last executing test programs: 2.584354232s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000240)={0x1, 0x2, 0x2}) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000002880)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002900)}, 0x400000}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000480)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x180) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r4) getdents64(r5, &(0x7f0000000500)=""/4096, 0x1000) 2.122679993s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000240), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000002880)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000002900)}, 0x400000}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000002940)={0x1, 0x1, 0x2}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000480)='./file0\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x0, 0x180) syz_genetlink_get_family_id$nl80211(&(0x7f0000001540), r3) getdents64(r4, &(0x7f0000000500)=""/4096, 0x1000) 2.095327155s ago: executing program 4 (id=5): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) syz_open_dev$usbmon(&(0x7f0000000580), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f00000003c0), 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x126, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6866f5a800f006fffc0100000000000000000000000000fd00000000000000000000ffffe00000024e224e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51080004907800049af473439152e3988d593cc1d71e5132d42870dca3b7ffc07f7d7aa0db358cc29a104a6b5c3df7f6f39cd395335ef0422fffecba51761e120caec6330cb45d05d1b913339e429a95b912a00db9e8adf37332a6403ceada938a86856c99d63b7bfd170e48efb24308801ca269a6e3aee9a326f8ca782f955b32a0937b3c6f939f118fca7d5cdb1d7867e26924625975bd88af2be7f69d6486be690a458e6be3d0e8ef8b3ca080f0432a3949874e2a15f4492bd8df37f169db44266ad471d81b189cbf9d9cf78ef06e2a247d6663e012ccada4a2b4c554d3341cd9a9e47ecd9fe3d63b"], 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000002c0)=0x474c, 0x4) bind$inet(r3, &(0x7f0000000300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000000380), 0x800001d, 0x300) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f00000003c0)=0x80, 0x4) setsockopt$inet_int(r3, 0x0, 0xc, &(0x7f0000000400)=0x10, 0x4) recvmmsg(r3, &(0x7f00000004c0), 0x291962b, 0x45833af92e4b39ff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x8, 0xffffffff, 0x1, 0x1004, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0xf, 0x5, 0x9}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$P9_RGETLOCK(r2, &(0x7f0000000080)={0x1f, 0x37, 0x2, {0x1, 0x4, 0x3, r0, 0x1, '\x00'}}, 0x1f) 837.07971ms ago: executing program 4 (id=6): setns(0xc9, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000000) r2 = syz_open_dev$video(&(0x7f0000000000), 0x10001, 0x8000) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000180)={0x3, @output={0x0, 0x1, {0x4, 0x84}, 0x4}}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), r1) syz_read_part_table(0x104b, &(0x7f0000001300)="$eJzsz7GtwjAUBdAbyz9S8lehZpPMExiMlWjpMEpIBBMAxTmSLd8rv+KFrzqkT0mGPc/JWHPe0q211kr5W8Ownf5t/L8ml70oSVpdrja/iutxSreWSU7plsd9fH6Yyqf2BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBf9ggAAP//HrYTig==") 781.284768ms ago: executing program 2 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x200008, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRESDEC, @ANYRES16=r1], 0x1, 0x3b7, &(0x7f0000000300)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000880)={0x0, 0x10, &(0x7f00000008c0)=[@in={0x2, 0x4e21, @private=0xa010102}]}, &(0x7f0000000900)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000940)={r5, 0x2}, 0x8) ftruncate(r4, 0x7) symlinkat(&(0x7f0000000700)='./file0\x00', r2, &(0x7f0000000740)='./file0\x00') sendmmsg$unix(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2060, 0x100) fcntl$setlease(r7, 0x400, 0x0) rt_sigprocmask(0x2, &(0x7f0000000a40)={[0xffffffffffffffff]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000a80)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x3a01, 0x17e) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="14cb441fcfe13cbad2f654c4eddc3e8db6e20a0052bf654ced420c798e9c01cb8d53de6ccb094afc3164fad6e13540cc79ac81aac6ab611d1193e0fa8d54ceb3b4fb5264866b9310ca5d4c420819c69b0cd24615aeeea34b60a708695e9a437c856b5d459ab03ca66aaa4cf64b90fdd0ef205a67a6a30405835d1b1516b2230adb4720b6426fcac486debbc5ab9c4600"/157, @ANYRES16=r6, @ANYBLOB="010703000100fcffdfff26000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 534.660607ms ago: executing program 3 (id=8): socket$inet_sctp(0x2, 0x5, 0x84) r0 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000040)={0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x208000, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb, 0x7ff}, 0x0) setrlimit(0xb, &(0x7f00000004c0)={0x7fffffffffffffff, 0xfeb}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8"], 0x0}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="060015000a0000000c0016800800"], 0x38}}, 0x10) r3 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x9) munmap$binder(r3, 0x7) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000100)={0x3, 'batadv_slave_0\x00'}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = semget$private(0x0, 0x2, 0x402) semctl$GETVAL(r5, 0x3, 0xc, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf5c}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000080)={0x2}, 0x0) 509.301076ms ago: executing program 0 (id=1): r0 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000001c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000000003, 0x0) io_setup(0x5, &(0x7f00000003c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x0, 0x0, 0x20, 0x0, 0x400, r1, 0x0, 0x0, 0x5}]) tkill(r0, 0x29) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000240)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x388, 0x800}) readv(r3, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/13, 0xd}], 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)={0x114, 