last executing test programs: 1m4.044887917s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x4, 0x40, 0x0, 0x7ffc0001}]}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010826bd7000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="2800508005000200020000000800030001ac0f00090001000fd693f9590000000500090001"], 0x50}}, 0x40000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r4, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000700)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4/file7/file6\x00', 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)="34cd13b28ff3", 0x6}, {&(0x7f00000007c0)="d5906947", 0x4}], 0x2, 0x0, 0x0, 0x20004001}], 0x1, 0x0) 1m3.731000211s ago: executing program 1 (id=21): waitid(0x1, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSDEBUG(r1, 0x40047440, 0xfffffffffffffffe) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1000) fanotify_mark(r5, 0x105, 0x10000839, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r5, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x6, &(0x7f0000000180)) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) 1m2.570040992s ago: executing program 1 (id=25): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)='v', 0x1}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) write$cgroup_pid(r0, &(0x7f0000000000), 0x12) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x0, 0x182}, 0xc) syz_open_dev$video4linux(0x0, 0x401, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, r4, 0xfffffdb4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0x48, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xffff, 0x2}, {}, {0xf, 0xfff8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0xfffa}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) setsockopt$packet_int(r10, 0x107, 0xc, 0x0, 0x7) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04061120"], 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1m1.797642457s ago: executing program 1 (id=28): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000001240)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='maps\x00') pread64(r3, &(0x7f0000000040)=""/52, 0x34, 0x81f) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10022, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a00090700000028bd7000fbdbdf2505000700ff0000000a004e210000000700000000000000000000000000000001ffffffff00000000efff90b8f90ac165f7146106fc9955391462fe6e97592e37d9f30fe1f83aaa96ac238ffd1cc1bac1cfa7139de8f147cf9f252190e5a3e202e6aa698ed09e078ef6d2316cf5913e068af925149ea2b25b1ae3fb111a3a69b480e9bc74d1b4e7bfef6ef48539463736b57868c8e30c2f8d24d86568ee7fa01060a8c15e2147123895428fe8f1aea1babc6386954c3e26dd5df23d258eeb90f2684758dc749362fb87280420d9a15b0d92864d"], 0x38}}, 0x4000000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000340)={[{@test_dummy_encryption}, {@nodioread_nolock}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x2368810, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file1\x00', 0x8000, 0x0, 0x1, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="c7", 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000440)=0x60, 0x2) 1m0.615870546s ago: executing program 1 (id=33): socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000000640)=""/176, 0xffffffffffffff1b, 0x0, 0x0, 0x2}}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x2) pipe2(&(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x3000008, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500087cb7978050000f800000600000005000500020400000000000900020073797a31000010002de2dce91500031dd9264a60ccf3742c706f72742c6e657400"/75], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x80480, &(0x7f0000000100), 0x6, 0x61e, &(0x7f0000002740)="$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") setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$set_reqkey_keyring(0xe, 0x7) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e24, 0x2, @private0, 0x1}, 0x1c) 59.198227611s ago: executing program 1 (id=41): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fd}, 0x684}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 58.952501126s ago: executing program 32 (id=41): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000040)={[{@delalloc}, {@errors_remount}, {@quota}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x5}}, {@orlov}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") chdir(&(0x7f0000000000)='./file0\x00') r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f00000001c0)={{0x7d3117e6, 0x1}, {0x3, 0x67fd}, 0x684}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) 4.971968535s ago: executing program 5 (id=439): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100"/16], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000001c0)=0x4, 0x4) 4.755408796s ago: executing program 5 (id=441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) (fail_nth: 3) 4.647985275s ago: executing program 5 (id=443): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="079762a624481bfb26ce24f770d8230c5bdd74d0c42ed15db771ab0c4ddf13bef14f3e5457733a4f3f9c4d0fc3f6a554822069995618fd13398b13594571e9c1fbbf25611a7474157c34e069dc5820135423af45bcf6c9814bb8f9f41d2719a2fffcd8226a04f2f4529bbbe234113fcc639ed902fb120e14521e2dbc8f47e500bbeca45561f4f109039c2ba16d2b8dfa0cb481e16ef0aa40088b2d0d23ea67b4117d9d10a56577b9c3dd36ac58c0", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="d9", 0x1}], 0x1, 0x0, 0x0, 0x6000}, 0x24) 4.284684384s ago: executing program 2 (id=444): openat$panthor(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x10, 0x80002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 3.75562133s ago: executing program 5 (id=448): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@grpquota}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x30040a9, 0x0, 0xf, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, 0x14, 0x1, 0x0, 0x0, {0x1e}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000080), 0xffffffffffffffff, 0xca0) (async) r5 = syz_open_dev$video(&(0x7f0000000080), 0xffffffffffffffff, 0xca0) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x3, 0x2, 0x31384142, 0x7, 0x2, 0x1, 0x4, 0x8, 0x1, 0x4, 0x1, 0x6}}) (async) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000000c0)={0x9, @pix={0x3, 0x2, 0x31384142, 0x7, 0x2, 0x1, 0x4, 0x8, 0x1, 0x4, 0x1, 0x6}}) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0xff, 0x7, 0xc2, 0xc, 0x63, 0x4, [0x20040, 0x101, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) (async) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0xff, 0x7, 0xc2, 0xc, 0x63, 0x4, [0x20040, 0x101, 0x10, 0x40, 0x6, 0x8, 0xfffffeff, 0x2174]}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f0000000240)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 3.587833301s ago: executing program 5 (id=451): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000001c0)=0x4, 0x4) 3.22697565s ago: executing program 5 (id=455): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x8, 0xb4, &(0x7f00000003c0)=""/180, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0006000500000000000000000000000000000000000000c9b221c3614d1e84a28100"/49], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000064400048014000180090001006c61737400000000040002"], 0xf4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) 3.188428985s ago: executing program 33 (id=455): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x8, 0xb4, &(0x7f00000003c0)=""/180, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0006000500000000000000000000000000000000000000c9b221c3614d1e84a28100"/49], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000064400048014000180090001006c61737400000000040002"], 0xf4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80"], 0x38}}, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000080)={[{@rodir}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8}, {@numtail}, {@utf8}, {@shortname_lower}, {@shortname_mixed}, {@shortname_lower}, {@uni_xlate}, {@utf8}, {@fat=@quiet}, {@utf8no}, {@numtail}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0x379, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x68042, 0xe) 3.164503342s ago: executing program 2 (id=457): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x800800, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x2c8, &(0x7f0000000a00)="$eJzs3E9rE1sYx/HnNm2TprTJhcuFe0V90I1uhja+AA3SghhQalPUhTC1Ew0ZkzITIhGxcSFufR3FpTtBfQPdiBv37ooguOlCHOn8aZM2LWlN0th+P1DOmTnn13NKp+WZQs/67VePSgXXKJhVGUqoDIk0ZEMkvdkL/RW2Q35/VJo15OL498+nb925ez2by83Mqc5m5y9lVHXy7LvHT1+f+1AdX3gz+TYua+l7698yX9b+Xftv/ef8w6KrRVfLlaqaulipVM1F29KlolsyVG/alulaWiy7ltMyXrAry8t1NctLE8llx3JdNct1LVl1rVa06tTVfGAWy2oYhk4k5WQb7mBOfnVuzszuun0qbL1Y13eF7oq3Xo61m+M42Ub7wfxqr/YFAAAG1/71f1Dr713/5xaCtsv1vwj1f480Wq72qP9xrDhO1kyGP7+tqP8BAAAAAAAAAAAAAAAAAAAAAPgTbHheyvO8VNRGH3ERSYhIdH3U+0RvHPL7f/mItosua/rHvYSI/bKWr+WDNhjPFqQotlgyJSn54T8PoaA/ey03M6W+kfBTbuZXavmYfzaBn4+k2+XP/D0d5FXeb+ZqYX5Eks3rZyQl/7RfP7Odj45DWKnlR+XC+aa8ISn5eF8qYsuS/1xv559Nq169kdux/pg/by+dnK4BAAAAAMCgMHRLuvX9Nzj70fAnJGT3eJA/wN8HdrxfD8v/vEQDAAAAANAXbv1JybRtyzlEJy4ivxE/rp2YDMQ2dnSuiEjfFxWRRk3c+vPwaevf6gkRCe7oYeJft+IdpbwO5gyLyEA8CR12jvgXEwAAAICu2y76DxD69KKHOwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4OTp9DywaH7JW5GW8+2igX3iTcvF+v4FAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPkVwAAAP//hgsWNg==") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4064014) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x32000, 0x4) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff}}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x800800, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], 0x1, 0x2c8, &(0x7f0000000a00)="$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") (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4064014) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x32000, 0x4) (async) prctl$PR_SET_SECCOMP(0x37, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000240)=@framed, &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff}}, 0x10) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f3bbbbbb"], 0x0) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) close(r2) (async) close(0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) 3.081808549s ago: executing program 2 (id=458): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="079762a624481bfb26ce24f770d8230c5bdd74d0c42ed15db771ab0c4ddf13bef14f3e5457733a4f3f9c4d0fc3f6a554822069995618fd13398b13594571e9c1fbbf25611a7474157c34e069dc5820135423af45bcf6c9814bb8f9f41d2719a2fffcd8226a04f2f4529bbbe234113fcc639ed902fb120e14521e2dbc8f47e500bbeca45561f4f109039c2ba16d2b8dfa0cb481e16ef0aa40088b2d0d23ea67b4117d9d10a56577b9c3dd36ac58c0", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) read$FUSE(0xffffffffffffffff, &(0x7f0000004100)={0x2020}, 0x2020) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="d9", 0x1}], 0x1, 0x0, 0x0, 0x6000}, 0x24) 2.893046452s ago: executing program 0 (id=461): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014003000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd8}], 0x1}, 0x0) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="18000000000000d2a352c0b10000000000000000008500000019000000180100000fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020062d387d7eb99b90005000000b703000000"], &(0x7f0000000140)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = fsmount(r1, 0x1, 0x0) syz_clone3(&(0x7f0000000880)={0x308800000, 0x0, 0x0, 0x0, {0x2f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$PTP_ENABLE_PPS(r3, 0x40043d04, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="090300000000000000002e"], 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bridge_slave_0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0x2f, [0x6, 0x2, 0x9, 0x14, 0xd921, 0x2, 0x2, 0xfffffffc, 0x7, 0xfffffffb, 0x7, 0x38, 0xe45, 0x6, 0xa, 0x2, 0xf, 0xd, 0x8, 0x2, 0x1, 0xfffffffc, 0x6, 0x7, 0x5, 0x1, 0x5, 0x5, 0x400, 0x2, 0x3, 0x5, 0x2, 0x80000000, 0x80000040, 0x773, 0xfffffff8, 0x8, 0xffff, 0x0, 0x7, 0x40, 0x80, 0x0, 0x41, 0x8, 0x8, 0xfffffffc, 0x3, 0xc0a, 0x4, 0x0, 0x1a, 0xd3d9, 0x24, 0x9, 0x69a8be59, 0x100009, 0x2, 0x7, 0x9, 0xf50, 0xfffff57f, 0x4, 0xd0, 0x1, 0x8, 0xebfe, 0x10001, 0x8, 0x4, 0x800006, 0x3, 0x8, 0x4, 0x1, 0x7, 0x1, 0x2, 0x7, 0x7, 0xc, 0x5, 0xbf, 0x0, 0x28d, 0x6, 0x3, 0x38, 0x4, 0xfffffff8, 0x8000, 0x11a, 0x7, 0x800, 0x7fff, 0x7fffffff, 0x3, 0x0, 0x6, 0x0, 0x7, 0x7, 0x1, 0x396bd1bf, 0x10000, 0x2, 0x5, 0x8, 0xe15, 0xf3, 0x7f, 0x800, 0x7, 0x0, 0x9, 0xcf, 0x7d7, 0x2, 0x2, 0x0, 0x1, 0xd0, 0x1, 0x10, 0x4, 0x3, 0x8]}}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, 0x0, &(0x7f0000000500)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r11, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000001c0)='k', 0x1}], 0x1, &(0x7f0000000300)=[@ip_retopts={{0x10, 0x84}}], 0x10}, 0x4000000) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x90, r10, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x6679fb74bcda4679}, {0xc, 0x8f, 0xc}, {0xc, 0x90, 0x7}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={0x144, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0xfff}, {0x8, 0x13, 0x5}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xabb2}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f90}, {0x6, 0x11, 0xfff9}, {0x8, 0x13, 0xe9}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xef}, {0x6, 0x11, 0xe0bc}, {0x8, 0x13, 0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x387}, {0x6, 0x11, 0x8001}, {0x8, 0x13, 0xfff}, {0x5, 0x14, 0x1}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$netlink(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)={0x1c, 0x76, 0x31f, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0xd}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)={0x18, r13, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x20000000) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r13, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3ff}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40054}, 