last executing test programs: 8.623252697s ago: executing program 0 (id=45): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00020002004788", 0xc, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r2, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0xf, &(0x7f0000000600)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1, 0x10}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000000a40)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 7.031385146s ago: executing program 0 (id=73): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0xf, &(0x7f0000000600)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1, 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000000a40)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 5.796042564s ago: executing program 0 (id=66): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$igmp(0x2, 0x3, 0x2) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) dup(r0) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) socket$inet(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000", @ANYRES8=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 5.671980845s ago: executing program 2 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000380)=0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000580)=""/4096, &(0x7f0000000080)=0x1000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r7, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) socket$netlink(0x10, 0x3, 0x0) 5.607054221s ago: executing program 0 (id=71): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000980)={0x190, 0x78, 0x0, 0x0, 0x2, 0x1000, 0x1, 0x0, {}, {0x0, 0xf39}, {0x81, 0x2}, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000abaff9), 0x10) 4.755262485s ago: executing program 1 (id=75): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000c40)={0x0, 0x4, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_io_uring_setup(0x4002, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x400, 0x1, &(0x7f0000000140)="819336eff3b553218ae42e51893f7c724f", 0xc26c, 0x0, 0x1, {0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x48, @loopback, 0x18}}, 0x6}, 0x90) 4.736928677s ago: executing program 2 (id=76): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1c, &(0x7f0000000300)=0x3, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}], 0x20}, 0x400c804) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.252426699s ago: executing program 4 (id=79): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$eJzs209PE0EYx/Hf7ralIgpi/BMSExMT40WqQEJ6Ul6AF48mHggW0ljUiBcIifImvHv15Esg0ffh0Qs9eDMh6ZrZnabd7trdxW2r5ftJ6A6deWaeLcx0ZykCcG49Dh4dOaoGJd/339+W9OyJpB9LwXO3JpohgFHx7bHj93jdOgBTzuucNfJ5+joxd4llBPhntTfMu31Vx470/efh1on9qsauFEqJ1w/tDTcsONJJX/yFnNchSyUt9MfPSrqYIQf/kxMc76o7vsn8cGsu47jtozB+VtH8tTDQ8NS+YLH48Pzv3VFZffGXJc1LQTdXJC1KuirNmLbX5MqNjF+x3/Xib4ZPHGU8DQAAAAAAhjK7z+W/ipaWUzvwZLe+MWYfvN1sNR7kG7i7fVbZxj/8U4MUFRu/MqzR4KY/IX410+BOr1gODzM2/tR/3XqRMWegKG6++R+7LWh+o49TOginw2JinReb/+Xs2dg7gtvNj7liAIT29g9ebrZajbdFFh4NayPl7dCsCAVnmFz4bAr6Fd7oH/FYaQU3ocostmftsPsHmaJT/aD0Nn6GNtNUKBX7On+VMzhPS5FJ9MX+bHP0/DSpqqLIPI3wxrwwARi52rvdN7W9/YP7zd3NncZO49Xaer2+vra6Uq8Fl+Xm0Z+fdJYARqH37p9QmfdDPAAAAAAAAAAAAAAAYCKuS7oRlL51coTxyQAAAADgPzSOf4qa9DkCAAAAAAAAAAAAADDtfgcAAP//mg0zKQ==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x0) 4.146827698s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) lseek(0xffffffffffffffff, 0xffffffffffffa937, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.pending_reads\x00', 0x1a15c1, 0x9c37611dc13d0d83) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x101042, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4$alg(r6, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000480)=0x8) sendmmsg$alg(r7, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000040}], 0x1, 0x85) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x40010126) 3.491643695s ago: executing program 3 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x9, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20003300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x5010) 3.406603453s ago: executing program 3 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x9, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200000000000c00028005000100000000000800074000000000100005800a"], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20003300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x5010) 3.349978838s ago: executing program 1 (id=84): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00'}) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.244556407s ago: executing program 4 (id=85): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @empty}]}, &(0x7f0000000380)=0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0xfb5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0x140}}, 0x844) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000580)=""/4096, &(0x7f0000000080)=0x1000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2}) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write(r8, &(0x7f0000000540)="953820a61a166fd5dd4b4b", 0xfdef) socket$netlink(0x10, 0x3, 0x0) 3.238720997s ago: executing program 3 (id=95): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x9, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200000000000c00028005000100000000000800074000000000100005800a"], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20003300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x5010) 3.195780551s ago: executing program 2 (id=86): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0xffffff1f, 0x3, 0xfffefffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cc40}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.176985283s ago: executing program 3 (id=87): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r0, &(0x7f0000001180)=""/4096, 0x1000) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) sendmmsg$alg(r0, &(0x7f0000001bc0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$eJzs3VFrHF0ZAOB3Jrvfl7T53FS90IJtsZW0aDdJY9vgRasg3hWUel9jsg0hm2xJNm0Tiqb4AwQRFbzRK28Ef4Ag/QkiFOy9qCiirV4oVEd2d7bGZDdJ6W6WL/s8cLpzZmbnfc+mc3bOzLATwNC6EBGXIyLLsuxKRJTy+WleYqdVGuu9evlkoVGSyLK7f00iyee1t/V+/no6f9toXv9msj/uxtb2yny1WlnP61P11eR1lm1fXV6dX6osVdZmZ2duzN2cuz433ZN2TkTErS//8Qff/dlXbv3qc49+d+/Pl7/VamDL7nb0UqvpxTefRUMhItb7EWxACs0WtlwfcC4AAByscbz/0Yj4dERciVKMNI/mjmC035kBAAAAvZLdHo/XSev6HwAAAHAypRExHklazu/3HY80LZdb9/B+PE6l1dpG/bNZ6c35gokopveXq5Xp/N6BiSgmjfpMfo9tu35tT302Is5ExPdLY816eaFWXRzomQ8AAAAYHqf3jP//UWqN/wEAAIATZmLQCQAAAAB9Z/wPAAAAJ5/xPwAAAJxoX71zp1Gy9vOvFx9uba7UHl5drGyslFc3F0aitv6gvFSrLTV/s2/1sO1Va7UHn4+1zcdT9cpGfWpja/veam1zrX5v2RMDAQAAYFDOnH/2IomInS+MpRGRJbuWFSOykd0rF44/P6B/0rdZ+Q/9ywM4fiODTgAYGIf0MLyKg04AGLjD+oGuN+/8uve5AAAA/TH5yWcvonX9v1ka3suXJYNMDOi7/Pp/Yl+H4eP6Pwwv1/9geBUPOgIwKIATLz3Crv7u1/+z7K2SAgAAem68WZK0nI8DxiNNy+WID5qPBSgm95erlemI+EhE/LZUfL9Rn2m+M3F6AAAAAAAAAAAAAAAAAAAAAAAAAACOKMuSyLoYy58O1m05AAAA8OEQkf4pyZ//NVm6NL73/MB7yT9LzdeIePTjuz98PF+vr8805v/tzfz6j/L5147//AUAAACwX3uc3h7HAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAvvXr5ZKFdjjPuX74UERO74ieRxy/EaPN1NIoRcervSRR2vS+JiJEexN95GhGf6NT+pJFWTORZ7I2fRsTYgOOf7kF8GGbPGv3PFzvtf2lcaL523v8KeXlX+/q/XfHb/d9Il/7vg04bTPfPOvv8F1Nd4z+NOFvo3P+04ydd4l88Yhu/8fXt7W7Lsp9GTHb8/kn+L9ZUUngwtbG1fXV5dX6pslRZm52duTF3c+763PTU/eVqJf+3Y4zvfeqX/zmo/aciRrv1vwe1/9IR2//v549ffqw1WdyzqBg/ybLLFzt//7Y+/7i9N377u+8z+Z+7UZ9sT++0pnc79/PfnDvfJbexpxGLXT7/Q/7+Hf6ndXbla9/5/VHXBQD6b2Nre2W+Wq2sd5xoHVscvI4JE4dNjMUxBp2Pg9ZpH8QeQz7fzkMdY9v/lfVsgwPslAAAgL7430H/oDMBAAAAAAAAAAAAAAAAAACA4XXYz4BFD35ObG/MncE0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgQP8NAAD//1g3xo8=") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$eJzs3M9vFFUcAPDvTH8gP0oXxB8gyioSG9GWFlQOXjSacDEx0YMea6kEWcDQmgghUo3Bo/EvUI8m/gWe9GLUk8ar3o0JMVxED2bN7M7Att2tbbfbBefzSab73vx6782b13kzb2cDKK1q9ieJ2BERv0TEaDO6eIVq8+PG9cszf12/PJNEvf7KH0ljvT+vX54pVt2Rf27P9zmWRqQfJrHQJt25i5fOTNdqsxfy+MT82bcn5i5eevL02elTs6dmz00dP37s6OQzT089tSHlHMnyuu+98/v3nnj9k5dmYuGN77/M8j+QL28tR1Ol6zSrUY16vV5PF80dbvw91PXeby8jLeFksI8ZYU2y8z+rrqFG+x+NgbhVeaPx4gd9zRzQU9n1adeyuc2rYnooaSwH/q+0cSir4oqf3f8W0+b2QPrr2nPNG6Cs3DfyqblkMLL79qTSvGMf6FH6OyLitYW/P82maPscAgBgY32d9X+eaNf/S+PelvV25mNDlYg4HBG7I+LuiNgTEfdENNa9LyLuX2P61SXx5f2fn7auq2CrlPX/ns3Hthb3/26O2lQG8thIo/xDyZuna7NH8mMyFkNbsvjkCml888LPH3daVm3p/2VTln7RF8zz8fvglsXbnJyen+6mzK2uvR+xb7Bd+ZObIwFJROyNiH3r2H92zE4//sX+LLxz+/Ll/13+FWzAOFP984jHmvW/EEvKX0iaKXUan5y4K2qzRyaKs2K5H368+nJrfKgl3FX5N0BW/9vanv95+YtmUIzXzq09jau/ftTxnma95/9w8mojPJzPe3d6fv7CZMRwPmPR/Klb2xbxYv2s/GMH27f/3RH/fJZv90BEZCfxgxHxUEQcyPP+cEQ8EhEHVyj/d88/+tbKR6i/9X+yQ/3nZ0AlaR2vX0dg4My3X3VKf3X1f6wRGsvnrOb/32oz2N3RAwAAgDtD2hiDTtLxm+E0HR9vfod/T2xLa+fn5g9X451zJ5tj1ZUYSosnXaMtz0Mn82fDRXxqSfxoROxqfNNoayM+PnO+NtLvwkPJbe/Q/jO/9epLL8DtY03jaEnv8gFsPu9rQnlp/1Be2j+Ul/YP5dWu/V+JuNGHrACbzPUfykv7h/LS/qG8tH8opeWvxBc/t7KeN/1vBXaf6GrzEgUGutt8IiLaLorWH+3oQSDSPh66+pV6vZv9pP2v9wtzB/LAlohY7VZXelqnS8+fFXk7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuCP8GwAA///IPOO2") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)='z', 0x1}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) 2.662411188s ago: executing program 2 (id=88): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf9, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff967, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000540)="64b61d9b104c99176403699c7d94", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x129302, 