0x1d, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000d1e7f07958a077d497424aa13c213f4badf3f0759cbb8dc06ad085cdf314331f41d5b992a4d3b3a7b0875cd5443214", @ANYRES16=r6, @ANYBLOB="01002bbd7000fddbdf25070000000c00060002000000000000000800010000000000"], 0x28}}, 0x20000010) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r7, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) 493.873045ms ago: executing program 1 (id=2): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x10, 0x6, 0x41}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/ref_tracker/netns-7-4026531833-notrefcnt\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000800)={'ip6gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @private2, @loopback, 0x40, 0x7800, 0xfffffffc}}) 415.62226ms ago: executing program 3 (id=9): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x82) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000091401"], 0x18}}, 0x2000c050) fanotify_init(0x81, 0x40000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x970a40, 0x6ab858183a7ef6bf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) recvfrom$binder_report(0xffffffffffffffff, &(0x7f00000005c0)={""/44, 0x0, ""/12, 0x0}, 0x80, 0x0, 0x0, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x0, 0x5001) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640), 0x100) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000680)={'veth1_macvtap\x00', 0x1}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r5, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=@newtaction={0x64, 0x30, 0x1, 0x300, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8d74, 0x0, 0xb8af1b9e37d5d12e}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socket$inet(0x2, 0x4, 0x100) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x4000010) syz_open_procfs(0x0, 0x0) truncate(&(0x7f0000000500)='./file2\x00', 0x10003) finit_module(r1, 0xfffffffffffffffe, 0x7) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x894, 0x30, 0xffff, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x101}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x1, 0x3, 0x3, 0x0, 0x89, 0x8, 0x2, 0x81, 0x8ad0, 0x29a8, 0x5, 0xfffffffe, 0x3, 0x1, 0x3, 0x7, 0x1, 0x6, 0x9, 0x7, 0x2, 0xffff, 0x1b1e88b6, 0x1b, 0x9, 0x6, 0x9, 0x7, 0xb, 0x5, 0x2, 0x5, 0x4, 0x654, 0x8001, 0x7, 0x7dfb, 0x6, 0x6, 0x8001, 0x7, 0x1, 0x5, 0x9, 0x4, 0x80000001, 0x83, 0x1, 0x1, 0x0, 0x1, 0x7, 0x7, 0x800, 0x7, 0xd, 0x6, 0x6, 0x8, 0xfffffff9, 0xfffffffa, 0x80000000, 0x6, 0x3, 0xc9, 0x7, 0x3, 0x3, 0x0, 0x7, 0xf, 0x2, 0x6, 0x389, 0x8, 0x7fff, 0x2, 0x0, 0xd12e, 0x6, 0x0, 0xdd7, 0x1, 0x3ff, 0x200, 0x0, 0x1, 0x8, 0xc, 0xfddd, 0x3, 0x7f, 0x0, 0xc1a, 0xa, 0x7fffffff, 0xffffffff, 0x7, 0xfffffffc, 0x5, 0x3, 0x1, 0x4, 0xa9, 0x5, 0x3ff, 0x6, 0x6, 0x8, 0xf33, 0x8, 0x6, 0x0, 0x3, 0x2, 0x1, 0x4, 0xfffffe00, 0x5, 0x7fffffff, 0x1, 0x5, 0x8, 0x81, 0x6, 0x7b, 0x4, 0x0, 0x3, 0x2, 0x6, 0x7, 0x4b1d, 0x80000000, 0x7, 0x2, 0x7ff, 0x1, 0x40, 0x1, 0x6, 0x0, 0x5, 0x7, 0x3, 0x9, 0x1, 0xfffffffd, 0x2a, 0x4, 0x3, 0x400000, 0x7, 0x9, 0x9, 0x4, 0x3, 0x4, 0x2a8f529d, 0x4c, 0x2, 0x7fffffff, 0x8, 0x7fff, 0x10001, 0xe, 0xa92d, 0x0, 0x1, 0x6, 0xbf, 0x0, 0x1, 0x81, 0x5c, 0xfff, 0x5, 0x7a15, 0xfffffffd, 0x0, 0xac, 0x2e5bb190, 0xda3, 0x6, 0x1, 0x80000001, 0x2, 0x4, 0x7674, 0x7, 0x6, 0x7, 0x4932, 0x1, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8000, 0x4, 0x6, 0x25, 0x179, 0x0, 0x6d5, 0x4, 0x8, 0x2, 0x2, 0x0, 0x1, 0x5d, 0x6, 0x6c, 0x0, 0xe, 0x8, 0x53a, 0x2, 0x9, 0x4, 0x97, 0x3, 0x1f5, 0xbd0, 0x1, 0x5, 0xecfc, 0x5, 0x4, 0x9e38, 0x2, 0xffff, 0x2, 0xdb6f, 0xfb, 0x1c, 0x9, 0x5, 0x800, 0xe685, 0xdb7, 0xfffffffa, 0x7, 0x2, 0x7ff, 0x997, 0xffff, 0x3, 0xd, 0x3, 0xe, 0x4, 0xbb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x80000001, 0x2, 0x9, 0x6, 0x9, 0x2, 0xffff, 0xfffffff9, 0x81, 0x5, 0x7fffffff, 0x81, 0x8000, 0xffffffff, 0x1, 0x8, 0x7, 0x7, 0xda8, 0xfffff800, 0x7fffffff, 0xfffffffa, 0x3, 0x4, 0x200, 0x100, 0x8, 0x7, 0x1ff, 0x0, 0xf1, 0x3, 0x8, 0x3, 0x10001, 0xc, 0x9, 0x200, 0x3, 0x543d, 0x74, 0x2, 0x8, 0x4, 0x37, 0x81, 0xd425, 0x1, 0x10, 0x2a8, 0x6, 0x9, 0x9, 0x1, 0x10001, 0x400, 0x6, 0x10001, 0x5, 0x40, 0x6, 0x400, 0xd87d, 0xfffffff7, 0x8, 0x3, 0x10001, 0xd1e, 0x4c8000, 0x348, 0x2, 0x8, 0x5, 0x2, 0x7fffffff, 0x0, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x10, 0xfffffc00, 0xffff, 0x81, 0x3, 0x1d4, 0x7ff, 0x3, 0x7, 0x1, 0x5, 0x1, 0x1000, 0x81, 0x4, 0x3, 0x10001, 0x80, 0x1, 0x5, 0x1, 0xfffffff7, 0x5, 0x5, 0x5, 0x8, 0xb, 0x5ca, 0xe, 0x6, 0xfff, 0x4, 0x80000000, 0x0, 0x4, 0x24, 0x4, 0x46, 0x3e994374, 0x7, 0x6, 0xa, 0x7f, 0x6, 0x6, 0x800, 0x4, 0x67, 0x800, 0x1ff, 0x0, 0x788, 0x0, 0x8000, 0x100, 0x9, 0xe, 0xb, 0x5, 0x7, 0xfffffff0, 0x0, 0x4, 0x4, 0xfffffffc, 0x2, 0x3, 0xfffffc01, 0x0, 0x6, 0x4, 0xf, 0x3850, 0x4, 0xe00000, 0xb9c, 0x0, 0xfffffff9, 0x0, 0x7, 0x2, 0x80, 0xfffffff9, 0x0, 0x1, 0x30, 0x1, 0x7, 0x140000, 0xfffffff8, 0x23, 0x7fffffff, 0x1, 0x5, 0x7ff, 0x40, 0x7, 0x200000, 0x8000, 0x3, 0xc, 0x6, 0x4, 0x9, 0xb95, 0x6, 0x7ff, 0x7fffffff, 0x9, 0xbdd1, 0x1, 0x132c, 0x4, 0x8, 0x0, 0x8, 0x9e, 0x8, 0x8, 0xfff, 0xffff, 0x7, 0x9d, 0x15, 0x2, 0x1, 0x0, 0xac, 0x6, 0x2, 0x6, 0x9e, 0xb, 0x10, 0x5, 0x4, 0xac, 0x7961481c, 0xf5c9, 0x27cf, 0x1, 0x6, 0x80, 0x7, 0x1, 0x7, 0x7, 0x7, 0x0, 0x4, 0xd3, 0x1, 0xff, 0x9, 0x7fffffff, 0x3, 0x9c7, 0x1, 0x6, 0x7, 0xffffffff, 0x8, 0x8, 0x1746, 0x0, 0x9, 0x40, 0x1, 0x8001, 0x29fb, 0x0, 0x7, 0x8]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0xffffffffffffffff, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x894}}, 0x0) 405.383476ms ago: executing program 4 (id=10): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000440)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x1000040, &(0x7f0000000800)={[{@nobarrier}, {@oldalloc}, {@orlov}, {@dioread_lock}]}, 0x1, 0x59c, &(0x7f0000001c80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000002240)='./file1\x00', 0xd02, 0x15) pwrite64(r1, &(0x7f0000002280)='2', 0xfdef, 0xc00) r2 = openat(0xffffffffffffff9c, &(0x7f00000022c0)='./file1\x00', 0x92042, 0x20) write$nci(r2, 0x0, 0x11) write$P9_RVERSION(r2, &(0x7f0000002300)={0x13, 0x65, 