605525ac46f8edbba6efbd4a94dc122929e2eaaad82a7dd865fbff24ed9f7eabffebb54fb6b9753d7156e4ed9868c630caa1665932b8fe72a9cb411bc1665a9c5c6b849575b97bfc8c208db4ee1b0cde9f5eef6ac85d5a9c4a1f7f32c442064ff7db95d92b1344a67ac3af33097f1ea8ce27578c4d6947ee5be1403bbfa85ee66d88895ef89f306e590bdc6cf889641f7f6b0d0fc1c97e53365bf9fc37e41d7b09724c9ffd489ba603a0a4eddbc66f62b047e76ef3530a819b9f4181395dc32b2bc52dba6483471e66c6572c4a37d25472569cd88e7dc0adb561ad270f96120218c6c7757bdd9d08a2e141051c6b843a2d02eb015b9c37dc61e4113c8f75ed19c1018ffbdecbc6e5c70e42b0fca0905b83bb7a4e6e2359118cf5e1f47f149baa792cd2972dda2010dff7ec4ef53b5343fca490f3ff908870dc41672fb20e61d38e402620b160be35623aa506a122dc5d0ac973a3bfec3e0c07df0a1ce3ad0950b8ba21eec752cab4c108c03d172b6a2670afe18becde9cdaa6b84800e687f20223397e676f33d388036bacc265ec186f6eacd574528b7876e2ee5d028a715a7df597d6036b632c9a6a1ef9aa42a947cb27341900e376e515b1931a3d1132f3e434362ec2514b30e1a4b5a107cda27e81263eac47d7666045586d9204045b20c292a47e43f8d91182b721769da7d3fb7fe7636ebe50b0a1ea0b57a5c4f17ce900bd70fd7d9eebe74ed449a18f8c9c6ea301fae5012f8f1948a7a87333364e82da4ae8126546aa2ae87bf40bb3ff384e9b9bde127a014cdec2f7903777eabc80d5af7d1dfcadc2aa8a3a0c083fcc78b392e86441b5a5b31c07afcf9d28285cd83db22f75ba9caca8e5fcc4299ef9f6d63233a364fa19442a2fafc02caedd96d66a1126ff9744611c0d318aa5e068adb8bda38993b11f6da67d5344876d29bf8874dbf2424a2ece8705966fa24c1d9750f9dce4029f60c5ff77b9e950bded48f83fa7bd0d4414281d5fd960c723bc2fdbc10b8bc27b2b99398cc3e4f060b02c88ec09b09da5e707d4ba5135da8b8e697b9f2ea0b3400d772d47deb11ead82c54e04f233026b06eb57a58ab044808b60df9a48a5dff1d0a86c82ee15cadbec50c899682eb44a8577ad7f0efed5be6b08a2f431e6c1a1e20657df4a291c1a49113b666262548e589e5480a4389554e36ef7aed79b7f7998e49e0c6f4c4998b4b992749478601f806c98e416f17f99c9b8b85bf92d7de4ddf6be35dadeb9a9b395a1505f053a92d43a550a279c0e22e930dad30fa219fe28cdd2f94e99ba58eec98146fecaaa4411dea308b7f94a2890061d933e4f9601376cda8fe4a18c86f926e808b4fdd2c9f12b79c17f792768e8576e69ee8848f922b003c3182160adabae31fefb8af231affe223df86fa7564cc89cf799de24ef305f7eb6a8ae3765fce8e6703605a31ea339119866d75b6056c99175380b33e6e2ec010838a4ed55b37f4514d07667313c018a11378f1d987d6bd1eed814768cb0e6bd05eda103d91a8bcb3598af2ab97af3890e01c0c6c4ed449122c9d021a43ffa8860d749fd86d1cc6fb51ed4181d658033725511dbd534235c936f7a7990ae99b43f8c8a25b6e74b9302440b92c38e07de3a2ae691b8e201303c2f71803bdeb2fc4c9a5f13f9df6a0689512c9ec6c0d2580c0557d886d0a25c69ab3f7f50f82ee653d7542273856843d0c2b40932aedf52d7530d3f857dd0591bab19f8ec0e1c5b2981ac2804febfc1808fee208d5b3fbe344dbe01c95b636cd5888f3b129f557b75817fdcd016d53d78e9db2953beb86415264bfb54fd4ce2c35539a404e4a3b1ca81b79548a84e083832464f480fff4bda68ffc8a9848e4051a093f192ca768d4df528efcdc50657da9f75ba5d9484a00e3ac72c9243952afad64cef3730a83b67c01f6d49893c498356cc3c2890969f13101cca89e7b167b75afec5e8c6d1", 0x4, 0x0, 0xf}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001ec0)={&(0x7f0000001cc0)="624890be8a3fc5e905ad75cae5e729634600dbc91d68939f83ffd8d93333a18530b3f668d618dd25d0a637aa5fdec7584eef8d3f6217f0e10c5f00bc9112", &(0x7f0000001d00)=""/87, &(0x7f0000001d80)="3ec43dfd4098e6286c142db50cb7f21a1e20b821e6abcd26632682c590cf1235d893d122a8ec485b2d380dcd", &(0x7f0000001dc0)="93ddaa6a9f32d34df1435e336fcca86cd734687bc77fdc61c0984748b6b2d2f47be55596c12803962f5e643144a91f7ea017b7f7c17b3f72f812c263fbc8ad7358b68c3cdc92c5a091ecb385bc9d7f3c9661fdf0b9c465eabd123b48bd712d287b2a0661ff796b93714140a13f1c7fc4121bb2828f8ab31e14919ed7b8fe717d082cc5372dc22f02e950e23ab0a5b86932f6ec95d938b074e5c5610664423b621c8abfd87413bf286953f4e8e92a0bee205b403164c0283ed262930bea83b784c3d88c37b23dee0bb7ddd134d8342324b09cf6866a5b9c0d9970d19f87690dd536c0410948900327ee07a63f1347c499", 0x83, r12}, 0x38) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000001f00)={r1, 0x9d20}, &(0x7f0000001f40)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000001f80)={r14, @in={{0x2, 0x4e22, @local}}, 0x4, 0x3}, 0x90) ioctl$NILFS_IOCTL_GET_SUSTAT(r12, 0x80306e85, &(0x7f0000002040)) sendmsg$nl_xfrm(r12, &(0x7f0000002240)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002200)={&(0x7f00000020c0)=@acquire={0x138, 0x17, 0x8, 0x70bd2d, 0x25dfdbfc, {{@in=@local, 0x4d5, 0xff}, @in=@broadcast, {@in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x16a0, 0x4e20, 0x6, 0x6b9f5cd4f96da182, 0x80, 0x80, 0xff, r10, r5}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e20, 0x200, 0x4e20, 0x2, 0xa, 0x80, 0x0, 0x16, r10, r5}, {0xc2, 0x8, 0x6, 0x5, 0x5f, 0x6, 0x5, 0x3f2d}, {0xbd6, 0xe, 0xff, 0x9}, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4, 0xfca6, 0xfffeffff, 0x70bd2b}, [@iptfs_reorder_window={0x6, 0x25, 0x7ff}, @tfcpad={0x8, 0x16, 0x8001}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$vim2m(&(0x7f0000002280), 0x7, 0x2) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002300), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r12, &(0x7f0000002440)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xac, r15, 0x0, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x50}, 0x60844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002480)) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002500), r12) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000002540)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r12, &(0x7f0000002640)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x48, r16, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r17}]}, 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x8010) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000002780)={0x0, 0x8001}, &(0x7f00000027c0)=0x8) 3.373377611s ago: executing program 2 (id=176): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x1, 0x394a, 0x5b, 0x80, 0x80, 0x1, 0x9, 0x7, 0x7c, 0x2, 0x3, 0x0, 0xa, 0x1, 0x1, 0x8, 0x2, 0x5, 0x1, 0x6, 0x10, 0xffff, 0x6, 0x400, 0x7}) 3.276192551s ago: executing program 4 (id=178): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002280)={@fallback=r1, 0x10, 0x0, 0x4, &(0x7f0000002180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f00000021c0)=[0x0], &(0x7f0000002200)=[0x0, 0x0], &(0x7f0000002240)=[0x0, 0x0, 0x0]}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000380)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {0xa, 0xffff}, {0x300, 0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xd7, 0xd782, 0x6, 0x704, 0x4}, 0xd}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000) r4 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r4, 0x3000) ftruncate(r4, 0x51a9497) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002300)={0x6, 0x8, &(0x7f0000002140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffe}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4a21, 0x18, &(0x7f0000000200)=""/24, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x8, 0xe, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[{0x5, 0x2, 0x4, 0xb}, {0x100001, 0x1, 0x2, 0x7}, {0x5, 0x5, 0xb, 0x6}, {0x2003, 0x2, 0xd, 0x2}, {0x2, 0x2, 0xe}, {0xffffffff, 0x5, 0x9, 0xb}], 0x10, 0x80}, 0x94) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x40002) write$FUSE_WRITE(r6, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x10000}}, 0x18) read$FUSE(r6, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6b3, 0xac, &(0x7f0000000500)=""/172, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x2, 0x100, 0x1}, 0x10, 0xe69e, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0x1], &(0x7f0000000680)=[{0x0, 0x4, 0x3, 0x2}], 0x10, 0xa7d5}, 0x94) r9 = syz_open_dev$mouse(&(0x7f0000000780), 0x7f, 0x115000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200010e, &(0x7f0000000100), 0x3, 0x46b, &(0x7f00000006c0)="$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") r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x101000, 0x18) getdents64(r10, 0x0, 0x2e) setreuid(r7, r7) r11 = syz_open_dev$vcsu(&(0x7f00000007c0), 0x3e7, 0x40080) sendmsg$nl_route(r2, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810000}, 0xc, &(0x7f0000000880)={&(0x7f00000020c0)=ANY=[@ANYBLOB="5c0000001100080028bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00040000002800003c002b8008000100", @ANYRES32=r5, @ANYBLOB='l\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="080003000e00000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB='\b\x00\b\x00', @ANYRES32=r6, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0xfffffffffffffffe) 2.382247672s ago: executing program 3 (id=183): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="54010000", @ANYRES16=r4, @ANYBLOB="017d26bd7000000000003b00000008000300", @ANYRESDEC=r4, @ANYBLOB="0600cd00000000002d01330080200900080211000001080211000000"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f00000000c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000100)={0x1, 0x1, 0x1, "4a37f6c000190000000000000020000000000000000000000100", 0x31435641}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000005400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001000a170e678524a12608ac8c00000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="0100000002", 0x5, 0xffffffffffffffff) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 2.356975084s ago: executing program 2 (id=184): syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @random, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, "a4b76e", 0x8, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {0x4e24, 0x4e21, 0x8}}}}}}, 0x0) munmap$binder(0x0, 0xffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xcbfba000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000000700)='v\xa6\xf5lj6,r\xaf\xcf\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nRp\x10\x84\x86t\x8a\xba\xfb\xd6I\x1c\x7f\v/!\xf4C3\xc0a%\xda\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xa1\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+n\xa4N\a\xa7\x7fNup\xf8\xebQs\x02.@\xea\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cCZdO\x87K\xd6\x10\x86\xd1\xf4\xa3i\xa8\xb2\xc8\x9cJ3\xd8)\xc3\xc3\xe25j\xab\xd3\xd9\x97rK\x1bY\xa7\xe9+/l\xa2\xf0\x9e\xff\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1\xac[\xd2]\x80P\xaf\xe4,\xb9\xb5J\xec(\x92H9+\x11\xc3\xd1\x13\x01\x00\x00\x00\x00\x00\x00\x00K\x1d\x1e\xf0\xb4\xd5\xaaM\xe3WU\xa3d\b\x92\xb78\xf3\xe5\xc1\x01\x8f\x02\xc5 \x93\a\xf0\x10\v\x94\xd8\xb2\xd2v%\xb20T\xa3\n\x876\xd8(\x1c\x8e\x93\xdf\xfe\x1f?\x91\xa2&\n\xc5\x0f\bhe\x9a\xe8=\xb7\xe5\xa2\xddD\x86\xf3\xc2\xf6\x06\xe7\xa9\xf7\xbc\xfaf\x8e\'\x9b\xc7\x86\x02\xad\x99k^3e\x9d\xebs\xea\xb2\x04\xde\xc7\x16|*\x97\xac\xa8W\xcc\xba\x14m\"D\'\xfa\x86x\x15\xc5\xd1a\x0e\\cOz\xee\xc7?