last executing test programs: 29.055853673s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x40080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x3e, &(0x7f00000040c0)=0x7, 0x4) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x40, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, [{0x2, 0x1}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xf446, 0x9}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x16}]}, 0x4c}}, 0x0) fsync(r0) 28.450434229s ago: executing program 4 (id=8): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080), 0x4, 0x526, &(0x7f0000000700)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='1', 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x4, 0x200, &(0x7f0000000880)="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"}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000080)={0x1, 0xfd, 0xa, &(0x7f0000000000)={0x21, "f4e1a230beb44f443ea67e485b745ea95df8c005af07677d18bc00"}}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) pwrite64(r3, &(0x7f0000000180)="95", 0xffaf, 0x10001) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r3, 0x1, 0x3, 0x4, 0x1000000000001}) 27.589438849s ago: executing program 4 (id=13): r0 = socket$rxrpc(0x21, 0x2, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r2, 0x3b71, &(0x7f0000000240)={0x20, 0x2, 0x0, 0x8000, 0xafff}) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) syslog(0x2, &(0x7f0000000bc0)=""/27, 0x1b) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) socket$rxrpc(0x21, 0x2, 0x2) r3 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r3, &(0x7f0000000700)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x51, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}, 0x71}}}, 0xa0) 25.065848501s ago: executing program 4 (id=44): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x51, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}, 0x71}}}, 0xa0) 25.015740915s ago: executing program 32 (id=44): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=""/167, 0xa7}], 0x1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000140)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, @in6={0xa, 0x51, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}, 0x71}}}, 0xa0) 18.314489214s ago: executing program 2 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x1, 0x11, r2, 0x0) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) (async) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) (async) syz_genetlink_get_family_id$team(&(0x7f0000000100), r0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregset(0x4205, r3, 0x408, &(0x7f0000000000)={0x0}) (async) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000003380), 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x67d, &(0x7f0000000380)=""/99) (async) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000000)={0xc2c, 0x101, 0x1, {0x6, @pix={0x80000001, 0x2, 0x3132564e, 0x7, 0x9, 0x7, 0x5, 0x7f, 0x0, 0x8, 0x2, 0x4}}, 0xfff}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="fb", 0x1}], 0x1}, 0x8040) recvmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4083, 0xff3}], 0x1, 0x0, 0x61}, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000840)=[{&(0x7f0000000400)=""/92, 0x5c}], 0x1, 0x9, 0x3) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cadadbdf28aacf3a7b4fa04785dcd11dd2a717c0bea8dc1d0c8aea462d717f2716d4579c496a16043ae5c1ab0e24fe39a1f1658b3668f3132a9e7fe43308619815844938e48d3ecbe4864ce7e50044295ac7e2c63a8953891ad0c5e19d0b09626124f0ae", @ANYRES32=r5, @ANYBLOB="453c0251"], 0x20}, 0x1, 0x400000000000000, 0x0, 0x4c000}, 0x40010) 18.192806326s ago: executing program 2 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0xf8, 0x30, 0x12f, 0x0, 0x0, {}, [{0xe4, 0x1, [@m_vlan={0xe0, 0x12, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x413}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x8f1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x6, 0x10000000, 0xe, 0xfff}, 0x3}}]}, {0x88, 0x6, "75735b9854faaf1f71fa0fce9ecf263722fcdfb8195d817faf45d6829a8ea5c01d4aceb89870e3ed22f311750ad1e0ecd6c599c222cd3ac8e922f278213029105c7cd79ceef4155f186064e2c670017d0a9f8cf96b22d97e6eb36538e320c0c13031c5c26b96670ec35524d60b95bf3209570ff573a89fbed97e92a27247aeba012a2ea1"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xf8}}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map, 0x2d, 0x7d8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000210081044e810382db44b9040a00007ffe7f0500002015000600142603600e1209000600fe7f00007f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ae5abb3dbe08141a90bffece0b42a9ecbee5de6ccd40df8e4edef3d93c42a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xcb}, {&(0x7f0000000080)="2947ccfbab120bb6a8b56c98e1", 0xd}], 0x2}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00001, 0x9c, '\x00', @string=0x0}}) 18.12432206s ago: executing program 2 (id=121): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000140), 0x1, 0x558, &(0x7f0000000680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x153042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000020601010000000000000000000000ffffffff000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) syz_mount_image$vfat(&(0x7f0000000700), &(0x7f0000001200)='./bus\x00', 0x304982f, 0x0, 0x3, 0x0, &(0x7f0000000240)) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x4404, 0x0, 0x2, 0x0, 0x0) 17.961762s ago: executing program 2 (id=126): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0/ref_tracker\x00'}) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x1c2) pipe2(&(0x7f00000011c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$FUSE_INIT(r1, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000}}, 0x50) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x4041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0/ref_tracker\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000001240)='./file0/ref_tracker\x00', r2, &(0x7f0000001280)='./file0/ref_tracker/file0\x00', 0x5) getdents64(r2, &(0x7f0000000100)=""/1000, 0x3e8) r3 = openat(r2, &(0x7f00000012c0), 0x0, 0x70) read(r3, &(0x7f0000000580)=""/216, 0xd8) 17.86609171s ago: executing program 2 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)="3c5c583ecd2d036a2762bb626c65640a", 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x800) (async) socket(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) wait4(0x0, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000140)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x6) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000180)={'raw\x00', 0x4, "6dcf379d"}, &(0x7f00000002c0)=0x28) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x28, r5, 0x1, 0x5, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 17.701320902s ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c000280080001"], 0x54}, 0x1, 0x300, 0x0, 0x74040017}, 0x80) 16.708806375s ago: executing program 1 (id=150): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580)={[{@grpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x10}}, {@nodioread_nolock}, {@test_dummy_encryption}, {@nouid32}, {@errors_continue}, {@minixdf}, {@orlov}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='|', 0x1, 0xfffffffffffffffe) r2 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r1, r0}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x58342, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1058e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@nombcache}]}, 0x6, 0x623, &(0x7f0000000e00)="$eJzs3c9rG1ceAPDvSJZjJ951sizLJuyyhj0ksMSxsmGz7aVJemgOgQaaQyk9xMR2aqL8IHagdgNxoIcWWiil11Jy6T/Qe8m9t1Joe+u5kJaS0pa2RGWkkSPLki1sS0o8nw/ImvfeWO99NX6aNzN+mgByayL9UYg4GPHoYhIx3lQ2FvXCiWy9hz/cvpQ+kqhWX/o+iSTLa6yfZM/7ssRIRHx+JuIvxfX1LiwtX5muVOvuRBxbvHrj2MLS8tH5q9OXZy/PXisf//+Jk1PPlE+UdyTOfdnz2XMv/uPdN1/739wXlaNJnIoLpTdmoiWOnTIRE/EoC7E5fygiTqYLbd6Xp80uCCHXitnfYyki/hbjUayl6sZj/p2BNg7oqWoxogrkVKL/Q041xgGNY/vujoMv9HhU0j8PTtcPgNbHP1Q/NxIjtWOjvQ+TpiOjodq5jf07UH9ax++3D32YPmLNeYifV7fO0A7U08nK3Yj4e7v4k1rb9tciTeMvrGlHEhFTETGcte/5bbQhaVruxXmYjWw1/kJEnMqe0/wzW6x/oiXd7/gByKf7p7Md+Uqaerz/S8cejfFPrBv/1K8Nte67tmLQ+7/O47/G/n6kdo680DIOS8cs59u/ZKk145u3z77fqf7m8V/6SOtvjAX74cHdiEMt8b+VBpuNf9L4kzbbP13l4qnu6njhy+/OdiobdPzVexGH2x7/PB6Vpkut1ydHs7LyifKxufnK7FT9Z9s6Pv3s1Y871T/o+NPtv7dD/E3bv9D6e+l7cqPLOj45f+9qp7KxTeMvfDuc1I83h7Oc16cXF2+WI4aTc9kq9QtZtfzjG7elsU7jNdL4j/y7ff9f8/d/d+3rjDY+Mrtw4+UrDzuVbWX7N11MflTtsg2dpPHPbL791/X/NO+91dSdDev46ZVb/+xUtlH8o9uMDQAAAAAAAPKmULsGmxQmV5cLhcnJ+nzZv8beQuX6wuJ/5q7fujYTcaT2/5ClQuNK93g9naTpcvb/sI308Zb0fyPiQER8UBytpScvXa/MDDp4AAAAAAAAAAAAAAAAAAAAeELsy+b/N+5T/WOxPv8fyIle3mAOeLLp/5Bftf6/7hZPQB7Y/0N+6f+QX/o/5Jf+D/ml/0N+6f+QX/o/5Jf+DwAAAAC70oF/3f86iYiVZ0drj9RwVmZGEOxupUE3ABiY4qAbAAzM6qV/g33Ina7G/79mXw7Y++YAA5C0y6wNDqobd/77bX8TAAAAAAAAAAAAAOiBwwfbz/9PzA2GXc+0P8ivbcz/99UB8JTz1f+QX47xgc1m8Y90KjD/HwAAAAAAAAAAAAD6Zqz2SAqT2VzgsSgUJicj/hQR+6OUzM1XZqci4s8R8VWxtCdNlwfdaAAAAAAAAAAAAAAAAAAAANhlFpaWr0xXKrM3mxd+W5ezuxcad0HtQ13PRdcrN2651v+3ZTSttZFTiui+zb1e2JO9J9t5naGFpeXkl2pNErEST06AbeKKkQG1Z9OPjuGefSgBAAAAAAAAAAAAAAAAAEBONc09bu/QR31uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03+P7//duYdAxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPpz8CAAD//6kMOeE=") openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x32100, 0x0) r3 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r3, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040f040a0105bd"], 0x7) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) io_setup(0x20fe, &(0x7f00000001c0)) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f0000000300)={0x3b, r5}) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000240)={0x28, 0x3, r5, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5}) unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r6 = io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x7, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x4, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) io_uring_register$IORING_REGISTER_FILES(r6, 0x20, &(0x7f0000000000)=[r6], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYBLOB="e18284af80c70e9113c63224dfa33f38ce20a753d0a26a800c1047a49bc19037239c2bd131c2d2ba022c7b892cd3ed438124e6d70ad8fb642fa1f4170e0276ed0ec783a65bc107a21c9faa27af02cc5d8b0fd7927179f6f9b6df84f55bf8c07573b5392627b1270c43deac59f98faa6d42f44c9cb2ee44eb7829fbc877226115a63da003bb2d04018e7a905ece8f85d0d96d4c8e90ef470623b8218283112033315127", @ANYRESOCT], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x48}, 0x48) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 16.632749971s ago: executing program 0 (id=152): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) keyctl$get_persistent(0x16, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a05000000000000000000010000000900010073797a300008000048000000030a01020000000000000000010000000900030073797a320000000014000480080043c798a4000008000140000000000900010073797a3000000000080007006e61740040000000060a010400000000000000000100000008000b40000000000900010073797a300000000018000480140001800a000100726564697200000004000280140000001100010000000000000000000000000a"], 0xd0}}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x15, @multicast1}, @timestamp}}}}, 0x0) 16.05595268s ago: executing program 1 (id=155): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x1c8, 0x130, 0x0, 0x1c8, 0x1c8, 0x320, 0x320, 0x320, 0x320, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x288}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0xffffffff}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x1c8}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x418) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0xfffffffffffffe11, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0xfc68, &(0x7f00000005c0)=[{&(0x7f00000003c0)="a4af70ee492afaae50a7fa4c4ff2b0bf88940ae51bcd16ae2e8e1ebdcd708959e34a170fe4ad13078c2b49eff17398daaaa6dfe974e9d5959da1bd7736e14cea01368e8b0b6be30f19050f02e2fdf62e3cf56095cfde871597604fbba79abef08b23b7212c3372940ef5a319e820635efc547b56f8bf0ac77d1507bea04878769fd1ef716f3c8afc32faeb40cc8d8541d15e035aab4653d30cf16aa359a165c1aefa05324297d73ae40923a8316c365189cb07a7758507592ebc75cf4901dc756cfa", 0xc2}, {&(0x7f00000004c0)="922fdaeab06f598e33097984f747da934bcd1234c9b7040ff8d468e4d6047db38754ff28b0dae4b53c09737d7713e9ea6c89faf4187a007fd8713ba34f2086acb5ad8bedd97897d2807b700005d848731434bc99c6a58b210edbd809c66e688c38c38348ebf47fa6ff72ace240425222f36772ab8647630e8397af5a51fed060feae63e3963ef1560a45de0801407f809000000200", 0xff2d}, {&(0x7f0000000580)="1719c8c5e5b287ea5e8527d1b34bbd6d88e4f7a757b85f5b1f8135cf7c1da1b1cd37efb43d8d", 0x26}], 0x3}}], 0x2, 0x24040855) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000380)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) tkill(r4, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_emit_vhci(0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x16) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="757466383d312c6e66733d6e6f7374616c655f726f2c756e695f786c6174653d312c726f6469722c7379735f696d6d757461626c652c0083e16cab58add69e339c1da2b3e4514c4dee394ebde409608070d100ae1634c0490023f9abaf31756e7a4d44e34e6e2bc3974c9f17b914bec5af0142b87d573469a1633b8cbbf91cd9437dded402268962f948912a388d1eb9d2f31b125524f76ec98cfd0d8a3befce455524c1740f450baca546c7455ca97680b4765865d794c655b88f1fbea0f41b661af34ddd20feaddacd3775f677bc1327f067b5dd7d7a9a4d95"], 0xfc, 0x250, &(0x7f0000000740)="$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") 15.698306349s ago: executing program 0 (id=159): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x40080) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$dvb_demux(&(0x7f0000000100), 0x9, 0x8000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = gettid() sched_setscheduler(r3, 0x4d55c2c585f99658, &(0x7f0000000000)=0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r1, 0x4004e502, 0x0) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x3c}}, 0x40080) (async) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40041}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) syz_open_dev$dvb_demux(&(0x7f0000000100), 0x9, 0x8000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) gettid() (async) sched_setscheduler(r3, 0x4d55c2c585f99658, &(0x7f0000000000)=0x1) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) 15.616454582s ago: executing program 0 (id=160): r0 = syz_io_uring_setup(0x34bc, &(0x7f0000000140)={0x0, 0x8550, 0x800, 0x1, 0xe}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1e, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000300)='./file0\x00', 0x1591c80d49614632, 0x100}) (async) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 15.533102034s ago: executing program 0 (id=161): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES8=r2], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, r3, 0x25, 0x2, @val=@netkit={@void, @value=r4}}, 0x1c) syz_emit_ethernet(0xeff, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60fa000000481101fe800000000000000000000000000000000000004000000000aa4e0c884aca67b4c50cc1200e22003e9078030000000600000000000000f267636d01dbe5712c1c941e1cdafbbb43f09c28e13806007238671fdc05127f0527b6f78670dfc39a195f0000000000004b0f4b02b95cbf399fc98a83dbcedbee25df8d416ecde2bc10a1954dff0800d94c93c39cfd4f5e2fdbea8971d07f4f3e421f1f23c97e5710848dff5c6151"], 0x0) recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/41, 0x29}, {&(0x7f00000004c0)=""/54, 0x36}, {&(0x7f0000000500)=""/85, 0x55}, {&(0x7f0000000580)=""/220, 0xdc}, {&(0x7f0000000680)=""/213, 0xd5}, {&(0x7f0000000780)=""/27, 0x1b}], 0x6, &(0x7f0000000840)=""/117, 0x75}, 0x40000001) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r5 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000280)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000100)=0x4000) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00') syz_genetlink_get_family_id$nfc(0x0, r6) setsockopt$inet_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}, '\x00', "efffffffffff868b86c8005f0b00a100", "f8ffffff"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="c5193c7bb7e710453d291ed3b5f918087e9c55195d574af04659433f016f01794cb0750f2839a7f74d0c0200c0d39e947f12db0b796e5988b41bb62d8bd0a5021412414e3c3b0f16bd48a357f7c58a28016516a75de62173d13c6ba860d1b2391884888476be09380000000000000000d263b322d0d4728369", 0x10}], 0x100002b0, &(0x7f0000000180)}, 0x2c005) recvmsg$kcm(r5, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002300)=[{0x0}, {&(0x7f00000020c0)=""/235, 0xeb}, {0x0}], 0x3}, 0x2) 14.653197712s ago: executing program 0 (id=172): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000) (async) preadv2(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/74, 0x4a}], 0x1, 0x0, 0x7e, 0x17) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x9) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) (async) wait4(r5, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000280)=0x1000) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f00000020c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x8, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x5, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x5, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0804000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x4, 