0x0) ioctl$FIONCLEX(r11, 0x5450) 2.774265896s ago: executing program 0 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30f4ff00000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.700023696s ago: executing program 0 (id=464): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000)=0x0, &(0x7f0000ffe000)=0x0, &(0x7f0000000000)) syz_io_uring_complete(r1, r2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f000048b000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f000057d000/0x2000)=nil, 0x2000, 0x300000b, 0x110, r0, 0x10000000) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000080)={0x0, 0xfa3a, 0x8000, 0x0, 0x396, 0x0, r0}, &(0x7f0000000100)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2e16, 0x4000, 0x2, 0xa9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3e59, 0x1, 0x3, 0x290, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18c2, 0x80, 0x3, 0x37f, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaff8, 0x100, 0x2, 0x2cb, 0x0, r0}, 0xffffffffffffffff}], 0x4, &(0x7f0000001ac0)={0x2e, 0x40, 0x0, r0, 0xc0107520, 0x0, 0x0, 0x0, 0xfb4ffb9d31d6670e, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x4d0, 0x0, &(0x7f0000000ac0)=@buf_1k="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"}}, &(0x7f0000001b40)) syz_io_uring_submit(r1, r3, r4, &(0x7f0000001c80)=@IORING_OP_MSG_RING={0x28, 0x22, 0x0, r5, 0x0, &(0x7f0000001b80)="4fbdb0a6d7de9aaab0d6470d4dd72c7a2c77d4b69dd819ffdd44df62dd385e8add135066440ccecd88ad9362a18716e4aa69cf5e677dc6e4a3ad630e312e54f65a774acbc59fe923ceb611fffe67c16d4747a2c8dac30c91b92db56012d5234de46e428e79de091ef9a25de50680d4dada76ca4d14cc23b2cfdb9e613b835bd6b3739ea21fa965a9cf6a7e23a8fe452e783b0616ae07d8ff61a58f4454e4b03339131f45c0a3a1fc645c81c0353cfbcae35caed5bd52724024327ce712537729afbdb790732e105756176bb604d74d4dd35a24a67b773273", 0xd8, 0x3}) accept4$packet(r0, 0x0, &(0x7f0000000a80), 0x80000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) 2.642649337s ago: executing program 0 (id=466): openat$panthor(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x10, 0x80002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2.480028361s ago: executing program 4 (id=467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x14f5, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 2.26352558s ago: executing program 3 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xaf7) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x4, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) move_pages(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000500), 0x1, 0x485, &(0x7f0000001040)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000011c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d0, 0x0, 0x5c, 0x160, 0xf0, 0x3e0, 0x200, 0x228, 0x25a, 0x200, 0x228, 0x4, 0x0, {[{{@uncond, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7fff, 0x9, 0x7, 'syz0\x00', {0x719}}}}, {{@ipv6={@private0, @empty, [0xff, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xffffff00], 'tunl0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x33, 0x4, 0x9456fff08070a538, 0x70}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x82b, 0x0, 0x0, 'syz0\x00', 'syz0\x00', {0x8000800000000000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000bc0)={0x7, 0x6}) 2.172624453s ago: executing program 2 (id=469): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x1e, 0x0, "fee8a2ab78fc5e3ed1e00d96072000001ea8a1d91bec8d4b5a6d80b8785d9600010000000000000094d75396dccd0ff600000000a81b00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x1]}}) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r5, 0x60000000000, 0x8) close_range(r4, r5, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 2.016087504s ago: executing program 4 (id=470): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000001c0)=0x4, 0x4) 1.99701918s ago: executing program 4 (id=471): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1, 0xc, &(0x7f0000000e40)=ANY=[@ANYBLOB="0b80eb1e4548dec608e1a58764338f831ffc13fecde1badf445563b88e957238ca6289bfb15fe0b82f838e8aafd45ebfba3dda47cc4b8daa43bf0b6e550193c9a7281d0a8e70ca25834cc55b89942e9ab47a02272232f1969c4ce33b7ea646416c1591f402604b378d61349f9b88a050f1", @ANYRESDEC=r0, @ANYRES16=r1, @ANYRESDEC=r1, @ANYRES16=r0, @ANYRESOCT=r1], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000e93556fce0f22f00"/35], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xde, 0x202080) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)=0xffffffffffffffff) ioctl$VIDIOC_DQBUF(r7, 0xc0585611, &(0x7f0000000240)=@userptr={0x81, 0x1, 0x4, 0x80, 0x4, {r8, r9/1000+10000}, {0x3, 0xc, 0x0, 0x7, 0xec, 0x7, "25eb5ea5"}, 0xfffffff8, 0x2, {&(0x7f0000000180)}, 0x2, 0x0, r10}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r12, {0x4}}, './file0\x00'}) connect$inet(r15, &(0x7f0000000640)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r15, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380), 0x0, 0xf1, &(0x7f00000003c0), 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) unshare(0x22020600) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r16, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r14, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x10000, 0x2000000b, 0x0, 0x5}, 0xc0000000}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0xad73c2cdef48d4ee}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0) connect$unix(r12, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r13, &(0x7f00000043c0)=[{{&(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000b80)="7459ef9a95152385c83dbd1d3ad8392592674e09b44ea0654be6fa4487ce9815521691adb6020baaf530815b5589a2311638788db334a13ff4173e2ac88f38da12f3e7411d26774a3c03756c3942ab2e180c308edd8bc0adc55b513f56ab8af676e65f304818174678d8102d7980951768fd32337016afdabf554a4c083e", 0x7e}, {&(0x7f0000000c00)="7f787ebbb27255479add9ee0ad069cb13f30d4b9d873fc0ee2ea7e60315197eaa0072dd643087e621e", 0x29}, {&(0x7f0000000c40)="2e50d9541823ff8a80e2633e7fb1910689229d45c2f6c57300c1228168790a5c4646f89897993e581494f9bfcf1f033857e39c3fb7c9ed39e65d6bf36c8ee76759e079a0298154a41d5b7231518dbdbd26c3c02ea189823c36a1a3983021ce6311e3dc70b8a526868a08d5c6b1c28e9501cc789454a56d4a5e90483d4f4fb18584d84b1943567dbab3", 0x89}, {&(0x7f0000000d00)="7a4c37c035d88a5715b33ec53bcd61d6e9d2dd6240289542675f08167d847c52a2abe062bcc90f96f3e21b9b320c71f4ade57527356803bd2f7823511eb9eb65591b79cf5bc6a5fafa0f01fe7b665d276514d9e9d16b2a0b49d6fb38706677afbd115db3a3ff50a7c1b54e3874db4afdff5d074622724ffb6b6138f5d0fb63283791597b7e1b57456059593dd2500a9188ce0c10edd39580d65af3da394f3ca8959a200cf881cbe7f2444525e448d260bb891e6a427a6992653c8ecaf945557c4901bfbfc373d16ec11e8ddb423181", 0xcf}], 0x4, &(0x7f0000002fc0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r13, @ANYRES32=r16, @ANYRES32=r4, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 '], 0x68, 0x80}}], 0x1, 0x0) recvmmsg(r12, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) 1.908765645s ago: executing program 3 (id=472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="30000000120001e7ffffff0000000000100000000000000000000000000000000d00", @ANYRES16=r0], 0x30}], 0x1}, 0x0) unshare(0x26020480) r2 = socket(0x23, 0x80805, 0x0) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000005000000", 0xfe60) fcntl$getown(r3, 0x9) r4 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8000) ioctl$VIDIOC_ENUMAUDIO(r4, 0xc0345641, &(0x7f0000000200)={0xfffffffe, "1f8627b23d62060000003e3e390d700832e9c7f1bef194ff5441680746442ee3", 0x0, 0x1}) 1.776104141s ago: executing program 3 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30f5ff00000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.753147428s ago: executing program 0 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000000)={0x6, {{0x2, 0x4e22, @loopback}}, 0x0, 0x1, [{{0x2, 0x4e23, @broadcast}}]}, 0x110) 1.752857425s ago: executing program 3 (id=475): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x2, 'dummy0\x00', {0x29d}, 0xf}) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) (async) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='dirsync\x00', 0x0, 0xffffffffffffffff) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x74) (async, rerun: 32) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) get_robust_list(0x0, 0xffffffffffffffff, &(0x7f0000000040)) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000000000)={0x1}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x234e}}, 0x14}}, 0x1840) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x40, 0x6, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r11, 0x1000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x9, &(0x7f0000000340)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xffffffffffffffc0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.641886267s ago: executing program 3 (id=476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32], 0x0, 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80785659, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f0000000800000004003400c4cc881603000000290700cc91baf5ffcaf575612bd41f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}, @IFLA_PROTO_DOWN={0x5}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 464.012052ms ago: executing program 0 (id=477): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000600)=0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$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") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000500)={&(0x7f00008ce000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0}, &(0x7f0000000300)=0x40) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10001, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x4401f45a}}]}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffed, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xe}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x8100, 0x0, 0x40041}, 0x1800c85c) 463.612769ms ago: executing program 4 (id=478): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000000000000000000001811eaff", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000bd09020000000000dbaaf8fff1000000bf8200000000000007080000f8ffffffbfa420000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 463.294668ms ago: executing program 2 (id=479): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) (rerun: 32) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="1b", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=' ', 0x1}, {&(0x7f0000000880)="6929a082cb6ef09e1893eff0850ce9019c76097efae4b51f07b8505f3c8f9e272a70803bd402802b2bd2808fd87a6c730f22547ee99ae9ce336467f2bd3f6bb76b12ca13935a284bc83d040d765bd6c7c66a091d2390d5e795f04e9186a0e6f5515d56e255018616b3b4000d06c45fa2fd446e1e9b711a4e48d7a78ea665a76c4cde938da093c2d980eeb21bb9dc12916e2b13a763d4da7c102a00b25eb081dd8d57c4f0f81a036e2c71510bffeb10d411eb622609e5f40f1012b799e0e6336aaa02d3773d941fc12a8e0a968a868dfc041bce", 0xd3}, {&(0x7f00000005c0)="7194b2515749095a629b93d09b8ea6bd6d3cfa278b68225d789622ad00ce773888b1c423d447ec11edab2a4b9ad4990ca99da75b6992c194289222e317e047a25bd5591018e7c257afa4572b52c27eb6e84e8348aea7840133ca5769f339d4a2f1d12cfee67ef1433078524c5ae7a6e222051cd64cc752538b3ae38eab02f5cf10f0b651675fc7618218e977891cba22d126fdd04b172c83061718194fd38f5cd38db5ff313daf53", 0xa8}], 0x3}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000a80)="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", 0x4b3}], 0x1}}], 0x5, 0x2400c0a2) (async) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000004000)=[{0x0}], 0x1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000004a00)=""/231) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000a40)="b0", 0x1}], 0x1) (async) syz_emit_ethernet(0x86, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6012000800503a00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802907800000000600000000000110100000000000000000000ffff00000000fc0200000000000000000000000000008000020000000000053a000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) 455.208928ms ago: executing program 4 (id=480): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0x16, 0x0, @void}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000001c0)=0x4, 0x4) 450.76712ms ago: executing program 2 (id=481): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x40, 0x0, 0x100, 0x3, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}]}, 0xffffffffffffff68}}, 0x0) openat(r1, &(0x7f0000000240)='./file0\x00', 0x701400, 0x8a) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0xd1f, 0x4) 360.002614ms ago: executing program 4 (id=482): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03400200000065260cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a24000000000a07000000000000000000020000000900010073797a30000000000400060050000000030a01020000000000000000020000000900010073797a30000000002e00030091abc12404cf3780d8a90767c0bc71f60877974475de3d78ef670efff3f7311209fb8c"], 0xb0}}, 0x0) listen(r0, 0xfb7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {}, {}, {0xffe0, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x10, 0x5, 0xfe, 0x20, 0x88e, 0x4, 0xe, 0xfffffffd}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048850) 0s ago: executing program 3 (id=483): openat$panthor(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socket(0x10, 0x80002, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x34b9, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x7, 0x8, 0x0, 0x0, 0x14}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 28.507611][ T4697] cgroup: Unknown subsys name 'net' [ 28.638702][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.640728][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.806895][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.592218][ T4720] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.594663][ T4719] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.595022][ T4724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.595131][ T4719] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.595605][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.596374][ T4724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.596839][ T4725] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.597272][ T4725] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.597451][ T4725] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.597537][ T4725] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.598021][ T4725] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.598236][ T4725] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.598975][ T4725] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.599140][ T4725] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.599472][ T4725] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.599674][ T4725] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.600112][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.600276][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.600655][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.600855][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.601265][ T4713] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.607853][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.611208][ T4713] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.611353][ T4713] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.628135][ T4725] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.955006][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.957047][ T4721] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.958661][ T4721] bridge_slave_0: entered allmulticast mode [ 29.960341][ T4721] bridge_slave_0: entered promiscuous mode [ 29.963313][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.963659][ T4721] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.963725][ T4721] bridge_slave_1: entered allmulticast mode [ 29.964140][ T4721] bridge_slave_1: entered promiscuous mode [ 29.983123][ T4721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.995265][ T4721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.006856][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.007029][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.007246][ T4709] bridge_slave_0: entered allmulticast mode [ 30.007712][ T4709] bridge_slave_0: entered promiscuous mode [ 30.020662][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.022089][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.023461][ T4709] bridge_slave_1: entered allmulticast mode [ 30.025109][ T4709] bridge_slave_1: entered promiscuous mode [ 30.027311][ T4721] team0: Port device team_slave_0 added [ 30.028142][ T4721] team0: Port device team_slave_1 added [ 30.041870][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.043354][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.044711][ T4710] bridge_slave_0: entered allmulticast mode [ 30.046402][ T4710] bridge_slave_0: entered promiscuous mode [ 30.057018][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.057102][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.057197][ T4710] bridge_slave_1: entered allmulticast mode [ 30.057653][ T4710] bridge_slave_1: entered promiscuous mode [ 30.064506][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.064799][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.064811][ T4721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.065878][ T4721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.065888][ T4721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.065907][ T4721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.072878][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.074754][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.088995][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.092847][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.122778][ T4710] team0: Port device team_slave_0 added [ 30.123615][ T4710] team0: Port device team_slave_1 added [ 30.132967][ T4709] team0: Port device team_slave_0 added [ 30.141522][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.142864][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.146106][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.151403][ T4721] hsr_slave_0: entered promiscuous mode [ 30.151775][ T4721] hsr_slave_1: entered promiscuous mode [ 30.152952][ T4709] team0: Port device team_slave_1 added [ 30.163705][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.163777][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.163848][ T4717] bridge_slave_0: entered allmulticast mode [ 30.166310][ T4717] bridge_slave_0: entered promiscuous mode [ 30.167370][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.167377][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.167390][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.179530][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.180853][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.185913][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.188960][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.190273][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.190303][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.201479][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.201561][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.201620][ T4717] bridge_slave_1: entered allmulticast mode [ 30.202098][ T4717] bridge_slave_1: entered promiscuous mode [ 30.221125][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.224214][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.236870][ T4715] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.238379][ T4715] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.239890][ T4715] bridge_slave_0: entered allmulticast mode [ 30.241471][ T4715] bridge_slave_0: entered promiscuous mode [ 30.256292][ T4715] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.257783][ T4715] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.259208][ T4715] bridge_slave_1: entered allmulticast mode [ 30.260793][ T4715] bridge_slave_1: entered promiscuous mode [ 30.269490][ T4709] hsr_slave_0: entered promiscuous mode [ 30.269835][ T4709] hsr_slave_1: entered promiscuous mode [ 30.270069][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.270111][ T4709] Cannot create hsr debugfs directory [ 30.278076][ T4710] hsr_slave_0: entered promiscuous mode [ 30.279668][ T4710] hsr_slave_1: entered promiscuous mode [ 30.281007][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.282131][ T4710] Cannot create hsr debugfs directory [ 30.287308][ T4717] team0: Port device team_slave_0 added [ 30.289144][ T4717] team0: Port device team_slave_1 added [ 30.293648][ T4715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.305421][ T4715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.312268][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.313709][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.316933][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.333252][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.333282][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.333294][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.339005][ T4715] team0: Port device team_slave_0 added [ 30.347595][ T4715] team0: Port device team_slave_1 added [ 30.367842][ T4717] hsr_slave_0: entered promiscuous mode [ 30.369407][ T4717] hsr_slave_1: entered promiscuous mode [ 30.370870][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.372132][ T4717] Cannot create hsr debugfs directory [ 30.379046][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.379070][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.379134][ T4715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.389766][ T4715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.389792][ T4715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.389807][ T4715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.402127][ T4715] hsr_slave_0: entered promiscuous mode [ 30.403587][ T4715] hsr_slave_1: entered promiscuous mode [ 30.405043][ T4715] debugfs: 'hsr0' already exists in 'hsr' [ 30.406481][ T4715] Cannot create hsr debugfs directory [ 30.430154][ T4721] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.433587][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.433929][ T4721] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.435832][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.452414][ T4721] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.454778][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.456965][ T4721] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.459056][ T4721] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.502877][ T4709] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.507420][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.507715][ T4709] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.509536][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.515247][ T4709] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.517936][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.518977][ T4721] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.519007][ T4721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.519137][ T4721] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.519165][ T4721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.530324][ T4709] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.532455][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.551380][ T4717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.554023][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.555931][ T4717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.558389][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.560025][ T4717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.562681][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.568790][ T4717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.571199][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.584629][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.584674][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.584770][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.584808][ T4709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.608239][ T4710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.610813][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.612696][ T4710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.614825][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.617451][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.617496][ T4717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.617605][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.617642][ T4717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.629619][ T4715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.632197][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.634139][ T4715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.636600][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.638143][ T4710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.640214][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.643891][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.644069][ T4715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.645041][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.645560][ T4715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.647909][ T4715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.648297][ T4710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.650195][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.659836][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.661754][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.663471][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.664876][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.669794][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.671448][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.677321][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.685011][ T3676] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.685056][ T3676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.695146][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.695186][ T875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.701827][ T4721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.714192][ T4721] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.721556][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.721599][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.732846][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.738246][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.738289][ T1783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.746321][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.759554][ T1783] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.759596][ T1783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.759970][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.759990][ T1783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.777922][ T4715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.798004][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.801221][ T4715] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.818207][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.818264][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.828950][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.836546][ T1783] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.836597][ T1783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.847560][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.847602][ T1879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.854459][ T1805] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.854501][ T1805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.007033][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.064954][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.079700][ T4721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.106975][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.119975][ T4715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.125339][ T4717] veth0_vlan: entered promiscuous mode [ 31.132431][ T4721] veth0_vlan: entered promiscuous mode [ 31.135348][ T4721] veth1_vlan: entered promiscuous mode [ 31.150012][ T4721] veth0_macvtap: entered promiscuous mode [ 31.152658][ T4721] veth1_macvtap: entered promiscuous mode [ 31.154596][ T4717] veth1_vlan: entered promiscuous mode [ 31.165148][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.167856][ T4721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.174684][ T4709] veth0_vlan: entered promiscuous mode [ 31.180073][ T4710] veth0_vlan: entered promiscuous mode [ 31.181748][ T4710] veth1_vlan: entered promiscuous mode [ 31.184544][ T4715] veth0_vlan: entered promiscuous mode [ 31.187599][ T4715] veth1_vlan: entered promiscuous mode [ 31.190287][ T1879] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192612][ T1879] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192658][ T1879] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.192682][ T1879] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.209005][ T4709] veth1_vlan: entered promiscuous mode [ 31.215319][ T4717] veth0_macvtap: entered promiscuous mode [ 31.227652][ T4710] veth0_macvtap: entered promiscuous mode [ 31.236065][ T4717] veth1_macvtap: entered promiscuous mode [ 31.239655][ T4710] veth1_macvtap: entered promiscuous mode [ 31.253536][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.254673][ T3676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.254684][ T3676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.258313][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.270630][ T3676] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.270684][ T3676] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.270705][ T3676] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.270724][ T3676] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.282207][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.283624][ T4715] veth0_macvtap: entered promiscuous mode [ 31.284753][ T4709] veth0_macvtap: entered promiscuous mode [ 31.299662][ T4715] veth1_macvtap: entered promiscuous mode [ 31.303104][ T4709] veth1_macvtap: entered promiscuous mode [ 31.305811][ T1879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.305836][ T1879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.310713][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.322477][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.324192][ T1805] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.324245][ T1805] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.324263][ T1805] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.324279][ T1805] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.330716][ T1805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.330725][ T1805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.335847][ T4715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.343749][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.345389][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.347402][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.347430][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.357384][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.361514][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.361779][ T1805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.361788][ T1805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.371653][ T4721] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.383924][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.395703][ T15] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.397640][ T15] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.402198][ T15] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.404223][ T1783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.404251][ T1783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.428650][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.428678][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.451712][ T4890] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1'. [ 31.455291][ T1879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.455326][ T1879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.484780][ T1879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.484797][ T1879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.502732][ T1783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.502757][ T1783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.524238][ T1783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.527978][ T1783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.576006][ T4896] loop2: detected capacity change from 0 to 128 [ 31.616847][ T4725] Bluetooth: hci3: command tx timeout [ 31.618266][ T4725] Bluetooth: hci4: command tx timeout [ 31.645040][ T4900] loop3: detected capacity change from 0 to 256 [ 31.696163][ T4712] Bluetooth: hci2: command tx timeout [ 31.696705][ T4712] Bluetooth: hci1: command tx timeout [ 31.696914][ T4712] Bluetooth: hci0: command tx timeout [ 32.504950][ T4896] Smack: duplicate mount options [ 32.519286][ T4900] FAT-fs (loop3): Directory bread(block 64) failed [ 32.519324][ T4900] FAT-fs (loop3): Directory bread(block 65) failed [ 32.519355][ T4900] FAT-fs (loop3): Directory bread(block 66) failed [ 32.519371][ T4900] FAT-fs (loop3): Directory bread(block 67) failed [ 32.519399][ T4900] FAT-fs (loop3): Directory bread(block 68) failed [ 32.519414][ T4900] FAT-fs (loop3): Directory bread(block 69) failed [ 32.519444][ T4900] FAT-fs (loop3): Directory bread(block 70) failed [ 32.519459][ T4900] FAT-fs (loop3): Directory bread(block 71) failed [ 32.519483][ T4900] FAT-fs (loop3): Directory bread(block 72) failed [ 32.519497][ T4900] FAT-fs (loop3): Directory bread(block 73) failed [ 32.604231][ T4904] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 32.794272][ T4906] smc: net device wlan0 applied user defined pnetid SYZ0 [ 32.798491][ T4906] Zero length message leads to an empty skb [ 33.061758][ T4909] loop0: detected capacity change from 0 to 256 [ 33.165793][ T4909] FAT-fs (loop0): Directory bread(block 64) failed [ 33.165864][ T4909] FAT-fs (loop0): Directory bread(block 65) failed [ 33.166176][ T4909] FAT-fs (loop0): Directory bread(block 66) failed [ 33.166243][ T4909] FAT-fs (loop0): Directory bread(block 67) failed [ 33.166391][ T4909] FAT-fs (loop0): Directory bread(block 68) failed [ 33.166475][ T4909] FAT-fs (loop0): Directory bread(block 69) failed [ 33.166610][ T4909] FAT-fs (loop0): Directory bread(block 70) failed [ 33.166685][ T4909] FAT-fs (loop0): Directory bread(block 71) failed [ 33.166820][ T4909] FAT-fs (loop0): Directory bread(block 72) failed [ 33.166834][ T4909] FAT-fs (loop0): Directory bread(block 73) failed [ 33.776289][ T4725] Bluetooth: hci4: command tx timeout [ 33.776383][ T4725] Bluetooth: hci3: command tx timeout [ 33.786115][ T4725] Bluetooth: hci0: command tx timeout [ 33.786185][ T4725] Bluetooth: hci1: command tx timeout [ 33.786250][ T4725] Bluetooth: hci2: command tx timeout [ 33.875952][ T4896] loop2: detected capacity change from 0 to 4096 [ 33.917106][ T4896] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.927808][ T4896] EXT4-fs (loop2): Test dummy encryption mode enabled [ 33.937662][ T4896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.997906][ T4896] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 34.009968][ T4918] netlink: 67 bytes leftover after parsing attributes in process `syz.3.7'. [ 34.124180][ T4922] loop1: detected capacity change from 0 to 128 [ 34.124710][ T4922] Smack: duplicate mount options [ 34.295214][ T4923] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 34.481799][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 34.485641][ T4925] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 34.487869][ T4925] ip6gre0: entered promiscuous mode [ 34.489103][ T4925] ip6gre0: entered allmulticast mode [ 34.574960][ T4922] loop1: detected capacity change from 0 to 4096 [ 34.584154][ T4922] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.589860][ T4922] EXT4-fs (loop1): Test dummy encryption mode enabled [ 34.593649][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.602309][ T4922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.706300][ T4712] Bluetooth: hci1: command tx timeout [ 36.706345][ T4712] Bluetooth: hci0: command tx timeout [ 36.706376][ T4712] Bluetooth: hci3: command tx timeout [ 36.706395][ T4712] Bluetooth: hci4: command tx timeout [ 36.711673][ T4918] mmap: syz.3.7 (4918) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 36.939400][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.051396][ T4951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.165325][ T4955] loop3: detected capacity change from 0 to 4096 [ 37.167240][ T4955] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.171526][ T4955] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.176998][ T4955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.254296][ T4958] loop1: detected capacity change from 0 to 256 [ 37.315860][ T4958] FAT-fs (loop1): Directory bread(block 64) failed [ 37.315895][ T4958] FAT-fs (loop1): Directory bread(block 65) failed [ 37.316023][ T4958] FAT-fs (loop1): Directory bread(block 66) failed [ 37.316109][ T4958] FAT-fs (loop1): Directory bread(block 67) failed [ 37.316238][ T4958] FAT-fs (loop1): Directory bread(block 68) failed [ 37.316306][ T4958] FAT-fs (loop1): Directory bread(block 69) failed [ 37.316515][ T4958] FAT-fs (loop1): Directory bread(block 70) failed [ 37.316620][ T4958] FAT-fs (loop1): Directory bread(block 71) failed [ 37.316760][ T4958] FAT-fs (loop1): Directory bread(block 72) failed [ 37.316814][ T4958] FAT-fs (loop1): Directory bread(block 73) failed [ 37.696131][ T4725] Bluetooth: hci2: command tx timeout [ 38.287004][ T4965] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18'. [ 38.410451][ T4968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19'. [ 38.484575][ T4965] loop0: detected capacity change from 0 to 512 [ 38.484927][ T4965] ======================================================= [ 38.484927][ T4965] WARNING: The mand mount option has been deprecated and [ 38.484927][ T4965] and is ignored by this kernel. Remove the mand [ 38.484927][ T4965] option from the mount to silence this warning. [ 38.484927][ T4965] ======================================================= [ 38.512071][ T4965] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.736192][ T4712] Bluetooth: hci3: command tx timeout [ 38.736292][ T4712] Bluetooth: hci0: command tx timeout [ 38.736359][ T4712] Bluetooth: hci1: command tx timeout [ 38.739889][ T4725] Bluetooth: hci4: command tx timeout [ 38.775543][ T4965] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.18: Allocating blocks 41-42 which overlap fs metadata [ 38.781854][ T4965] loop0: lost filesystem error report for type 5 error -117 [ 38.785983][ T4965] EXT4-fs (loop0): Remounting filesystem read-only [ 38.786082][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 38.786100][ C1] EXT4-fs (loop0): initial error at time 38: ext4_mb_mark_diskspace_used:4222 [ 38.786123][ C1] EXT4-fs (loop0): last error at time 38: ext4_mb_mark_diskspace_used:4222 [ 38.786608][ T4965] Quota error (device loop0): write_blk: dquota write failed [ 38.786619][ T4965] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 38.786680][ T4965] Quota error (device loop0): write_blk: dquota write failed [ 38.786724][ T4965] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 38.786850][ T4965] EXT4-fs (loop0): 1 truncate cleaned up [ 38.813917][ T4965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.885606][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.479547][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.577148][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577293][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577388][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577470][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577564][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577652][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577738][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 39.577823][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 40.573152][ T4998] loop2: detected capacity change from 0 to 128 [ 40.575585][ T4998] Smack: duplicate mount options [ 40.620119][ T4998] loop2: detected capacity change from 0 to 4096 [ 40.669244][ T4998] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.673731][ T4998] EXT4-fs (loop2): Test dummy encryption mode enabled [ 40.674553][ T5002] loop1: detected capacity change from 0 to 4096 [ 40.680715][ T4998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.688810][ T5002] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.640133][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.663446][ T5017] syz.4.31 uses obsolete (PF_INET,SOCK_PACKET) [ 41.754461][ T4710] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 41.814254][ T5023] random: crng reseeded on system resumption [ 42.046671][ T4710] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 42.114099][ T5028] loop3: detected capacity change from 0 to 128 [ 42.116514][ T5028] Smack: duplicate