\xf9;\x05oR\xfc\xe3=<\xf8;Mw\x0f+\xf8fx\x94\xfd\x11#m-\xbbL\x82r\xfah\xa0\xc3\x1d\x19\xf5\x00'/439, 0x0) mmap(&(0x7f00002e9000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r1, 0xff64000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4804) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) 2.142972537s ago: executing program 2 (id=186): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff], 'ipvlan1\x00', 'batadv0\x00', {}, {}, 0x0, 0x26, 0x7, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x3, 0x4}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x1, 0x1ff, 0x9, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x2, 0x0, 'pptp\x00', {0x80}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00075f12f5f5000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 2.137990908s ago: executing program 3 (id=187): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'gretap0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x1f, 0x1, 0x3, 0x14a2, {{0x42, 0x4, 0x2, 0x0, 0x108, 0x68, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @multicast1, {[@cipso={0x86, 0x63, 0x2, [{0x1, 0x9, "24d47c12e17973"}, {0x6, 0x12, "e88075c970d79783d535ec28c1b8bd0a"}, {0x0, 0x10, "9a36b45e38e8660805e0a95cd55b"}, {0x2, 0xd, "b77b7a45efbf31ebdd9575"}, {0x7, 0xe, "95c790d49d4ca85dd229f441"}, {0x7, 0x8, "5718362ab3e5"}, {0x2, 0xf, "e0344d15e51ff8dd87cb14be42"}]}, @timestamp_prespec={0x44, 0xc, 0x72, 0x3, 0x5, [{@remote, 0x6}]}, @timestamp_prespec={0x44, 0xc, 0x39, 0x3, 0x2, [{@broadcast, 0xfffffffb}]}, @cipso={0x86, 0x22, 0x1, [{0x6, 0xb, "04c6c50f8426fbd60c"}, {0x5, 0x11, "417ce92f3d894317003492e0d8b7f2"}]}, @timestamp={0x44, 0x14, 0xfd, 0x0, 0x6, [0x0, 0x100, 0xef5e, 0x80000000]}, @rr={0x7, 0x27, 0xc7, [@empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local, @multicast1, @empty, @empty, @empty]}, @end, @lsrr={0x83, 0x17, 0xf2, [@broadcast, @broadcast, @rand_addr=0x64010102, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @generic={0x82, 0x3, "7f"}]}}}}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x4, [@struct={0x5, 0x9, 0x0, 0x4, 0x0, 0x7db6, [{0x9, 0x5, 0x6}, {0xc, 0x4, 0x9c}, {0x6, 0x4, 0x3}, {0xb, 0x4, 0x5}, {0x5, 0x1, 0x2}, {0x3, 0x5, 0x1}, {0x1, 0x5, 0x1}, {0xd, 0x3}, {0xd, 0x4, 0x7}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x27, 0x0, 0x14, 0xe3057dc67f4b0a8}, @const={0x7, 0x0, 0x0, 0xa, 0x5}, @union={0x3, 0x4, 0x0, 0x5, 0x1, 0xbaf6, [{0x0, 0x1, 0xc823}, {0xf, 0x5, 0x6}, {0xe, 0x1, 0x8}, {0xe, 0x0, 0x7}]}]}, {0x0, [0x30, 0x5f]}}, &(0x7f00000009c0)=""/165, 0xec, 0xa5, 0x1, 0x4, 0x10000}, 0x28) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x71, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x1}}}]}, 0x2f}, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x20, 0x0, 0x1, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_default\x00', &(0x7f00000046c0)={{}, {0x1, 0x4}, [{0x2, 0x5, 0xffffffffffffffff}], {0x4, 0x6}, [], {0x10, 0x6}}, 0x2c, 0x3) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x3, 0x0, r1, 0x0, '\x00', r5, r0, 0x2, 0x4, 0x3}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x0, &(0x7f0000000380), &(0x7f0000000640)='syzkaller\x00', 0x10000, 0x84, &(0x7f00000001c0)=""/132, 0x41100, 0x48, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000ac0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x9173, 0xffffffffffffffff, 0x0, &(0x7f0000000b00)=[r0, r0, r0], 0x0, 0x10, 0x7}, 0x94) 2.063870916s ago: executing program 0 (id=188): r0 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000000)=0x9f0) ioctl$BLKRRPART(r2, 0x125f, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r4, 0x7808b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$dvb_demux(&(0x7f0000000400), 0x8, 0x700) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) sched_setscheduler(r5, 0x3, &(0x7f00000000c0)=0xd2) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) 1.960330122s ago: executing program 3 (id=189): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x10002, 0x10a) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0xcd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) close(r0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r6, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) sendmsg$inet(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000005c0)="ac4e", 0x2}], 0x1}, 0x8001) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x3ff}}}, 0x84) 1.854823575s ago: executing program 2 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18, &(0x7f0000000480)=ANY=[@ANYBLOB='shortname=win95,shortname=win95,shortname=win95,nonumtail=0,rodir,check=strict,shortname=winnt,shortname=mixed,iocharset=default,shortname=mixed,nfs=stale_rw,uni_xlate=1,shortname=lower,iocharset=iso8859-15,allow_utime=000000000bfoR00000000000001,utf8=1,shortname=win95,\x00'], 0x7, 0x2ac, &(0x7f0000000800)="$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") syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x101000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50}, 0x2000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 1.713729188s ago: executing program 0 (id=191): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0x2}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/79, 0x4f, 0x40, &(0x7f0000000340)=@can, 0x80) 1.556297318s ago: executing program 0 (id=192): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") r0 = socket(0x2d, 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000680)="$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") mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904021d080009000200e8fe55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}, {&(0x7f0000000540)="47e2ef3330b4efa56e2aed9961d244728046f7e077f2e17fe99eb02cc704ca74e513a8046b12c800061e2d1a3b750e5d29002c99980f4a0ccd7a793f2f41bf6f028eb2ad8ba2068150ea4164d3cc2563ae7aaa346f975c0bbc6150f0b4ad75d246ac5fecbd465371b5cf8316", 0x6c}], 0x2}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0xffffffff}, 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.556084723s ago: executing program 3 (id=193): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace(0x8, r1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) 1.444016474s ago: executing program 3 (id=194): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x1}, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) clock_adjtime(0x0, &(0x7f0000000000)={0x3, 0x1, 0x394a, 0x5b, 0x80, 0x80, 0x1, 0x9, 0x7, 0x7c, 0x2, 0x3, 0x0, 0xa, 0x1, 0x1, 0x8, 0x2, 0x5, 0x1, 0x6, 0x10, 0xffff, 0x6, 0x400, 0x7}) 1.33704757s ago: executing program 0 (id=195): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @auto="75bc16354dffa591"}}) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x6008, 0x1) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff035}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x5, 0x0, 0x0, 0xfffffffe}]}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$getregset(0x4204, r6, 0x40a, &(0x7f0000000000)={0x0}) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r9}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="4b0033008000e100ffffffffffff08021100000050505050505000000000000000000000640003480006"], 0x68}, 0x1, 0x0, 0x0, 0x8014}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000048000)=0x1, 0x0) (async) setsockopt$sock_timeval(r10, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) (async) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r11, 0x84, 0x0, &(0x7f0000000180)={r13, 0x7, 0x7411bbe9, 0x9}, &(0x7f0000000280)=0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r13, @in6={{0xa, 0x4e23, 0x9, @remote, 0x9}}, 0x5, 0x9, 0xffffffa9, 0x81cc, 0x2a, 0x7, 0x5f}, 0x9c) 1.071337565s ago: executing program 0 (id=196): socket$key(0xf, 0x3, 0x2) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="60fe0000", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000008001900e000000106001a004e23000008001900e000000206001d0006000000060003000700000008003900ac1414aa"], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x800, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4422}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 886.000822ms ago: executing program 2 (id=197): syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x3}, @random="97000000000f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x13, 0x0, 0x65, 0xfff, 0x2, 0x6c, 0x7, @loopback, @loopback}, "2d1461b33c69089e"}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) r2 = memfd_create(&(0x7f0000000080)='%\x00', 0x1) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x1c, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2, 0x0}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/44, 0x27, 0x2c, 0x0, 0x4}, 0x28) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1e, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x3}, @random="97000000000f", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x13, 0x0, 0x65, 0xfff, 0x2, 0x6c, 0x7, @loopback, @loopback}, "2d1461b33c69089e"}}}}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000011ec0)=@base={0x5, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe94}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socket$kcm(0x10, 0x0, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) (async) memfd_create(&(0x7f0000000080)='%\x00', 0x1) (async) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x5}, [{0x2, 0x6}], {}, [], {0x10, 0x3}}, 0x1c, 0x1) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x2}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/44, 0x27, 0x2c, 0x0, 0x4}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1e, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 498.209247ms ago: executing program 3 (id=198): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) epoll_create1(0x80000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) epoll_create1(0x80000) (async) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan1\x00'}) (async) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_MTU={0x8, 0x4, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async) 444.299001ms ago: executing program 4 (id=199): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') sync_file_range(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x3) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private0, @private=0xa010101, 0x1e, 0x14}}) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@private0, 0x0}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x10, 0x8, 0x8000, 0x6, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x64, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x39}, {[@lsrr={0x83, 0x7, 0x94, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0xcc, 0x1, 0xd, [{@remote, 0x6}, {@local}]}, @ssrr={0x89, 0x1b, 0xf8, [@multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @end, @timestamp_prespec={0x44, 0xc, 0x14, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @rr={0x7, 0x23, 0x33, [@loopback, @empty, @multicast1, @local, @remote, @rand_addr=0x64010102, @loopback, @multicast2]}]}}}}}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000000380)=0x14) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa4, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40040) lseek(r0, 0x1000000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400a"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 0s ago: executing program 