0x7, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x8000, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0xe, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0xfffffffd, 0xf, 0x3, 0xffffff85, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88, 0x0, 0x0, 0x0, 0x7ff], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0x2, 0x4, 0xfffffffc, 0xffffffff, 0x0, 0x2, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x1, 0xfffffffd, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000001b00)={'syz1\x00', {0x401, 0x9, 0xf02, 0x5}, 0x4f, [0xff, 0x1, 0x7, 0x9, 0x7fff, 0xffffff80, 0x66f, 0x4, 0x6, 0xf, 0x1, 0x3, 0xa, 0x8, 0x0, 0x1, 0xc0, 0xd6, 0x67fffe, 0x5, 0x3, 0xfffff800, 0x10, 0x8, 0xffff, 0x5, 0x3, 0xf, 0x2, 0x3, 0x5, 0x3, 0x80, 0x4, 0xff, 0x0, 0x81, 0x0, 0x21, 0x7, 0x40, 0x9, 0x81, 0x5, 0x4, 0xffffff81, 0xffffffff, 0x554, 0x9, 0x6, 0xffffffff, 0x2, 0x6790, 0x0, 0xc63, 0xb92, 0x9, 0x6, 0x800000, 0x0, 0xffffffff, 0xfff, 0x2, 0x9], [0xffffff7b, 0x0, 0x3f, 0xc8, 0x9, 0x10, 0x3, 0xff, 0x9, 0x2, 0xffffff4d, 0x4, 0x16e0, 0x2, 0x9517, 0x2, 0x100, 0x800, 0x3, 0x5, 0x29, 0x4, 0x7, 0xb21, 0x8, 0x1, 0xaaa, 0x6, 0xfff, 0xb, 0x8001, 0x3cbd, 0x5, 0x4, 0x7, 0x1, 0x5, 0x0, 0xa, 0x1d, 0x7, 0x1, 0x10001, 0x5, 0x3, 0x7, 0x6, 0x4, 0x7ff, 0x0, 0x0, 0x1, 0x81, 0x6, 0x35, 0x10000, 0x0, 0x6, 0x9, 0x1, 0x0, 0x2, 0x7fffffff, 0x3], [0x5, 0x20000, 0x6, 0xfffffffe, 0x6, 0x6, 0x9, 0x80, 0x0, 0xfffffffd, 0x6, 0x2, 0x8, 0x8, 0x5, 0x40, 0xf329, 0x9, 0xe, 0x8, 0x7, 0xfff, 0x1000, 0x4, 0x1, 0x6, 0x1, 0xfffffffd, 0xfffff001, 0x9, 0x6, 0xfffffb93, 0x10000, 0x7, 0x80000002, 0x1, 0x5, 0xd, 0x200000, 0x101, 0x75095896, 0x9d, 0x7, 0x2, 0x9, 0x7, 0xfffffffe, 0x0, 0x3, 0x6, 0x0, 0x41a5, 0xe7, 0x12, 0x9a, 0x8e, 0xfffff7f1, 0x800, 0x4, 0x1f4e, 0xecb, 0x40, 0x1000, 0xaaf], [0x4, 0x7, 0x6, 0x4ee3ae5c, 0x7f, 0x0, 0xf2c, 0x6, 0x9, 0x0, 0x9, 0x7, 0x2, 0x7f00000, 0xffff, 0x2, 0x3, 0xeb, 0x4, 0xfffffff7, 0x3, 0xfffffff8, 0x5, 0x9, 0x0, 0xd, 0x3, 0x5, 0x7, 0x1, 0x3, 0xe2, 0x101, 0xf, 0xa, 0x1, 0x3d9, 0xef9, 0x9, 0x9, 0xfffffffe, 0x88a1, 0x9f, 0xb, 0x7, 0x800, 0x1, 0xff, 0x80000000, 0x1, 0x81, 0x9, 0xffffffff, 0xc8000000, 0x10000, 0x6, 0x4, 0x4, 0x1, 0x400, 0x7, 0x23e1, 0x3, 0x8]}, 0x45c) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000c1001000000000001c000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) (async) syz_open_dev$usbmon(&(0x7f0000000040), 0x5, 0x111000) 14.619710355s ago: executing program 1 (id=173): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x1, 0x87, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r7, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60fb6809001b2f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88dff00000006000000000800000086dd88a888"], 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) unshare(0x64000600) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x80}, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000500)='./file1\x00', 0x804, &(0x7f00000000c0)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c73686f727466383d312c757466383d312c73686f72746e616d653d6d697865642e04000072746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c696f636861727365743d63703835302c696f636861727365743d63703835352c73686f72746e616d653d6c6f7765722c00"], 0x1, 0x27b, &(0x7f0000000280)="$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") ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x99) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SEND={0x1a, 0x22, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x5}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") io_uring_enter(r0, 0x1, 0x1, 0x5, 0x0, 0x0) 14.111049028s ago: executing program 0 (id=175): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff9) ioctl$TUNGETVNETLE(r0, 0x8010743f, 0x0) 13.926753081s ago: executing program 33 (id=175): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101180, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff9) ioctl$TUNGETVNETLE(r0, 0x8010743f, 0x0) 13.721447227s ago: executing program 1 (id=178): renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) 13.657430199s ago: executing program 1 (id=179): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)=0x10) mknodat$loop(r0, &(0x7f00000000c0)='./file0\x00', 0x80, 0x1) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") (async) r3 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) setxattr$smack_xattr_label(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='security.SMACK64\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='l'], 0x9, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000002300)) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) mknodat$null(r0, &(0x7f00000001c0)='./file0\x00', 0x1, 0x103) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000500)={0x80}) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) (async) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000000100)=r7, 0x4) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r8, @ANYBLOB="01000000010000001c00696467650000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x28004800) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=r3, @ANYRES32=r8, @ANYBLOB="01000000010000001c00696467650000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x28004800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000000008050000000000000000000000007a3100000000050003003a0000000c00048008000140000000021935c80d1001328f2aec2ff0202cf858154d205fe064364b6a765cc4d414365c9200c16d41f5da467262ae48013ff28c7fc617830a90fc0091d7b6f787786dc15900f1000000000000000000000000000000fc00f081d9b4289d35f459a1ac8bcdd85f2050392dee3e9321108307bbbfdb350c57d6d733f2297373da51bbd8"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x805) r9 = epoll_create1(0x0) epoll_pwait(r9, &(0x7f0000000000)=[{}], 0x1, 0x6e, 0x0, 0x0) sendto$packet(r1, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 12.773901314s ago: executing program 1 (id=183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000e5000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000100)={0x1, 0x0, 0x2, 0x6dd, 0x10, 0x4b040c91, 0x10, 0x4, 0x1d, 0x8, 0x20, 0x401, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=ANY=[@ANYBLOB="20000000000801010000000000000000030000820f00000073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20024054}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000a3e6470f"], 0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x2, 0x10001}) preadv(r5, &(0x7f0000001400)=[{&(0x7f00000015c0)=""/207, 0xcf}], 0x1, 0x10000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xb0, 0xa, 0x148, 0xb0, 0x60, 0x1e0, 0x2a8, 0x2a8, 0x1e0, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00', {}, {}, 0x2d}, 0x0, 0x70, 0xb0, 0x0, {0x200003ae, 0x7f00}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x9, "e7cfa59b06be2a27f6394deea4fe91c3d706f80e3439be1ee22cbc653caf"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connbytes={{0x38}, {[{0x7}, {0x10001}], 0x1, 0x2}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x6, 0x0, 0xc, 0x1, 0x1], 0x1}, {0x4, [0x2, 0x1, 0x4, 0x2, 0x2]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2d8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000300)={@loopback, @multicast1, r6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000001811a11f0000000600efca000000000000f4191174ba566db59f7809b6b5a0a0", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.691556031s ago: executing program 6 (id=227): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC], 0x2d, 0xfffffffffffffff9) (async) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) (async) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) (async) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174652064656661756c7420747275737465643aa9"], 0x20, 0xfffffffffffffffd) (async) r2 = add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c0000000200000044a300000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000600"/112, 0x70, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) keyctl$instantiate(0xc, r2, 0x0, 0x0, r1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000002c0)="6123254b24b97017dc618865edc5100c", 0x10, 0x6) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) (async) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x8) r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$xdp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000009, 0x8013, 0xffffffffffffffff, 0x180000000) (async) writev(r4, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r5) (async) r6 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r6, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) (async) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r6, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) (async) timer_create(0x5, &(0x7f0000000300)={0x0, 0x13, 0x2}, &(0x7f0000000380)) (async) recvmmsg(r6, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f40)=""/166, 0xa6}, 0x401}], 0x1, 0x102, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x763200, 0xa) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000080)={@desc={0x4100, 0x0, @desc3}}) 3.817885067s ago: executing program 6 (id=231): r0 = semget$private(0x0, 0x3, 0x380) semtimedop(r0, &(0x7f0000000280)=[{0x0, 0x3, 0x1800}], 0x1, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) (async, rerun: 32) add_key(0x0, 0x0, &(0x7f0000000080)="5597", 0x2, 0xffffffffffffffff) (async, rerun: 32) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x3}, 0x10) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) (async, rerun: 64) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') (rerun: 64) ioctl$KDSKBLED(r6, 0xc0686611, 0x20000081) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x165) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r8}, 0xc) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./trace/error_log\x00', 0x200001, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./trace\x00', 0x123040, 0x109) (async) r10 = openat(r9, &(0x7f0000000200)='./trace\x00', 0x2cbc3, 0x91) lseek(r10, 0xf, 0x3) (async) openat$cgroup_ro(r10, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x0, 0x0) 3.655541986s ago: executing program 6 (id=233): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_SENDMSG_ZC={0x30, 0x8, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x8356, 0xc110, 0x0, {0x1}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) sendfile(r4, r4, 0x0, 0x6) (async) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/net/rpc/auth.unix.ip/flush\x00', 0x2, 0x0) read$FUSE(r5, 0x0, 0x0) (async) io_uring_enter(r0, 0x2000, 0xfffffffa, 0x9, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000980)='.\x00', 0x800, 0x0) fcntl$lock(r6, 0x25, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff}) (async) r7 = socket(0x28, 0x5, 0x0) connect$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) (async) recvmmsg$unix(r7, &(0x7f0000002e00)=[{{&(0x7f0000000240)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/100, 0x64}], 0x2, &(0x7f0000001a80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001b00)=@abs, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001b80)=""/206, 0xce}, {&(0x7f0000001c80)=""/136, 0x88}, {&(0x7f0000001d40)=""/203, 0xcb}, {&(0x7f0000001e40)=""/212, 0xd4}, {&(0x7f0000001f40)=""/126, 0x7e}], 0x5}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000002040)=""/97, 0x61}, {&(0x7f00000020c0)=""/137, 0x89}], 0x2, &(0x7f00000021c0)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002200)=""/180, 0xb4}, {&(0x7f00000022c0)=""/71, 0x47}, {&(0x7f0000002340)}, {&(0x7f0000002380)=""/62, 0x3e}], 0x4, &(0x7f0000002400)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50}}, {{&(0x7f0000002480)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002500)=""/254, 0xfe}, {&(0x7f0000002600)=""/179, 0xb3}, {&(0x7f00000026c0)=""/36, 0x24}], 0x3, &(0x7f0000002740)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002780)=""/206, 0xce}], 0x1, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{&(0x7f0000002a00), 0x6e, &(0x7f0000002b40)=[{&(0x7f0000002a80)=""/139, 0x8b}], 0x1, &(0x7f0000002b80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000002c00), 0x6e, &(0x7f0000002d80)=[{&(0x7f0000002c80)=""/59, 0x3b}, {&(0x7f0000002cc0)=""/157, 0x9d}], 0x2, &(0x7f0000002dc0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x8, 0x100, &(0x7f0000003000)) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) 3.373102067s ago: executing program 6 (id=236): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r1, &(0x7f0000000100), 0x0, 0x5412, 0x8, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3, 0xffffffffffffffff, 0x2000000}, 0xc) sendfile(r0, r0, 0x0, 0x1000000000007) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x49) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)={'ah\x00'}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000001180)='maps\x00') ioctl$KDSKBLED(r6, 0xc0686611, 0x20000081) pwrite64(r5, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$sysctl(r4, &(0x7f0000000080)='1\x00', 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000001818110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007baaf8fe00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400ffb0b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bf080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa20000000000000702000000feffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) 3.165487659s ago: executing program 6 (id=237): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0x1, &(0x7f0000000080)="f982fc4fb1298b2e3130329066dd745b57fc86", &(0x7f00000000c0)=""/26}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x52b, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x1c8, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x49b2}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x2}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x51b5}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x100}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x7fff}, {0x8, 0x13, 0x6}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff7}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0x40}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa23c}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x3ff}, {0x5, 0x14, 0x1}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 2.686262846s ago: executing program 34 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c000280080001"], 0x54}, 0x1, 0x300, 0x0, 0x74040017}, 0x80) 2.634342353s ago: executing program 6 (id=241): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x202, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x4, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}}}}}]}, 0x34}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="0400000000000000d20b0000000000000600000000000000", @ANYRES32=r0, @ANYBLOB="0000000005000000000000000000000000001000000000000000000048fa67f355ae068509937dbc0d25e02685cfa8c5e0f9676e90aa6aba8bf32b710e825b0346d6df989e4cd423896399896dfee6ef928d2eb8242dabb9d4b3c3e1fe34a8", @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r0, @ANYBLOB="00000000bb3b00"/28, @ANYRES32=r0, @ANYBLOB="000000000f00"/28, @ANYRES32=r0, @ANYBLOB="000000000600"/28, @ANYRES32=r1, @ANYBLOB="00000000ffffffffffffffff00"/28]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x8, 0x2, 0x1}, {0x6, 0x8, 0xa, 0x9}, {0xa, 0xb, 0xff, 0x10000}, {0x4, 0x0, 0xc0, 0x5}]}, 0x10) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000140)={0x0, 0x0}) (async) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000140)={0x0, 0x0}) 2.465883354s ago: executing program 35 (id=241): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi3\x00', 0x202, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x4, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}}}}}]}, 0x34}}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000003c0)=ANY=[@ANYBLOB="0400000000000000d20b0000000000000600000000000000", @ANYRES32=r0, @ANYBLOB="0000000005000000000000000000000000001000000000000000000048fa67f355ae068509937dbc0d25e02685cfa8c5e0f9676e90aa6aba8bf32b710e825b0346d6df989e4cd423896399896dfee6ef928d2eb8242dabb9d4b3c3e1fe34a8", @ANYRES32=r0, @ANYBLOB='\x00'/28, @ANYRES32=r0, @ANYBLOB="00000000bb3b00"/28, @ANYRES32=r0, @ANYBLOB="000000000f00"/28, @ANYRES32=r0, @ANYBLOB="000000000600"/28, @ANYRES32=r1, @ANYBLOB="00000000ffffffffffffffff00"/28]) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x6, 0x8, 0x2, 0x1}, {0x6, 0x8, 0xa, 0x9}, {0xa, 0xb, 0xff, 0x10000}, {0x4, 0x0, 0xc0, 0x5}]}, 0x10) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000140)={0x0, 0x0}) (async) ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000140)={0x0, 0x0}) 2.418866676s ago: executing program 3 (id=243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"], 0x11ac) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x3d, 0x1, 0x80, "d3f48cee1b2b05000000afe9944d164ce8cd4e0d4c00546787a700", 0x6d761914}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x1}}, './file2\x00'}) sendmmsg$unix(r4, &(0x7f0000000140), 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd0010000000004000700070100000807f3007500fcff0003000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x109, &(0x7f0000000640)=""/265, 0x41000}, 0x94) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x200088c0}, 0x20004000) 2.089261703s ago: executing program 