mount options [ 42.130998][ T5028] loop3: detected capacity change from 0 to 4096 [ 42.134725][ T5028] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.139358][ T5030] loop0: detected capacity change from 0 to 128 [ 42.139719][ T5030] Smack: duplicate mount options [ 42.144737][ T5028] EXT4-fs (loop3): Test dummy encryption mode enabled [ 42.156233][ T5026] syzkaller0: entered promiscuous mode [ 42.156270][ T5026] syzkaller0: entered allmulticast mode [ 42.159336][ T5028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.173802][ T5030] loop0: detected capacity change from 0 to 4096 [ 42.174156][ T5030] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.207997][ T5030] EXT4-fs (loop0): Test dummy encryption mode enabled [ 42.223176][ T5030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.291536][ T5026] syzkaller1: entered promiscuous mode [ 42.291573][ T5026] syzkaller1: entered allmulticast mode [ 42.294216][ T5039] loop2: detected capacity change from 0 to 128 [ 42.845028][ T4710] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.200388][ T5056] fuse: Unknown parameter 'grou00000000000000000000' [ 43.211779][ T875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.234863][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.523261][ T4725] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 43.523952][ T875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.528982][ T4725] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 43.531760][ T4725] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 43.535062][ T4725] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 43.535702][ T4725] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 43.654911][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.655677][ T875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.713663][ T5078] loop3: detected capacity change from 0 to 128 [ 43.817199][ T5086] loop2: detected capacity change from 0 to 512 [ 43.843648][ T5086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.858324][ T875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.137402][ T5097] loop4: detected capacity change from 0 to 128 [ 44.140314][ T5097] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 44.143673][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.143718][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.143785][ T5062] bridge_slave_0: entered allmulticast mode [ 44.144234][ T5062] bridge_slave_0: entered promiscuous mode [ 44.144883][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.144903][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.144958][ T5062] bridge_slave_1: entered allmulticast mode [ 44.145341][ T5062] bridge_slave_1: entered promiscuous mode [ 44.162234][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.180009][ T5062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.203066][ T5062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.211354][ T5102] loop2: detected capacity change from 0 to 1024 [ 44.244401][ T5062] team0: Port device team_slave_0 added [ 44.248474][ T5062] team0: Port device team_slave_1 added [ 44.266334][ T5062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.270387][ T5062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.276006][ T5062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.279395][ T5062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.282130][ T5062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.287601][ T5062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.299934][ T1848] Bluetooth: hci5: Frame reassembly failed (-84) [ 44.305618][ T5105] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 44.522340][ C0] vcan0: j1939_tp_rxtimer: 0x0000000037572369: rx timeout, send abort [ 44.557476][ T5062] hsr_slave_0: entered promiscuous mode [ 44.559149][ T5062] hsr_slave_1: entered promiscuous mode [ 44.559356][ T5062] debugfs: 'hsr0' already exists in 'hsr' [ 44.559367][ T5062] Cannot create hsr debugfs directory [ 45.022514][ C0] vcan0: j1939_tp_rxtimer: 0x000000006b37b853: rx timeout, send abort [ 45.024290][ C0] vcan0: j1939_tp_rxtimer: 0x0000000037572369: abort rx timeout. Force session deactivation [ 45.046277][ T875] bridge_slave_1: left allmulticast mode [ 45.046342][ T875] bridge_slave_1: left promiscuous mode [ 45.047022][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.050241][ T875] bridge_slave_0: left allmulticast mode [ 45.050266][ T875] bridge_slave_0: left promiscuous mode [ 45.050344][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.231392][ T875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.268072][ T875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.308820][ T875] bond0 (unregistering): Released all slaves [ 45.432274][ T5141] loop2: detected capacity change from 0 to 2048 [ 45.458454][ T4397] 8021q: adding VLAN 0 to HW filter on device eth1 [ 45.462320][ T5141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.467194][ T5062] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.471392][ T5062] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.471739][ T5062] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.492491][ T5062] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.495252][ T5062] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.497843][ T5062] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.499721][ T5062] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.503132][ T5062] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.522579][ C0] vcan0: j1939_tp_rxtimer: 0x000000006b37b853: abort rx timeout. Force session deactivation [ 45.524575][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a1a2a0a4: rx timeout, send abort [ 45.536992][ T5141] syzkaller1: entered promiscuous mode [ 45.538084][ T5141] syzkaller1: entered allmulticast mode [ 45.613704][ T5062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.616163][ T4725] Bluetooth: hci1: command tx timeout [ 45.618479][ T5062] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.620176][ T1848] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.620224][ T1848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.622838][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.622882][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.631706][ T5062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.631748][ T5062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.655750][ T875] hsr_slave_0: left promiscuous mode [ 45.670236][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.670438][ T875] hsr_slave_1: left promiscuous mode [ 45.671020][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.671039][ T875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.674927][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.674941][ T875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.700764][ T875] veth1_macvtap: left promiscuous mode [ 45.700818][ T875] veth0_macvtap: left promiscuous mode [ 45.700855][ T875] veth1_vlan: left promiscuous mode [ 45.700874][ T875] veth0_vlan: left promiscuous mode [ 45.709027][ T5174] fuse: Unknown parameter 'grou00000000000000000000' [ 45.741828][ T5175] netlink: 'syz.0.60': attribute type 4 has an invalid length. [ 45.741859][ T5175] __nla_validate_parse: 47 callbacks suppressed [ 45.741879][ T5175] netlink: 17 bytes leftover after parsing attributes in process `syz.0.60'. [ 45.794697][ T875] team0 (unregistering): Port device team_slave_1 removed [ 45.801579][ T875] team0 (unregistering): Port device team_slave_0 removed [ 45.857371][ T4397] 8021q: adding VLAN 0 to HW filter on device eth0 [ 45.873123][ T5177] syzkaller1: entered promiscuous mode [ 45.873155][ T5177] syzkaller1: entered allmulticast mode [ 45.989138][ T5062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.024683][ C0] vcan0: j1939_tp_rxtimer: 0x00000000a1a2a0a4: abort rx timeout. Force session deactivation [ 46.061074][ T5210] loop0: detected capacity change from 0 to 128 [ 46.063673][ T5210] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 46.100069][ T4397] 8021q: adding VLAN 0 to HW filter on device eth2 [ 46.159188][ T5062] veth0_vlan: entered promiscuous mode [ 46.162975][ T5062] veth1_vlan: entered promiscuous mode [ 46.185486][ T5062] veth0_macvtap: entered promiscuous mode [ 46.190986][ T5062] veth1_macvtap: entered promiscuous mode [ 46.336252][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 46.437507][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.438591][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.445169][ T1848] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.450573][ T1848] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.450626][ T1848] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.450654][ T1848] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.490041][ T5231] loop0: detected capacity change from 0 to 1024 [ 46.538363][ T1848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.540473][ T1848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.542606][ T1848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.544986][ T1848] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.877332][ T4397] 8021q: adding VLAN 0 to HW filter on device eth3 [ 46.975446][ T5251] syzkaller0: entered promiscuous mode [ 46.978856][ T5251] syzkaller0: entered allmulticast mode [ 46.997836][ T5257] loop4: detected capacity change from 0 to 256 [ 47.013338][ T5257] FAT-fs (loop4): Directory bread(block 64) failed [ 47.013379][ T5257] FAT-fs (loop4): Directory bread(block 65) failed [ 47.013407][ T5257] FAT-fs (loop4): Directory bread(block 66) failed [ 47.013421][ T5257] FAT-fs (loop4): Directory bread(block 67) failed [ 47.013480][ T5257] FAT-fs (loop4): Directory bread(block 68) failed [ 47.013491][ T5257] FAT-fs (loop4): Directory bread(block 69) failed [ 47.013514][ T5257] FAT-fs (loop4): Directory bread(block 70) failed [ 47.013525][ T5257] FAT-fs (loop4): Directory bread(block 71) failed [ 47.013546][ T5257] FAT-fs (loop4): Directory bread(block 72) failed [ 47.013557][ T5257] FAT-fs (loop4): Directory bread(block 73) failed [ 47.044048][ T5251] tipc: Started in network mode [ 47.044087][ T5251] tipc: Node identity 6e5cf77d30da, cluster identity 4711 [ 47.044229][ T5251] tipc: Enabled bearer , priority 0 [ 47.075816][ T5261] Smack: duplicate mount options [ 47.082302][ T5250] tipc: Resetting bearer [ 47.120269][ T5250] tipc: Disabling bearer [ 47.330091][ T5266] set_capacity_and_notify: 1 callbacks suppressed [ 47.348221][ T5266] loop5: detected capacity change from 0 to 1024 [ 47.348687][ T5266] ext4: Unknown parameter 'hash' [ 47.469800][ T5276] fuse: Unknown parameter 'grou00000000000000000000' [ 47.774439][ T4725] Bluetooth: hci1: command tx timeout [ 48.023959][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.025624][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031385][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031506][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031583][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031662][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031745][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031845][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.031941][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.032013][ T5302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.324329][ T5309] loop3: detected capacity change from 0 to 1024 [ 48.898196][ T5334] loop2: detected capacity change from 0 to 128 [ 48.919927][ T5334] syz.2.93: attempt to access beyond end of device [ 48.919927][ T5334] loop2: rw=2049, sector=171, nr_sectors = 1 limit=128 [ 48.922973][ T5334] Buffer I/O error on dev loop2, logical block 171, lost async page write [ 48.937355][ T5336] syzkaller1: entered promiscuous mode [ 48.937393][ T5336] syzkaller1: entered allmulticast mode [ 49.026226][ T5340] fuse: Unknown parameter 'group_i00000000000000000000' [ 49.031832][ T5334] bond1: entered promiscuous mode [ 49.035251][ T5334] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.428758][ T5355] loop3: detected capacity change from 0 to 1024 [ 49.429233][ T5355] EXT4-fs: Ignoring removed orlov option [ 49.432466][ T5355] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 49.443203][ T5355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.454447][ T5354] loop2: detected capacity change from 0 to 128 [ 49.466319][ T5354] loop2: detected capacity change from 0 to 1024 [ 49.467951][ T5354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.492109][ T5360] netlink: 'syz.4.101': attribute type 15 has an invalid length. [ 49.493891][ T5360] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'. [ 49.528859][ T5354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.534470][ T5354] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.611704][ T5368] capability: warning: `syz.3.100' uses deprecated v2 capabilities in a way that may be insecure [ 49.777238][ T4725] Bluetooth: hci1: command tx timeout [ 49.884782][ T5375] ip6_vti0: entered promiscuous mode [ 49.884815][ T5375] ip6_vti0: entered allmulticast mode [ 49.970517][ T5384] loop0: detected capacity change from 0 to 1024 [ 50.502013][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.034539][ T5402] tipc: Started in network mode [ 51.034580][ T5402] tipc: Node identity 0224428761e7, cluster identity 4711 [ 51.034691][ T5402] tipc: Enabled bearer , priority 0 [ 51.035022][ T5402] syzkaller0: entered promiscuous mode [ 51.035041][ T5402] syzkaller0: entered allmulticast mode [ 51.071659][ T5402] netlink: 44 bytes leftover after parsing attributes in process `syz.2.114'. [ 51.084992][ T5402] tipc: Resetting bearer [ 51.089959][ T5401] tipc: Resetting bearer [ 51.120681][ T5401] tipc: Disabling bearer [ 51.128740][ T5408] fuse: Unknown parameter 'group_i00000000000000000000' [ 51.281392][ T5421] loop2: detected capacity change from 0 to 1024 [ 51.286521][ T5421] EXT4-fs: Ignoring removed orlov option [ 51.288030][ T5421] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 51.316891][ T5421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.677173][ T5433] loop5: detected capacity change from 0 to 1024 [ 51.906294][ T4725] Bluetooth: hci1: command tx timeout [ 52.053232][ T5437] syzkaller1: entered promiscuous mode [ 52.054606][ T5437] syzkaller1: entered allmulticast mode [ 52.143786][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.261720][ T5448] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.262743][ T5448] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 52.264576][ T5448] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 52.291174][ T5447] loop3: detected capacity change from 0 to 2048 [ 52.294429][ T5447] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.317782][ T5447] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.331939][ T5447] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.130: bg 0: block 234: padding at end of block bitmap is not set [ 52.332563][ T5447] EXT4-fs (loop3): Remounting filesystem read-only [ 52.351144][ T5456] loop0: detected capacity change from 0 to 128 [ 52.364354][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.370570][ T5456] FAT-fs (loop0): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 52.772776][ T5461] netlink: 32 bytes leftover after parsing attributes in process `syz.3.134'. [ 53.156546][ T5468] fuse: Unknown parameter 'group_i00000000000000000000' [ 53.193850][ T5472] loop2: detected capacity change from 0 to 1024 [ 53.195734][ T5472] EXT4-fs: Ignoring removed orlov option [ 53.203567][ T5472] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 53.219959][ T5472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.579187][ T5483] syzkaller1: entered promiscuous mode [ 53.579222][ T5483] syzkaller1: entered allmulticast mode [ 53.692718][ T5493] syzkaller1: entered promiscuous mode [ 53.692752][ T5493] syzkaller1: entered allmulticast mode [ 54.056734][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.529361][ T5515] loop0: detected capacity change from 0 to 2048 [ 54.530205][ T5515] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.807289][ T5515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.831006][ T5529] syzkaller1: entered promiscuous mode [ 54.832644][ T5529] syzkaller1: entered allmulticast mode [ 54.838026][ T5515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.152: bg 0: block 234: padding at end of block bitmap is not set [ 54.841757][ T5515] EXT4-fs (loop0): Remounting filesystem read-only [ 54.863356][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.908397][ T5532] loop0: detected capacity change from 0 to 512 [ 54.914255][ T5532] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.916953][ T5532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.926715][ T5532] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.156: corrupted in-inode xattr: e_value out of bounds [ 54.926812][ T5532] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.929986][ T5532] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.156: couldn't read orphan inode 15 (err -117) [ 54.930035][ T5532] loop0: lost filesystem error report for type 5 error -117 [ 54.933322][ T5532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.955837][ T5535] fuse: Unknown parameter 'group_id00000000000000000000' [ 55.223934][ T5544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'. [ 55.369996][ T5555] netlink: 32 bytes leftover after parsing attributes in process `syz.2.165'. [ 55.445882][ T5561] syzkaller1: entered promiscuous mode [ 55.446014][ T5561] syzkaller1: entered allmulticast mode [ 55.852639][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.034611][ T5578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 56.084412][ T5578] loop0: detected capacity change from 0 to 4096 [ 56.091211][ T5578] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 57.325542][ T5612] fuse: Unknown parameter 'group_id00000000000000000000' [ 58.234847][ T24] cfg80211: failed to load regulatory.db [ 58.854463][ T5652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 58.974810][ T5666] input: syz0 as /devices/virtual/input/input2 [ 58.990631][ T5658] syzkaller1: entered promiscuous mode [ 58.990690][ T5658] syzkaller1: entered allmulticast mode [ 59.088178][ T5676] loop3: detected capacity change from 0 to 1024 [ 59.090470][ T5676] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.090923][ T5676] JBD2: no valid journal superblock found [ 59.097786][ T5676] EXT4-fs (loop3): Could not load journal inode [ 59.596766][ T5678] loop5: detected capacity change from 0 to 256 [ 59.753534][ T5678] FAT-fs (loop5): Directory bread(block 64) failed [ 59.753619][ T5678] FAT-fs (loop5): Directory bread(block 65) failed [ 59.753722][ T5678] FAT-fs (loop5): Directory bread(block 66) failed [ 59.753768][ T5678] FAT-fs (loop5): Directory bread(block 67) failed [ 59.753835][ T5678] FAT-fs (loop5): Directory bread(block 68) failed [ 59.753880][ T5678] FAT-fs (loop5): Directory bread(block 69) failed [ 59.753959][ T5678] FAT-fs (loop5): Directory bread(block 70) failed [ 59.754004][ T5678] FAT-fs (loop5): Directory bread(block 71) failed [ 59.754103][ T5678] FAT-fs (loop5): Directory bread(block 72) failed [ 59.754159][ T5678] FAT-fs (loop5): Directory bread(block 73) failed [ 60.352685][ T5698] fuse: Unknown parameter 'group_id00000000000000000000' [ 61.308315][ T5755] syzkaller1: entered promiscuous mode [ 61.308351][ T5755] syzkaller1: entered allmulticast mode [ 61.338271][ T5758] loop5: detected capacity change from 0 to 512 [ 61.341638][ T5758] EXT4-fs: Ignoring removed orlov option [ 61.344272][ T5758] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 61.354940][ T5758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a000c118, mo2=0002] [ 61.355022][ T5758] System zones: 1-12 [ 61.364760][ T5758] EXT4-fs (loop5): 1 truncate cleaned up [ 61.368195][ T5758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.690381][ T5773] loop4: detected capacity change from 0 to 256 [ 61.714968][ T5773] FAT-fs (loop4): Directory bread(block 64) failed [ 61.715019][ T5773] FAT-fs (loop4): Directory bread(block 65) failed [ 61.715209][ T5773] FAT-fs (loop4): Directory bread(block 66) failed [ 61.715254][ T5773] FAT-fs (loop4): Directory bread(block 67) failed [ 61.715340][ T5773] FAT-fs (loop4): Directory bread(block 68) failed [ 61.715382][ T5773] FAT-fs (loop4): Directory bread(block 69) failed [ 61.715500][ T5773] FAT-fs (loop4): Directory bread(block 70) failed [ 61.715521][ T5773] FAT-fs (loop4): Directory bread(block 71) failed [ 61.715582][ T5773] FAT-fs (loop4): Directory bread(block 72) failed [ 61.715615][ T5773] FAT-fs (loop4): Directory bread(block 73) failed [ 62.572024][ T5778] loop2: detected capacity change from 0 to 512 [ 62.678469][ T5778] evm: overlay not supported [ 62.865341][ T5782] netlink: 'syz.2.213': attribute type 29 has an invalid length. [ 63.305124][ T5062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.330024][ T5795] loop5: detected capacity change from 0 to 1024 [ 63.515172][ T5809] loop4: detected capacity change from 0 to 128 [ 63.519041][ T5809] Smack: duplicate mount options [ 64.498903][ T1596] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.500246][ T1596] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.517976][ T5809] loop4: detected capacity change from 0 to 4096 [ 64.519145][ T5809] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.524492][ T5809] EXT4-fs (loop4): Test dummy encryption mode enabled [ 64.642137][ T5814] loop3: detected capacity change from 0 to 128 [ 64.654201][ T5814] FAT-fs (loop3): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 64.666841][ T5809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.835260][ T5818] loop5: detected capacity change from 0 to 128 [ 64.837832][ T5818] Smack: duplicate mount options [ 65.051823][ T5826] loop2: detected capacity change from 0 to 256 [ 65.104721][ T5826] FAT-fs (loop2): Directory bread(block 64) failed [ 65.104843][ T5826] FAT-fs (loop2): Directory bread(block 65) failed [ 65.104927][ T5826] FAT-fs (loop2): Directory bread(block 66) failed [ 65.104973][ T5826] FAT-fs (loop2): Directory bread(block 67) failed [ 65.105059][ T5826] FAT-fs (loop2): Directory bread(block 68) failed [ 65.105116][ T5826] FAT-fs (loop2): Directory bread(block 69) failed [ 65.105203][ T5826] FAT-fs (loop2): Directory bread(block 70) failed [ 65.105260][ T5826] FAT-fs (loop2): Directory bread(block 71) failed [ 65.105345][ T5826] FAT-fs (loop2): Directory bread(block 72) failed [ 65.105402][ T5826] FAT-fs (loop2): Directory bread(block 73) failed [ 65.762224][ T5818] loop5: detected capacity change from 0 to 4096 [ 65.857305][ T5818] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.862488][ T5818] EXT4-fs (loop5): Test dummy encryption mode enabled [ 65.877805][ T5818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.255148][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.285753][ T5838] capability: warning: `syz.0.231' uses 32-bit capabilities (legacy support in use) [ 66.357632][ T5840] FAULT_INJECTION: forcing a failure. [ 66.357632][ T5840] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.360487][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz.4.230 Not tainted syzkaller #0 PREEMPT [ 66.360506][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 66.360512][ T5840] Call trace: [ 66.360516][ T5840] show_stack+0x2c/0x3c (C) [ 66.360540][ T5840] __dump_stack+0x30/0x40 [ 66.360557][ T5840] dump_stack_lvl+0xd8/0x12c [ 66.360567][ T5840] dump_stack+0x1c/0x28 [ 66.360577][ T5840] should_fail_ex+0x414/0x588 [ 66.360587][ T5840] should_fail+0x14/0x24 [ 66.360594][ T5840] should_fail_usercopy+0x20/0x30 [ 66.360603][ T5840] _copy_from_iter+0x19c/0x1048 [ 66.360613][ T5840] tun_get_user+0x41c/0x3588 [ 66.360621][ T5840] tun_chr_write_iter+0xfc/0x168 [ 66.360631][ T5840] vfs_write+0x52c/0xa14 [ 66.360641][ T5840] ksys_write+0x12c/0x224 [ 66.360650][ T5840] __arm64_sys_write+0x7c/0x90 [ 66.360660][ T5840] invoke_syscall+0x98/0x244 [ 66.360670][ T5840] el0_svc_common+0xe8/0x23c [ 66.360679][ T5840] do_el0_svc+0x48/0x58 [ 66.360688][ T5840] el0_svc+0x64/0x260 [ 66.360696][ T5840] el0t_64_sync_handler+0x48/0x148 [ 66.360703][ T5840] el0t_64_sync+0x198/0x19c [ 66.540258][ T5062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.689350][ T5862] loop0: detected capacity change from 0 to 512 [ 67.695064][ T5862] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.714936][ T5862] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 67.724995][ T5862] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.240: bg 0: block 248: padding at end of block bitmap is not set [ 67.728820][ T5862] loop0: lost filesystem error report for type 5 error -117 [ 67.731647][ T5862] Quota error (device loop0): write_blk: dquota write failed [ 67.731698][ T5862] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 67.731738][ T5862] EXT4-fs error (device loop0): ext4_acquire_dquot:7034: comm syz.0.240: Failed to acquire dquot type 1 [ 67.731758][ T5862] loop0: lost filesystem error report for type 5 error -28 [ 67.736585][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 67.736601][ C0] EXT4-fs (loop0): last error at time 67: ext4_acquire_dquot:7034 [ 67.747394][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 67.778623][ T5875] loop3: detected capacity change from 0 to 128 [ 67.780261][ T5862] EXT4-fs (loop0): 1 truncate cleaned up [ 67.780759][ T5862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 67.794908][ T5862] EXT4-fs error (device loop0): ext4_lookup:1789: inode #2: comm syz.0.240: deleted inode referenced: 12 [ 67.829133][ T5875] Smack: duplicate mount options [ 67.850676][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 67.857320][ T5881] geneve0: entered promiscuous mode [ 67.857348][ T5881] geneve0: entered allmulticast mode [ 67.951818][ T5893] netlink: 'syz.4.247': attribute type 5 has an invalid length. [ 67.977323][ T5893] loop4: detected capacity change from 0 to 512 [ 68.033416][ T5893] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.247: inode has both inline data and extents flags [ 68.039681][ T5893] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.040171][ T5893] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.247: couldn't read orphan inode 15 (err -117) [ 68.044585][ T5893] loop4: lost filesystem error report for type 5 error -117 [ 68.045229][ T5893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.257634][ T5893] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.297265][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.289225][ T5906] loop4: detected capacity change from 0 to 128 [ 69.294531][ T5906] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 69.419181][ T5912] loop3: detected capacity change from 0 to 256 [ 69.428523][ T5914] FAULT_INJECTION: forcing a failure. [ 69.428523][ T5914] name failslab, interval 1, probability 0, space 0, times 1 [ 69.428565][ T5914] CPU: 1 UID: 0 PID: 5914 Comm: syz.2.253 Not tainted syzkaller #0 PREEMPT [ 69.428580][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 69.428585][ T5914] Call trace: [ 69.428589][ T5914] show_stack+0x2c/0x3c (C) [ 69.428608][ T5914] __dump_stack+0x30/0x40 [ 69.428621][ T5914] dump_stack_lvl+0xd8/0x12c [ 69.428631][ T5914] dump_stack+0x1c/0x28 [ 69.428640][ T5914] should_fail_ex+0x414/0x588 [ 69.428650][ T5914] should_failslab+0xc4/0x124 [ 69.428659][ T5914] kmem_cache_alloc_node_noprof+0x94/0x6c8 [ 69.428669][ T5914] __alloc_skb+0x1f0/0x5f8 [ 69.428681][ T5914] alloc_skb_with_frags+0xb8/0x660 [ 69.428690][ T5914] sock_alloc_send_pskb+0x730/0x840 [ 69.428699][ T5914] tun_get_user+0x8e0/0x3588 [ 