0 (id=200): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2b8, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xff], 'ipvlan1\x00', 'batadv0\x00', {}, {}, 0x0, 0x26, 0x7, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x3, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x2, 0x2, 0x0, 'pptp\x00', {0x80}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x318) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00075f12f5f5000000000007000000", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.57' (ED25519) to the list of known hosts. [ 27.677680][ T4701] cgroup: Unknown subsys name 'net' [ 27.767461][ T4701] cgroup: Unknown subsys name 'cpuset' [ 27.769639][ T4701] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.886675][ T4701] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 28.703737][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 28.705598][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 28.707466][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 28.709162][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 28.710927][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 28.713057][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 28.714822][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 28.716540][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 28.722790][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 28.726877][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 28.733712][ T4715] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 28.746127][ T4713] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 28.747773][ T4713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 28.750246][ T4724] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 28.752682][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 28.753167][ T4714] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 28.753340][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 28.754607][ T4724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 28.754677][ T4724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 28.759003][ T4724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 28.759136][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 28.762844][ T4724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 28.763228][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.769572][ T4715] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 28.772513][ T4715] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.074067][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.074512][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.074586][ T4711] bridge_slave_0: entered allmulticast mode [ 29.075076][ T4711] bridge_slave_0: entered promiscuous mode [ 29.093757][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.093881][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.093937][ T4711] bridge_slave_1: entered allmulticast mode [ 29.094385][ T4711] bridge_slave_1: entered promiscuous mode [ 29.103081][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.103999][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.127072][ T4711] team0: Port device team_slave_0 added [ 29.127820][ T4711] team0: Port device team_slave_1 added [ 29.155874][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.155900][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.155913][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.156723][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.156730][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.156741][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.167113][ T4711] hsr_slave_0: entered promiscuous mode [ 29.167429][ T4711] hsr_slave_1: entered promiscuous mode [ 29.196579][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.196670][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.196831][ T4712] bridge_slave_0: entered allmulticast mode [ 29.197242][ T4712] bridge_slave_0: entered promiscuous mode [ 29.198416][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.198437][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.198483][ T4712] bridge_slave_1: entered allmulticast mode [ 29.198925][ T4712] bridge_slave_1: entered promiscuous mode [ 29.213718][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.215096][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.216266][ T4721] bridge_slave_0: entered allmulticast mode [ 29.216714][ T4721] bridge_slave_0: entered promiscuous mode [ 29.217788][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.217809][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.217897][ T4721] bridge_slave_1: entered allmulticast mode [ 29.218348][ T4721] bridge_slave_1: entered promiscuous mode [ 29.237974][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.239821][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.239894][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.239956][ T4718] bridge_slave_0: entered allmulticast mode [ 29.240349][ T4718] bridge_slave_0: entered promiscuous mode [ 29.241793][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.241812][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.241894][ T4718] bridge_slave_1: entered allmulticast mode [ 29.242292][ T4718] bridge_slave_1: entered promiscuous mode [ 29.261624][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.263476][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.264891][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.266313][ T4723] bridge_slave_0: entered allmulticast mode [ 29.266738][ T4723] bridge_slave_0: entered promiscuous mode [ 29.267385][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.267408][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.267492][ T4723] bridge_slave_1: entered allmulticast mode [ 29.267891][ T4723] bridge_slave_1: entered promiscuous mode [ 29.276631][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.280029][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.295096][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.297672][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.301408][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.302381][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.308947][ T4712] team0: Port device team_slave_0 added [ 29.309773][ T4712] team0: Port device team_slave_1 added [ 29.313114][ T4721] team0: Port device team_slave_0 added [ 29.323680][ T4718] team0: Port device team_slave_0 added [ 29.325536][ T4721] team0: Port device team_slave_1 added [ 29.334652][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.336008][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.341324][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.344005][ T4718] team0: Port device team_slave_1 added [ 29.352737][ T4723] team0: Port device team_slave_0 added [ 29.354184][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.354204][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.354228][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.354935][ T4723] team0: Port device team_slave_1 added [ 29.355103][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.355116][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.355133][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.359398][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.359407][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.359419][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.364994][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.365002][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.365014][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.374908][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.374919][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.374933][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.376845][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.376855][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.376870][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.383966][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.383974][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.383986][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.405886][ T4721] hsr_slave_0: entered promiscuous mode [ 29.406793][ T4721] hsr_slave_1: entered promiscuous mode [ 29.407021][ T4721] debugfs: 'hsr0' already exists in 'hsr' [ 29.407056][ T4721] Cannot create hsr debugfs directory [ 29.409146][ T4712] hsr_slave_0: entered promiscuous mode [ 29.409679][ T4712] hsr_slave_1: entered promiscuous mode [ 29.409879][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.409888][ T4712] Cannot create hsr debugfs directory [ 29.428196][ T4718] hsr_slave_0: entered promiscuous mode [ 29.428744][ T4718] hsr_slave_1: entered promiscuous mode [ 29.428924][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 29.428933][ T4718] Cannot create hsr debugfs directory [ 29.429043][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.432009][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.441833][ T4723] hsr_slave_0: entered promiscuous mode [ 29.442171][ T4723] hsr_slave_1: entered promiscuous mode [ 29.442376][ T4723] debugfs: 'hsr0' already exists in 'hsr' [ 29.442385][ T4723] Cannot create hsr debugfs directory [ 29.443184][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.444669][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.444951][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.446711][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.458152][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.460597][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.549386][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.549452][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.549593][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.549623][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.576737][ T4721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.580392][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.582075][ T4721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.584935][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.588450][ T4721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.590745][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.592461][ T4721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.594833][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.614469][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.614508][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.614600][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.614640][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.620172][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.622458][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.632449][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.634038][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.636495][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.638074][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.640164][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.645671][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.648072][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.665556][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.668327][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.671173][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.672720][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.684935][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.685139][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.686296][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.686593][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.688883][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.693124][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.695324][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.695695][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.697698][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.707883][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.707946][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.720334][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.720457][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.731575][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.733594][ T4723] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.735835][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 29.740052][ T4723] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.742616][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 29.744310][ T4723] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.747698][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 29.753217][ T4723] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.755483][ T4723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 29.775010][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.797448][ T3821] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.797503][ T3821] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.800557][ T3821] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.800592][ T3821] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.812564][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.816058][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.823583][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.848423][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.850308][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.854270][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.854315][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.866468][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.873163][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.873208][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.883696][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.883737][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.884223][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.884244][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.900285][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.907086][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.919233][ T4723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.921218][ T4723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.929014][ T4712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.930864][ T4712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.948410][ T3648] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.948456][ T3648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.951331][ T3648] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.951380][ T3648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.020676][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.035973][ T4711] veth0_vlan: entered promiscuous mode [ 30.040069][ T4711] veth1_vlan: entered promiscuous mode [ 30.052269][ T4711] veth0_macvtap: entered promiscuous mode [ 30.064873][ T4711] veth1_macvtap: entered promiscuous mode [ 30.084682][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.086048][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.097381][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.117154][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.117362][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.117471][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.117559][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.150935][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.166402][ T4712] veth0_vlan: entered promiscuous mode [ 30.167071][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.167082][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.177441][ T4712] veth1_vlan: entered promiscuous mode [ 30.185463][ T4712] veth0_macvtap: entered promiscuous mode [ 30.188219][ T4712] veth1_macvtap: entered promiscuous mode [ 30.211993][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.212025][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.218867][ T4721] veth0_vlan: entered promiscuous mode [ 30.219636][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.221315][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.224529][ T1380] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.229709][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.252018][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.255503][ T247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.255535][ T247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.258182][ T247] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.259606][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.259731][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.269964][ T4721] veth1_vlan: entered promiscuous mode [ 30.282060][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.282090][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.283132][ T4718] veth0_vlan: entered promiscuous mode [ 30.292187][ T4711] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.295159][ T4721] veth0_macvtap: entered promiscuous mode [ 30.314051][ T4721] veth1_macvtap: entered promiscuous mode [ 30.320847][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.330038][ T4718] veth1_vlan: entered promiscuous mode [ 30.351910][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.363716][ T4889] trusted_key: syz.0.1 sent an empty control message without MSG_MORE. [ 30.371852][ T4718] veth0_macvtap: entered promiscuous mode [ 30.380519][ T4718] veth1_macvtap: entered promiscuous mode [ 30.409348][ T4897] Injecting memory failure for pfn 0x11e3dc at process virtual address 0x20000000 [ 30.411775][ T3648] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.411946][ T3648] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.411987][ T3648] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.412020][ T3648] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.414241][ T4723] veth0_vlan: entered promiscuous mode [ 30.415847][ T4723] veth1_vlan: entered promiscuous mode [ 30.428645][ T4897] Memory failure: 0x11e3dc: Sending SIGBUS to syz.1.2:4897 due to hardware memory corruption [ 30.431186][ T4897] Memory failure: 0x11e3dc: Sending SIGBUS to syz.1.2:4894 due to hardware memory corruption [ 30.433436][ T4897] Memory failure: 0x11e3dc: recovery action for dirty LRU page: Recovered [ 30.434049][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.435022][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.443607][ T4897] Injecting memory failure for pfn 0x219070 at process virtual address 0x20001000 [ 30.446006][ T4897] Memory failure: 0x219070: unhandlable page. [ 30.447263][ T4897] Memory failure: 0x219070: recovery action for get hwpoison page: Ignored [ 30.455977][ T4723] veth0_macvtap: entered promiscuous mode [ 30.464630][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.464660][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.478519][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481141][ T3821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481185][ T3821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.481199][ T3821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.481446][ T3821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.481968][ T3821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.508977][ T4905] overlayfs: overlapping lowerdir path [ 30.510896][ T4723] veth1_macvtap: entered promiscuous mode [ 30.511716][ T4905] overlayfs: overlapping lowerdir path [ 30.520284][ T4905] overlayfs: overlapping lowerdir path [ 30.523561][ T4905] overlayfs: overlapping lowerdir path [ 30.525942][ T4905] overlayfs: overlapping lowerdir path [ 30.530336][ T4905] overlayfs: overlapping lowerdir path [ 30.532420][ T4905] overlayfs: overlapping lowerdir path [ 30.535279][ T4905] overlayfs: overlapping lowerdir path [ 30.538282][ T4905] overlayfs: overlapping lowerdir path [ 30.539535][ T4905] overlayfs: overlapping lowerdir path [ 30.539903][ T4905] overlayfs: overlapping lowerdir path [ 30.540516][ T4905] overlayfs: overlapping lowerdir path [ 30.541507][ T4905] overlayfs: overlapping lowerdir path [ 30.542400][ T4905] overlayfs: overlapping lowerdir path [ 30.543477][ T4905] overlayfs: overlapping lowerdir path [ 30.544411][ T4905] overlayfs: overlapping lowerdir path [ 30.545286][ T4905] overlayfs: overlapping lowerdir path [ 30.552002][ T4905] overlayfs: overlapping lowerdir path [ 30.555701][ T4905] overlayfs: overlapping lowerdir path [ 30.565303][ T3648] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.565331][ T3648] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.570588][ T4905] overlayfs: overlapping lowerdir path [ 30.572139][ T4905] overlayfs: overlapping lowerdir path [ 30.578776][ T4905] overlayfs: overlapping lowerdir path [ 30.580853][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.581902][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.591836][ T4905] overlayfs: overlapping lowerdir path [ 30.598912][ T4914] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 30.601742][ T4905] overlayfs: overlapping lowerdir path [ 30.608585][ T4905] overlayfs: overlapping lowerdir path [ 30.609976][ T4905] overlayfs: overlapping lowerdir path [ 30.611530][ T4905] overlayfs: overlapping lowerdir path [ 30.612954][ T4905] overlayfs: overlapping lowerdir path [ 30.615130][ T4905] overlayfs: overlapping lowerdir path [ 30.616199][ T3821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616254][ T3821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616275][ T3821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.616292][ T3821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.617348][ T4905] overlayfs: overlapping lowerdir path [ 30.618900][ T4905] overlayfs: overlapping lowerdir path [ 