0xffff, 0x2, 0x6, '9P2000'}, 0x13) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r3, &(0x7f00000005c0)={&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000680)=[{&(0x7f00000006c0), 0x1000}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f00000006c0)={0x592a, 0x100000000, 0x0, 0xde95, 0x4, 0x3f, 0x4}) recvmsg$can_j1939(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)=[{0x0, 0x8405}, {&(0x7f0000000c80)=""/4096, 0x1000}], 0x2}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x42, 0x0) pwritev2(r4, &(0x7f0000000180)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1, 0x6, 0xde, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r6, 0x13, 0x0, 0x0, {0x8}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={&(0x7f0000000240), 0xc, &(0x7f00000003c0)={&(0x7f0000000940)={0x170, r6, 0x300, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x170}}, 0x841) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x12, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="560a00000000000079113800000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x79}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) 375.813356ms ago: executing program 1 (id=11): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=0x0, @ANYRES64=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20088000}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x11, 0x2000000, @void}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000001740)={0x2020}, 0x2020) pread64(0xffffffffffffffff, &(0x7f0000003780)=""/103, 0x67, 0x800) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000003800)="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", 0x2000, &(0x7f0000005800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000800)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000840), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x1c, r7, 0x1, 0x123, 0x238, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x48844) write$nci(r4, &(0x7f0000000940)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a_listen={0x6, 0x0, 0x0, 0x80, 0x80, 0xfe, 0x0, "", 0x5, 0xd0, 0x3, 0x5, 0xad, "f3c6ec2823b035a714e1687c3f55732847a35a7a2483d73af78e2c11875c8ff578dfbb12c13539ac1dbbc9b2d2a01185705865030c9e07560e8124aa4172c384117ca6cf371e9997e8bea443ac63e0581498384d09b9261d4c1a7e8e8a46450f122af336432a375c3e5a1e669841648a7e46c2d2bfc30d703fe1c1a7a47bbde58afefb25aa7b730a59a4e7d7a76a9a0059c4b4960c7462f70d06e6901286af9c7a91337e00c2be9d0fb3990cd8"}}, 0xbc) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030328bd7000000000000a000000040003"], 0x1c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x30, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0xc080) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) setsockopt(r11, 0x84, 0x9, &(0x7f00000058c0)="00deffffff000002", 0x8) sendto$inet6(r11, &(0x7f0000005900)='Y', 0x1, 0x20004001, &(0x7f0000005940)={0xa, 0x4e23, 0xf, @remote, 0x8}, 0x1c) socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed300000000000000000000000000000000000000000000020010"], 0xb8}}, 0x0) 67.768301ms ago: executing program 0 (id=12): io_setup(0x1, &(0x7f0000000080)=0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='.\x00', 0x800714, &(0x7f0000000540)={[{@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x7}}, {@minixdf}]}, 0x1, 0x4da, &(0x7f0000000e40)="$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") prlimit64(0x0, 0xe, &(0x7f0000001340)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000013c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000014c0), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000001500), 0x80002c1, 0x2, 0x0) r4 = syz_io_uring_setup(0x2d39, &(0x7f0000001540)={0x0, 0x8d8d, 0x0, 0x3, 0x80}, &(0x7f00000015c0), 0x0, 0x0) migrate_pages(0x0, 0x6fb8, 0x0, &(0x7f0000001600)=0xe) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000001640)=0x100000001, 0x76dc) connect$inet6(r5, &(0x7f0000001680)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000016c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001700)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000001740)=@ccm_128={{0x304}, "ffffffffffffffff", "e071e70aed0a5ef79f52ae34f3a61cf7", '\x00', "a915950d158d5a6b"}, 0x28) write$tun(0xffffffffffffffff, &(0x7f0000001780)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000017c0)=@ccm_128={{0x303}, "a06adadb1e8803ec", "de0000006deed7f21d74bc440900", "9884f958", "060000000000f8c7"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r5, &(0x7f0000001800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r5, &(0x7f0000002800)=[{&(0x7f0000002840)="58ddb0", 0x3}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000002880)=0xffff1884, 0x4) sendmsg(0xffffffffffffffff, 0x0, 0x0) io_submit(r0, 0x3b, 0xffffffffffffffff) 0s ago: executing program 4 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000280), &(0x7f00000000c0)=0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount(&(0x7f0000000400), &(0x7f0000000000)='./mnt\x00', &(0x7f0000000480)='ecryptfs\x00', 0x0, &(0x7f0000000500)='ecryptfs_sig=syz,ecryptfs_fnek_sig=syz,ecryptfs_cipher=aes,ecryptfs_key_bytes=16\x00') syz_open_procfs(0x0, &(0x7f00000168c0)='mounts\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004040)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.255' (ED25519) to the list of known hosts. [ 28.502785][ T4699] cgroup: Unknown subsys name 'net' [ 28.612850][ T4699] cgroup: Unknown subsys name 'cpuset' [ 28.615361][ T4699] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.743977][ T4699] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.521401][ T4711] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.523245][ T4711] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.523780][ T4716] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.524099][ T4716] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.524170][ T4716] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.524436][ T4716] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.524652][ T4711] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.524948][ T4711] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.525972][ T4711] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.526605][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.563095][ T4716] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.564464][ T4711] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.564840][ T4711] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.565534][ T4711] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.572221][ T4711] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.572446][ T4711] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.583692][ T4711] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.586709][ T4711] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.587916][ T4711] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.588640][ T4711] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.594224][ T4711] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.594598][ T4711] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.594780][ T4711] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.595072][ T4711] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.595595][ T4711] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.743249][ T4709] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.743502][ T4709] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.743854][ T4709] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.747366][ T4720] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.763664][ T4717] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.764123][ T4721] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.764851][ T4713] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 29.803707][ T4709] infiniband rxe0: set active [ 29.805533][ T4709] infiniband rxe0: added rxe_eth0 [ 29.814719][ T1535] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.815012][ T4713] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.823271][ T4709] RDS/IB: rxe0: added [ 29.823336][ T4709] smc: adding ib device rxe0 with port count 1 [ 29.823357][ T4709] smc: ib device rxe0 port 1 has no pnetid [ 29.834528][ T1535] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.857209][ T4721] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.904027][ T4709] rxe_eth0 speed is unknown, defaulting to 1000 [ 29.975551][ T4717] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.004625][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.004960][ T1535] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.037737][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.037954][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.038025][ T4720] bridge_slave_0: entered allmulticast mode [ 30.038437][ T4720] bridge_slave_0: entered promiscuous mode [ 30.042412][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.042440][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.042487][ T4720] bridge_slave_1: entered allmulticast mode [ 30.042918][ T4720] bridge_slave_1: entered promiscuous mode [ 30.044619][ T4709] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.065835][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.086926][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.116608][ T4720] team0: Port device team_slave_0 added [ 30.126392][ T4720] team0: Port device team_slave_1 added [ 30.129827][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.129951][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.130010][ T4721] bridge_slave_0: entered allmulticast mode [ 30.130380][ T4721] bridge_slave_0: entered promiscuous mode [ 30.147959][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.148029][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.148092][ T4721] bridge_slave_1: entered allmulticast mode [ 30.148482][ T4721] bridge_slave_1: entered promiscuous mode [ 30.157527][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.157538][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.157550][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.159578][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.159587][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.159607][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.169845][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.170772][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.177204][ T4721] team0: Port device team_slave_0 added [ 30.177963][ T4721] team0: Port device team_slave_1 added [ 30.184453][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.184461][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.184472][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.184955][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.184962][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.184973][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.195540][ T4721] hsr_slave_0: entered promiscuous mode [ 30.195860][ T4721] hsr_slave_1: entered promiscuous mode [ 30.212562][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.212592][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.212717][ T4713] bridge_slave_0: entered allmulticast mode [ 30.213080][ T4713] bridge_slave_0: entered promiscuous mode [ 30.213814][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.213833][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.213884][ T4713] bridge_slave_1: entered allmulticast mode [ 30.214234][ T4713] bridge_slave_1: entered promiscuous mode [ 30.220827][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.222815][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.241833][ T4720] hsr_slave_0: entered promiscuous mode [ 30.242160][ T4720] hsr_slave_1: entered promiscuous mode [ 30.242337][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.242345][ T4720] Cannot create hsr debugfs directory [ 30.258372][ T4713] team0: Port device team_slave_0 added [ 30.269833][ T4713] team0: Port device team_slave_1 added [ 30.291172][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.291225][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.291284][ T4717] bridge_slave_0: entered allmulticast mode [ 30.296646][ T4717] bridge_slave_0: entered promiscuous mode [ 30.301025][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.301033][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.301045][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.316739][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.316767][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.316824][ T4717] bridge_slave_1: entered allmulticast mode [ 30.317339][ T4717] bridge_slave_1: entered promiscuous mode [ 30.333244][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.333253][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.333267][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.353070][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.354046][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.366360][ T4717] team0: Port device team_slave_0 added [ 30.367079][ T4717] team0: Port device team_slave_1 added [ 30.398547][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.398558][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.398574][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.399173][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.399179][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.399191][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.403697][ T4713] hsr_slave_0: entered promiscuous mode [ 30.404006][ T4713] hsr_slave_1: entered promiscuous mode [ 30.404212][ T4713] debugfs: 'hsr0' already exists in 'hsr' [ 30.404219][ T4713] Cannot create hsr debugfs directory [ 30.426260][ T4721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.427832][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.438473][ T4721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.439772][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.453881][ T4721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.455192][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.455417][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.455462][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.455514][ T4709] bridge_slave_0: entered allmulticast mode [ 30.455902][ T4709] bridge_slave_0: entered promiscuous mode [ 30.463134][ T4717] hsr_slave_0: entered promiscuous mode [ 30.463397][ T4717] hsr_slave_1: entered promiscuous mode [ 30.463563][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.463572][ T4717] Cannot create hsr debugfs directory [ 30.472521][ T4721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.473440][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.473711][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.473762][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.473862][ T4709] bridge_slave_1: entered allmulticast mode [ 30.474235][ T4709] bridge_slave_1: entered promiscuous mode [ 30.488648][ T4720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.491409][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.500865][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.500904][ T4720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.502159][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.502473][ T4720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.504400][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.511942][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.513626][ T4720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.514859][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.532582][ T4709] team0: Port device team_slave_0 added [ 30.535939][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.535970][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.536114][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.536143][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.539016][ T4709] team0: Port device team_slave_1 added [ 30.556720][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.556743][ T4720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.556829][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.556862][ T4720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.558411][ T4713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.561953][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.568107][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.568116][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.568130][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.568696][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.568703][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.568714][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.578350][ T4709] hsr_slave_0: entered promiscuous mode [ 30.578685][ T4709] hsr_slave_1: entered promiscuous mode [ 30.578882][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.578890][ T4709] Cannot create hsr debugfs directory [ 30.603524][ T4713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.605219][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.605535][ T4713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.606446][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.607232][ T4713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.608299][ T4713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.619786][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.630145][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.630172][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.630237][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.630268][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.640089][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.641464][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.645905][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.646179][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.646624][ T3382] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.647061][ T3382] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.659505][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.663932][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.663967][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.676003][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.676128][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.679214][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.680572][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.683559][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.690423][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.690448][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.696524][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.697672][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.698581][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.698873][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.699737][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.710272][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.710296][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.710705][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710740][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.734080][ T4720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.741376][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.749602][ T4721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.749615][ T4721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.776778][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.777877][ T4709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.779308][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.779864][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.780330][ T4709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.791206][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.793620][ T4709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.794687][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.797506][ T3382] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.797532][ T3382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.815679][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.815868][ T4709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.817110][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.819953][ T3382] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.819978][ T3382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.834742][ T1081] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.834770][ T1081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.847116][ T4713] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.847127][ T4713] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.858692][ T1081] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.858717][ T1081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.897911][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.899932][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.911912][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.916262][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.916286][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.917813][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.917835][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.985999][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.003836][ T4721] veth0_vlan: entered promiscuous mode [ 31.014957][ T4721] veth1_vlan: entered promiscuous mode [ 31.019748][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.026531][ T4721] veth0_macvtap: entered promiscuous mode [ 31.027670][ T4721] veth1_macvtap: entered promiscuous mode [ 31.044397][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.045436][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.097341][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.097353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.110852][ T4870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.110866][ T4870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.114338][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114563][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114725][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114830][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.182989][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.201199][ T4713] veth0_vlan: entered promiscuous mode [ 31.208626][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.216194][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.217616][ T4713] veth1_vlan: entered promiscuous mode [ 31.220773][ T4720] veth0_vlan: entered promiscuous mode [ 31.224860][ T4720] veth1_vlan: entered promiscuous mode [ 31.226920][ T4713] veth0_macvtap: entered promiscuous mode [ 31.228032][ T4713] veth1_macvtap: entered promiscuous mode [ 31.232311][ T4720] veth0_macvtap: entered promiscuous mode [ 31.247520][ T4721] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.249232][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.249971][ T4720] veth1_macvtap: entered promiscuous mode [ 31.250652][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.265448][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.266457][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.267926][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.268191][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.268248][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.282387][ T4709] veth0_vlan: entered promiscuous mode [ 31.282937][ T1081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.304582][ T4709] veth1_vlan: entered promiscuous mode [ 31.320001][ T4717] veth0_vlan: entered promiscuous mode [ 31.329084][ T4709] veth0_macvtap: entered promiscuous mode [ 31.330697][ T4717] veth1_vlan: entered promiscuous mode [ 31.339284][ T4717] veth0_macvtap: entered promiscuous mode [ 31.340841][ T4717] veth1_macvtap: entered promiscuous mode [ 31.347020][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.348028][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.378334][ T3382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.390673][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.390685][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.390783][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.390791][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.390957][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.390965][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.401628][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.401659][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.416172][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.416182][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.420083][ T4709] veth1_macvtap: entered promiscuous mode [ 31.432468][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.432497][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.432514][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.432531][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.432547][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.438899][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.439935][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.586161][ T4915] ======================================================= [ 31.586161][ T4915] WARNING: The mand mount option has been deprecated and [ 31.586161][ T4915] and is ignored by this kernel. Remove the mand [ 31.586161][ T4915] option from the mount to silence this warning. [ 31.586161][ T4915] ======================================================= [ 31.603483][ T4915] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.633156][ T4915] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 31.694155][ T51] Bluetooth: hci3: command tx timeout [ 31.694358][ T51] Bluetooth: hci1: command tx timeout [ 31.694513][ T51] Bluetooth: hci0: command tx timeout [ 31.694708][ T51] Bluetooth: hci4: command tx timeout [ 31.694912][ T51] Bluetooth: hci2: command tx timeout [ 31.730455][ T4909] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 31.730569][ T4909] overlayfs: d_ino too big (., ino=4611686018427387926, xinobits=3) [ 31.730663][ T4909] overlayfs: d_ino too big (spmi, ino=4611686018427389585, xinobits=3) [ 31.730677][ T4909] overlayfs: d_ino too big (gadget, ino=4611686018427391333, xinobits=3) [ 31.730689][ T4909] overlayfs: d_ino too big (genpd_provider, ino=4611686018427389329, xinobits=3) [ 31.730701][ T4909] overlayfs: d_ino too big (netdevsim, ino=4611686018427412208, xinobits=3) [ 31.730711][ T4909] overlayfs: d_ino too big (rpmsg, ino=4611686018427389625, xinobits=3) [ 31.730721][ T4909] overlayfs: d_ino too big (serio, ino=4611686018427391350, xinobits=3) [ 31.730731][ T4909] overlayfs: d_ino too big (ulpi, ino=4611686018427391285, xinobits=3) [ 31.730741][ T4909] overlayfs: d_ino too big (coreboot, ino=4611686018427391481, xinobits=3) [ 31.730750][ T4909] overlayfs: d_ino too big (iio, ino=4611686018427391560, xinobits=3) [ 31.735361][ T4870] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.735373][ T4870] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.745067][ T4870] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.745115][ T4870] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.745134][ T4870] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.745150][ T4870] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.778137][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.778150][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.886167][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.886180][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.896710][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.896723][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.050906][ T4928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.064924][ T4928] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 33.069511][ T4928] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 33.331299][ T4932] loop2: detected capacity change from 0 to 512 [ 33.377096][ T4932] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 33.377113][ T4932] FAT-fs (loop2): Filesystem has been set read-only [ 33.393202][ T4932] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 33.405562][ T4930] loop4: detected capacity change from 0 to 8192 [ 33.505675][ T4938] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 33.519075][ T4945] loop4: detected capacity change from 0 to 1024 [ 33.524697][ T4945] EXT4-fs: Ignoring removed oldalloc option [ 33.524710][ T4945] EXT4-fs: Ignoring removed orlov option [ 33.547907][ T4945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.776795][ T4711] Bluetooth: hci2: command tx timeout [ 33.776824][ T4711] Bluetooth: hci4: command tx timeout [ 33.776840][ T4711] Bluetooth: hci0: command tx timeout [ 33.776855][ T4711] Bluetooth: hci1: command tx timeout [ 33.776867][ T4711] Bluetooth: hci3: command tx timeout [ 33.792628][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:951: inode #15: comm syz.4.10: lblock 0 mapped to illegal pblock 0 (length 6) [ 33.794211][ T4945] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 33.794229][ T4945] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.794229][ T4945] [ 33.795478][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: comm syz.4.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.799810][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: comm syz.4.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.800676][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: comm syz.4.