0x0) readv(r5, &(0x7f0000001400)=[{&(0x7f0000002440)=""/4085, 0xff5}], 0x1) 2.661064808s ago: executing program 1 (id=99): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x0, 0x0, 0x25}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000306a00010425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="1800040000000000280012800b00010067656e65766500001800028014000700fc0200"/48], 0x48}}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0xce5, 0x80000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="ea58fcd4cabc8517faf996416901abe627c175222f69d8f33668f9f1d866da478868dda118504cb461dc43f6deb8ebffec8b14c04162b01a486389751e572b55ffb7d5687c8fd01b603c6c00b720e32e7644dee3f6aeb95f4024d7794f28933ca1cbd809ac6742297dd827926a2e8c0bd91286bfc672b1a7f59532417577c4c8b985da18c2b652899be1206147df74e844f905da14ef0927640bd8cc5bcd8ee30c3270ff5a48004f927b42a4253612a4bcb6cb6b3d9bc9f91e7c9381a9f173d26a6d72417b099d9cf028933d1c402d87530b97050007a8ee666a821b5668735a4c5eb07d1054d2b3ea", 0xe9}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@volatile}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x2, &(0x7f0000000240)=[{0x4d, 0x0, 0x9, 0x10}, {0x800, 0x3, 0x7, 0xe}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000080)={[{@nobh}]}, 0x1, 0x498, &(0x7f0000000300)="$eJzs3MtvVNUfAPDvnT6gPPvjhw8QtIoP4qOl5SELNxoXLjQx0QXqqraFVAo1tCZCiFQXmLgxJO6NO038C1xpTIy6MnGre0NCDBvA1TV37r1lOp0ZKAyd2vl8kgvnzD13zvnOuadz7j0zE0DXGsr+SSK2RMQfEbE9zy4tMJT/d/3q+YkbV89PJJGmb/ydVMtdu3p+oixaHrc5z6Rpkd/QoN6L70SMz8xMnSnyI/On3h+ZO3vuuelT4yemTkydHjt69NDBvf1Hxg63Jc4srmu7P5rds+uVty69NnHs0ru/fJu1d0uxvzaOUv9d1jmUv7oNPXGXz73WbK1JJ70dbAgr0hMRWXf1Vcf/9uiJgezhJ7fluz9pPHqB9SBN07TFCF9IgXUsiU63AOiM8o0+u/6tbmmySjOPteHKi/kFUBb79WLL9/RGpSjTV3d9205DEXFs4Z8vsy2a3IcAAGin77P5z7M187/F+Ucl7q8pt61YQxmMiP9FxI6I+H9E7IyI+yKqZR+IiAdXWH/9Csny+U/l8h0Fdpuy+d8LxdrW0vlfOfuLwZ4it7Uaf19yfHpm6kDxmuyPvg1ZfrQs3WDR6IeXf/+8Wf21879sy+ov54JFOy731t2gmxyfH69OStvgyscRu3sbxZ9EuYyTXRHsiojdNw9bWEkd009/s6fZvqG4kaZpq/hbaMM6U/pVxFN5/y9EXfylpOn65OjzR8YOj2yMmakDI+VZsdyvv118vVn9t+r/e301lvX/pobn/2LNg8nGiLmz505W12vnmjxR7cVknYt/ftr0mqZ1/GnT878/ebOaLofbh+Pz82dGI/qTV5c/Pnbz2DJfls/i37+v8fjfETdfiYciIjuJ90bEwxHxSNH2RyPisYjY1yzAiPj5pcffW3n8q7PulsU/mff/25/lDy3v/6jt//oTYaHBrqWJnpM/fdes/hb9fyEvkfX/oWpqf3FM9e/fLbRoTqMgAAAAYF2rVD8Dn1SGF9OVyvBw/hn+nbGpMjM7N//M8dkPTk/mn5UfjL7K8emZqYHF+8H5/dDR4t5wmR+ryx8s7ht/0TNQzQ9PzM5Mdjp46HKbm4z/zF89nW4dcM/5vhZ0L+MfupfxD90qMf6hi1XH/8ZOtwLohEbv/xc60A5g9Zn/Q/cy/qE7/fi18Q/d7E7H/0Cb2wGsqqbfja8s3VWJiNv7Rr3Eekjc+gcUorJGmrq2ErEQ0d5n7m3WF/kITuIuq0ii4a7Wfze661dCAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J/AwAA//9l/N90") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000001c0)='./file1\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) mount$bind(0x0, &(0x7f0000000200)='.\x00', 0x0, 0x21, 0x0) pivot_root(&(0x7f00000000c0)='./file1/file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020}, 0x2020) 2.63257524s ago: executing program 3 (id=89): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b03feff4f00020002004788", 0xc, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r2, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0xf, &(0x7f0000000600)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1, 0x10}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r11, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000000a40)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 2.143975623s ago: executing program 4 (id=90): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x81, 0x235, &(0x7f0000000700)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 2.076039069s ago: executing program 1 (id=91): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000400000004000000041"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0xf, &(0x7f0000000600)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1, 0x10}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r6, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xbe1, &(0x7f0000000a40)=ANY=[], 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) 2.05805756s ago: executing program 4 (id=92): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, 0x0, 0x51b0b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048840}, 0x4000010) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff000000", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000014) sendto$packet(r0, &(0x7f0000000200)="060000000000000093fadda088a8e3cd88a8", 0x12, 0x40015, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0xc9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 1.764530286s ago: executing program 2 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x9, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20003300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x5010) 1.730124599s ago: executing program 2 (id=94): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) syz_io_uring_setup(0x22f, &(0x7f0000000c40)={0x0, 0x4, 0x1000, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) syz_io_uring_setup(0x4002, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x20, 0x0, 0x400, 0x1, &(0x7f0000000140)="819336eff3b553218ae42e51893f7c724f", 0xc26c, 0x0, 0x1, {0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x48, @loopback, 0x18}}, 0x6}, 0x90) 1.627028838s ago: executing program 0 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) lseek(0xffffffffffffffff, 0xffffffffffffa937, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000580)='.pending_reads\x00', 0x1a15c1, 0x9c37611dc13d0d83) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) fchown(r2, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x101042, 0x0) write$UHID_INPUT(r5, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4$alg(r6, 0x0, 0x0, 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x4}, &(0x7f0000000480)=0x8) sendmmsg$alg(r7, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000040}], 0x1, 0x85) recvmsg(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x40010126) 1.48736503s ago: executing program 4 (id=97): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1c, &(0x7f0000000300)=0x3, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}], 0x20}, 0x400c804) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.130322422s ago: executing program 32 (id=97): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r2, 0x6, 0x1c, &(0x7f0000000300)=0x3, 0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r4 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="974501000000000001008cc5595c4a9b8f52ac8e5c7fe70a3326491f", 0x1c}], 0x1, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote}}}], 0x20}, 0x400c804) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r8, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.024971681s ago: executing program 1 (id=98): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000006800010000000000000000000a00000000000000060007000200000018000880140001000000000000000000000004000000000008000500", @ANYRES32=r3], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x9, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200000000000c00028005000100000000000800074000000000100005800a"], 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20003300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x5010) 998.103643ms ago: executing program 3 (id=100): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x1000f0000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x2, 0x11, 0xffffffffffffffff, 0xc52db000) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000980)={0x190, 0x78, 0x0, 0x0, 0x2, 0x1000, 0x1, 0x0, {}, {0x0, 0xf39}, {0x81, 0x2}, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}) setsockopt$sock_timeval(r4, 0x1, 0x43, &(0x7f0000abaff9), 0x10) 917.38583ms ago: executing program 1 (id=101): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') read(r0, &(0x7f0000001180)=""/4096, 0x1000) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) sendmmsg$alg(r0, &(0x7f0000001bc0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x280801f, &(0x7f00000002c0), 0xfe, 0x506, &(0x7f0000000400)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x2046022, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000180)='z', 0x1}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r4, &(0x7f0000001580), 0x49249249249256f, 0x40484) 0s ago: executing program 0 (id=102): r0 = gettid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r1 = socket$inet(0xa, 0x801, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x2, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) listen(r1, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r7, 0x7) accept4(r4, 0x0, 0x0, 0x800) r8 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r8) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) wait4(r0, 0x0, 0x40000000, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.103' (ED25519) to the list of known hosts. [ 29.577956][ T4309] cgroup: Unknown subsys name 'net' [ 29.821883][ T4309] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.106954][ T4309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.812454][ T4329] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.815138][ T4335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.816787][ T4335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.817957][ T4335] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.818521][ T4336] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.819075][ T4335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.821109][ T4336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.821384][ T4335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.822846][ T4336] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.823556][ T4335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.824831][ T4336] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.825628][ T4335] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.826859][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.827565][ T4335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.829795][ T4335] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.830333][ T4336] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.831214][ T4335] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.832618][ T4336] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.834160][ T4335] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.834350][ T4336] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.836723][ T4335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.836844][ T4336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.838092][ T4337] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.841777][ T47] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.842980][ T47] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.848820][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.877308][ T4336] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.879027][ T4336] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.880731][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.882463][ T4329] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.937532][ T4327] chnl_net:caif_netlink_parms(): no params data found [ 30.992117][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.993434][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.994974][ T4327] device bridge_slave_0 entered promiscuous mode [ 30.997698][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.998814][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.001628][ T4327] device bridge_slave_1 entered promiscuous mode [ 31.016661][ T4322] chnl_net:caif_netlink_parms(): no params data found [ 31.029269][ T4327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.030745][ T4325] chnl_net:caif_netlink_parms(): no params data found [ 31.033308][ T4327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.045838][ T4327] team0: Port device team_slave_0 added [ 31.062673][ T4327] team0: Port device team_slave_1 added [ 31.071227][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.072322][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.076269][ T4327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.084590][ T4327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.085711][ T4327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.090646][ T4327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.092652][ T4321] chnl_net:caif_netlink_parms(): no params data found [ 31.113101][ T4322] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.114386][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.115926][ T4322] device bridge_slave_0 entered promiscuous mode [ 31.132816][ T4322] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.133971][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.135396][ T4322] device bridge_slave_1 entered promiscuous mode [ 31.180449][ T4327] device hsr_slave_0 entered promiscuous mode [ 31.219388][ T4327] device hsr_slave_1 entered promiscuous mode [ 31.269868][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.271080][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.272578][ T4325] device bridge_slave_0 entered promiscuous mode [ 31.285635][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.286788][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.288300][ T4325] device bridge_slave_1 entered promiscuous mode [ 31.289826][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.291076][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.292563][ T4321] device bridge_slave_0 entered promiscuous mode [ 31.297253][ T4322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.305464][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.306602][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.308101][ T4321] device bridge_slave_1 entered promiscuous mode [ 31.312223][ T4322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.329139][ T4325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.331871][ T4325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.334705][ T4321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.336998][ T4322] team0: Port device team_slave_0 added [ 31.338827][ T4322] team0: Port device team_slave_1 added [ 31.347726][ T4321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.355967][ T4325] team0: Port device team_slave_0 added [ 31.361883][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 31.364670][ T4321] team0: Port device team_slave_0 added [ 31.367572][ T4325] team0: Port device team_slave_1 added [ 31.368884][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.372216][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.376042][ T4322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.384598][ T4321] team0: Port device team_slave_1 added [ 31.391700][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.392823][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.396854][ T4325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.398936][ T4322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.400275][ T4322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.404240][ T4322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.412018][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.413115][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.417033][ T4321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.421610][ T4325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.422705][ T4325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.426641][ T4325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.433914][ T4321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.434966][ T4321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.438850][ T4321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.461039][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.462278][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.463691][ T4331] device bridge_slave_0 entered promiscuous mode [ 31.465519][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.466695][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.468207][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.530596][ T4322] device hsr_slave_0 entered promiscuous mode [ 31.569406][ T4322] device hsr_slave_1 entered promiscuous mode [ 31.619235][ T4322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.620513][ T4322] Cannot create hsr debugfs directory [ 31.650243][ T4325] device hsr_slave_0 entered promiscuous mode [ 31.709400][ T4325] device hsr_slave_1 entered promiscuous mode [ 31.759257][ T4325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.760374][ T4325] Cannot create hsr debugfs directory [ 31.768004][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.810222][ T4321] device hsr_slave_0 entered promiscuous mode [ 31.859492][ T4321] device hsr_slave_1 entered promiscuous mode [ 31.929360][ T4321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.930517][ T4321] Cannot create hsr debugfs directory [ 31.940523][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.967859][ T4331] team0: Port device team_slave_0 added [ 31.975507][ T4331] team0: Port device team_slave_1 added [ 31.998937][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.000278][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.003952][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.015972][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.017072][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.021296][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.030361][ T4327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.082042][ T4327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.130214][ T4327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.171269][ T4327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.260336][ T4331] device hsr_slave_0 entered promiscuous mode [ 32.299459][ T4331] device hsr_slave_1 entered promiscuous mode [ 32.349254][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.350423][ T4331] Cannot create hsr debugfs directory [ 32.367853][ T4325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.420381][ T4325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.461112][ T4325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.501417][ T4325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.567000][ T4321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.608224][ T4321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.650682][ T4321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.694041][ T4321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.765651][ T4322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.813442][ T4322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.852327][ T4322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.889451][ T4336] Bluetooth: hci3: command 0x0409 