30.620404][ T4905] overlayfs: overlapping lowerdir path [ 30.622004][ T4905] overlayfs: overlapping lowerdir path [ 30.623847][ T4905] overlayfs: overlapping lowerdir path [ 30.625079][ T4905] overlayfs: overlapping lowerdir path [ 30.625801][ T4905] overlayfs: overlapping lowerdir path [ 30.628469][ T247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.628480][ T247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.630067][ T4917] loop0: detected capacity change from 0 to 8 [ 30.632960][ T4905] overlayfs: overlapping lowerdir path [ 30.639187][ T4917] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 30.639210][ T4917] unable to read xattr id index table [ 30.640379][ T4905] overlayfs: overlapping lowerdir path [ 30.643235][ T4917] unable to read id index table [ 30.650114][ T4834] IPVS: starting estimator thread 0... [ 30.651444][ T4905] overlayfs: overlapping lowerdir path [ 30.659210][ T4905] overlayfs: overlapping lowerdir path [ 30.662943][ T4905] overlayfs: overlapping lowerdir path [ 30.670432][ T4905] overlayfs: overlapping lowerdir path [ 30.673014][ T4905] overlayfs: overlapping lowerdir path [ 30.675067][ T4905] overlayfs: overlapping lowerdir path [ 30.683294][ T4905] overlayfs: overlapping lowerdir path [ 30.687972][ T4905] overlayfs: overlapping lowerdir path [ 30.692858][ T4905] overlayfs: overlapping lowerdir path [ 30.694299][ T4905] overlayfs: overlapping lowerdir path [ 30.700402][ T4905] overlayfs: overlapping lowerdir path [ 30.702080][ T4905] overlayfs: overlapping lowerdir path [ 30.712178][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.712208][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.721317][ T4905] overlayfs: overlapping lowerdir path [ 30.727202][ T50] Bluetooth: hci1: command tx timeout [ 30.731061][ T4905] overlayfs: overlapping lowerdir path [ 30.732684][ T4905] overlayfs: overlapping lowerdir path [ 30.737377][ T4919] IPVS: using max 60 ests per chain, 144000 per kthread [ 30.741189][ T4924] loop0: detected capacity change from 0 to 2048 [ 30.742044][ T4905] overlayfs: overlapping lowerdir path [ 30.743160][ T3648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.743170][ T3648] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.748941][ T4905] overlayfs: overlapping lowerdir path [ 30.756325][ T4905] overlayfs: overlapping lowerdir path [ 30.757973][ T4905] overlayfs: overlapping lowerdir path [ 30.761016][ T4905] overlayfs: overlapping lowerdir path [ 30.762432][ T4905] overlayfs: overlapping lowerdir path [ 30.763803][ T4905] overlayfs: overlapping lowerdir path [ 30.765361][ T4905] overlayfs: overlapping lowerdir path [ 30.771223][ T4905] overlayfs: overlapping lowerdir path [ 30.773160][ T4905] overlayfs: overlapping lowerdir path [ 30.774814][ T4905] overlayfs: overlapping lowerdir path [ 30.782137][ T4905] overlayfs: overlapping lowerdir path [ 30.783521][ T4924] loop0: p1 p3 [ 30.783521][ T4924] p1: [ 30.783969][ T4924] loop0: p1 size 16777216 extends beyond EOD, truncated [ 30.791335][ T4924] loop0: p3 start 3036741376 is beyond EOD, truncated [ 30.806415][ T50] Bluetooth: hci3: command tx timeout [ 30.806563][ T4715] Bluetooth: hci0: command tx timeout [ 30.816194][ T4715] Bluetooth: hci2: command tx timeout [ 30.816219][ T50] Bluetooth: hci4: command tx timeout [ 30.818629][ T4927] capability: warning: `syz.2.3' uses deprecated v2 capabilities in a way that may be insecure [ 30.878477][ T4722] udevd[4722]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 30.882774][ T4938] loop0: detected capacity change from 0 to 8 [ 30.898553][ T4938] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 30.898586][ T4938] unable to read xattr id index table [ 30.899277][ T4938] SQUASHFS error: zlib decompression failed, data probably corrupt [ 30.899292][ T4938] SQUASHFS error: Failed to read block 0x9b: -5 [ 30.899299][ T4938] SQUASHFS error: Unable to read metadata cache entry [99] [ 30.899306][ T4938] SQUASHFS error: Unable to read inode 0x127 [ 30.907551][ T4938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 30.950379][ T4929] Injecting memory failure for pfn 0x11f403 at process virtual address 0x20003000 [ 30.953526][ T4929] Memory failure: 0x11f403: recovery action for dirty LRU page: Recovered [ 30.958846][ T4929] fuse: Unknown parameter 'allv¶íther' [ 30.963960][ T4945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18'. [ 31.039416][ T4952] binder: 4950:4952 got reply transaction with no transaction stack [ 31.039490][ T4952] binder: 4950:4952 transaction reply to 0:0 failed 2/29201/-71, code 0 size 88-24 line 3155 [ 31.040497][ T4952] binder: BINDER_SET_CONTEXT_MGR already set [ 31.040504][ T4952] binder: 4950:4952 ioctl 4018620d 20000040 returned -16 [ 31.041082][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 31.123234][ T4965] capability: warning: `syz.0.26' uses 32-bit capabilities (legacy support in use) [ 31.148928][ T4961] loop2: detected capacity change from 0 to 2048 [ 31.155438][ T4970] tipc: Started in network mode [ 31.155956][ T4970] tipc: Node identity 7f000001, cluster identity 4711 [ 31.163132][ T4970] tipc: New replicast peer: 127.0.0.1 [ 31.163361][ T4970] tipc: Enabled bearer , priority 10 [ 31.179999][ T4974] loop1: detected capacity change from 0 to 512 [ 31.180338][ T4974] ext4: Unknown parameter 'fowner>00000000000000000000' [ 31.316679][ T4977] loop4: detected capacity change from 0 to 128 [ 31.331258][ T4977] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.290789][ T50] Bluetooth: hci1: command tx timeout [ 33.290836][ T50] Bluetooth: hci4: command tx timeout [ 33.290868][ T50] Bluetooth: hci2: command tx timeout [ 33.290890][ T50] Bluetooth: hci3: command tx timeout [ 33.290910][ T50] Bluetooth: hci0: command tx timeout [ 33.325204][ T10] tipc: Node number set to 2130706433 [ 34.341964][ T4967] psci: CPU1 killed (polled 0 ms) [ 34.724584][ T5000] loop3: detected capacity change from 0 to 4096 [ 34.772271][ T4981] infiniband syz2: set down [ 34.772308][ T4981] infiniband syz2: added ipvlan0 [ 34.773421][ T4981] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 34.774297][ T4981] infiniband syz2: Couldn't open port 1 [ 34.783755][ T4981] RDS/IB: syz2: added [ 34.783865][ T4981] smc: adding ib device syz2 with port count 1 [ 34.783895][ T4981] smc: ib device syz2 port 1 has no pnetid [ 35.033441][ T5000] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.033486][ T5000] EXT4-fs: Ignoring removed nobh option [ 35.169475][ T5000] EXT4-fs (loop3): Test dummy encryption mode enabled [ 36.022075][ T4715] Bluetooth: hci0: command tx timeout [ 36.023474][ T4715] Bluetooth: hci3: command tx timeout [ 36.024718][ T4715] Bluetooth: hci2: command tx timeout [ 36.025850][ T4715] Bluetooth: hci4: command tx timeout [ 36.027069][ T4715] Bluetooth: hci1: command tx timeout [ 36.055324][ T5000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.105682][ T4723] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.174133][ T5016] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 37.199079][ T5023] xt_hashlimit: size too large, truncated to 1048576 [ 37.241820][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.320275][ T5035] Zero length message leads to an empty skb [ 37.440799][ T5043] loop0: detected capacity change from 0 to 1024 [ 37.441105][ T5043] EXT4-fs: inline encryption not supported [ 38.044091][ T5070] binder: 5061:5070 tried to acquire reference to desc 0, got 1 instead [ 38.049736][ T5070] binder: 5061:5070 got transaction with invalid offset (0, min 0 max 88) or object. [ 38.049800][ T5070] binder: 5061:5070 transaction async to 5061:0 failed 7/29201/-22, code 0 size 88-24 line 3524 [ 38.083970][ T4804] binder: undelivered TRANSACTION_ERROR: 29201 [ 38.087886][ T4724] Bluetooth: hci2: command tx timeout [ 38.087980][ T4724] Bluetooth: hci3: command tx timeout [ 38.090009][ T4715] Bluetooth: hci4: command tx timeout [ 38.091023][ T50] Bluetooth: hci1: command tx timeout [ 38.173673][ T5080] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 38.383720][ T5097] loop0: detected capacity change from 0 to 512 [ 38.410765][ T5097] EXT4-fs: Ignoring removed nobh option [ 38.410803][ T5097] EXT4-fs: quotafile must be on filesystem root [ 38.619229][ T5112] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 38.675271][ T5110] loop1: detected capacity change from 0 to 512 [ 38.699363][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.727901][ T5119] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 38.822072][ T5119] vlan2: entered allmulticast mode [ 38.825619][ T5132] macvlan1: entered promiscuous mode [ 38.830673][ T5130] loop3: detected capacity change from 0 to 512 [ 38.833302][ T5130] ======================================================= [ 38.833302][ T5130] WARNING: The mand mount option has been deprecated and [ 38.833302][ T5130] and is ignored by this kernel. Remove the mand [ 38.833302][ T5130] option from the mount to silence this warning. [ 38.833302][ T5130] ======================================================= [ 38.860892][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.874115][ T5132] macvlan1: left promiscuous mode [ 39.000900][ T5130] netlink: 148 bytes leftover after parsing attributes in process `syz.3.66'. [ 39.001866][ T5130] loop3: detected capacity change from 0 to 128 [ 39.011126][ T5130] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.039714][ T5139] tap0: tun_chr_ioctl cmd 1074025673 [ 39.040922][ T5139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 39.087736][ T5139] bond1: option updelay: invalid value (18446744073234546690) [ 39.087771][ T5139] bond1: option updelay: allowed values 0 - 2147483647 [ 39.098122][ T5139] bond1 (unregistering): Released all slaves [ 39.135941][ T5130] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.193467][ T5148] loop1: detected capacity change from 0 to 256 [ 39.255822][ T5146] loop0: detected capacity change from 0 to 8192 [ 39.447661][ T5161] 9pnet_fd: Insufficient options for proto=fd [ 39.541264][ T5168] loop1: detected capacity change from 0 to 1024 [ 39.543887][ T5168] EXT4-fs: Ignoring removed bh option [ 39.559494][ T5168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 39.573590][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 39.578482][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 40.065291][ T5174] loop2: detected capacity change from 0 to 8192 [ 40.572439][ T5164] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 40.604166][ T5162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.77'. [ 40.604196][ T5162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 40.617171][ T247] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.617401][ T247] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 40.617456][ T247] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.570894][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 41.676894][ T5174] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.609320][ T5178] loop0: detected capacity change from 0 to 512 [ 43.279663][ T5178] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.81: iget: bad i_size value: 38620345925642 [ 43.279746][ T5178] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.283030][ T5178] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.81: couldn't read orphan inode 15 (err -117) [ 43.286987][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 43.287001][ C0] EXT4-fs (loop0): initial error at time 43: ext4_orphan_get:1399: inode 15 [ 43.287018][ C0] EXT4-fs (loop0): last error at time 43: ext4_orphan_get:1399: inode 15 [ 43.291214][ T5178] loop0: lost filesystem error report for type 5 error -117 [ 43.304998][ T5178] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.318675][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 43.436609][ T5182] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 43.449488][ T5178] EXT4-fs error (device loop0): __ext4_iget:5533: inode #16: block 50331678: comm syz.0.81: invalid block [ 43.577452][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.861188][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.927681][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.023883][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.059264][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.141699][ T12] bridge_slave_1: left allmulticast mode [ 44.142968][ T12] bridge_slave_1: left promiscuous mode [ 44.144689][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.156974][ T12] bridge_slave_0: left allmulticast mode [ 44.158055][ T12] bridge_slave_0: left promiscuous mode [ 44.159394][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.358472][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.364938][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.376514][ T12] bond0 (unregistering): Released all slaves [ 44.416059][ T12] tipc: Disabling bearer [ 44.419410][ T12] tipc: Left network mode [ 44.508501][ T4403] 8021q: adding VLAN 0 to HW filter on device eth0 [ 44.722045][ T12] hsr_slave_0: left promiscuous mode [ 44.724302][ T12] hsr_slave_1: left promiscuous mode [ 44.736808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.736846][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.758994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.760467][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.773050][ T12] veth1_macvtap: left promiscuous mode [ 44.773104][ T12] veth0_macvtap: left promiscuous mode [ 44.773164][ T12] veth1_vlan: left promiscuous mode [ 44.773209][ T12] veth0_vlan: left promiscuous mode [ 44.997005][ T12] team0 (unregistering): Port device team_slave_1 removed [ 45.011435][ T12] team0 (unregistering): Port device team_slave_0 removed [ 45.109158][ T4403] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.215292][ T12] IPVS: stop unused estimator thread 0... [ 45.405403][ T4403] 8021q: adding VLAN 0 to HW filter on device eth3 [ 45.649650][ T4403] 8021q: adding VLAN 0 to HW filter on device eth2 [ 64.488337][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.489527][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.500900][ T1043] cfg80211: failed to load regulatory.db [ 74.510870][ T5334] loop1: detected capacity change from 0 to 1024 [ 74.590425][ T5334] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 74.605043][ T5334] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 2: comm syz.1.86: lblock 2 mapped to illegal pblock 2 (length 1) [ 74.609783][ T5334] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 74.613693][ T5334] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 74.617250][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 74.617264][ C0] EXT4-fs (loop1): initial error at time 74: ext4_map_blocks:791: inode 3: block 2 [ 74.617282][ C0] EXT4-fs (loop1): last error at time 74: ext4_map_blocks:791: inode 3: block 2 [ 74.622318][ T5334] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 48: comm syz.1.86: lblock 0 mapped to illegal pblock 48 (length 1) [ 74.625063][ T5334] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 75.591077][ T5334] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 75.591120][ T5334] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.86: Failed to acquire dquot type 0 [ 75.591149][ T5334] loop1: lost filesystem error report for type 5 error -117 [ 75.599722][ T5334] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 75.599754][ T5334] loop1: lost filesystem error report for type 5 error -117 [ 75.604013][ T5334] EXT4-fs error (device loop1): ext4_evict_inode:267: inode #11: comm syz.1.86: mark_inode_dirty error [ 75.604055][ T5334] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 75.607666][ T5334] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 75.607761][ T5334] EXT4-fs (loop1): 1 orphan inode deleted [ 75.608218][ T5334] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.626531][ T5339] loop3: detected capacity change from 0 to 1024 [ 75.626931][ T5339] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.627210][ T247] EXT4-fs error (device loop1): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 76.277400][ T5343] loop2: detected capacity change from 0 to 256 [ 76.596459][ T247] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 76.596501][ T247] EXT4-fs error (device loop1): ext4_release_dquot:7077: comm kworker/u8:4: Failed to release dquot type 0 [ 76.621627][ T5339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.604316][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.608957][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.610792][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.613070][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.614860][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.837869][ T5355] loop4: detected capacity change from 0 to 256 [ 77.864555][ T5334] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz.1.86: Invalid inode table block 1 in block_group 0 [ 77.869278][ T5334] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 77.942121][ T5360] TCP: TCP_TX_DELAY enabled [ 77.945066][ T5360] loop2: detected capacity change from 0 to 128 [ 77.969612][ T5360] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.005518][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.009476][ T4712] EXT4-fs error (device loop1): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 78.009507][ T4712] loop1: lost filesystem error report for type 5 error -117 [ 78.012922][ T4712] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 78.012950][ T4712] loop1: lost filesystem error report for type 5 error -117 [ 78.016542][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.016800][ T4712] EXT4-fs error (device loop1): ext4_quota_off:7325: inode #3: comm syz-executor: mark_inode_dirty error [ 78.016825][ T4712] loop1: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.142489][ T5378] loop1: detected capacity change from 0 to 512 [ 78.172322][ T5378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.245851][ T4712] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.319358][ T5396] loop1: detected capacity change from 0 to 128 [ 78.398030][ T5403] loop3: detected capacity change from 0 to 256 [ 78.413417][ T5403] sctp: [Deprecated]: syz.3.99 (pid 5403) Use of int in maxseg socket option. [ 78.413417][ T5403] Use struct sctp_assoc_value instead [ 78.441101][ T5403] netlink: 44 bytes leftover after parsing attributes in process `syz.3.99'. [ 78.534404][ T5406] loop4: detected capacity change from 0 to 1024 [ 78.544523][ T5406] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 78.546728][ T5406] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 78.549071][ T5406] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 78.554167][ T5406] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #3: comm syz.4.101: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 78.554293][ T5406] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.558194][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.558208][ C0] EXT4-fs (loop4): initial error at time 78: ext4_ext_check_inode:521: inode 3 [ 78.558223][ C0] EXT4-fs (loop4): last error at time 78: ext4_ext_check_inode:521: inode 3 [ 78.561677][ T5406] EXT4-fs (loop4): no journal found [ 78.561688][ T5406] EXT4-fs (loop4): can't get journal size [ 78.585338][ T5406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.667151][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.828362][ T5415] vhci_hcd vhci_hcd.2: default hub control req: 800b v0000 i0000 l31125 [ 78.860716][ T5415] loop4: detected capacity change from 0 to 1024 [ 78.870404][ T5415] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 78.878764][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.884595][ T5415] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.102: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.884642][ T5415] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 78.887392][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 78.887405][ C0] EXT4-fs (loop4): initial error at time 78: ext4_map_blocks:791: inode 3: block 2 [ 78.887431][ C0] EXT4-fs (loop4): last error at time 78: ext4_map_blocks:791: inode 3: block 2 [ 78.894672][ T5415] EXT4-fs (loop4): Remounting filesystem read-only [ 78.894711][ T5415] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 78.894754][ T5415] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 78.894814][ T5415] EXT4-fs (loop4): 1 orphan inode deleted [ 78.895291][ T5415] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.910158][ T5415] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.983111][ T5421] netlink: 'syz.2.103': attribute type 1 has an invalid length. [ 79.095716][ T5430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.098475][ T5430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.110340][ T5429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 79.120183][ T5430] netlink: 'syz.3.107': attribute type 2 has an invalid length. [ 79.189111][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.193485][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.194931][ T5346] bridge_slave_0: entered allmulticast mode [ 79.198096][ T5346] bridge_slave_0: entered promiscuous mode [ 79.198881][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.198908][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.198974][ T5346] bridge_slave_1: entered allmulticast mode [ 79.199391][ T5346] bridge_slave_1: entered promiscuous mode [ 79.205918][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.231360][ T5438] vfat: Unknown parameter 'short' [ 79.253873][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.271722][ T5346] team0: Port device team_slave_0 added [ 79.291612][ T5346] team0: Port device team_slave_1 added [ 