3 (id=244): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040), 0xffffffffffffff4e}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.049994181s ago: executing program 3 (id=246): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00') (async) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = io_uring_setup(0x1530, &(0x7f0000000480)={0x0, 0xd498, 0x800, 0x8000002, 0x1d4}) futex_waitv(&(0x7f00000001c0)=[{0x6, &(0x7f0000000180)=0x6, 0x2}], 0x1, 0x0, 0x0, 0x1) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async, rerun: 64) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x8}, 0x10) (rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r3) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942034375886445000028002200000006"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) 1.68339292s ago: executing program 3 (id=251): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x1a1000, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r2, 0x7808b000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240800d0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKFLSBUF(r1, 0x1261, 0x0) 1.559137599s ago: executing program 3 (id=252): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/202, 0x4000, 0x1000, 0x0, 0x1}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='/\\)\x00', 0x100, &(0x7f0000000180)={@_ha_fsid={[0x0, 0x9]}, {0x3, 0x2, 0x81}}, 0xa5ec, &(0x7f00000001c0), &(0x7f0000000200)=0x4}) getsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000003c0)={0x2, 0x0, &(0x7f0000000380)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000400)={r1, r2, 0x0, 0xb78b, 0x1, 0x7, 0x81, 0x6, 0x7f, 0x57ea, 0x7fffffff, 0x1d63}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000480)={&(0x7f0000000440)=[0x0, 0x0, 0x0], 0x3}) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000600)={&(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x6, 0x1, 0x6}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000640)={0x0, 0x0, r4, 0xcccccccc}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000680)=0x28120, 0x4) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f0000000800)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}, {}, {}], r2, 0x0, '\x00', 0x5, 0x5}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x60, 0x1403, 0x200, 0x70bd2c, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv_slave_1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000009c0)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x3c, 0x3e9, 0x400, 0x70bd2c, 0x25dfdbfb, {0x4, 0x0, 0x1, r7, 0x6, 0x6, 0x7, 0x8, 0x0, 0x4, 0x8}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b00), r0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40), 0x28800, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000c40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x60, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x400}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x108}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010100}, @L2TP_ATTR_MTU={0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x26040041) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000c80)=[r9, r0, r0], 0x3) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000cc0)=[r0, r0, r9, r9, r9, r9], 0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000d40)={&(0x7f0000000d00)=[r6], 0x1, 0x0, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f0000000d80)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@x25={0x805, {0x2, 0xff, 0x13, "3e6005848956c482fd6ffe7e7eead5f92531cf74a275cae099c1cd509fe0f7eb989f671eb555d43950f9029bed5c4dbe03"}}}}, &(0x7f0000000e00)={0x1, 0x3, [0x3fe, 0x5ca, 0x25d, 0xaaf]}) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000e40)={0x2, r0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCRTC(r11, 0xc06864a1, &(0x7f0000000ec0)={&(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, r5}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000001040)={&(0x7f0000000f40), 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, r12, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000001080)={0x0, 0xe0c}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000001100)={r13, 0xffffffff}, &(0x7f0000001140)=0x8) syz_emit_ethernet(0x64, &(0x7f0000001180)={@random="2c54d22c21f5", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x1, 0x0, 0x3}}, {@generic={0x6006, "ebc9d7e5f9bbcc762214ef22b49129df97ce64b3577d3aae1dce008d7cc386876af1450338aba8a16ace466df66bfe5e27128b2608bd36e5fd92a63ac3635aa503b747d6d831815153992f30c22a"}}}, &(0x7f0000001200)={0x1, 0x1, [0xd1e, 0x751, 0x453, 0xec5]}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r11, 0xc02864c3, &(0x7f0000001400)={&(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x8, 0x4}) 1.411364789s ago: executing program 5 (id=253): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000040)={0x7, 0x3c}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.353171186s ago: executing program 3 (id=254): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xffffffffffffff6b) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = syz_io_uring_setup(0x2d39, &(0x7f00000004c0)={0x0, 0x8f8d, 0x0, 0x3, 0x8b}, &(0x7f0000000540), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, r5, 0x0) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="bc7eddd6"], 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) 986.402041ms ago: executing program 5 (id=255): setns(0xc9, 0x0) (async) setns(0xc9, 0x0) socket$netlink(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="fffffffffffffffffee7ffff10"], 0x1b) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd2b, 0x2000, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000}}, 0x1c}}, 0x20002000) 934.784634ms ago: executing program 5 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x4) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x4000010) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003300000102000000fddbdf250700000004003700c977c8519f611b13a667730442cda4b533f190f43010efee44ca7b69aabc136e155701a408da239035564ef76254d092f761dc841a60f831e74fdf3b56fe87b3b300fe6cab72be2cf4591b2c34cb241f6841e3c7a1d867152c0d0af9de6f5124437eb8bbee79a3a6f01637428cdbd255e3c1e1bcdc70cd74c147fdb776e3bb0bdafcdb39ebf285b94382bf3636027247692b6f328ed86563ccf1b21b7218153d46fec8ca2c9b48185f83019a4615ad2af7b7ff55057e19fa5299b5580863b7e89f"], 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x40) 253.234516ms ago: executing program 5 (id=257): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2814000, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@noquota}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) 153.082441ms ago: executing program 5 (id=258): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2814000, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@noblock_validity}, {@nouid32}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@noquota}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000880)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x4) (fail_nth: 1) 0s ago: executing program 5 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x38, r4, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x6, 0x7f}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x20000014) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xe6419a144e307cf}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x8e, 0x180000504) openat(r5, &(0x7f00000002c0)='./file0\x00', 0x80, 0x40) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800450000280000000040007ce70a0000010a000002", 0x2e) write(r5, &(0x7f0000000640)="630c40974e9e4736c490826d6f7224b9c00dd322478b3d8ec5392b018d6bad8d16ba6d471e715fa9403572599b41a686595819d7f9e589221d7dd8b316f7560fb40ec621dd6b139c8cd677f19e4fe190f3a7614b688563d7d76521b15ce8e97b9048e9509599c3e5ab8b6eb905410c3339c0a2b43dd007907c6690826d4ab53b30300f15196fab8cc6c76dbc7dd0a727854d319872a5afc02f841704de0a6fb550ac7fefe341e750d95a8ab2dbe7a9d64444c1df6effa6cc", 0xb8) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 29.047139][ T4694] cgroup: Unknown subsys name 'net' [ 29.198110][ T4694] cgroup: Unknown subsys name 'cpuset' [ 29.199467][ T4694] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.382990][ T4694] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.195815][ T4714] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.196191][ T4714] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.196734][ T4714] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.197088][ T4714] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.197163][ T4714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.197236][ T4714] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.197396][ T4714] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.198028][ T4714] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.198120][ T4714] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.199329][ T4714] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.201556][ T4714] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.203076][ T4714] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.203348][ T4714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.224903][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.227283][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.234920][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.238522][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.243883][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.248519][ T4714] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.248947][ T4714] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.263934][ T4715] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.265556][ T4715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.269730][ T4715] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.282055][ T4715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.282506][ T4715] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.507887][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.508230][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.508296][ T4705] bridge_slave_0: entered allmulticast mode [ 30.508783][ T4705] bridge_slave_0: entered promiscuous mode [ 30.528714][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.528744][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.528805][ T4705] bridge_slave_1: entered allmulticast mode [ 30.529361][ T4705] bridge_slave_1: entered promiscuous mode [ 30.566908][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.578004][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.595387][ T4705] team0: Port device team_slave_0 added [ 30.604332][ T4705] team0: Port device team_slave_1 added [ 30.628271][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.628285][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.628298][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.629213][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.629222][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.629239][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.671195][ T4705] hsr_slave_0: entered promiscuous mode [ 30.671581][ T4705] hsr_slave_1: entered promiscuous mode [ 30.696337][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.696406][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.696462][ T4706] bridge_slave_0: entered allmulticast mode [ 30.696902][ T4706] bridge_slave_0: entered promiscuous mode [ 30.698191][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.698211][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.698298][ T4706] bridge_slave_1: entered allmulticast mode [ 30.698691][ T4706] bridge_slave_1: entered promiscuous mode [ 30.725104][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.736465][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.767403][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.767470][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.767530][ T4717] bridge_slave_0: entered allmulticast mode [ 30.768011][ T4717] bridge_slave_0: entered promiscuous mode [ 30.769318][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.769338][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.769391][ T4717] bridge_slave_1: entered allmulticast mode [ 30.769806][ T4717] bridge_slave_1: entered promiscuous mode [ 30.777284][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.778141][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.789561][ T4717] team0: Port device team_slave_0 added [ 30.790140][ T4706] team0: Port device team_slave_0 added [ 30.790733][ T4717] team0: Port device team_slave_1 added [ 30.791243][ T4706] team0: Port device team_slave_1 added [ 30.801716][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.801727][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.801740][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.802290][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.802297][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.802313][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.811970][ T4706] hsr_slave_0: entered promiscuous mode [ 30.812281][ T4706] hsr_slave_1: entered promiscuous mode [ 30.812473][ T4706] debugfs: 'hsr0' already exists in 'hsr' [ 30.812515][ T4706] Cannot create hsr debugfs directory [ 30.860132][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.860977][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.861098][ T4707] bridge_slave_0: entered allmulticast mode [ 30.861591][ T4707] bridge_slave_0: entered promiscuous mode [ 30.869622][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.869634][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.869648][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.873478][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.873544][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.873611][ T4707] bridge_slave_1: entered allmulticast mode [ 30.874068][ T4707] bridge_slave_1: entered promiscuous mode [ 30.884035][ T4707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.884924][ T4707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.890650][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.890661][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.890677][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.919468][ T4717] hsr_slave_0: entered promiscuous mode [ 30.919813][ T4717] hsr_slave_1: entered promiscuous mode [ 30.920037][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.920048][ T4717] Cannot create hsr debugfs directory [ 30.923741][ T4707] team0: Port device team_slave_0 added [ 30.933676][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.933757][ T4724] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.933863][ T4724] bridge_slave_0: entered allmulticast mode [ 30.934363][ T4724] bridge_slave_0: entered promiscuous mode [ 30.936317][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.936340][ T4724] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.936394][ T4724] bridge_slave_1: entered allmulticast mode [ 30.936880][ T4724] bridge_slave_1: entered promiscuous mode [ 30.938483][ T4707] team0: Port device team_slave_1 added [ 30.961261][ T4724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.964404][ T4724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.973221][ T4706] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.976933][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.977329][ T4706] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.978651][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.988343][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.988354][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.988368][ T4707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.989019][ T4707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.989029][ T4707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.989040][ T4707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.997951][ T4706] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.000490][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.000894][ T4706] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.009203][ T4706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.013471][ T4724] team0: Port device team_slave_0 added [ 31.025896][ T4724] team0: Port device team_slave_1 added [ 31.041703][ T4705] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.043016][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.050388][ T4707] hsr_slave_0: entered promiscuous mode [ 31.050721][ T4707] hsr_slave_1: entered promiscuous mode [ 31.050888][ T4707] debugfs: 'hsr0' already exists in 'hsr' [ 31.050898][ T4707] Cannot create hsr debugfs directory [ 31.052174][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.052183][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.052198][ T4724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.052580][ T4705] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.053688][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.059041][ T4724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.059052][ T4724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.059069][ T4724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.069957][ T4724] hsr_slave_0: entered promiscuous