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.816969][ T4945] EXT4-fs error (device loop4): ext4_map_blocks:867: inode #15: comm syz.4.10: lblock 0 mapped to illegal pblock 0 (length 1) [ 33.817331][ T4945] EXT4-fs error (device loop4): ext4_ext_remove_space:2977: inode #15: comm syz.4.10: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 33.848534][ T1081] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm kworker/u8:6: bg 0: block 112: padding at end of block bitmap is not set [ 33.850188][ T1081] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 33.850203][ T1081] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.850203][ T1081] [ 33.850211][ T1081] EXT4-fs (loop4): Total free blocks count 0 [ 33.850218][ T1081] EXT4-fs (loop4): Free/Dirty block details [ 33.850226][ T1081] EXT4-fs (loop4): free_blocks=0 [ 33.850235][ T1081] EXT4-fs (loop4): dirty_blocks=32 [ 33.850241][ T1081] EXT4-fs (loop4): Block reservation details [ 33.851414][ T4962] loop0: detected capacity change from 0 to 512 [ 33.856558][ T4962] EXT4-fs (loop0): Test dummy encryption mode enabled [ 33.856834][ T4962] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 33.947243][ T4964] ================================================================== [ 33.947256][ T4964] BUG: KASAN: slab-use-after-free in ecryptfs_write_tag_70_packet+0xea0/0xedc [ 33.947273][ T4964] Read of size 4 at addr ffff0000cf878498 by task syz.4.13/4964 [ 33.947281][ T4964] [ 33.947285][ T4964] CPU: 1 UID: 0 PID: 4964 Comm: syz.4.13 Not tainted syzkaller #0 PREEMPT [ 33.947294][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/31/2026 [ 33.947300][ T4964] Call trace: [ 33.947303][ T4964] show_stack+0x2c/0x3c (C) [ 33.947314][ T4964] __dump_stack+0x30/0x40 [ 33.947323][ T4964] dump_stack_lvl+0xd8/0x12c [ 33.947330][ T4964] print_address_description+0xb0/0x238 [ 33.947342][ T4964] print_report+0x68/0x84 [ 33.947350][ T4964] kasan_report+0x8c/0xc4 [ 33.947362][ T4964] __asan_report_load_n_noabort+0x1c/0x28 [ 33.947373][ T4964] ecryptfs_write_tag_70_packet+0xea0/0xedc [ 33.947382][ T4964] ecryptfs_encrypt_and_encode_filename+0x3e8/0x7ac [ 33.947391][ T4964] ecryptfs_lookup+0x19c/0x694 [ 33.947402][ T4964] lookup_open+0x7e0/0x1198 [ 33.947414][ T4964] path_openat+0x4f8/0x1910 [ 33.947424][ T4964] do_file_open+0x1c8/0x2e8 [ 33.947434][ T4964] do_sys_openat2+0x114/0x1ec [ 33.947442][ T4964] do_sys_open+0xb0/0xe0 [ 33.947450][ T4964] __arm64_sys_openat+0xa8/0xc4 [ 33.947457][ T4964] invoke_syscall+0x98/0x244 [ 33.947466][ T4964] el0_svc_common+0xec/0x23c [ 33.947473][ T4964] do_el0_svc+0x4c/0x5c [ 33.947481][ T4964] el0_svc+0x60/0x1d8 [ 33.947492][ T4964] el0t_64_sync_handler+0x44/0x104 [ 33.947501][ T4964] el0t_64_sync+0x198/0x19c [ 33.947510][ T4964] [ 33.947512][ T4964] Allocated by task 4964: [ 33.947516][ T4964] kasan_save_track+0x40/0x78 [ 33.947524][ T4964] kasan_save_alloc_info+0x40/0x50 [ 33.947534][ T4964] __kasan_kmalloc+0x9c/0xb4 [ 33.947541][ T4964] __kvmalloc_node_noprof+0x3e0/0x7fc [ 33.947549][ T4964] __arm64_sys_add_key+0x2e0/0x43c [ 33.947558][ T4964] invoke_syscall+0x98/0x244 [ 33.947564][ T4964] el0_svc_common+0xec/0x23c [ 33.947570][ T4964] do_el0_svc+0x4c/0x5c [ 33.947575][ T4964] el0_svc+0x60/0x1d8 [ 33.947582][ T4964] el0t_64_sync_handler+0x44/0x104 [ 33.947590][ T4964] el0t_64_sync+0x198/0x19c [ 33.947597][ T4964] [ 33.947598][ T4964] Freed by task 4964: [ 33.947601][ T4964] kasan_save_track+0x40/0x78 [ 33.947620][ T4964] kasan_save_free_info+0x54/0x6c [ 33.947629][ T4964] __kasan_slab_free+0x74/0xa4 [ 33.947637][ T4964] kfree+0x188/0x658 [ 33.947642][ T4964] kvfree+0x30/0x40 [ 33.947649][ T4964] kvfree_sensitive+0x30/0x40 [ 33.947656][ T4964] __arm64_sys_add_key+0x3cc/0x43c [ 33.947663][ T4964] invoke_syscall+0x98/0x244 [ 33.947669][ T4964] el0_svc_common+0xec/0x23c [ 33.947675][ T4964] do_el0_svc+0x4c/0x5c [ 33.947681][ T4964] el0_svc+0x60/0x1d8 [ 33.947688][ T4964] el0t_64_sync_handler+0x44/0x104 [ 33.947696][ T4964] el0t_64_sync+0x198/0x19c [ 33.947702][ T4964] [ 33.947703][ T4964] The buggy address belongs to the object at ffff0000cf878400 [ 33.947703][ T4964] which belongs to the cache kmalloc-256 of size 256 [ 33.947710][ T4964] The buggy address is located 152 bytes inside of [ 33.947710][ T4964] freed 256-byte region [ffff0000cf878400, ffff0000cf878500) [ 33.947718][ T4964] [ 33.947720][ T4964] The buggy address belongs to the physical page: [ 33.947724][ T4964] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f878 [ 33.947731][ T4964] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 33.947737][ T4964] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 33.947746][ T4964] page_type: f5(slab) [ 33.947753][ T4964] raw: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 33.947760][ T4964] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 33.947768][ T4964] head: 05ffc00000000040 ffff0000c0001b40 dead000000000100 dead000000000122 [ 33.947774][ T4964] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 33.947781][ T4964] head: 05ffc00000000001 fffffdffc33e1e01 00000000ffffffff 00000000ffffffff [ 33.947788][ T4964] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 33.947792][ T4964] page dumped because: kasan: bad access detected [ 33.947795][ T4964] [ 33.947796][ T4964] Memory state around the buggy address: [ 33.947800][ T4964] ffff0000cf878380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.947806][ T4964] ffff0000cf878400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.947811][ T4964] >ffff0000cf878480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 33.947815][ T4964] ^ [ 33.947819][ T4964] ffff0000cf878500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.947824][ T4964] ffff0000cf878580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 33.947828][ T4964] ================================================================== [ 33.947832][ T4964] Disabling lock debugging due to kernel taint [ 35.831513][ T51] Bluetooth: hci3: command tx timeout [ 35.831539][ T51] Bluetooth: hci1: command tx timeout [ 35.831552][ T51] Bluetooth: hci0: command tx timeout [ 35.831564][ T51] Bluetooth: hci4: command tx timeout [ 35.831575][ T51] Bluetooth: hci2: command tx timeout [ 37.911531][ T51] Bluetooth: hci4: command tx timeout [ 37.911544][ T4711] Bluetooth: hci2: command tx timeout [ 37.911552][ T4710] Bluetooth: hci3: command tx timeout [ 37.921518][ T4710] Bluetooth: hci0: command tx timeout [ 37.921538][ T51] Bluetooth: hci1: command tx timeout [ 41.555584][ T4858] rxe_eth0 speed is unknown, defaulting to 1000