79.324138][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.327038][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.332626][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.339604][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.341366][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.346517][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.619742][ T5444] fuse: Unknown parameter '0x00000000000000090x0000000000000003' [ 79.638956][ T5346] hsr_slave_0: entered promiscuous mode [ 79.641769][ T5346] hsr_slave_1: entered promiscuous mode [ 79.686954][ T50] Bluetooth: hci0: command tx timeout [ 80.130916][ T5346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.143933][ T5346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.149346][ T5346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.189678][ T5346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.206921][ T5346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.215134][ T5346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.223077][ T5346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.229351][ T5346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.248229][ T5458] set_capacity_and_notify: 1 callbacks suppressed [ 80.248268][ T5458] loop2: detected capacity change from 0 to 256 [ 80.376356][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.408460][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.427885][ T247] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.427933][ T247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.444377][ T247] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.444426][ T247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.912908][ T5503] loop2: detected capacity change from 0 to 256 [ 80.999163][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.057580][ T5346] veth0_vlan: entered promiscuous mode [ 81.069820][ T5346] veth1_vlan: entered promiscuous mode [ 81.091959][ T5346] veth0_macvtap: entered promiscuous mode [ 81.098852][ T5346] veth1_macvtap: entered promiscuous mode [ 81.120219][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.133397][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.146654][ T3821] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.146756][ T3821] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.146844][ T3821] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.146989][ T3821] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.252045][ T3821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.252116][ T3821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.258696][ T5520] loop4: detected capacity change from 0 to 256 [ 81.299115][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.299162][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.578699][ T5543] loop1: detected capacity change from 0 to 256 [ 81.767095][ T50] Bluetooth: hci0: command tx timeout [ 82.133921][ T5581] binder: 5579:5581 cannot find target node [ 82.133959][ T5581] binder: 5579:5581 transaction call to 0:0 failed 8/29189/-22, code 0 size 0-0 line 3252 [ 82.145249][ T5581] loop1: detected capacity change from 0 to 128 [ 82.233069][ T5589] loop3: detected capacity change from 0 to 512 [ 82.240150][ T5581] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.266962][ T5589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.418927][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.423097][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.427794][ T5602] loop2: detected capacity change from 0 to 256 [ 82.853918][ T5621] loop2: detected capacity change from 0 to 512 [ 82.894079][ T5621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 82.953507][ T4718] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.229763][ T5660] loop1: detected capacity change from 0 to 128 [ 83.264652][ T5660] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 83.424738][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.438125][ T5675] loop3: detected capacity change from 0 to 512 [ 83.470587][ T5675] EXT4-fs: Ignoring removed oldalloc option [ 83.473431][ T5675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.473471][ T5675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 83.508827][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.510897][ T5675] EXT4-fs (loop3): 1 orphan inode deleted [ 83.510933][ T5675] EXT4-fs (loop3): 1 truncate cleaned up [ 83.511375][ T5675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.521959][ T5673] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.149: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 83.532987][ T5673] EXT4-fs (loop3): Remounting filesystem read-only [ 83.618446][ T4721] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.851740][ T50] Bluetooth: hci0: command tx timeout [ 83.931747][ T5668] vlan2: entered promiscuous mode [ 83.931782][ T5668] bridge0: entered promiscuous mode [ 84.106613][ T5695] autofs: Unknown parameter '”±ć' [ 84.261197][ T5666] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.369178][ T3648] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.532192][ T3648] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.588942][ T5725] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.663249][ T5729] netlink: 'syz.0.161': attribute type 11 has an invalid length. [ 84.665111][ T5729] netlink: 244 bytes leftover after parsing attributes in process `syz.0.161'. [ 84.692169][ T3648] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.717296][ T4715] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.722987][ T4715] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.725651][ T4715] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.728339][ T4715] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.731281][ T4715] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.854679][ T3648] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.873846][ T5739] warning: `syz.0.162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.170136][ T3648] bridge_slave_1: left allmulticast mode [ 85.170259][ T3648] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.189617][ T3648] bridge_slave_0: left allmulticast mode [ 85.189652][ T3648] bridge_slave_0: left promiscuous mode [ 85.189738][ T3648] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.491352][ T4718] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.930576][ T4715] Bluetooth: hci0: command tx timeout [ 86.023738][ T3648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.072310][ T3648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.080705][ T3648] bond0 (unregistering): Released all slaves [ 86.089595][ T5801] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 86.097380][ T5804] set_capacity_and_notify: 4 callbacks suppressed [ 86.098756][ T5804] loop3: detected capacity change from 0 to 512 [ 86.100673][ T5804] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.155314][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.155433][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.155693][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.155769][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.155923][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.155997][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156236][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156316][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156468][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156540][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156712][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156791][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.156940][ T5798] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 86.157031][ T5798] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 86.425657][ T5820] loop3: detected capacity change from 0 to 256 [ 86.569927][ T5831] loop0: detected capacity change from 0 to 128 [ 86.638643][ T5831] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.808217][ T4715] Bluetooth: hci1: command tx timeout [ 86.868312][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.872317][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.873983][ T5731] bridge_slave_0: entered allmulticast mode [ 86.875657][ T5731] bridge_slave_0: entered promiscuous mode [ 86.883552][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.884944][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.888749][ T5731] bridge_slave_1: entered allmulticast mode [ 86.896240][ T5731] bridge_slave_1: entered promiscuous mode [ 86.925045][ T5346] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.945986][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.955761][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.989946][ T5731] team0: Port device team_slave_0 added [ 87.010837][ T5731] team0: Port device team_slave_1 added [ 87.082040][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.083418][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.088130][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.090891][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.092377][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.098738][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.106465][ T5853] netlink: 'syz.3.181': attribute type 22 has an invalid length. [ 87.154186][ T5853] netlink: 'syz.3.181': attribute type 22 has an invalid length. [ 87.154222][ T5853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.181'. [ 87.274435][ T5867] netlink: 312 bytes leftover after parsing attributes in process `syz.3.183'. [ 87.379300][ T5731] hsr_slave_0: entered promiscuous mode [ 87.384195][ T5731] hsr_slave_1: entered promiscuous mode [ 87.385869][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 87.390539][ T5731] Cannot create hsr debugfs directory [ 87.475062][ T5878] loop0: detected capacity change from 0 to 8 [ 87.751833][ T5896] binder: 5890:5896 BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 87.751866][ T5896] binder: 5890:5896 ioctl c0306201 200001c0 returned -22 [ 87.882233][ T5898] loop2: detected capacity change from 0 to 256 [ 88.064894][ T5908] loop0: detected capacity change from 0 to 128 [ 88.088929][ T5908] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.306939][ T5346] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.402304][ T5731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 88.415876][ T5826] loop4: detected capacity change from 0 to 512 [ 88.417971][ T5826] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.470036][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.470408][ T5731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 88.527405][ T5941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 88.529376][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 88.574642][ T5826] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #17: comm syz.4.178: corrupted in-inode xattr: e_name out