mode [ 31.070279][ T4724] hsr_slave_1: entered promiscuous mode [ 31.070488][ T4724] debugfs: 'hsr0' already exists in 'hsr' [ 31.070498][ T4724] Cannot create hsr debugfs directory [ 31.081980][ T4705] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.086695][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.087026][ T4705] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.088740][ T4705] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.148442][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.148492][ T4706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.148628][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.148656][ T4706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.149963][ T4717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.150973][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.151266][ T4717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.152601][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.153711][ T4717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.155395][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.157073][ T4717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.158280][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.167698][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.167735][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.167814][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.167842][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.189662][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.189694][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.189782][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.189812][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.219667][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.224320][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.231747][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.232179][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.233451][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.233822][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.234891][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.235158][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.256926][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.256965][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.257325][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.257346][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.258822][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.263786][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.275360][ T4724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.278209][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.278506][ T4724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.279366][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.280154][ T4724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.282147][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.287043][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.296825][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.296852][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.297171][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.297188][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.298603][ T4724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.300292][ T4724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.324008][ T4705] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.324690][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.324709][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.327002][ T4707] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.329767][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.330077][ T4707] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.331518][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.340964][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.341005][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.359355][ T4705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.359373][ T4705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.367132][ T4707] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.377941][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.378422][ T4707] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.380505][ T4707] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.392302][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.392332][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.455800][ T4724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.484823][ T4724] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.494701][ T4707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.496177][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.496206][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.508573][ T4724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.508590][ T4724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.511008][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.511038][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.536742][ T4707] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.540161][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.540188][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.544470][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.544508][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.600434][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.624075][ T4706] veth0_vlan: entered promiscuous mode [ 31.629026][ T4706] veth1_vlan: entered promiscuous mode [ 31.638190][ T4706] veth0_macvtap: entered promiscuous mode [ 31.639434][ T4706] veth1_macvtap: entered promiscuous mode [ 31.643505][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.644629][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.654555][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.654772][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.670639][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.684734][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.706465][ T91] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.727998][ T4705] veth0_vlan: entered promiscuous mode [ 31.729832][ T4705] veth1_vlan: entered promiscuous mode [ 31.732631][ T4717] veth0_vlan: entered promiscuous mode [ 31.734616][ T4717] veth1_vlan: entered promiscuous mode [ 31.754250][ T4717] veth0_macvtap: entered promiscuous mode [ 31.755321][ T4717] veth1_macvtap: entered promiscuous mode [ 31.761112][ T4705] veth0_macvtap: entered promiscuous mode [ 31.763025][ T4705] veth1_macvtap: entered promiscuous mode [ 31.765414][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.779320][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.796855][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.798409][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.806041][ T4724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.813918][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.813932][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.816210][ T91] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.849877][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.849888][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.853174][ T4707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.857918][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.858742][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860380][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860418][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860448][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860471][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860488][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.860505][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.865087][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.865099][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.883993][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.884004][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.911473][ T4707] veth0_vlan: entered promiscuous mode [ 31.913381][ T4707] veth1_vlan: entered promiscuous mode [ 31.928154][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.928170][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.938776][ T4717] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.943194][ T4707] veth0_macvtap: entered promiscuous mode [ 31.952330][ T4707] veth1_macvtap: entered promiscuous mode [ 31.957760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.957773][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.959970][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.965034][ T4707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.977059][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977664][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977731][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.977899][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.005191][ T4724] veth0_vlan: entered promiscuous mode [ 32.039107][ T4724] veth1_vlan: entered promiscuous mode [ 32.049509][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.049524][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.074824][ T4724] veth0_macvtap: entered promiscuous mode [ 32.075153][ T4888] xt_hashlimit: size too large, truncated to 1048576 [ 32.079191][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.079206][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.081374][ T4724] veth1_macvtap: entered promiscuous mode [ 32.093270][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.094343][ T4724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.138006][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.138405][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.138539][ T40] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.138666][ T40] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.168391][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.168406][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.170488][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.170498][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.256170][ T4715] Bluetooth: hci0: command tx timeout [ 32.256272][ T4715] Bluetooth: hci2: command tx timeout [ 32.256381][ T51] Bluetooth: hci1: command tx timeout [ 32.335884][ T4714] Bluetooth: hci3: command tx timeout [ 32.336206][ T51] Bluetooth: hci4: command tx timeout [ 32.441822][ T4906] loop0: detected capacity change from 0 to 256 [ 32.445285][ T4906] ======================================================= [ 32.445285][ T4906] WARNING: The mand mount option has been deprecated and [ 32.445285][ T4906] and is ignored by this kernel. Remove the mand [ 32.445285][ T4906] option from the mount to silence this warning. [ 32.445285][ T4906] ======================================================= [ 32.647432][ T4903] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 32.647449][ T4903] FAT-fs (loop0): Filesystem has been set read-only [ 32.650480][ T4893] mount: server 127.0.0.1 not responding, timed out [ 32.675562][ T4908] loop1: detected capacity change from 0 to 512 [ 32.689472][ T4908] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 32.689495][ T4908] FAT-fs (loop1): Filesystem has been set read-only [ 32.831380][ T4911] loop4: detected capacity change from 0 to 512 [ 32.850435][ T4911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.312381][ T4924] loop2: detected capacity change from 0 to 256 [ 33.312865][ T4924] vfat: Deprecated parameter 'posix' [ 33.312873][ T4924] FAT-fs: "posix" option is obsolete, not supported now [ 33.639254][ T4926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 33.652270][ T4926] input: syz1 as /devices/virtual/input/input2 [ 33.681215][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.681419][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.681586][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.681766][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.681923][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.682088][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.684556][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.685167][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.685348][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.686579][ T4724] EXT4-fs warning (device loop4): ext4_empty_dir:3096: inode #12: comm syz-executor: directory missing '.' [ 33.837749][ T4933] loop3: detected capacity change from 0 to 1024 [ 33.838139][ T4933] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.859815][ T4933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.890390][ T4933] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.15: bg 0: block 112: padding at end of block bitmap is not set [ 33.893358][ T4933] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 33.893377][ T4933] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.893377][ T4933] [ 33.893385][ T4933] EXT4-fs (loop3): Total free blocks count 0 [ 33.893393][ T4933] EXT4-fs (loop3): Free/Dirty block details [ 33.893403][ T4933] EXT4-fs (loop3): free_blocks=0 [ 33.893413][ T4933] EXT4-fs (loop3): dirty_blocks=64 [ 33.893420][ T4933] EXT4-fs (loop3): Block reservation details [ 33.893426][ T4933] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 33.988105][ T4937] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14'. [ 34.228466][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 34.246974][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.246995][ T4942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.335705][ T4714] Bluetooth: hci1: command tx timeout [ 34.335733][ T4715] Bluetooth: hci0: command tx timeout [ 34.335769][ T51] Bluetooth: hci2: command tx timeout [ 34.338841][ T4952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20'. [ 34.345025][ T4952] veth1_to_team: entered promiscuous mode [ 34.354720][ T4952] veth1_to_team: left promiscuous mode [ 34.409717][ T4956] loop1: detected capacity change from 0 to 256 [ 34.417042][ T4715] Bluetooth: hci3: command tx timeout [ 34.426865][ T4954] v: renamed from veth0_vlan [ 34.471434][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 34.474098][ T4961] vlan2: entered allmulticast mode [ 34.474112][ T4961] dummy0: entered allmulticast mode [ 34.477893][ T4961] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 34.477997][ T867] dummy0: entered promiscuous mode [ 34.597744][ T4980] loop3: detected capacity change from 0 to 1024 [ 34.608021][ T4980] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.612560][ T4397] v: left promiscuous mode [ 34.623067][ T4969] evm: overlay not supported [ 34.624470][ T4306] v: entered promiscuous mode [ 34.693670][ T4987] overlayfs: overlapping lowerdir path [ 34.709890][ T4984] Zero length message leads to an empty skb [ 34.725690][ T50] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.726451][ T50] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.726984][ T50] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.727002][ T50] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.729959][ T30] audit: type=1326 audit(34.710:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.730858][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.730922][ T30] audit: type=1326 audit(34.710:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.730944][ T30] audit: type=1326 audit(34.710:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.730964][ T30] audit: type=1326 audit(34.710:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.730980][ T30] audit: type=1326 audit(34.710:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.730996][ T30] audit: type=1326 audit(34.710:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.731010][ T30] audit: type=1326 audit(34.710:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.731025][ T30] audit: type=1326 audit(34.710:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.731730][ T30] audit: type=1326 audit(34.710:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.731793][ T30] audit: type=1326 audit(34.710:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=4988 comm="syz.0.28" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff82779368 code=0x7ffc0000 [ 34.790237][ T4994] loop2: detected capacity change from 0 to 128 [ 34.802873][ T4994] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.113186][ T5033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 35.117038][ T5033] input: syz1 as /devices/virtual/input/input3 [ 35.462660][ T5050] netlink: 'syz.3.38': attribute type 1 has an invalid length. [ 35.903545][ T4706] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.991311][ T5070] loop0: detected capacity change from 0 to 512 [ 36.019721][ T5065] netlink: 88 bytes leftover after parsing attributes in process `syz.2.42'. [ 36.020055][ T5065] netlink: 88 bytes leftover after parsing attributes in process `syz.2.42'. [ 36.020103][ T5065] netlink: 88 bytes leftover after parsing attributes in process `syz.2.42'. [ 36.020152][ T5065] netlink: 88 bytes leftover after parsing attributes in process `syz.2.42'. [ 36.020193][ T5065] netlink: 88 bytes leftover