tx timeout [ 32.889509][ T4333] Bluetooth: hci1: command 0x0409 tx timeout [ 32.890466][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 32.891431][ T4333] Bluetooth: hci0: command 0x0409 tx timeout [ 32.908637][ T4327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.909951][ T4322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.967470][ T4331] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.979434][ T4329] Bluetooth: hci4: command 0x0409 tx timeout [ 33.005403][ T4331] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.070504][ T4331] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.113387][ T4331] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.154428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.156593][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.166375][ T4327] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.174893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.176510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.178738][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.179876][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.182388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.184044][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.185679][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.186840][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.188230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.197949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.200210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.201884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.203750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.205364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.206957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.208544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.213542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.215260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.217658][ T4321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.225225][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.228884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.230443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.236003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.237515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.240538][ T4321] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.246311][ T4327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.254142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.255756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.257132][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.258264][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.263277][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.269821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.271372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.272814][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.273991][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.275405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.276753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.286200][ T4325] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.287407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.292871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.294365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.295756][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.296899][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.298184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.301339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.312026][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.313967][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.315491][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.317040][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.318528][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.321297][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.322777][ T88] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.323936][ T88] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.325427][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.335403][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.337029][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.338642][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.341214][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.350446][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.355386][ T4322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.358597][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.365064][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.376212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.377987][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.380029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.381372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.382841][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.385378][ T4322] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.394298][ T4327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.398304][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.399962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.401152][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.402672][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.407880][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.409686][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.411069][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.412465][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.413973][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.420679][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.422200][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.423655][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.425204][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.434422][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.436937][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.439003][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.441618][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.442797][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.447359][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.449009][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.456296][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.461840][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.463942][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.465502][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.475848][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.477876][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.479971][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.481371][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.485641][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.486936][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.492809][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.497321][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.498765][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.501214][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.502919][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.504650][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.505722][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.507148][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.508730][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.514294][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.517525][ T4321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.522631][ T4322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.524830][ T4322] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.528360][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.530104][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.531501][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.532630][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.534006][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.535432][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.536916][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.549933][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.551601][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.553030][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.554634][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.556257][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.558005][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.573717][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.575311][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.576949][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.578573][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.582292][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.583945][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.585423][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.587318][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.596800][ T4321] device veth0_vlan entered promiscuous mode [ 