of bounds [ 88.574687][ T5826] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 88.576085][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 88.576103][ C0] EXT4-fs (loop4): initial error at time 88: ext4_iget_extra_inode:5180: inode 17 [ 88.576137][ C0] EXT4-fs (loop4): last error at time 88: ext4_iget_extra_inode:5180: inode 17 [ 88.589414][ T5826] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.178: couldn't read orphan inode 17 (err -117) [ 88.591926][ T5826] loop4: lost filesystem error report for type 5 error -117 [ 88.594732][ T5826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.623259][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.623644][ T5731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 88.687905][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.711751][ T4718] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 88.714188][ T4718] FAT-fs (loop2): Filesystem has been set read-only [ 88.716955][ T4718] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 88.791631][ T3648] hsr_slave_0: left promiscuous mode [ 88.805102][ T3648] hsr_slave_1: left promiscuous mode [ 88.805410][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.805436][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.818330][ T3648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.818364][ T3648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.879776][ T3648] veth1_macvtap: left promiscuous mode [ 88.879826][ T3648] veth0_macvtap: left promiscuous mode [ 88.879889][ T3648] veth1_vlan: left promiscuous mode [ 88.879929][ T3648] veth0_vlan: left promiscuous mode [ 88.886514][ T4715] Bluetooth: hci1: command tx timeout [ 89.084937][ T12] smc: removing ib device syz2 [ 89.150711][ T4723] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.365422][ T3648] team0 (unregistering): Port device team_slave_1 removed [ 89.407356][ T3648] team0 (unregistering): Port device team_slave_0 removed [ 89.562237][ T5731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.571752][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.624519][ T4796] ================================================================== [ 89.624539][ T4796] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x20c/0x254 [ 89.624560][ T4796] Read of size 1 at addr ffff0000f0f6ee11 by task kworker/0:4/4796 [ 89.624569][ T4796] [ 89.624574][ T4796] CPU: 0 UID: 0 PID: 4796 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT [ 89.624584][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.624589][ T4796] Workqueue: events smc_ib_port_event_work [ 89.624601][ T4796] Call trace: [ 89.624604][ T4796] show_stack+0x2c/0x3c (C) [ 89.624616][ T4796] __dump_stack+0x30/0x40 [ 89.624632][ T4796] dump_stack_lvl+0xd8/0x12c [ 89.624642][ T4796] print_address_description+0xb0/0x238 [ 89.624651][ T4796] print_report+0x68/0x84 [ 89.624658][ T4796] kasan_report+0x8c/0xc4 [ 89.624667][ T4796] __asan_report_load1_noabort+0x20/0x2c [ 89.624677][ T4796] __ethtool_get_link_ksettings+0x20c/0x254 [ 89.624685][ T4796] ipvlan_ethtool_get_link_ksettings+0x48/0x58 [ 89.624695][ T4796] netif_get_link_ksettings+0x220/0x2bc [ 89.624703][ T4796] __ethtool_get_link_ksettings+0x114/0x254 [ 89.624711][ T4796] ib_get_eth_speed+0x154/0x6b0 [ 89.624720][ T4796] rxe_query_port+0x98/0x37c [ 89.624728][ T4796] ib_query_port+0x16c/0x76c [ 89.624735][ T4796] smc_ib_port_event_work+0xf4/0x8a4 [ 89.624742][ T4796] process_scheduled_works+0x788/0x10b8 [ 89.624752][ T4796] worker_thread+0x798/0xbd0 [ 89.624760][ T4796] kthread+0x304/0x3d4 [ 89.624768][ T4796] ret_from_fork+0x10/0x20 [ 89.624775][ T4796] [ 89.624777][ T4796] Allocated by task 4712: [ 89.624781][ T4796] kasan_save_track+0x40/0x78 [ 89.624788][ T4796] kasan_save_alloc_info+0x40/0x50 [ 89.624796][ T4796] __kasan_kmalloc+0x9c/0xb4 [ 89.624803][ T4796] __kvmalloc_node_noprof+0x460/0x7d8 [ 89.624811][ T4796] alloc_netdev_mqs+0xac/0xf2c [ 89.624817][ T4796] rtnl_create_link+0x2b0/0xb78 [ 89.624823][ T4796] rtnl_newlink_create+0x210/0x764 [ 89.624830][ T4796] rtnl_newlink+0xdc4/0x1144 [ 89.624836][ T4796] rtnetlink_rcv_msg+0x66c/0x9bc [ 89.624842][ T4796] netlink_rcv_skb+0x238/0x414 [ 89.624850][ T4796] rtnetlink_rcv+0x28/0x38 [ 89.624856][ T4796] netlink_unicast+0x600/0x7f8 [ 89.624862][ T4796] netlink_sendmsg+0x648/0x948 [ 89.624870][ T4796] __sock_sendmsg+0xc8/0x17c [ 89.624877][ T4796] __sys_sendto+0x250/0x328 [ 89.624884][ T4796] __arm64_sys_sendto+0xec/0x10c [ 89.624891][ T4796] invoke_syscall+0x98/0x244 [ 89.624900][ T4796] el0_svc_common+0xec/0x23c [ 89.624907][ T4796] do_el0_svc+0x4c/0x5c [ 89.624915][ T4796] el0_svc+0x64/0x260 [ 89.624922][ T4796] el0t_64_sync_handler+0x44/0x104 [ 89.624929][ T4796] el0t_64_sync+0x198/0x19c [ 89.624935][ T4796] [ 89.624936][ T4796] Freed by task 3648: [ 89.624940][ T4796] kasan_save_track+0x40/0x78 [ 89.624946][ T4796] kasan_save_free_info+0x54/0x6c [ 89.624954][ T4796] __kasan_slab_free+0x74/0xa4 [ 89.624961][ T4796] kfree+0x188/0x690 [ 89.624966][ T4796] kvfree+0x30/0x40 [ 89.624973][ T4796] netdev_release+0x88/0xb0 [ 89.624978][ T4796] device_release+0xb4/0x1d4 [ 89.624986][ T4796] kobject_put+0x1dc/0x4b8 [ 89.624994][ T4796] netdev_run_todo+0xc64/0xdf8 [ 89.624999][ T4796] rtnl_unlock+0x14/0x20 [ 89.625004][ T4796] default_device_exit_batch+0x588/0x604 [ 89.625010][ T4796] ops_undo_list+0x434/0x81c [ 89.625017][ T4796] cleanup_net+0x474/0x6c4 [ 89.625025][ T4796] process_scheduled_works+0x788/0x10b8 [ 89.625031][ T4796] worker_thread+0x798/0xbd0 [ 89.625038][ T4796] kthread+0x304/0x3d4 [ 89.625044][ T4796] ret_from_fork+0x10/0x20 [ 89.625049][ T4796] [ 89.625051][ T4796] The buggy address belongs to the object at ffff0000f0f6e000 [ 89.625051][ T4796] which belongs to the cache kmalloc-cg-4k of size 4096 [ 89.625056][ T4796] The buggy address is located 3601 bytes inside of [ 89.625056][ T4796] freed 4096-byte region [ffff0000f0f6e000, ffff0000f0f6f000) [ 89.625063][ T4796] [ 89.625065][ T4796] The buggy address belongs to the physical page: [ 89.625069][ T4796] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x130f68 [ 89.625075][ T4796] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.625081][ T4796] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 89.625089][ T4796] page_type: f5(slab) [ 89.625095][ T4796] raw: 05ffc00000000040 ffff0000c000b500 dead000000000100 dead000000000122 [ 89.625101][ T4796] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 89.625107][ T4796] head: 05ffc00000000040 ffff0000c000b500 dead000000000100 dead000000000122 [ 89.625112][ T4796] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 89.625118][ T4796] head: 05ffc00000000003 fffffdffc3c3da01 00000000ffffffff 00000000ffffffff [ 89.625123][ T4796] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 89.625126][ T4796] page dumped because: kasan: bad access detected [ 89.625129][ T4796] [ 89.625130][ T4796] Memory state around the buggy address: [ 89.625134][ T4796] ffff0000f0f6ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.625138][ T4796] ffff0000f0f6ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.625142][ T4796] >ffff0000f0f6ee00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.625145][ T4796] ^ [ 89.625149][ T4796] ffff0000f0f6ee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.625153][ T4796] ffff0000f0f6ef00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.625156][ T4796] ================================================================== [ 89.740921][ T4796] Disabling lock debugging due to kernel taint [ 89.740954][ T4796] Unable to handle kernel paging request at virtual address e0d44071a000021f [ 89.740972][ T4796] KASAN: maybe wild-memory-access in range [0x06a6038d000010f8-0x06a6038d000010ff] [ 89.740987][ T4796] Mem abort info: [ 89.740994][ T4796] ESR = 0x0000000096000004 [ 89.741003][ T4796] EC = 0x25: DABT (current EL), IL = 32 bits [ 89.741014][ T4796] SET = 0, FnV = 0 [ 89.741022][ T4796] EA = 0, S1PTW = 0 [ 89.741030][ T4796] FSC = 0x04: level 0 translation fault [ 89.741037][ T4796] Data abort info: [ 89.741043][ T4796] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 [ 89.741050][ T4796] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 89.741058][ T4796] GCS = 0, Overlay = 0, DirtyBit = 0 [ 89.741065][ T4796] [e0d44071a000021f] address between user and kernel address ranges [ 89.741074][ T4796] Internal error: Oops: 0000000096000004 [#1] SMP [ 89.756252][ T4796] Modules linked in: [ 89.756931][ T4796] CPU: 0 UID: 0 PID: 4796 Comm: kworker/0:4 Tainted: G B syzkaller #0 PREEMPT [ 89.758812][ T4796] Tainted: [B]=BAD_PAGE [ 89.759571][ T4796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 89.761438][ T4796] Workqueue: events smc_ib_port_event_work [ 89.762531][ T4796] pstate: 03400005 (nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 89.764001][ T4796] pc : __ethtool_get_link_ksettings+0xc4/0x254 [ 89.765163][ T4796] lr : __ethtool_get_link_ksettings+0xb8/0x254 [ 89.766268][ T4796] sp : ffff800096807760 [ 89.766948][ T4796] x29: ffff800096807760 x28: 1fffe0001a66e090 x27: 0000000000000000 [ 89.768283][ T4796] x26: 1fffe0001e1edc01 x25: 1fffe0001e1eddc2 x24: ffff0000f0f6e008 [ 89.769693][ T4796] x23: ffff0000f0f6ee11 x22: dfff800000000000 x21: 06a6038d000010f8 [ 89.771124][ T4796] x20: ffff8000968078a0 x19: ffff0000f0f6e000 x18: 1fffe00034bb7428 [ 89.772482][ T4796] x17: 0000000000000003 x16: ffff800088b37000 x15: 0000000000000000 [ 89.773927][ T4796] x14: 0000000000000000 x13: 0000000000000001 x12: 0000000000000000 [ 89.775361][ T4796] x11: 0000000000000000 x10: ffff70001146771d x9 : ffff80008e879940 [ 89.777020][ T4796] x8 : 00d4c071a000021f x7 : 0000000000000000 x6 : ffff80008048c60c [ 89.778503][ T4796] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000020 [ 89.780053][ T4796] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 89.781576][ T4796] Call trace: [ 89.782141][ T4796] __ethtool_get_link_ksettings+0xc4/0x254 (P) [ 89.783249][ T4796] ipvlan_ethtool_get_link_ksettings+0x48/0x58 [ 89.784289][ T4796] netif_get_link_ksettings+0x220/0x2bc [ 89.785190][ T4796] __ethtool_get_link_ksettings+0x114/0x254 [ 89.786179][ T4796] ib_get_eth_speed+0x154/0x6b0 [ 89.787012][ T4796] rxe_query_port+0x98/0x37c [ 89.787762][ T4796] ib_query_port+0x16c/0x76c [ 89.788548][ T4796] smc_ib_port_event_work+0xf4/0x8a4 [ 89.789480][ T4796] process_scheduled_works+0x788/0x10b8 [ 89.790463][ T4796] worker_thread+0x798/0xbd0 [ 89.791278][ T4796] kthread+0x304/0x3d4 [ 89.792003][ T4796] ret_from_fork+0x10/0x20 [ 89.792770][ T4796] Code: 96eea37c f9400308 910ae115 d343fea8 (38766908) [ 89.793936][ T4796] ---[ end trace 0000000000000000 ]--- [ 90.079011][ T4796] Kernel panic - not syncing: Oops: Fatal exception [ 90.080116][ T4796] Kernel Offset: disabled [ 90.080838][ T4796] CPU features: 0x14000000,003c0008,27020a02,a84ff6a7 [ 90.081966][ T4796] Memory Limit: none [ 90.340324][ T4796] Rebooting in 86400 seconds..