after parsing attributes in process `syz.2.42'. [ 36.105190][ T5074] tmpfs: Bad value for 'mpol' [ 36.181224][ T4724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.239291][ T91] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.278813][ T4714] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 36.279662][ T4714] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 36.279946][ T4714] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 36.281078][ T4714] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 36.281714][ T4714] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 36.399143][ T91] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.408729][ T5090] netlink: 'syz.3.46': attribute type 8 has an invalid length. [ 36.411769][ T5090] bond0: entered promiscuous mode [ 36.411782][ T5090] bond_slave_0: entered promiscuous mode [ 36.411851][ T5090] bond_slave_1: entered promiscuous mode [ 36.413150][ T5090] gretap0: entered promiscuous mode [ 36.413740][ T5090] bond0: left promiscuous mode [ 36.413750][ T5090] bond_slave_0: left promiscuous mode [ 36.413814][ T5090] bond_slave_1: left promiscuous mode [ 36.414272][ T5090] gretap0: left promiscuous mode [ 36.417335][ T4715] Bluetooth: hci0: command tx timeout [ 36.425895][ T4715] Bluetooth: hci2: command tx timeout [ 36.425919][ T4715] Bluetooth: hci1: command tx timeout [ 36.470742][ T91] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.497229][ T51] Bluetooth: hci3: command tx timeout [ 36.510557][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.510609][ T5077] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.510663][ T5077] bridge_slave_0: entered allmulticast mode [ 36.511101][ T5077] bridge_slave_0: entered promiscuous mode [ 36.517621][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.517644][ T5077] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.517709][ T5077] bridge_slave_1: entered allmulticast mode [ 36.518147][ T5077] bridge_slave_1: entered promiscuous mode [ 36.526591][ T5077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.527897][ T5077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.547330][ T5077] team0: Port device team_slave_0 added [ 36.551219][ T91] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.554028][ T5077] team0: Port device team_slave_1 added [ 36.562659][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.562670][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.562687][ T5077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.563914][ T5077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.563923][ T5077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.563940][ T5077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.577489][ T5077] hsr_slave_0: entered promiscuous mode [ 36.577871][ T5077] hsr_slave_1: entered promiscuous mode [ 36.578056][ T5077] debugfs: 'hsr0' already exists in 'hsr' [ 36.578066][ T5077] Cannot create hsr debugfs directory [ 36.634873][ T5077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.638561][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.639013][ T5077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.642887][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.643206][ T5077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.644254][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.644551][ T5077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.647126][ T5077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.667968][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.668001][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.668068][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.668096][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.691875][ T5077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.700690][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.701589][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.725130][ T5077] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.732414][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.732446][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.732880][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.732904][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.935518][ T5146] loop0: detected capacity change from 0 to 2048 [ 36.958027][ T5146] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 36.963651][ T5146] EXT4-fs (loop0): shut down requested (2) [ 36.974991][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 38.410610][ T51] Bluetooth: hci4: command tx timeout [ 38.488367][ T91] bridge_slave_1: left allmulticast mode [ 38.488393][ T91] bridge_slave_1: left promiscuous mode [ 38.488764][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.492124][ T91] bridge_slave_0: left allmulticast mode [ 38.492140][ T91] bridge_slave_0: left promiscuous mode [ 38.492232][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.500924][ T51] Bluetooth: hci1: command tx timeout [ 38.500952][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 38.500971][ T51] Bluetooth: hci0: command tx timeout [ 38.575928][ T4714] Bluetooth: hci3: command tx timeout [ 38.603055][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.639822][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.666433][ T91] bond0 (unregistering): Released all slaves [ 38.849332][ T5248] loop0: detected capacity change from 0 to 1024 [ 38.852162][ T5248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.876049][ T5248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.885773][ T5248] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.62: bg 0: block 112: padding at end of block bitmap is not set [ 38.904707][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.035348][ T5077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.068735][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 39.104365][ T91] hsr_slave_0: left promiscuous mode [ 39.105300][ T91] hsr_slave_1: left promiscuous mode [ 39.105908][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.105925][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.111592][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.111605][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.123487][ T91] veth1_macvtap: left promiscuous mode [ 39.123573][ T91] veth0_macvtap: left promiscuous mode [ 39.123625][ T91] veth1_vlan: left promiscuous mode [ 39.123694][ T91] veth0_vlan: left promiscuous mode [ 39.190938][ T5300] __nla_validate_parse: 63 callbacks suppressed [ 39.190954][ T5300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 39.195918][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 39.205237][ T5302] loop1: detected capacity change from 0 to 512 [ 39.217890][ T5302] EXT4-fs error (device loop1): ext4_validate_block_bitmap:436: comm syz.1.72: bg 0: block 5: invalid block bitmap [ 39.217952][ T5302] loop1: lost filesystem error report for type 5 error -117 [ 39.218778][ T5302] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 39.218798][ T5302] loop1: lost filesystem error report for type 5 error -117 [ 39.219202][ T5302] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.72: invalid indirect mapped block 3 (level 2) [ 39.219253][ T5302] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 39.219496][ T5302] EXT4-fs (loop1): 1 orphan inode deleted [ 39.219504][ T5302] EXT4-fs (loop1): 1 truncate cleaned up [ 39.220643][ T5302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.259527][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.291038][ T91] team0 (unregistering): Port device team_slave_1 removed [ 39.302242][ T91] team0 (unregistering): Port device team_slave_0 removed [ 39.399060][ T5077] veth0_vlan: entered promiscuous mode [ 39.407346][ T5077] veth1_vlan: entered promiscuous mode [ 39.420149][ T5077] veth0_macvtap: entered promiscuous mode [ 39.422226][ T5077] veth1_macvtap: entered promiscuous mode [ 39.434318][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.438404][ T5077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.442808][ T1443] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.442888][ T1443] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.443092][ T1443] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.456054][ T1443] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.515133][ T1443] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.515149][ T1443] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.521313][ T5321] loop1: detected capacity change from 0 to 1024 [ 39.531740][ T5321] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.534942][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.534957][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.569388][ T5321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.577558][ T5321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.75: bg 0: block 112: padding at end of block bitmap is not set [ 39.604128][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 39.684435][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 39.751999][ T5351] Cannot find del_set index 0 as target [ 39.757855][ T5351] loop1: detected capacity change from 0 to 256 [ 39.794630][ T5351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.79'. [ 39.808104][ T5360] Injecting memory failure for pfn 0x135ded at process virtual address 0x20001000 [ 39.822622][ T5360] Memory failure: 0x135ded: recovery action for clean LRU page: Recovered [ 39.822646][ T5360] Injecting memory failure for pfn 0x135e24 at process virtual address 0x20002000 [ 39.828059][ T5360] Memory failure: 0x135e24: recovery action for clean LRU page: Recovered [ 39.828083][ T5360] Injecting memory failure for pfn 0x135e21 at process virtual address 0x20003000 [ 39.831090][ T5360] Memory failure: 0x135e21: recovery action for clean LRU page: Recovered [ 39.873171][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.088097][ T5395] loop1: detected capacity change from 0 to 1024 [ 40.088443][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.104475][ T5395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.110419][ T5395] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.87: bg 0: block 112: padding at end of block bitmap is not set [ 40.146703][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.213645][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.291013][ T5422] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.466043][ T51] Bluetooth: hci4: command tx timeout [ 40.585541][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 41.073865][ T5427] loop1: detected capacity change from 0 to 1024 [ 41.096243][ T5427] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 41.096590][ T5427] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.111479][ T5427] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.112074][ T5427] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.113627][ T5427] EXT4-fs error (device loop1): ext4_read_inode_bitmap:169: comm syz.1.88: Inode bitmap for bg 0 marked uninitialized [ 41.113677][ T5427] loop1: lost filesystem error report for type 5 error -117 [ 41.119127][ T5427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.268612][ T5425] loop2: detected capacity change from 0 to 512 [ 41.289045][ T5425] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0022] [ 41.289090][ T5425] System zones: 1-12 [ 41.289400][ T5425] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.90: Directory hole found for htree index block 0 [ 41.289416][ T5425] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 41.291743][ T5425] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 41.291785][ T5425] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.90: Directory hole found for htree index block 0 [ 41.291802][ T5425] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 41.291977][ T5425] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 41.292410][ T5425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.380899][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.384779][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.433979][ T5438] Injecting memory failure for pfn 0x21910f at process virtual address 0x205e8000 [ 41.435356][ T5438] Memory failure: 0x21910f: unhandlable page. [ 41.435367][ T5438] Memory failure: 0x21910f: recovery action for reserved kernel page: Ignored [ 41.435387][ T5438] Injecting memory failure for pfn 0x21910f at process virtual address 0x205e8000 [ 41.450596][ T5438] Memory failure: 0x21910f: Sending SIGBUS to syz.2.93:5438 due to hardware memory corruption [ 41.450707][ T5438] Memory failure: 0x21910f: recovery action for already poisoned page: Failed [ 41.564860][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.95'. [ 41.574786][ T5458] netlink: 56 bytes leftover after parsing attributes in process `syz.1.96'. [ 41.619776][ T5466] loop1: detected capacity change from 0 to 1024 [ 41.620133][ T5466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.647803][ T5468] loop5: detected capacity change from 0 to 256 [ 41.662179][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.680024][ T4397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 41.688888][ T5466] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.99: bg 0: block 112: padding at end of block bitmap is not set [ 41.723557][ T4707] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.748582][ T5478] syz.2.101 uses obsolete (PF_INET,SOCK_PACKET) [ 41.792445][ T5478] loop2: detected capacity change from 0 to 2048 [ 41.821266][ T5490] EXT4-fs (loop5): Test dummy encryption mode enabled [ 41.823309][ T5490] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.104: inode has both inline data and extents flags [ 41.823327][ T5490] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.823436][ T5490] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.104: couldn't read orphan inode 15 (err -117) [ 41.823449][ T5490] loop5: lost filesystem error report for type 5 error -117 [ 41.827567][ T5478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.830079][ T5490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.840625][ T5478] EXT4-fs error (device loop2): ext4_validate_block_bitmap:436: comm syz.2.101: bg 0: block 2: invalid block bitmap [ 41.841551][ T5478] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28 [ 41.858994][ T5490] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 41.930505][ T5495] input: syz1 as /devices/virtual/input/input4 [ 41.935637][ T4714] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 41.970616][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.505760][ T51] Bluetooth: hci4: command tx timeout [ 42.819936][ T5506] overlayfs: failed to resolve './bus': -2 [ 42.918238][ T5511] netlink: 76 bytes leftover after parsing attributes in process `syz.2.112'. [ 42.918268][ T5511] netlink: 68 bytes leftover after parsing attributes in process `syz.2.112'. [ 42.941288][ T5513] process 'syz.1.113' launched '/dev/fd/4' with NULL argv: empty string added [ 42.961812][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.964600][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 42.964612][ T30] audit: type=1326 audit(42.940:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5512 comm="syz.1.113" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3379368 code=0x0 [ 42.968792][ T5514] FAULT_INJECTION: forcing a failure. [ 42.968792][ T5514] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.968809][ T5514] CPU: 0 UID: 0 PID: 5514 Comm: syz.3.108 Not tainted syzkaller #0 PREEMPT [ 42.968819][ T5514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 42.968825][ T5514] Call trace: [ 42.968828][ T5514] show_stack+0x2c/0x3c (C) [ 42.968847][ T5514] __dump_stack+0x30/0x40 [ 42.968858][ T5514] dump_stack_lvl+0xd8/0x12c [ 42.968870][ T5514] dump_stack+0x1c/0x28 [ 42.968880][ T5514] should_fail_ex+0x41c/0x590 [ 42.968893][ T5514] should_fail+0x14/0x24 [ 42.968905][ T5514] should_fail_usercopy+0x20/0x30 [ 42.968917][ T5514] bpf_verifier_vlog+0x81c/0xbc0 [ 42.968930][ T5514] __btf_verifier_log+0xe8/0x13c [ 42.968938][ T5514] __btf_verifier_log_type+0x338/0x5e4 [ 42.968946][ T5514] btf_datasec_check_meta+0x388/0x71c [ 42.968956][ T5514] btf_parse_type_sec+0x36c/0x17a8 [ 42.968965][ T5514] btf_new_fd+0x33c/0xa24 [ 42.968977][ T5514] bpf_btf_load+0x144/0x190 [ 42.968987][ T5514] __sys_bpf+0x7f0/0x82c [ 42.968996][ T5514] __arm64_sys_bpf+0xd0/0xec [ 42.969005][ T5514] invoke_syscall+0x98/0x244 [ 42.969017][ T5514] el0_svc_common+0xec/0x23c [ 42.969028][ T5514] do_el0_svc+0x4c/0x5c [ 42.969039][ T5514] el0_svc+0x64/0x260 [ 42.969050][ T5514] el0t_64_sync_handler+0x44/0x104 [ 42.969061][ T5514] el0t_64_sync+0x198/0x19c [ 43.030465][ T5525] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.038392][ T5525] overlayfs: workdir and upperdir must be separate subtrees [ 43.076368][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.109894][ T5538] netlink: 'syz.2.119': attribute type 6 has an invalid length. [ 43.109914][ T5538] netlink: 168 bytes leftover after parsing attributes in process `syz.2.119'. [ 43.168976][ T5542] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.188060][ T5548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.206550][ T5548] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.121: corrupted inode contents [ 43.207515][ T5548] EXT4-fs error (device loop2): ext4_dirty_inode:6736: inode #2: comm syz.2.121: mark_inode_dirty error [ 43.208020][ T5548] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.121: corrupted inode contents [ 43.208198][ T5548] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.121: mark_inode_dirty error [ 43.210420][ T4705] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.213757][ T5555] bonding: no command found in bonding_masters - use +ifname or -ifname [ 43.234732][ T5548] EXT4-fs warning (device loop2): ext4_es_cache_extent:1082: inode #2: comm syz.2.121: ES cache extent failed: add [0,1,22,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 43.234732][ T5548] [ 43.239864][ T5548] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.121: corrupted inode contents [ 43.241785][ T5548] EXT4-fs error (device loop2): ext4_append:88: inode #2: comm syz.2.121: mark_inode_dirty error [ 43.241957][ T5548] EXT4-fs error (device loop2) in ext4_append:100: Corrupt filesystem [ 43.247550][ T5548] EXT4-fs error (device loop2): ext4_do_update_inode:5801: inode #2: comm syz.2.121: corrupted inode contents [ 43.252610][ T5548] EXT4-fs error (device loop2): add_dirent_to_buf:2153: inode #2: comm syz.2.121: mark_inode_dirty error [ 43.264745][ T5553] ext4: Unknown parameter '@' [ 43.298929][ T4706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.632426][ T5595] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.633209][ T5595] EXT4-fs (loop3): Test dummy encryption mode enabled [ 43.657610][ T5595] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 43.657663][ T5595] System zones: 0-5 [ 43.668753][ T5595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.735652][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.886991][ T5610] set_capacity_and_notify: 8 callbacks suppressed [ 43.887007][ T5610] loop0: detected capacity change from 0 to 512 [ 43.906223][ T5610] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.139: invalid indirect mapped block 11 (level 0) [ 43.906247][ T5610] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 43.909781][ T5610] EXT4-fs (loop0): Remounting filesystem read-only [ 43.910744][ T5610] EXT4-fs (loop0): 1 truncate cleaned up [ 43.914019][ T5610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.023430][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.086594][ T5624] loop0: detected capacity change from 0 to 1024 [ 44.091917][ T5624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.130966][ T5624] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.144637][ T5624] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.142: bg 0: block 112: padding at end of block bitmap is not set [ 44.184789][ T5630] tipc: Started in network mode [ 44.184811][ T5630] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 44.189122][ T5630] tipc: Enabled bearer , priority 10 [ 44.207182][ T4717] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.290933][ T5639] loop3: detected capacity change from 0 to 512 [ 44.291294][ T5639] EXT4-fs: Ignoring removed orlov option [ 44.332716][ T5639] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.348297][ T5639] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #12: comm syz.3.147: invalid size [ 44.357273][ T5639] EXT4-fs (loop3): Remounting filesystem read-only [ 44.381345][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.384118][ T50] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 44.384137][ T50] Quota error (device loop3): write_blk: dquota write failed [ 44.384145][ T50] Quota error (device loop3): free_dqentry: Can't write quota data block 5 [ 44.541337][ T5671] loop1: detected capacity change from 0 to 4096 [ 44.541769][ T5671] EXT4-fs: Ignoring removed orlov option [ 44.550661][ T5671] EXT4-fs: Mount option(s) incompatible with ext2 [ 44.575524][ T51] Bluetooth: hci4: command tx timeout [ 44.582461][ T5671] capability: warning: `syz.1.150' uses deprecated v2 capabilities in a way that may be insecure [ 44.584568][ T51] Bluetooth: hci2: unexpected event for opcode 0xbd05 [ 45.137728][ T5697] loop5: detected capacity change from 0 to 4096 [ 45.141993][ T5697] EXT4-fs: Mount option(s) incompatible with ext2 [ 45.298170][ T4769] tipc: Node number set to 4269801488 [ 45.339624][ T5708] loop1: detected capacity change from 0 to 128 [ 45.397414][ T5710] netlink: 'syz.3.157': attribute type 2 has an invalid length. [ 45.878352][ T5747] loop5: detected capacity change from 0 to 512 [ 45.957597][ T5748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.181951][ T5766] loop5: detected capacity change from 0 to 512 [ 46.224840][ T5766] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 46.224859][ T5766] FAT-fs (loop5): Filesystem has been set read-only [ 46.225005][ T5766] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 46.225032][ T5766] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 46.370495][ T5775] Soft offlining pfn 0x21910f at process virtual address 0x20ffc000 [ 46.370514][ T5775] Soft offline: 0x21910f: page already poisoned [ 46.370529][ T5775] Soft offlining pfn 0x21910f at process virtual address 0x20ffd000 [ 46.370537][ T5775] Soft offline: 0x21910f: page already poisoned [ 46.370550][ T5775] Soft offlining pfn 0x21910f at process virtual address 0x20ffe000 [ 46.370557][ T5775] Soft offline: 0x21910f: page already poisoned [ 46.370568][ T5775] Soft offlining pfn 0x21910f at process virtual address 0x20fff000 [ 46.370575][ T5775] Soft offline: 0x21910f: page already poisoned [ 46.696120][ T5784] Bluetooth: Invalid esc byte 0x04 [ 46.701663][ T5784] FAULT_INJECTION: forcing a failure. [ 46.701663][ T5784] name failslab, interval 1, probability 0, space 0, times 1 [ 46.701691][ T5784] CPU: 0 UID: 0 PID: 5784 Comm: syz.3.171 Not tainted syzkaller #0 PREEMPT [ 46.701703][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 46.701710][ T5784] Call trace: [ 46.701714][ T5784] show_stack+0x2c/0x3c (C) [ 46.701738][ T5784] __dump_stack+0x30/0x40 [ 46.701751][ T5784] dump_stack_lvl+0xd8/0x12c [ 46.701762][ T5784] dump_stack+0x1c/0x28 [ 46.701774][ T5784] should_fail_ex+0x41c/0x590 [ 46.701788][ T5784] should_failslab+0xc4/0x120 [ 46.701801][ T5784] __kmalloc_cache_noprof+0x94/0x5fc [ 46.701810][ T5784] nf_flow_offload_xdp_setup+0x90/0x5f4 [ 46.701821][ T5784] nf_flow_table_offload_setup+0x10c/0x4a8 [ 46.701830][ T5784] nft_register_flowtable_ops+0x98/0x154 [ 46.701841][ T5784] nft_register_flowtable_net_hooks+0x190/0x3e0 [ 46.701852][ T5784] nf_tables_newflowtable+0xa6c/0x1344 [ 46.701862][ T5784] nfnetlink_rcv+0xc8c/0x16ec [ 46.701870][ T5784] netlink_unicast+0x600/0x7f8 [ 46.701880][ T5784] netlink_sendmsg+0x648/0x948 [ 46.701891][ T5784] __sock_sendmsg+0xc8/0x17c [ 46.701901][ T5784] ____sys_sendmsg+0x3d0/0x6c8 [ 46.701911][ T5784] ___sys_sendmsg+0x198/0x224 [ 46.701921][ T5784] __sys_sendmsg+0x158/0x204 [ 46.701931][ T5784] __arm64_sys_sendmsg+0x88/0x9c [ 46.701942][ T5784] invoke_syscall+0x98/0x244 [ 46.701954][ T5784] el0_svc_common+0xec/0x23c [ 46.701966][ T5784] do_el0_svc+0x4c/0x5c [ 46.701977][ T5784] el0_svc+0x64/0x260 [ 46.701989][ T5784] el0t_64_sync_handler+0x44/0x104 [ 46.701999][ T5784] el0t_64_sync+0x198/0x19c [ 46.713739][ T50] Bluetooth: (null): Invalid header checksum [ 47.001098][ T5787] loop1: detected capacity change from 0 to 256 [ 47.001455][ T5787] vfat: Unknown parameter 'shortf8' [ 47.016573][ T5191] Bluetooth: (null): Invalid header checksum [ 47.016598][ T5191] Bluetooth: (null): Invalid header checksum [ 47.038447][ T5784] netlink: 204 bytes leftover after parsing attributes in process `syz.3.171'. [ 47.042047][ T5191] Bluetooth: (null): Invalid header checksum [ 47.090333][ T5784] vxcan3: entered promiscuous mode [ 47.090352][ T5784] vxcan3: entered allmulticast mode [ 47.122482][ T5784] loop3: detected capacity change from 0 to 512 [ 47.122930][ T5784] EXT4-fs: Invalid want_extra_isize 0 [ 47.146049][ T5193] Bluetooth: (null): Invalid header checksum [ 47.216049][ T51] Bluetooth: hci4: command 0x206a tx timeout [ 47.216133][ T4714] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 47.366444][ T5191] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.526830][ T5191] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.536487][ T5822] .: renamed from bond0 (while UP) [ 47.538353][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.538924][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.539171][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.539504][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.540124][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.636201][ T5191] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.827075][ T5191] bridge_slave_1: left allmulticast mode [ 47.827097][ T5191] bridge_slave_1: left promiscuous mode [ 47.827197][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.845189][ T5191] bridge_slave_0: left allmulticast mode [ 47.845208][ T5191] bridge_slave_0: left promiscuous mode [ 47.845331][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.983413][ T5191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.995247][ T5191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.019894][ T5191] bond0 (unregistering): Released all slaves [ 48.029905][ T5191] bond1 (unregistering): Released all slaves [ 48.324239][ T5191] hsr_slave_0: left promiscuous mode [ 48.324565][ T5191] hsr_slave_1: left promiscuous mode [ 48.324833][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.324845][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.325142][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.325154][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.344802][ T5191] veth1_macvtap: left promiscuous mode [ 48.344837][ T5191] veth0_macvtap: left promiscuous mode [ 48.344887][ T5191] veth1_vlan: left promiscuous mode [ 48.344924][ T5191] veth0_vlan: left promiscuous mode [ 48.557840][ T5191] team0 (unregistering): Port device team_slave_1 removed [ 48.573303][ T5191] team0 (unregistering): Port device team_slave_0 removed [ 48.758690][ T5882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.787797][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.795069][ T5882] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz.3.184: invalid fast symlink length 39 [ 48.856732][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.856760][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.856818][ T5821] bridge_slave_0: entered allmulticast mode [ 48.857237][ T5821] bridge_slave_0: entered promiscuous mode [ 48.867901][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.867930][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.867997][ T5821] bridge_slave_1: entered allmulticast mode [ 48.868760][ T5821] bridge_slave_1: entered promiscuous mode [ 48.909380][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.910889][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.927093][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.970158][ T5821] team0: Port device team_slave_0 added [ 48.970914][ T5821] team0: Port device team_slave_1 added [ 49.056050][ T5898] FAULT_INJECTION: forcing a failure. [ 49.056050][ T5898] name failslab, interval 1, probability 0, space 0, times 0 [ 49.056071][ T5898] CPU: 1 UID: 0 PID: 5898 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT [ 49.056081][ T5898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 49.056087][ T5898] Call trace: [ 49.056090][ T5898] show_stack+0x2c/0x3c (C) [ 49.056111][ T5898] __dump_stack+0x30/0x40 [ 49.056123][ T5898] dump_stack_lvl+0xd8/0x12c [ 49.056134][ T5898] dump_stack+0x1c/0x28 [ 49.056145][ T5898] should_fail_ex+0x41c/0x590 [ 49.056158][ T5898] should_failslab+0xc4/0x120 [ 49.056171][ T5898] kmem_cache_alloc_noprof+0x94/0x5d4 [ 49.056180][ T5898] mpol_new+0x14c/0x264 [ 49.056189][ T5898] __arm64_sys_mbind+0x428/0x994 [ 49.056198][ T5898] invoke_syscall+0x98/0x244 [ 49.056210][ T5898] el0_svc_common+0xec/0x23c [ 49.056221][ T5898] do_el0_svc+0x4c/0x5c [ 49.056232][ T5898] el0_svc+0x64/0x260 [ 49.056243][ T5898] el0t_64_sync_handler+0x44/0x104 [ 49.056254][ T5898] el0t_64_sync+0x198/0x19c [ 49.072301][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.072314][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.072328][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.072873][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.072880][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.072894][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.172710][ T5903] netlink: 144 bytes leftover after parsing attributes in process `syz.5.186'. [ 49.347334][ T5821] hsr_slave_0: entered promiscuous mode [ 49.347710][ T5821] hsr_slave_1: entered promiscuous mode [ 49.347901][ T5821] debugfs: 'hsr0' already exists in 'hsr' [ 49.347913][ T5821] Cannot create hsr debugfs directory [ 49.410112][ T5908] set_capacity_and_notify: 3 callbacks suppressed [ 49.410126][ T5908] loop3: detected capacity change from 0 to 512 [ 49.427231][ T5908] EXT4-fs (loop3): Test dummy encryption mode enabled [ 49.429454][ T5908] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.188: inode has both inline data and extents flags [ 49.429476][ T5908] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.431443][ T5908] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.188: couldn't read orphan inode 15 (err -117) [ 49.431466][ T5908] loop3: lost filesystem error report for type 5 error -117 [ 49.435513][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 49.435541][ C1] EXT4-fs (loop3): initial error at time 49: ext4_orphan_get:1403: inode 15 [ 49.435561][ C1] EXT4-fs (loop3): last error at time 49: ext4_orphan_get:1408 [ 49.451097][ T5908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.519635][ T5821] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.528565][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.529403][ T5821] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.533155][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.534622][ T5821] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.543172][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.543528][ T5821] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.556876][ T5821] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.616462][ T4714] Bluetooth: hci3: command tx timeout [ 49.768878][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.834543][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.868819][ T5925] loop5: detected capacity change from 0 to 1024 [ 49.869215][ T5925] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.873956][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.873985][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.874530][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.874550][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.917551][ T5925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.984099][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.066537][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 50.328360][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.398591][ T5953] loop5: detected capacity change from 0 to 256 [ 50.399046][ T5953] vfat: Bad value for 'codepage' [ 50.579286][ T5821] veth0_vlan: entered promiscuous mode [ 50.597606][ T5821] veth1_vlan: entered promiscuous mode [ 50.603366][ T5821] veth0_macvtap: entered promiscuous mode [ 50.604394][ T5821] veth1_macvtap: entered promiscuous mode [ 50.618253][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.619231][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.656285][ T5191] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.656405][ T5191] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.656495][ T5191] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.656563][ T5191] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.714668][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.714682][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.762777][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 50.777739][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.777756][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.135059][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 51.265539][ T5992] xt_ecn: cannot match TCP bits for non-tcp packets [ 51.282464][ T5997] loop5: detected capacity change from 0 to 512 [ 51.343382][ T5997] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.194: corrupted in-inode xattr: invalid size in ea xattr [ 51.343419][ T5997] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.345482][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 51.345497][ C0] EXT4-fs (loop5): initial error at time 51: ext4_iget_extra_inode:5210: inode 15 [ 51.345514][ C0] EXT4-fs (loop5): last error at time 51: ext4_iget_extra_inode:5210: inode 15 [ 51.345771][ T5997] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.194: couldn't read orphan inode 15 (err -117) [ 51.345793][ T5997] loop5: lost filesystem error report for type 5 error -117 [ 51.360999][ T5997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.396317][ T5997] netlink: 'syz.5.194': attribute type 34 has an invalid