33.600487][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.603452][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.605018][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.606414][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.608218][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.612366][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.613627][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.616415][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.617879][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.620742][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.623915][ T4327] device veth0_vlan entered promiscuous mode [ 33.627147][ T4327] device veth1_vlan entered promiscuous mode [ 33.633960][ T4321] device veth1_vlan entered promiscuous mode [ 33.649860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.651851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.653224][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.654532][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.655897][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.657359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.665012][ T4322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.667860][ T4327] device veth0_macvtap entered promiscuous mode [ 33.671788][ T4327] device veth1_macvtap entered promiscuous mode [ 33.673879][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.675372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.676611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.677899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.696747][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.702997][ T4321] device veth0_macvtap entered promiscuous mode [ 33.704354][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.705868][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.707421][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.708838][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.713883][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.715352][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.717673][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.721102][ T4327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.724095][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.725770][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.727242][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.728755][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.736342][ T4327] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.737708][ T4327] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.738949][ T4327] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.741585][ T4327] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.749706][ T4321] device veth1_macvtap entered promiscuous mode [ 33.753226][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.754779][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.756284][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.757878][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.759131][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.764483][ T4325] device veth0_vlan entered promiscuous mode [ 33.776515][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.777836][ T88] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.782553][ T4322] device veth0_vlan entered promiscuous mode [ 33.786130][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.787633][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.789120][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.790537][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.794332][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.797231][ T4325] device veth1_vlan entered promiscuous mode [ 33.803657][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.805220][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.807686][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.810651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.812140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.813607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.815096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.826873][ T4322] device veth1_vlan entered promiscuous mode [ 33.830216][ T4321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.831790][ T4321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.845821][ T4321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.854427][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.855989][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.857458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.863883][ T4321] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.865228][ T4321] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.866467][ T4321] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.867748][ T4321] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.876087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.877666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.879900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.882808][ T4325] device veth0_macvtap entered promiscuous mode [ 33.885385][ T4325] device veth1_macvtap entered promiscuous mode [ 33.896739][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.898517][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.900970][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.902496][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.905107][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.907973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.909952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.911286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.912685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.923038][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.924635][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.926082][ T4325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.927632][ T4325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.933271][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.937800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.939655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.952012][ T4322] device veth0_macvtap entered promiscuous mode [ 33.955491][ T4325] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.956751][ T4325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.957998][ T4325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.962605][ T4325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.966124][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.967824][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.970084][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.971648][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.973270][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.975363][ T4322] device veth1_macvtap entered promiscuous mode [ 33.986782][ T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.988061][ T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.990516][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.992056][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.004224][ T287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.005360][ T287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.007250][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.011853][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.013505][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.015098][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.016852][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.018400][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.024082][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.026304][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.032528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.034150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.045814][ T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.046935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.047003][ T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.048508][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.053077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.054920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.056774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.058542][ T4331] device veth0_vlan entered promiscuous mode [ 34.072842][ T4331] device veth1_vlan entered promiscuous mode [ 34.074374][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.075890][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.077290][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.078768][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.080722][ T4322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.082293][ T4322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.084463][ T4322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.088825][ T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.090327][ T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.096771][ T248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.096978][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.097908][ T248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.100482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.101959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.103433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.108069][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.126401][ T287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.127646][ T287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.129002][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.132469][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.134709][ T4322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.136117][ T4322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.137448][ T4322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.138741][ T4322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.165819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.167518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.176201][ T4331] device veth0_macvtap entered promiscuous mode [ 34.192011][ T4403] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.214482][ T4331] device veth1_macvtap entered promiscuous mode [ 34.219778][ T4404] loop1: detected capacity change from 0 to 512 [ 34.237048][ T4404] EXT2-fs (loop1): nobh option not supported [ 34.246469][ T4409] loop2: detected capacity change from 0 to 512 [ 34.248431][ T4404] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 34.271651][ T4409] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.273397][ T4409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.278636][ T4409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.286850][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.291064][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.292615][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.294088][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.295507][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.297042][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.298457][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.311765][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.314406][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.316550][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.318162][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.320636][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.322682][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.338197][ T88] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.340044][ T88] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.342411][ T4409] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.3: Invalid block bitmap block 0 in block_group 0 [ 34.346936][ T4409] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 34.354191][ T4409] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.3: attempt to clear invalid blocks 983261 len 1 [ 34.361929][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.363552][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.365048][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.367027][ T4409] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.3: Invalid inode table block 0 in block_group 0 [ 34.383241][ T4409] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 34.386549][ T4409] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 34.388356][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.395284][ T4409] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.3: Invalid inode table block 0 in block_group 0 [ 34.399684][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.405707][ T4409] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 34.423407][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.425017][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.426594][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.429889][ T4409] EXT4-fs error (device loop2): ext4_truncate:4318: inode #11: comm syz.2.3: mark_inode_dirty error [ 34.437205][ T4409] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 34.439271][ T4409] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.3: Invalid inode table block 0 in block_group 0 [ 34.443675][ T4409] EXT4-fs (loop2): 1 truncate cleaned up [ 34.444552][ T4409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 34.455561][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.462489][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.464021][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.465576][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.765706][ T4423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6'. [ 34.775012][ T4409] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.3: Invalid inode table block 0 in block_group 0 [ 34.781913][ T4423] device vlan0 entered promiscuous mode [ 34.785008][ T4409] binfmt_misc: register: failed to install interpreter file ./file0 [ 34.798344][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.800416][ T4331] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.801763][ T4331] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.801938][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.803150][ T4331] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.805623][ T4331] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.808711][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.821995][ T4409] futex_wake_op: syz.2.3 tries to shift op by 32; fix this program [ 34.854919][ T4417] Zero length message leads to an empty skb [ 34.905791][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.907135][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.908469][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.927055][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.929128][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.930534][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.945944][ T4433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.946500][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 34.969426][ T4333] Bluetooth: hci2: command 0x041b tx timeout [ 34.970444][ T4333] Bluetooth: hci1: command 0x041b tx timeout [ 34.971437][ T4333] Bluetooth: hci3: command 0x041b tx timeout [ 34.972379][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 35.049505][ T4329] Bluetooth: hci4: command 0x041b tx timeout [ 37.059524][ T4333] Bluetooth: hci0: command 0x040f tx timeout [ 37.060891][ T4329] Bluetooth: hci3: command 0x040f tx timeout [ 37.062019][ T4329] Bluetooth: hci1: command 0x040f tx timeout [ 37.063238][ T4333] Bluetooth: hci2: command 0x040f tx timeout [ 37.174276][ T4450] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.221667][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 38.146096][ T4464] loop4: detected capacity change from 0 to 40427 [ 38.182056][ T4464] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 38.183330][ T4464] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 38.187599][ T4464] F2FS-fs (loop4): Found nat_bits in checkpoint [ 38.204563][ T4464] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 38.205881][ T4464] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 38.887068][ T4546] loop2: detected capacity change from 0 to 256 [ 39.038094][ T4538] loop1: detected capacity change from 0 to 4096 [ 39.095528][ T4538] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 39.129643][ T4333] Bluetooth: hci0: command 0x0419 tx timeout [ 39.130653][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 39.131530][ T4333] Bluetooth: hci3: command 0x0419 tx timeout [ 39.132385][ T4333] Bluetooth: hci1: command 0x0419 tx timeout [ 39.276203][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.277881][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.288064][ T4538] ntfs: (device loop1): parse_options(): NLS character set macgreÿ not found. Using previous one utf8. [ 39.291147][ T4538] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 39.292721][ T4538] ntfs: (device loop1): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy. [ 39.297039][ T4538] ntfs: volume version 3.1. [ 39.299440][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 39.307309][ T4538] ntfs: (device loop1): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 39.308677][ T4538] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 39.310556][ T4538] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 39.651248][ T4538] "syz.1.20" (4538) uses obsolete ecb(arc4) skcipher [ 39.692449][ T4579] loop3: detected capacity change from 0 to 512 [ 39.704646][ T4579] ext4: Unknown parameter 'smackfstransmute' [ 40.327152][ T4588] loop4: detected capacity change from 0 to 1024 [ 40.327785][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.339703][ T4588] ======================================================= [ 40.339703][ T4588] WARNING: The mand mount option has been deprecated and [ 40.339703][ T4588] and is ignored by this kernel. Remove the mand [ 40.339703][ T4588] option from the mount to silence this warning. [ 40.339703][ T4588] ======================================================= [ 40.357829][ T4494] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.385535][ T4588] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 40.716770][ T4494] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.718249][ T4494] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.719659][ T4494] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.721194][ T4494] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.951216][ T4484] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 41.052393][ T4567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 41.055179][ T4574] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 41.096981][ T4596] loop2: detected capacity