length. [ 51.396334][ T5997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.194'. [ 51.396349][ T5997] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 51.403168][ T5997] EXT4-fs error (device loop5): ext4_validate_block_bitmap:436: comm syz.5.194: bg 0: block 4: invalid block bitmap [ 51.448994][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.531211][ T6002] FAULT_INJECTION: forcing a failure. [ 51.531211][ T6002] name failslab, interval 1, probability 0, space 0, times 0 [ 51.531235][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.6.197 Not tainted syzkaller #0 PREEMPT [ 51.531249][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 51.531255][ T6002] Call trace: [ 51.531259][ T6002] show_stack+0x2c/0x3c (C) [ 51.531278][ T6002] __dump_stack+0x30/0x40 [ 51.531291][ T6002] dump_stack_lvl+0xd8/0x12c [ 51.531302][ T6002] dump_stack+0x1c/0x28 [ 51.531313][ T6002] should_fail_ex+0x41c/0x590 [ 51.531327][ T6002] should_failslab+0xc4/0x120 [ 51.531341][ T6002] __kmalloc_cache_noprof+0x94/0x5fc [ 51.531350][ T6002] bpf_xdp_link_attach+0x16c/0x9b0 [ 51.531363][ T6002] link_create+0x278/0x614 [ 51.531374][ T6002] __sys_bpf+0x770/0x82c [ 51.531383][ T6002] __arm64_sys_bpf+0xd0/0xec [ 51.531392][ T6002] invoke_syscall+0x98/0x244 [ 51.531405][ T6002] el0_svc_common+0xec/0x23c [ 51.531416][ T6002] do_el0_svc+0x4c/0x5c [ 51.531427][ T6002] el0_svc+0x64/0x260 [ 51.531439][ T6002] el0t_64_sync_handler+0x44/0x104 [ 51.531449][ T6002] el0t_64_sync+0x198/0x19c [ 51.533646][ T6002] loop6: detected capacity change from 0 to 512 [ 51.557309][ T6002] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 51.557335][ T6002] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 51.576012][ T6005] netlink: 32 bytes leftover after parsing attributes in process `syz.5.198'. [ 51.577649][ T6002] EXT4-fs error (device loop6): mb_free_blocks:2049: group 0, inode 11: block 198:freeing already freed block (bit 197); block bitmap corrupt. [ 51.580009][ T6002] EXT4-fs (loop6): Remounting filesystem read-only [ 51.580157][ T6002] EXT4-fs (loop6): 1 truncate cleaned up [ 51.580617][ T6002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.605918][ T6005] overlayfs: missing 'workdir' [ 51.620586][ T6002] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.658787][ T6008] loop6: detected capacity change from 0 to 1024 [ 51.682081][ T4705] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.696503][ T4714] Bluetooth: hci3: command tx timeout [ 51.706746][ T6008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.756023][ T6008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.796260][ T5821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 52.048715][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.206'. [ 52.067555][ T6036] netlink: 44 bytes leftover after parsing attributes in process `syz.3.206'. [ 52.071326][ T6036] macvlan2: entered promiscuous mode [ 52.071340][ T6036] macvlan2: entered allmulticast mode [ 52.071667][ T6036] bond0: entered promiscuous mode [ 52.086639][ T6036] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 52.107538][ T6036] bond0: left promiscuous mode [ 52.149909][ T6051] macvlan2: entered promiscuous mode [ 52.149928][ T6051] macvlan2: entered allmulticast mode [ 52.150393][ T6051] bond0: entered promiscuous mode [ 52.150571][ T6051] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 52.151155][ T6044] netlink: 44 bytes leftover after parsing attributes in process `syz.3.206'. [ 52.153030][ T6052] loop6: detected capacity change from 0 to 512 [ 52.162681][ T6051] bond0: left promiscuous mode [ 52.182062][ T6052] EXT4-fs: Mount option(s) incompatible with ext2 [ 52.230106][ T6054] loop5: detected capacity change from 0 to 512 [ 52.242420][ T6054] EXT4-fs warning (device loop5): ext4_multi_mount_protect:287: Invalid MMP block in superblock [ 52.331574][ T6054] tipc: New replicast peer: 127.0.0.1 [ 52.331744][ T6054] tipc: Enabled bearer , priority 10 [ 52.394910][ T6060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 52.397290][ T6059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.208'. [ 52.600061][ T6073] loop6: detected capacity change from 0 to 1024 [ 52.600438][ T6073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.621568][ T6073] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 52.634850][ T6075] loop5: detected capacity change from 0 to 512 [ 52.644801][ T6075] EXT4-fs (loop5): Test dummy encryption mode enabled [ 52.652499][ T6075] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.211: inode has both inline data and extents flags [ 52.652520][ T6075] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.652627][ T6075] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.211: couldn't read orphan inode 15 (err -117) [ 52.652640][ T6075] loop5: lost filesystem error report for type 5 error -117 [ 52.653184][ T6075] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.728826][ T5821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.324024][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.6.214'. [ 53.364163][ T6067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.364233][ T6067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.386965][ T6067] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.390755][ T6067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.390808][ T6067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.392920][ T6067] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.395383][ T6067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.402085][ T6067] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.410262][ T6067] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 53.411600][ T6067] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 53.418642][ T6067] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 53.432349][ T6067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.432435][ T6067] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.436032][ T6067] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.900136][ T6140] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 54.655867][ T4714] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.455810][ T51] Bluetooth: hci4: command 0x206a tx timeout [ 55.455842][ T51] Bluetooth: hci2: command 0x0419 tx timeout [ 55.455871][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.455962][ T4714] Bluetooth: hci3: command 0x0419 tx timeout [ 55.580754][ T5077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.722078][ T6196] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.722620][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.764805][ T6206] netlink: 'syz.5.219': attribute type 1 has an invalid length. [ 55.864363][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.872259][ T6196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.901913][ T6211] netlink: 28 bytes leftover after parsing attributes in process `syz.5.219'. [ 56.055992][ T5189] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.056026][ T5189] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.056043][ T5189] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.056058][ T5189] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.352869][ T6215] loop6: detected capacity change from 0 to 1024 [ 56.353233][ T6215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.386168][ T6215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.437201][ T5821] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 56.603700][ T6230] netlink: 'syz.5.226': attribute type 4 has an invalid length. [ 56.616984][ T6230] netlink: 'syz.5.226': attribute type 4 has an invalid length. [ 56.623945][ T6210] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 56.624034][ T6210] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 56.624085][ T6210] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 56.624134][ T6210] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 56.624179][ T6210] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 56.662462][ T6233] trusted_key: encrypted_key: keylen parameter is missing [ 56.686905][ T6229] loop6: detected capacity change from 0 to 1024 [ 56.687190][ T6229] EXT4-fs: Ignoring removed bh option [ 56.713888][ T6229] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.721213][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.5.228'. [ 56.734128][ T6229] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.843471][ T6251] loop5: detected capacity change from 0 to 512 [ 56.852591][ T6251] EXT4-fs (loop5): Test dummy encryption mode enabled [ 56.859936][ T6251] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.230: inode has both inline data and extents flags [ 56.859960][ T6251] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 56.860859][ T6251] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.230: couldn't read orphan inode 15 (err -117) [ 56.860882][ T6251] loop5: lost filesystem error report for type 5 error -117 [ 56.861450][ T6251] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.563117][ T6264] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 57.573936][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.575069][ T6264] team0: Port device netdevsim1 added [ 57.599831][ T6264] netlink: 'syz.3.232': attribute type 10 has an invalid length. [ 57.612714][ T6264] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 57.612855][ T6264] team0: Port device netdevsim1 removed [ 57.613639][ T6264] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 57.625529][ T6264] .: (slave netdevsim1): Enslaving as an active interface with an up link [ 57.703394][ T6270] loop3: detected capacity change from 0 to 1024 [ 57.709190][ T6268] loop6: detected capacity change from 0 to 512 [ 57.743571][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.744550][ T6268] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #15: comm syz.6.233: iget: bad i_size value: 38620345925642 [ 57.744566][ T6268] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 57.744721][ T6268] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.233: couldn't read orphan inode 15 (err -117) [ 57.744738][ T6268] loop6: lost filesystem error report for type 5 error -117 [ 57.745759][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 57.745774][ C1] EXT4-fs (loop6): initial error at time 57: ext4_orphan_get:1403: inode 15 [ 57.745793][ C1] EXT4-fs (loop6): last error at time 57: ext4_orphan_get:1408 [ 57.746850][ T6268] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.778675][ T6270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.924933][ T6277] loop6: detected capacity change from 0 to 512 [ 57.973423][ T6275] loop3: detected capacity change from 0 to 4096 [ 58.017323][ T6275] EXT4-fs (loop3): Test dummy encryption mode enabled [ 58.052195][ T6275] fscrypt: AES-256-XTS using blk-crypto-fallback [ 58.134912][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.141632][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.142353][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.155803][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.158779][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.168165][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.181748][ T4715] Bluetooth: hci0: command 0x0c1a tx timeout [ 58.182100][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.183609][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.193576][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.193922][ T5821] EXT4-fs error (device loop6): ext4_empty_dir:3084: inode #12: comm syz-executor: invalid size [ 58.243088][ T6284] netlink: 'syz.3.238': attribute type 30 has an invalid length. [ 58.266326][ T6286] syzkaller0: entered promiscuous mode [ 58.266345][ T6286] syzkaller0: entered allmulticast mode [ 58.336843][ T4769] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on sy [ 58.639788][ T5191] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.655669][ T4715] Bluetooth: hci4: command 0x206a tx timeout [ 58.655703][ T4715] Bluetooth: hci2: command 0x0419 tx timeout [ 58.655723][ T4715] Bluetooth: hci1: command 0x0c1a tx timeout [ 58.687858][ T6293] loop3: detected capacity change from 0 to 4096 [ 58.819843][ T6293] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.846136][ T4715] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.855589][ T4715] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.858326][ T4715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.858811][ T4715] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.859076][ T4715] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.951671][ T5191] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.032187][ T5191] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.034937][ T4715] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 59.045609][ T4715] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 59.046508][ T4715] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 59.047125][ T4715] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.047439][ T4715] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 59.176476][ T5191] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.228612][ T6319] loop5: detected capacity change from 0 to 1024 [ 59.229004][ T6319] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.383093][ T6325] syzkaller0: entered promiscuous mode [ 59.383111][ T6325] syzkaller0: entered allmulticast mode [ 59.476908][ T5191] bridge_slave_1: left allmulticast mode [ 59.476932][ T5191] bridge_slave_1: left promiscuous mode [ 59.477003][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.477974][ T5191] bridge_slave_0: left allmulticast mode [ 59.477984][ T5191] bridge_slave_0: left promiscuous mode [ 59.478041][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.648351][ T6351] loop5: detected capacity change from 0 to 8192 [ 59.648876][ T6351] vfat: Unknown parameter 'œ' [ 59.683842][ T5191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.718829][ T5191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.728882][ T5191] bond0 (unregistering): Released all slaves [ 59.768571][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.250: corrupted inode contents [ 59.780024][ T6346] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #15: comm syz.5.250: mark_inode_dirty error [ 59.781795][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.250: corrupted inode contents [ 59.784839][ T6346] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.250: mark_inode_dirty error [ 59.785215][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.250: corrupted inode contents [ 59.785385][ T6346] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #15: comm syz.5.250: mark_inode_dirty error [ 59.798164][ T6346] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.250: corrupted inode contents [ 59.800111][ T6346] EXT4-fs error (device loop5): ext4_truncate:4721: inode #15: comm syz.5.250: mark_inode_dirty error [ 59.804021][ T6346] EXT4-fs error (device loop5) in ext4_setattr:6247: Corrupt filesystem [ 59.813580][ T6351] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #15: comm syz.5.250: corrupted inode contents [ 59.911063][ T6360] EXT4-fs (loop3): Test dummy encryption mode enabled [ 59.918097][ T6360] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.254: inode has both inline data and extents flags [ 59.918116][ T6360] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 59.918227][ T6360] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.254: couldn't read orphan inode 15 (err -117) [ 59.918239][ T6360] loop3: lost filesystem error report for type 5 error -117 [ 60.446788][ T5191] hsr_slave_0: left promiscuous mode [ 60.448866][ T5191] hsr_slave_1: left promiscuous mode [ 60.449227][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.449238][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.450147][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.450158][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.458915][ T5191] veth1_macvtap: left promiscuous mode [ 60.458946][ T5191] veth0_macvtap: left promiscuous mode [ 60.459001][ T5191] veth1_vlan: left promiscuous mode [ 60.459037][ T5191] veth0_vlan: left promiscuous mode [ 60.735647][ T4714] Bluetooth: hci1: command 0x0c1a tx timeout [ 60.735665][ T4715] Bluetooth: hci4: command 0x206a tx timeout [ 60.785384][ T5191] team0 (unregistering): Port device team_slave_1 removed [ 60.799072][ T5191] team0 (unregistering): Port device team_slave_0 removed [ 60.896698][ T4715] Bluetooth: hci3: command tx timeout [ 60.938821][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 60.996950][ T6394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.055727][ T4715] Bluetooth: hci0: command tx timeout [ 61.057628][ T6394] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.257: bg 0: block 112: padding at end of block bitmap is not set [ 61.146562][ T6296] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.146595][ T6296] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.146651][ T6296] bridge_slave_0: entered allmulticast mode [ 61.147279][ T6296] bridge_slave_0: entered promiscuous mode [ 61.162353][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.171298][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.171408][ T6296] bridge_slave_1: entered allmulticast mode [ 61.171903][ T6296] bridge_slave_1: entered promiscuous mode [ 61.179597][ T6405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.212739][ T6405] FAULT_INJECTION: forcing a failure. [ 61.212739][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 61.212763][ T6405] CPU: 0 UID: 0 PID: 6405 Comm: syz.5.258 Not tainted syzkaller #0 PREEMPT [ 61.212775][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.212780][ T6405] Call trace: [ 61.212783][ T6405] show_stack+0x2c/0x3c (C) [ 61.212801][ T6405] __dump_stack+0x30/0x40 [ 61.212810][ T6405] dump_stack_lvl+0xd8/0x12c [ 61.212820][ T6405] dump_stack+0x1c/0x28 [ 61.212829][ T6405] should_fail_ex+0x41c/0x590 [ 61.212840][ T6405] should_failslab+0xc4/0x120 [ 61.212850][ T6405] kmem_cache_alloc_noprof+0x94/0x5d4 [ 61.212858][ T6405] do_getname+0x48/0x234 [ 61.212865][ T6405] __arm64_sys_renameat2+0xc4/0x124 [ 61.212874][ T6405] invoke_syscall+0x98/0x244 [ 61.212884][ T6405] el0_svc_common+0xec/0x23c [ 61.212894][ T6405] do_el0_svc+0x4c/0x5c [ 61.212903][ T6405] el0_svc+0x64/0x260 [ 61.212912][ T6405] el0t_64_sync_handler+0x44/0x104 [ 61.212921][ T6405] el0t_64_sync+0x198/0x19c [ 61.215186][ T6296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.291659][ T6296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.339126][ T6296] team0: Port device team_slave_0 added [ 61.339872][ T6296] team0: Port device team_slave_1 added [ 61.496842][ T6413] ------------[ cut here ]------------ [ 61.496855][ T6413] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3a4/0x44c, CPU#1: syz.5.259/6413 [ 61.499934][ T6413] Modules linked in: [ 61.500691][ T6413] CPU: 1 UID: 0 PID: 6413 Comm: syz.5.259 Not tainted syzkaller #0 PREEMPT [ 61.502411][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.504317][ T6413] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 61.505840][ T6413] pc : ieee80211_tx_skb_tid+0x3a4/0x44c [ 61.506939][ T6413] lr : ieee80211_tx_skb_tid+0x3a4/0x44c [ 61.508004][ T6413] sp : ffff8000967c6990 [ 61.508804][ T6413] x29: ffff8000967c6990 x28: 0000000000000006 x27: ffff0000effa5a6c [ 61.510427][ T6413] x26: 0000000000000000 x25: dfff800000000000 x24: 0000000000000001 [ 61.512195][ T6413] x23: 0000000000000000 x22: ffff0000c7574ec0 x21: 0000000000000007 [ 61.513892][ T6413] x20: 00000000ffffffff x19: ffff0000c2a62b40 x18: 1fffe00035bb1028 [ 61.515580][ T6413] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800084c59180 [ 61.517316][ T6413] x14: 0000000000700637 x13: 0000000000000009 x12: 0000000000000009 [ 61.518968][ T6413] x11: 00000000aac27ebc x10: 0000000000080000 x9 : 0000000000015f26 [ 61.520468][ T6413] x8 : ffff800095339000 x7 : ffff8000863021d0 x6 : 0000000000000000 [ 61.521926][ T6413] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff800086302388 [ 61.523437][ T6413] x2 : 0000000000000001 x1 : ffff0000cf888000 x0 : 0000000000000001 [ 61.525002][ T6413] Call trace: [ 61.525596][ T6413] ieee80211_tx_skb_tid+0x3a4/0x44c (P) [ 61.526679][ T6413] mesh_plink_frame_tx+0x5ec/0xa70 [ 61.527652][ T6413] mesh_plink_deactivate+0x128/0x284 [ 61.528615][ T6413] mesh_sta_cleanup+0x44/0x80 [ 61.529486][ T6413] cleanup_single_sta+0x354/0x4d4 [ 61.530385][ T6413] __sta_info_destroy_part2+0x304/0x3d8 [ 61.531408][ T6413] __sta_info_flush+0x4c0/0x5f0 [ 61.532299][ T6413] ieee80211_do_stop+0x350/0x1bf0 [ 61.533216][ T6413] ieee80211_stop+0x1ac/0x1fc [ 61.534073][ T6413] __dev_close_many+0x2f4/0x648 [ 61.534963][ T6413] netif_close_many+0x1d8/0x51c [ 61.535869][ T6413] netif_close+0x150/0x208 [ 61.536661][ T6413] dev_close+0xf8/0x1dc [ 61.537460][ T6413] nl80211_del_interface+0xcc/0x130 [ 61.538413][ T6413] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 61.539420][ T6413] genl_rcv_msg+0x43c/0x620 [ 61.540276][ T6413] netlink_rcv_skb+0x238/0x414 [ 61.541182][ T6413] genl_rcv+0x38/0x50 [ 61.541947][ T6413] netlink_unicast+0x600/0x7f8 [ 61.542863][ T6413] netlink_sendmsg+0x648/0x948 [ 61.543795][ T6413] __sock_sendmsg+0xc8/0x17c [ 61.544679][ T6413] ____sys_sendmsg+0x3d0/0x6c8 [ 61.545580][ T6413] ___sys_sendmsg+0x198/0x224 [ 61.546472][ T6413] __sys_sendmsg+0x158/0x204 [ 61.547347][ T6413] __arm64_sys_sendmsg+0x88/0x9c [ 61.548288][ T6413] invoke_syscall+0x98/0x244 [ 61.549141][ T6413] el0_svc_common+0xec/0x23c [ 61.549997][ T6413] do_el0_svc+0x4c/0x5c [ 61.550807][ T6413] el0_svc+0x64/0x260 [ 61.551580][ T6413] el0t_64_sync_handler+0x44/0x104 [ 61.552526][ T6413] el0t_64_sync+0x198/0x19c [ 61.553353][ T6413] irq event stamp: 3855 [ 61.554144][ T6413] hardirqs last enabled at (3854): [] _raw_spin_unlock_irqrestore+0x38/0x98 [ 61.556181][ T6413] hardirqs last disabled at (3855): [] el1_brk64+0x20/0x54 [ 61.557833][ T6413] softirqs last enabled at (3846): [] ieee80211_txq_purge+0x264/0x340 [ 61.559748][ T6413] softirqs last disabled at (3848): [] mesh_plink_deactivate+0x70/0x284 [ 61.561685][ T6413] ---[ end trace 0000000000000000 ]--- [ 61.596823][ T6413] ------------[ cut here ]------------ [ 61.596834][ T6413] WARNING: net/mac80211/iface.c:538 at ieee80211_do_stop+0x17bc/0x1bf0, CPU#1: syz.5.259/6413 [ 61.600047][ T6413] Modules linked in: [ 61.600802][ T6413] CPU: 1 UID: 0 PID: 6413 Comm: syz.5.259 Tainted: G W syzkaller #0 PREEMPT [ 61.602991][ T6413] Tainted: [W]=WARN [ 61.603766][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 61.605819][ T6413] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 61.607396][ T6413] pc : ieee80211_do_stop+0x17bc/0x1bf0 [ 61.608445][ T6413] lr : ieee80211_do_stop+0x17bc/0x1bf0 [ 61.609467][ T6413] sp : ffff8000967c6d40 [ 61.610268][ T6413] x29: ffff8000967c6f30 x28: ffff8000967c6e00 x27: ffff0000f72d0f60 [ 61.611730][ T6413] x26: dfff800000000000 x25: 1fffe00018eaed8e x24: ffff0000c7574ec0 [ 61.613273][ T6413] x23: ffff8000967c6e20 x22: ffff0000c7576c70 x21: 0000000000000001 [ 61.614782][ T6413] x20: dfff800000000000 x19: ffff0000c7575930 x18: 1fffe00035bb1028 [ 61.616307][ T6413] x17: 0000000000000003 x16: ffff800088b97000 x15: ffff800084c59180 [ 61.617855][ T6413] x14: 0000000000700a89 x13: 0000000000000009 x12: 0000000000000009 [ 61.619329][ T6413] x11: 000000007f99f6df x10: 0000000000080000 x9 : 00000000000403d4 [ 61.620847][ T6413] x8 : ffff800095339000 x7 : ffff8000862191c4 x6 : 0000000000000000 [ 61.622385][ T6413] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80008627324c [ 61.623974][ T6413] x2 : 0000000000000001 x1 : ffff0000cf888000 x0 : 0000000000000001 [ 61.625484][ T6413] Call trace: [ 61.626080][ T6413] ieee80211_do_stop+0x17bc/0x1bf0 (P) [ 61.627106][ T6413] ieee80211_stop+0x1ac/0x1fc [ 61.628014][ T6413] __dev_close_many+0x2f4/0x648 [ 61.628940][ T6413] netif_close_many+0x1d8/0x51c [ 61.629874][ T6413] netif_close+0x150/0x208 [ 61.630709][ T6413] dev_close+0xf8/0x1dc [ 61.631472][ T6413] nl80211_del_interface+0xcc/0x130 [ 61.632448][ T6413] genl_family_rcv_msg_doit+0x1e4/0x2d4 [ 61.633494][ T6413] genl_rcv_msg+0x43c/0x620 [ 61.634349][ T6413] netlink_rcv_skb+0x238/0x414 [ 61.635302][ T6413] genl_rcv+0x38/0x50 [ 61.636070][ T6413] netlink_unicast+0x600/0x7f8 [ 61.636985][ T6413] netlink_sendmsg+0x648/0x948 [ 61.637902][ T6413] __sock_sendmsg+0xc8/0x17c [ 61.638775][ T6413] ____sys_sendmsg+0x3d0/0x6c8 [ 61.639694][ T6413] ___sys_sendmsg+0x198/0x224 [ 61.640559][ T6413] __sys_sendmsg+0x158/0x204 [ 61.641405][ T6413] __arm64_sys_sendmsg+0x88/0x9c [ 61.642341][ T6413] invoke_syscall+0x98/0x244 [ 61.643208][ T6413] el0_svc_common+0xec/0x23c [ 61.644077][ T6413] do_el0_svc+0x4c/0x5c [ 61.644901][ T6413] el0_svc+0x64/0x260 [ 61.645648][ T6413] el0t_64_sync_handler+0x44/0x104 [ 61.646633][ T6413] el0t_64_sync+0x198/0x19c [ 61.647472][ T6413] irq event stamp: 4704 [ 61.648225][ T6413] hardirqs last enabled at (4703): [] kasan_quarantine_put+0xb4/0x1c4 [ 61.649966][ T6413] hardirqs last disabled at (4704): [] el1_brk64+0x20/0x54 [ 61.651518][ T6413] softirqs last enabled at (4662): [] mesh_path_flush_by_nexthop+0x108/0x124 [ 61.653391][ T6413] softirqs last disabled at (4644): [] mesh_path_flush_by_nexthop+0x54/0x124 [ 61.655355][ T6413] ---[ end trace 0000000000000000 ]--- [ 61.768456][ T5191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.768482][ T5191] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.830351][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.830366][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.830377][ T6296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.832374][ T6296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.832387][ T6296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.832404][ T6296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.835203][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.835233][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.835315][ T6306] bridge_slave_0: entered allmulticast mode [ 61.841463][ T6306] bridge_slave_0: entered promiscuous mode [ 61.842737][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.842800][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.842863][ T6306] bridge_slave_1: entered allmulticast mode [ 61.843380][ T6306] bridge_slave_1: entered promiscuous mode [ 61.864721][ T6296] hsr_slave_0: entered promiscuous mode [ 61.865185][ T6296] hsr_slave_1: entered promiscuous mode [ 61.865843][ T6296] debugfs: 'hsr0' already exists in 'hsr' [ 61.865860][ T6296] Cannot create hsr debugfs directory [ 61.867152][ T6306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.868203][ T6306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.880552][ T5191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.880576][ T5191] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.902962][ T6306] team0: Port device team_slave_0 added [ 61.934387][ T6306] team0: Port device team_slave_1 added [ 61.999161][ T5191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 61.999187][ T5191] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.001014][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.001023][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.001040][ T6306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.001756][ T6306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.001766][ T6306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 62.001780][ T6306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.071377][ T6306] hsr_slave_0: entered promiscuous mode [ 62.071687][ T6306] hsr_slave_1: entered promiscuous mode [ 62.071894][ T6306] debugfs: 'hsr0' already exists in 'hsr' [ 62.071905][ T6306] Cannot create hsr debugfs directory [ 62.080831][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 62.103209][ T5191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 62.103235][ T5191] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.139081][ T6296] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 62.141764][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.144203][ T6296] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 62.145286][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.149523][ T6296] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 62.151066][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.153484][ T6296] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 62.156972][ T6296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.231720][ T5191] bridge_slave_1: left allmulticast mode [ 62.231744][ T5191] bridge_slave_1: left promiscuous mode [ 62.231833][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.233168][ T5191] bridge_slave_0: left allmulticast mode [ 62.233180][ T5191] bridge_slave_0: left promiscuous mode [ 62.233243][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.338784][ T5191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.351644][ T5191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.376960][ T5191] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 62.406960][ T5191] bond0 (unregistering): Released all slaves [ 62.411507][ T4842] dummy0: left promiscuous mode [ 62.446968][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 62.492173][ T6306] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 62.495009][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.593328][ T6296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.593498][ T6306] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 62.594643][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.594961][ T6306] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 62.597655][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.607395][ T6296] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.608500][ T6306] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 62.609698][ T6306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.638560][ T5191] hsr_slave_0: left promiscuous mode [ 62.638841][ T5191] hsr_slave_1: left promiscuous mode [ 62.639112][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.639124][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.641874][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.641886][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.657637][ T5191] veth1_macvtap: left promiscuous mode [ 62.657669][ T5191] veth0_macvtap: left promiscuous mode [ 62.657733][ T5191] veth1_vlan: left promiscuous mode [ 62.657768][ T5191] v: left promiscuous mode [ 62.825126][ T5191] team0 (unregistering): Port device team_slave_1 removed [ 62.834063][ T5191] team0 (unregistering): Port device team_slave_0 removed [ 62.914578][ T5187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.914608][ T5187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.921100][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.921126][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.951051][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 62.976864][ T4715] Bluetooth: hci3: command tx timeout [ 62.977038][ T6306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.981944][ T6306] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.991027][ T6296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.991041][ T6296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.039232][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.039261][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.080741][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.080774][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.130854][ T6306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.130872][ T6306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.135982][ T4715] Bluetooth: hci0: command tx timeout [ 63.249732][ T6296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.336034][ T6306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.432812][ T6296] veth0_vlan: entered promiscuous mode [ 63.438991][ T6296] veth1_vlan: entered promiscuous mode [ 63.454185][ T6296] veth0_macvtap: entered promiscuous mode [ 63.464394][ T6296] veth1_macvtap: entered promiscuous mode [ 63.477639][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.483347][ T6296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.527603][ T6306] veth0_vlan: entered promiscuous mode [ 63.561431][ T5189] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.562426][ T5189] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.562550][ T5189] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.562627][ T5189] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.564154][ T6306] veth1_vlan: entered promiscuous mode [ 63.583939][ T5193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.583948][ T5193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.609825][ T5193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.609842][ T5193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.611068][ T6306] veth0_macvtap: entered promiscuous mode [ 63.613481][ T6306] veth1_macvtap: entered promiscuous mode [ 63.643389][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.649232][ T6306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.677870][ T5193] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.678074][ T5193] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.678090][ T5193] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.678105][ T5193] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.732025][ T5189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.732039][ T5189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.760645][ T5193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.760659][ T5193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.862000][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 64.029927][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 64.171044][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 64.313554][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 64.499870][ T1594] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.499910][ T1594] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.506271][ T24] cfg80211: failed to load regulatory.db [ 65.055597][ T4715] Bluetooth: hci3: command tx timeout [ 65.216041][ T4715] Bluetooth: hci0: command tx timeout [ 67.135957][ T4715] Bluetooth: hci3: command tx timeout [ 67.296092][ T4715] Bluetooth: hci0: command tx timeout