change from 0 to 64 [ 41.109097][ T4596] hfs: creator requires a 4 character value [ 41.110226][ T4596] hfs: unable to parse mount options [ 41.168627][ T4601] loop3: detected capacity change from 0 to 2048 [ 41.181318][ T4601] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 41.213561][ T4604] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.255244][ T4333] Bluetooth: hci1: unexpected event 0x48 length: 27 > 3 [ 41.255272][ T4333] Bluetooth: hci1: wrong event for mode 0 [ 41.378011][ T4599] loop0: detected capacity change from 0 to 40427 [ 41.397034][ T4599] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 41.398426][ T4599] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 41.413757][ T4599] F2FS-fs (loop0): invalid crc value [ 41.420234][ T4599] F2FS-fs (loop0): Found nat_bits in checkpoint [ 41.430414][ T4599] F2FS-fs (loop0): Start checkpoint disabled! [ 41.442514][ T4599] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 41.443633][ T4599] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 41.454740][ T4601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.27'. [ 41.502689][ T4442] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 6) [ 41.522202][ T4442] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 41.524057][ T4442] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.524057][ T4442] [ 41.542113][ T4531] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 41.555953][ T4531] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 41.557975][ T4531] EXT4-fs (loop4): This should not happen!! Data will be lost [ 41.557975][ T4531] [ 41.575990][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 41.587521][ T4621] loop1: detected capacity change from 0 to 2048 [ 41.609814][ T4621] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 41.676439][ T4627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 41.713670][ T4621] NILFS error (device loop1): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 41.735759][ T4621] Remounting filesystem read-only [ 41.767134][ T4610] NILFS (loop3): DAT doesn't have a block to manage vblocknr = 3044605952 [ 41.768622][ T4610] NILFS error (device loop3): nilfs_bmap_truncate: broken bmap (inode number=15) [ 41.773431][ T4610] Remounting filesystem read-only [ 41.774283][ T4610] NILFS (loop3): error -5 truncating bmap (ino=15) [ 42.212106][ T4647] loop0: detected capacity change from 0 to 512 [ 42.213564][ T4647] EXT4-fs: Ignoring removed i_version option [ 42.215741][ T4643] loop1: detected capacity change from 0 to 64 [ 42.230944][ T4647] EXT4-fs (loop0): 1 truncate cleaned up [ 42.231917][ T4647] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 43.335655][ T4660] sched: RT throttling activated [ 43.393335][ T4657] overlayfs: missing 'lowerdir' [ 43.399763][ T4666] loop2: detected capacity change from 0 to 512 [ 43.499617][ T4666] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 43.501309][ T4666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.502781][ T4666] EXT4-fs warning (device loop2): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 43.505043][ T4666] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 43.506860][ T4657] loop3: detected capacity change from 0 to 512 [ 43.517762][ T4666] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2916: inode #16: comm syz.2.37: corrupted xattr block 31 [ 43.521151][ T4657] EXT2-fs (loop3): nobh option not supported [ 43.841476][ T4657] EXT2-fs (loop3): warning: mounting ext3 filesystem as ext2 [ 43.845279][ T4647] Soft offlining pfn 0x135a2f at process virtual address 0x20000000 [ 43.855850][ T4647] soft offline: 0x135a2f: page migration failed 1, type 0x5ffc6000002284e(referenced|uptodate|dirty|workingset|arch_1|private|mappedtodisk|node=0|zone=2|lastcpupid=0x7ff) [ 43.858589][ T4666] EXT4-fs warning (device loop2): ext4_evict_inode:299: xattr delete (err -117) [ 43.860325][ T4666] EXT4-fs (loop2): 1 orphan inode deleted [ 43.861224][ T4666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 43.868689][ T4671] netlink: 'syz.4.38': attribute type 1 has an invalid length. [ 43.878372][ T4647] tipc: Started in network mode [ 43.879774][ T4647] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 43.881057][ T4647] tipc: Enabled bearer , priority 10 [ 43.904154][ T4666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.905915][ T4666] EXT4-fs: can't change dax mount option while remounting [ 43.911291][ T4666] "syz.2.37" (4666) uses obsolete ecb(arc4) skcipher [ 43.912916][ T4666] syz.2.37 sent an empty control message without MSG_MORE. [ 43.952078][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 43.955968][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 44.022472][ T4676] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 45.275844][ T4577] tipc: Node number set to 9546410 [ 45.332159][ T11] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: comm kworker/u4:1: lblock 0 mapped to illegal pblock 0 (length 6) [ 45.335136][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 45.337058][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.337058][ T11] [ 45.348206][ T4695] set_capacity_and_notify: 1 callbacks suppressed [ 45.348215][ T4695] loop3: detected capacity change from 0 to 1024 [ 45.351775][ T11] EXT4-fs error (device loop0): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 45.354250][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 45.356156][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.356156][ T11] [ 45.359111][ T4325] EXT4-fs (loop0): unmounting filesystem. [ 45.404346][ T4698] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 45.421110][ T4695] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 45.448142][ T4706] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.870601][ T4716] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 45.987147][ T4732] loop1: detected capacity change from 0 to 256 [ 45.993339][ T4732] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 45.995531][ T4732] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 46.011788][ T4733] FAULT_INJECTION: forcing a failure. [ 46.011788][ T4733] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.013806][ T4733] CPU: 0 PID: 4733 Comm: syz.4.51 Not tainted syzkaller #0 [ 46.014859][ T4733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 46.016406][ T4733] Call trace: [ 46.016993][ T4733] dump_backtrace+0x1c0/0x1ec [ 46.017733][ T4733] show_stack+0x2c/0x3c [ 46.018383][ T4733] __dump_stack+0x30/0x40 [ 46.019049][ T4733] dump_stack_lvl+0xf4/0x15c [ 46.019797][ T4733] dump_stack+0x1c/0x5c [ 46.020458][ T4733] should_fail_ex+0x3c0/0x518 [ 46.021131][ T4733] should_fail+0x14/0x24 [ 46.021854][ T4733] should_fail_usercopy+0x20/0x30 [ 46.022668][ T4733] iovec_from_user+0xcc/0x5dc [ 46.023501][ T4733] __import_iovec+0x84/0x470 [ 46.024144][ T4733] import_iovec+0x88/0xa4 [ 46.024811][ T4733] copy_msghdr_from_user+0x344/0x4d0 [ 46.025689][ T4733] __sys_sendmsg+0x22c/0x374 [ 46.026425][ T4733] __arm64_sys_sendmsg+0x80/0x94 [ 46.027182][ T4733] invoke_syscall+0x98/0x2b4 [ 46.027912][ T4733] el0_svc_common+0x138/0x258 [ 46.028657][ T4733] do_el0_svc+0x58/0x130 [ 46.029336][ T4733] el0_svc+0x58/0x128 [ 46.029936][ T4733] el0t_64_sync_handler+0x84/0xf0 [ 46.030718][ T4733] el0t_64_sync+0x18c/0x190 [ 46.086445][ T4743] netlink: 52 bytes leftover after parsing attributes in process `syz.4.53'. [ 46.097421][ T4743] device ip6gre1 entered promiscuous mode [ 46.218814][ T4754] loop4: detected capacity change from 0 to 64 [ 46.225655][ T39] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm kworker/u4:2: lblock 0 mapped to illegal pblock 0 (length 6) [ 46.228488][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 46.229697][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'. [ 46.235882][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.235882][ T39] [ 46.241024][ T39] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 46.248758][ T39] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 46.262696][ T39] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.262696][ T39] [ 46.267101][ T4754] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 46.269518][ T4754] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 46.274759][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 46.855433][ T4777] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 46.945967][ T4780] loop1: detected capacity change from 0 to 1024 [ 47.000111][ T4780] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 47.070899][ T4787] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.832359][ T248] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:4: lblock 0 mapped to illegal pblock 0 (length 6) [ 47.834775][ T248] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 47.836776][ T248] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.836776][ T248] [ 47.876318][ T248] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 48.013546][ T248] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 48.020608][ T248] EXT4-fs (loop1): This should not happen!! Data will be lost [ 48.020608][ T248] [ 48.047352][ T4321] EXT4-fs (loop1): unmounting filesystem. [ 48.144472][ T4794] netlink: 52 bytes leftover after parsing attributes in process `syz.3.65'. [ 48.158890][ T4794] device ip6gre1 entered promiscuous mode [ 48.185784][ T4799] loop1: detected capacity change from 0 to 64 [ 48.203084][ T4799] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 48.207324][ T4799] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 48.284496][ T4803] loop2: detected capacity change from 0 to 1024 [ 48.322669][ T4803] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.221570][ T287] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: comm kworker/u4:5: lblock 0 mapped to illegal pblock 0 (length 6) [ 49.228506][ T287] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 49.251845][ T287] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.251845][ T287] [ 49.256384][ T287] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:5: lblock 8 mapped to illegal pblock 8 (length 8) [ 49.264235][ T287] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 49.266115][ T287] EXT4-fs (loop2): This should not happen!! Data will be lost [ 49.266115][ T287] [ 49.268599][ T4327] EXT4-fs (loop2): unmounting filesystem. [ 49.307267][ T4824] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.532126][ T4845] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 49.732864][ T4857] loop4: detected capacity change from 0 to 64 [ 49.750495][ T4857] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 49.754185][ T4857] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 50.392242][ T4872] netlink: 52 bytes leftover after parsing attributes in process `syz.3.81'. [ 50.621136][ T4878] netlink: 'syz.1.84': attribute type 1 has an invalid length. [ 50.716199][ T4881] loop4: detected capacity change from 0 to 1024 [ 50.783713][ T4881] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 50.789101][ T4886] netlink: 'syz.2.86': attribute type 1 has an invalid length. [ 50.814260][ T4886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.882112][ T4888] loop3: detected capacity change from 0 to 512 [ 50.908132][ T4888] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.912090][ T4888] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.916587][ T4888] EXT4-fs warning (device loop3): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 50.918761][ T4888] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 50.921822][ T4888] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2916: inode #16: comm syz.3.87: corrupted xattr block 31 [ 50.924071][ T4888] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 50.925417][ T4888] EXT4-fs (loop3): 1 orphan inode deleted [ 50.926243][ T4886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.926280][ T4888] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 50.927710][ T4886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.209846][ T4886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.211311][ T4886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.220817][ T4886] bond1: (slave geneve2): making interface the new active one [ 51.222936][ T4886] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 51.226262][ T287] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 51.253886][ T4888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.256574][ T4888] EXT4-fs: can't change dax mount option while remounting [ 51.260898][ T4888] "syz.3.87" (4888) uses obsolete ecb(arc4) skcipher [ 51.308344][ T4322] EXT4-fs (loop3): unmounting filesystem. [ 51.378397][ T4894] overlayfs: missing 'lowerdir' [ 51.408204][ T4894] loop1: detected capacity change from 0 to 512 [ 51.432993][ T4894] EXT2-fs (loop1): nobh option not supported [ 51.769118][ T4443] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: comm kworker/u4:10: lblock 0 mapped to illegal pblock 0 (length 6) [ 51.772107][ T4443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 51.773935][ T4443] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.773935][ T4443] [ 51.776786][ T4443] EXT4-fs error (device loop4): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 51.779081][ T4894] EXT2-fs (loop1): warning: mounting ext3 filesystem as ext2 [ 51.793570][ T4443] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 51.795498][ T4443] EXT4-fs (loop4): This should not happen!! Data will be lost [ 51.795498][ T4443] [ 51.805654][ T4331] EXT4-fs (loop4): unmounting filesystem. [ 51.836038][ T4903] loop4: detected capacity change from 0 to 64 [ 51.857416][ T4903] overlayfs: upper fs needs to support d_type. [ 51.863000][ T4903] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 51.863050][ T4904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.865459][ T4903] overlayfs: failed to set xattr on upper [ 51.867534][ T4903] overlayfs: ...falling back to index=off,metacopy=off. [ 51.903703][ T4331] VFS: Lookup of 'À.' in minix loop4 would have caused loop [ 51.905106][ T4331] VFS: Lookup of 'À.' in minix loop4 would have caused loop [ 52.004546][ T4908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 52.946621][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.948595][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.968319][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.972219][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.973696][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.975007][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.963372][ T4932] loop1: detected capacity change from 0 to 512 [ 54.001703][ T4936] Unable to handle kernel paging request at virtual address ffff70003147bc00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 54.034238][ T4936] KASAN: maybe wild-memory-access in range [0xffff80018a3de000-0xffff80018a3de007] [ 54.036527][ T4932] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.038014][ T4932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.040082][ T4932] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 54.042215][ T4932] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 54.043471][ T4932] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2916: inode #16: comm syz.1.101: corrupted xattr block 31 [ 54.045559][ T4936] Mem abort info: [ 54.046163][ T4936] ESR = 0x0000000096000006 [ 54.046848][ T4936] EC = 0x25: DABT (current EL), IL = 32 bits [ 54.047783][ T4936] SET = 0, FnV = 0 [ 54.048385][ T4936] EA = 0, S1PTW = 0 [ 54.048985][ T4936] FSC = 0x06: level 2 translation fault [ 54.057718][ T4932] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 54.079574][ T4932] EXT4-fs (loop1): 1 orphan inode deleted [ 54.080512][ T4932] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 54.092565][ T4936] Data abort info: [ 54.093204][ T4936] ISV = 0, ISS = 0x00000006 [ 54.093901][ T4936] CM = 0, WnR = 0 [ 54.094449][ T4936] swapper pgtable: 4k pages, 48-bit VAs, pgdp=000000020dfb9000 [ 54.095503][ T4936] [ffff70003147bc00] pgd=000000023ea48003, p4d=000000023ea48003, pud=000000023ea47003, pmd=0000000000000000 [ 54.097286][ T4936] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 54.098302][ T4936] Modules linked in: [ 54.098852][ T4936] CPU: 0 PID: 4936 Comm: syz.0.102 Not tainted syzkaller #0 [ 54.099928][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 54.101386][ T4936] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 54.102511][ T4936] pc : ip_route_output_key_hash_rcu+0xe38/0x1e38 [ 54.103356][ T4936] lr : ip_route_output_key_hash_rcu+0xdb8/0x1e38 [ 54.104266][ T4936] sp : ffff800020d37490 [ 54.104841][ T4936] x29: ffff800020d374e0 x28: dfff800000000000 x27: 0000000000000001 [ 54.105961][ T4936] x26: 0000000080000000 x25: ffff0000d229c000 x24: ffff0000d9c09420 [ 54.107078][ T4936] x23: 0000000000000000 x22: ffff80018a3de000 x21: ffff0000d8400000 [ 54.108211][ T4936] x20: 0000000000000000 x19: 0000000000000000 x18: 000000002e40faaf [ 54.109358][ T4936] x17: dfff800000000000 x16: ffff8000082d7e60 x15: 0000000000000002 [ 54.110489][ T4936] x14: 0000000000000005 x13: 0000000000ff0100 x12: 0000000000080000 [ 54.111639][ T4936] x11: 000000000000903b x10: ffff800021d9c000 x9 : ffff80018a3de000 [ 54.112759][ T4936] x8 : 1ffff0003147bc00 x7 : ffff8000105d2154 x6 : 0000000000000000 [ 54.113893][ T4936] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 54.115042][ T4936] x2 : 0000000000000008 x1 : 0000000000000000 x0 : 0000000000000000 [ 54.116203][ T4936] Call trace: [ 54.116672][ T4936] ip_route_output_key_hash_rcu+0xe38/0x1e38 [ 54.117526][ T4936] ip_route_output_key_hash+0x1b0/0x300 [ 54.118319][ T4936] ip_route_output_flow+0x3c/0x160 [ 54.119051][ T4936] sctp_v4_get_dst+0x27c/0xda4 [ 54.119743][ T4936] sctp_transport_route+0xe8/0x258 [ 54.120478][ T4936] sctp_assoc_add_peer+0x4e0/0x1560 [ 54.121220][ T4936] sctp_connect_new_asoc+0x2f8/0x630 [ 54.121916][ T4936] __sctp_connect+0x4b0/0xb38 [ 54.122562][ T4936] sctp_inet_connect+0x124/0x1d8 [ 54.123238][ T4936] __sys_connect+0x28c/0x2b4 [ 54.123889][ T4936] __arm64_sys_connect+0x7c/0x94 [ 54.124592][ T4936] invoke_syscall+0x98/0x2b4 [ 54.125238][ T4936] el0_svc_common+0x138/0x258 [ 54.125904][ T4936] do_el0_svc+0x58/0x130 [ 54.126499][ T4936] el0_svc+0x58/0x128 [ 54.127068][ T4936] el0t_64_sync_handler+0x84/0xf0 [ 54.127770][ T4936] el0t_64_sync+0x18c/0x190 [ 54.128415][ T4936] Code: d538d089 8b080136 d343fec8 aa1703f4 (387c6908) [ 54.129408][ T4936] ---[ end trace 0000000000000000 ]--- [ 54.362505][ T4936] Kernel panic - not syncing: Oops: Fatal exception [ 54.363478][ T4936] SMP: stopping secondary CPUs [ 54.364155][ T4936] Kernel Offset: disabled [ 54.364748][ T4936] CPU features: 0x080000,000f0097,a65bfea7 [ 54.365559][ T4936] Memory Limit: none [ 54.580460][ T4936] Rebooting in 86400 seconds..