69.428707][ T5914] tun_chr_write_iter+0xfc/0x168 [ 69.428717][ T5914] vfs_write+0x52c/0xa14 [ 69.428727][ T5914] ksys_write+0x12c/0x224 [ 69.428737][ T5914] __arm64_sys_write+0x7c/0x90 [ 69.428746][ T5914] invoke_syscall+0x98/0x244 [ 69.428756][ T5914] el0_svc_common+0xe8/0x23c [ 69.428766][ T5914] do_el0_svc+0x48/0x58 [ 69.428775][ T5914] el0_svc+0x64/0x260 [ 69.428783][ T5914] el0t_64_sync_handler+0x48/0x148 [ 69.428790][ T5914] el0t_64_sync+0x198/0x19c [ 69.475159][ T5912] FAT-fs (loop3): Directory bread(block 64) failed [ 69.475193][ T5912] FAT-fs (loop3): Directory bread(block 65) failed [ 69.475229][ T5912] FAT-fs (loop3): Directory bread(block 66) failed [ 69.475242][ T5912] FAT-fs (loop3): Directory bread(block 67) failed [ 69.475272][ T5912] FAT-fs (loop3): Directory bread(block 68) failed [ 69.475292][ T5912] FAT-fs (loop3): Directory bread(block 69) failed [ 69.475323][ T5912] FAT-fs (loop3): Directory bread(block 70) failed [ 69.475333][ T5912] FAT-fs (loop3): Directory bread(block 71) failed [ 69.475363][ T5912] FAT-fs (loop3): Directory bread(block 72) failed [ 69.475383][ T5912] FAT-fs (loop3): Directory bread(block 73) failed [ 69.776132][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.420678][ T5958] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.420845][ T5958] overlayfs: failed to set xattr on upper [ 71.420887][ T5958] overlayfs: ...falling back to redirect_dir=nofollow. [ 71.420917][ T5958] overlayfs: ...falling back to uuid=null. [ 71.420971][ T5958] overlayfs: maximum fs stacking depth exceeded [ 71.767942][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.768007][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.770936][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771029][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771094][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771133][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771191][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771228][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771265][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.771322][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.271'. [ 71.869112][ T5964] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 71.927768][ T5980] 9p: Bad value for 'rfdno' [ 71.933717][ T5980] syzkaller0: entered promiscuous mode [ 71.933755][ T5980] syzkaller0: entered allmulticast mode [ 71.935649][ T5980] tipc: Started in network mode [ 71.935680][ T5980] tipc: Node identity 0afa175d7964, cluster identity 4711 [ 71.935795][ T5980] tipc: Enabled bearer , priority 0 [ 71.956628][ T5978] tipc: Resetting bearer [ 71.977328][ T5978] tipc: Disabling bearer [ 71.979461][ T5984] loop0: detected capacity change from 0 to 8 [ 71.986138][ T5984] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 71.986160][ T5984] unable to read xattr id index table [ 73.114560][ T5995] sit0: entered promiscuous mode [ 73.238428][ T6010] support for the xor transformation has been removed. [ 73.327442][ T6015] loop4: detected capacity change from 0 to 256 [ 73.403255][ T6015] FAT-fs (loop4): Directory bread(block 64) failed [ 73.403364][ T6015] FAT-fs (loop4): Directory bread(block 65) failed [ 73.403479][ T6015] FAT-fs (loop4): Directory bread(block 66) failed [ 73.403525][ T6015] FAT-fs (loop4): Directory bread(block 67) failed [ 73.403612][ T6015] FAT-fs (loop4): Directory bread(block 68) failed [ 73.403661][ T6015] FAT-fs (loop4): Directory bread(block 69) failed [ 73.403728][ T6015] FAT-fs (loop4): Directory bread(block 70) failed [ 73.403763][ T6015] FAT-fs (loop4): Directory bread(block 71) failed [ 73.403853][ T6015] FAT-fs (loop4): Directory bread(block 72) failed [ 73.403909][ T6015] FAT-fs (loop4): Directory bread(block 73) failed [ 74.166581][ T6014] loop0: detected capacity change from 0 to 128 [ 74.264419][ T6014] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 74.314130][ T4699] udevd[4699]: incorrect ext4 checksum on /dev/loop0 [ 74.450382][ T6034] syzkaller1: entered promiscuous mode [ 74.450416][ T6034] syzkaller1: entered allmulticast mode [ 74.489652][ T6038] loop2: detected capacity change from 0 to 128 [ 74.490852][ T6035] gtp0: entered allmulticast mode [ 74.493305][ T6038] FAT-fs (loop2): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 75.315687][ T6035] usb usb7: usbfs: interface 0 claimed by hub while 'syz.4.293' sets config #0 [ 75.468021][ T6048] loop0: detected capacity change from 0 to 128 [ 75.488514][ T6048] Smack: duplicate mount options [ 75.547006][ T6053] ieee802154 phy0 wpan0: encryption failed: -90 [ 75.562241][ T6048] loop0: detected capacity change from 0 to 4096 [ 75.566619][ T6048] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.571828][ T6048] EXT4-fs (loop0): Test dummy encryption mode enabled [ 75.575204][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.831483][ T6074] loop5: detected capacity change from 0 to 256 [ 76.050332][ T6074] FAT-fs (loop5): Directory bread(block 64) failed [ 76.050553][ T6074] FAT-fs (loop5): Directory bread(block 65) failed [ 76.050916][ T6074] FAT-fs (loop5): Directory bread(block 66) failed [ 76.051057][ T6074] FAT-fs (loop5): Directory bread(block 67) failed [ 76.051371][ T6074] FAT-fs (loop5): Directory bread(block 68) failed [ 76.051400][ T6074] FAT-fs (loop5): Directory bread(block 69) failed [ 76.051708][ T6074] FAT-fs (loop5): Directory bread(block 70) failed [ 76.051812][ T6074] FAT-fs (loop5): Directory bread(block 71) failed [ 76.052194][ T6074] FAT-fs (loop5): Directory bread(block 72) failed [ 76.052336][ T6074] FAT-fs (loop5): Directory bread(block 73) failed [ 76.556669][ T6068] loop4: detected capacity change from 0 to 4096 [ 76.557224][ T6068] EXT4-fs: Ignoring removed mblk_io_submit option [ 76.559420][ T6068] EXT4-fs (loop4): Test dummy encryption mode enabled [ 76.563296][ T6068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.254253][ T6084] loop3: detected capacity change from 0 to 512 [ 77.254852][ T6084] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.302685][ T6084] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 77.322967][ T6084] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 77.323460][ T6084] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.329865][ T6084] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.307: bg 0: block 361: padding at end of block bitmap is not set [ 77.330045][ T6084] loop3: lost filesystem error report for type 5 error -117 [ 77.334655][ T6084] EXT4-fs (loop3): Remounting filesystem read-only [ 77.336866][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 77.336877][ C0] EXT4-fs (loop3): initial error at time 77: ext4_validate_block_bitmap:441 [ 77.336892][ C0] EXT4-fs (loop3): last error at time 77: ext4_validate_block_bitmap:441 [ 77.435753][ T6084] EXT4-fs (loop3): 1 truncate cleaned up [ 77.438826][ T6084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 79.200760][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.203479][ T6091] __nla_validate_parse: 53 callbacks suppressed [ 79.205037][ T6091] netlink: 36 bytes leftover after parsing attributes in process `syz.2.310'. [ 79.281656][ T6094] loop5: detected capacity change from 0 to 2048 [ 79.288559][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 79.292046][ T6101] loop2: detected capacity change from 0 to 512 [ 79.294276][ T6101] EXT4-fs: Ignoring removed nobh option [ 79.307035][ T6101] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 79.307375][ T6101] EXT4-fs: failed to create workqueue [ 79.307409][ T6101] EXT4-fs (loop2): mount failed [ 79.317118][ T6107] loop4: detected capacity change from 0 to 128 [ 79.321429][ T6107] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 79.329092][ T6094] loop5: p2 < > p3 < p5 > p4 [ 79.329130][ T6094] loop5: partition table partially beyond EOD, truncated [ 79.329282][ T6094] loop5: p2 start 4278190080 is beyond EOD, truncated [ 79.330570][ T6094] loop5: p4 size 8192 extends beyond EOD, truncated [ 79.335971][ T6094] loop5: p5 size 8192 extends beyond EOD, truncated [ 79.396272][ T4342] loop5: p2 < > p3 < p5 > p4 [ 79.396315][ T4342] loop5: partition table partially beyond EOD, truncated [ 79.396450][ T4342] loop5: p2 start 4278190080 is beyond EOD, truncated [ 79.400066][ T4342] loop5: p4 size 8192 extends beyond EOD, truncated [ 79.401652][ T4342] loop5: p5 size 8192 extends beyond EOD, truncated [ 79.416458][ T6094] netlink: 'syz.5.312': attribute type 4 has an invalid length. [ 79.427169][ T6095] netlink: 'syz.5.312': attribute type 4 has an invalid length. [ 79.429399][ T6094] netlink: 'syz.5.312': attribute type 4 has an invalid length. [ 79.476257][ T6114] loop3: detected capacity change from 0 to 1024 [ 79.560810][ T4342] loop5: p2 < > p3 < p5 > p4 [ 79.561887][ T4342] loop5: partition table partially beyond EOD, truncated [ 79.563451][ T4342] loop5: p2 start 4278190080 is beyond EOD, truncated [ 79.565253][ T4342] loop5: p4 size 8192 extends beyond EOD, truncated [ 79.569046][ T4342] loop5: p5 size 8192 extends beyond EOD, truncated [ 79.660301][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.730131][ T6123] loop0: detected capacity change from 0 to 128 [ 79.732016][ T6123] Smack: duplicate mount options [ 81.103382][ T6137] netlink: 36 bytes leftover after parsing attributes in process `syz.3.324'. [ 81.113203][ T4703] udevd[4703]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 81.130899][ T4701] udevd[4701]: inotify_add_watch(7, /dev/loop5p5, 10) failed: No such file or directory [ 81.133913][ T5046] udevd[5046]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 81.142484][ T6139] 9p: Bad value for 'wfdno' [ 81.174595][ T30] audit: type=1326 audit(81.140:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.174640][ T30] audit: type=1326 audit(81.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.186759][ T30] audit: type=1326 audit(81.150:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.205132][ T30] audit: type=1326 audit(81.170:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.205179][ T30] audit: type=1326 audit(81.170:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.206179][ T30] audit: type=1326 audit(81.170:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6143 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff9435a96c code=0x7ffc0000 [ 81.230934][ T30] audit: type=1326 audit(81.200:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=117 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.230969][ T30] audit: type=1326 audit(81.200:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.230987][ T30] audit: type=1326 audit(81.200:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.231029][ T30] audit: type=1326 audit(81.200:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.3.326" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=63 compat=0 ip=0xffff94377aa8 code=0x7ffc0000 [ 81.257759][ T6150] netlink: 'syz.2.328': attribute type 5 has an invalid length. [ 81.298838][ T6156] loop4: detected capacity change from 0 to 128 [ 81.299991][ T6156] Smack: duplicate mount options [ 81.338330][ T6160] syzkaller1: entered promiscuous mode [ 81.338387][ T6160] syzkaller1: entered allmulticast mode [ 81.435889][ T6156] loop4: detected capacity change from 0 to 4096 [ 81.436736][ T6156] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.444042][ T6156] EXT4-fs (loop4): Test dummy encryption mode enabled [ 81.462325][ T6156] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.457602][ T6174] netlink: 36 bytes leftover after parsing attributes in process `syz.3.336'. [ 82.624035][ T6178] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 82.737811][ T6187] loop0: detected capacity change from 0 to 128 [ 82.744629][ T6187] Smack: duplicate mount options [ 82.804216][ T6187] loop0: detected capacity change from 0 to 4096 [ 82.808197][ T6187] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.812166][ T6187] EXT4-fs (loop0): Test dummy encryption mode enabled [ 82.825610][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.832284][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.922534][ T6170] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.922602][ T6170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.939408][ T6170] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.943888][ T6170] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.945839][ T6170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.172040][ T6170] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 83.187243][ T6170] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 83.189486][ T6170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.212040][ T6170] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 83.229751][ T6170] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 83.229827][ T6170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.230968][ T6195] loop4: detected capacity change from 0 to 4096 [ 83.231676][ T6195] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.236881][ T6195] EXT4-fs (loop4): Test dummy encryption mode enabled [ 83.251822][ T6195] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.257430][ T6170] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 83.266288][ T6170] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 83.266343][ T6170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.283621][ T6170] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 83.383341][ T50] Bluetooth: hci0: unexpected event for opcode 0x2088 [ 83.406896][ T6210] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 83.668662][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.720754][ T6217] syzkaller1: entered promiscuous mode [ 83.720798][ T6217] syzkaller1: entered allmulticast mode [ 83.799795][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.604613][ T6226] loop4: detected capacity change from 0 to 512 [ 84.678799][ T6226] EXT4-fs (loop4): orphan cleanup on readonly fs [ 84.684370][ T6226] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.350: Failed to acquire dquot type 1 [ 84.684430][ T6226] loop4: lost filesystem error report for type 5 error -5 [ 84.686925][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 84.686937][ C1] EXT4-fs (loop4): last error at time 84: ext4_acquire_dquot:7034 [ 84.691269][ T6231] loop3: detected capacity change from 0 to 128 [ 84.691725][ T6231] Smack: duplicate mount options [ 84.694482][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.351'. [ 84.702620][ T6226] EXT4-fs (loop4): 1 truncate cleaned up [ 84.708673][ T6226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.723746][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.731049][ T6231] loop3: detected capacity change from 0 to 4096 [ 84.731433][ T6231] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.733474][ T6231] EXT4-fs (loop3): Test dummy encryption mode enabled [ 84.740214][ T6231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.793165][ T6233] loop0: detected capacity change from 0 to 512 [ 84.864202][ T6233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.903861][ T6242] Injecting memory failure for pfn 0x11fe3d at process virtual address 0x20000000 [ 84.912013][ T6242] Memory failure: 0x11fe3d: Sending SIGBUS to syz.5.355:6242 due to hardware memory corruption [ 84.914470][ T6242] Memory failure: 0x11fe3d: recovery action for dirty LRU page: Recovered [ 84.917165][ T6242] Injecting memory failure for pfn 0x21970d at process virtual address 0x20001000 [ 84.920541][ T6242] Memory failure: 0x21970d: unhandlable page. [ 84.920576][ T6242] Memory failure: 0x21970d: recovery action for get hwpoison page: Ignored [ 84.976132][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.104130][ T6254] loop5: detected capacity change from 0 to 512 [ 85.105156][ T6254] EXT4-fs: Ignoring removed bh option [ 85.108967][ T6254] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 85.109002][ T6254] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 85.112439][ T6254] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 85.112819][ T6254] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 85.117756][ T6254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.216130][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.296123][ T4725] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 85.297002][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 85.297035][ T4725] Bluetooth: hci4: command 0x0c1a tx timeout [ 85.375047][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.422148][ T6259] bridge_slave_0 (unregistering): left allmulticast mode [ 85.422204][ T6259] bridge_slave_0 (unregistering): left promiscuous mode [ 85.423419][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.503864][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.610799][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.778506][ T6253] netlink: 'syz.5.359': attribute type 1 has an invalid length. [ 85.778541][ T6253] netlink: 240 bytes leftover after parsing attributes in process `syz.5.359'. [ 85.828557][ T5062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.683467][ T6273] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 86.685185][ T6273] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'. [ 86.797085][ T6289] fuse: Unknown parameter 'use00000000000000000000' [ 86.865865][ T6300] loop3: detected capacity change from 0 to 512 [ 86.878370][ T6300] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 87.089171][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.367999][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.376245][ T4725] Bluetooth: hci1: command 0x0c1a tx timeout [ 87.379533][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 87.775766][ T6307] tmpfs: Bad value for 'mpol' [ 87.874929][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.874987][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.876005][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.884896][ T6313] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 87.895569][ T6313] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 87.903656][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.906399][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.907937][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.909616][ T6313] wg1 speed is unknown, defaulting to 1000 [ 87.911248][ T6313] wg1 speed is unknown, defaulting to 1000 [ 88.082559][ T6329] loop4: detected capacity change from 0 to 256 [ 88.997621][ T6329] FAT-fs (loop4): Directory bread(block 64) failed [ 88.997679][ T6329] FAT-fs (loop4): Directory bread(block 65) failed [ 88.997714][ T6329] FAT-fs (loop4): Directory bread(block 66) failed [ 88.997728][ T6329] FAT-fs (loop4): Directory bread(block 67) failed [ 88.997759][ T6329] FAT-fs (loop4): Directory bread(block 68) failed [ 88.997777][ T6329] FAT-fs (loop4): Directory bread(block 69) failed [ 88.997806][ T6329] FAT-fs (loop4): Directory bread(block 70) failed [ 88.997817][ T6329] FAT-fs (loop4): Directory bread(block 71) failed [ 88.997849][ T6329] FAT-fs (loop4): Directory bread(block 72) failed [ 88.997875][ T6329] FAT-fs (loop4): Directory bread(block 73) failed [ 89.155049][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 89.386399][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 89.457346][ T50] Bluetooth: hci4: command 0x0c1a tx timeout [ 89.458814][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 89.625925][ T6338] loop3: detected capacity change from 0 to 128 [ 89.634293][ T6338] EXT4-fs: Ignoring removed nobh option [ 89.990986][ T6338] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.068295][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.085689][ T6351] fuse: Unknown parameter 'use00000000000000000000' [ 90.463319][ T6359] syzkaller0: entered promiscuous mode [ 90.463380][ T6359] syzkaller0: entered allmulticast mode [ 90.665780][ T6371] loop0: detected capacity change from 0 to 512 [ 90.666395][ T6371] EXT4-fs: inline encryption not supported [ 90.666435][ T6371] ext4: Unknown parameter 'noacl' [ 91.555347][ T6375] loop4: detected capacity change from 0 to 128 [ 91.560365][ T6375] Smack: duplicate mount options [ 91.584085][ T30] kauditd_printk_skb: 79 callbacks suppressed [ 91.584139][ T30] audit: type=1326 audit(91.550:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6376 comm="syz.2.395" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa7777aa8 code=0x5fff0000 [ 91.669873][ T6375] loop4: detected capacity change from 0 to 4096 [ 91.682309][ T6375] EXT4-fs: Ignoring removed mblk_io_submit option [ 91.777770][ T6380] loop3: detected capacity change from 0 to 128 [ 91.778163][ T6380] EXT4-fs: Ignoring removed nobh option [ 91.780898][ T6375] EXT4-fs (loop4): Test dummy encryption mode enabled [ 91.825237][ T6375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.832714][ T6380] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.915437][ T4717] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.001157][ T4725] Bluetooth: hci0: unexpected event for opcode 0x2088 [ 92.266557][ T6400] loop0: detected capacity change from 0 to 2048 [ 92.288983][ T6400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 92.324891][ T6400] EXT4-fs (loop0): shut down requested (1) [ 92.631825][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 92.714835][ T6410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.406'. [ 92.797179][ T6415] fuse: Unknown parameter 'user_i00000000000000000000' [ 93.030710][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.256552][ T6429] loop4: detected capacity change from 0 to 128 [ 93.257132][ T6429] Smack: duplicate mount options [ 93.278094][ T6429] loop4: detected capacity change from 0 to 4096 [ 93.483792][ T6429] EXT4-fs: Ignoring removed mblk_io_submit option [ 93.490740][ T6429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.504371][ T4725] Bluetooth: hci0: unexpected event for opcode 0x0088 [ 93.667666][ T4709] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.714497][ T6436] loop0: detected capacity change from 0 to 1024 [ 93.716693][ T6436] EXT4-fs: Ignoring removed orlov option [ 93.717945][ T6436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.719675][ T6436] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.724597][ T6436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6040c01c, mo2=0002] [ 93.724656][ T6436] System zones: 0-1, 3-36 [ 93.764772][ T6440] loop3: detected capacity change from 0 to 512 [ 93.765851][ T6440] EXT4-fs: Ignoring removed bh option [ 93.770961][ T6440] EXT4-fs: Mount option(s) incompatible with ext3 [ 93.770983][ T6436] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.802247][ T4721] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.821895][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.3.417'. [ 94.964230][ T6446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.061482][ T6451] infiniband syz2: set down [ 95.061527][ T6451] infiniband syz2: added ipvlan0 [ 95.107654][ T6461] loop4: detected capacity change from 0 to 256 [ 95.150469][ T6451] RDS/IB: syz2: added [ 95.150657][ T6451] smc: adding ib device syz2 with port count 1 [ 95.150712][ T6451] smc: ib device syz2 port 1 has no pnetid [ 95.460955][ T6461] FAT-fs (loop4): Directory bread(block 64) failed [ 95.461048][ T6461] FAT-fs (loop4): Directory bread(block 65) failed [ 95.461133][ T6461] FAT-fs (loop4): Directory bread(block 66) failed [ 95.461197][ T6461] FAT-fs (loop4): Directory bread(block 67) failed [ 95.461290][ T6461] FAT-fs (loop4): Directory bread(block 68) failed [ 95.461362][ T6461] FAT-fs (loop4): Directory bread(block 69) failed [ 95.461485][ T6461] FAT-fs (loop4): Directory bread(block 70) failed [ 95.461532][ T6461] FAT-fs (loop4): Directory bread(block 71) failed [ 95.461630][ T6461] FAT-fs (loop4): Directory bread(block 72) failed [ 95.461684][ T6461] FAT-fs (loop4): Directory bread(block 73) failed [ 95.860444][ T6467] fuse: Unknown parameter 'user_i00000000000000000000' [ 95.899516][ T6466] loop3: detected capacity change from 0 to 4096 [ 95.918335][ T6466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.957676][ T6466] overlayfs: missing 'lowerdir' [ 96.001552][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.368205][ T6487] loop0: detected capacity change from 0 to 128 [ 96.369969][ T6487] Smack: duplicate mount options [ 96.469891][ T4725] Bluetooth: hci4: unexpected event for opcode 0x2088 [ 97.091311][ T6498] loop2: detected capacity change from 0 to 128 [ 97.098869][ T6498] Smack: duplicate mount options [ 97.134363][ T6498] loop2: detected capacity change from 0 to 4096 [ 97.139549][ T6498] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.141891][ T6498] EXT4-fs (loop2): Test dummy encryption mode enabled [ 97.147026][ T6498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.150558][ T30] audit: type=1326 audit(97.120:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6495 comm="syz.5.433" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=277 compat=0 ip=0xffffaa177aa8 code=0x7fc00000 [ 97.171458][ T6504] loop3: detected capacity change from 0 to 128 [ 97.175325][ T6504] Smack: duplicate mount options [ 97.214091][ T4725] Bluetooth: hci2: unexpected event for opcode 0x2088 [ 97.254278][ T6504] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.283597][ T6504] EXT4-fs (loop3): Test dummy encryption mode enabled [ 97.324049][ T6509] FAT-fs (loop0): Directory bread(block 64) failed [ 97.324084][ T6509] FAT-fs (loop0): Directory bread(block 65) failed [ 97.324443][ T6509] FAT-fs (loop0): Directory bread(block 66) failed [ 97.324645][ T6509] FAT-fs (loop0): Directory bread(block 67) failed [ 97.324832][ T6509] FAT-fs (loop0): Directory bread(block 68) failed [ 97.325006][ T6509] FAT-fs (loop0): Directory bread(block 69) failed [ 97.325176][ T6509] FAT-fs (loop0): Directory bread(block 70) failed [ 97.325323][ T6509] FAT-fs (loop0): Directory bread(block 71) failed [ 97.325502][ T6509] FAT-fs (loop0): Directory bread(block 72) failed [ 97.325675][ T6509] FAT-fs (loop0): Directory bread(block 73) failed [ 97.349319][ T6504] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.359811][ T6512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.438'. [ 97.378387][ T4725] Bluetooth: hci3: unexpected event for opcode 0x2088 [ 97.616352][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.616399][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.616415][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.616434][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.616448][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.616461][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.616474][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.440'. [ 97.646570][ T6521] FAULT_INJECTION: forcing a failure. [ 97.646570][ T6521] name failslab, interval 1, probability 0, space 0, times 0 [ 97.649561][ T6521] CPU: 1 UID: 0 PID: 6521 Comm: syz.5.441 Not tainted syzkaller #0 PREEMPT [ 97.649585][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 97.649592][ T6521] Call trace: [ 97.649596][ T6521] show_stack+0x2c/0x3c (C) [ 97.649615][ T6521] __dump_stack+0x30/0x40 [ 97.649626][ T6521] dump_stack_lvl+0xd8/0x12c [ 97.649635][ T6521] dump_stack+0x1c/0x28 [ 97.649644][ T6521] should_fail_ex+0x414/0x588 [ 97.649654][ T6521] should_failslab+0xc4/0x124 [ 97.649662][ T6521] __kmalloc_cache_noprof+0x8c/0x624 [ 97.649671][ T6521] __arm64_sys_mount+0x178/0x380 [ 97.649680][ T6521] invoke_syscall+0x98/0x244 [ 97.649690][ T6521] el0_svc_common+0xe8/0x23c [ 97.649699][ T6521] do_el0_svc+0x48/0x58 [ 97.649708][ T6521] el0_svc+0x64/0x260 [ 97.649716][ T6521] el0t_64_sync_handler+0x48/0x148 [ 97.649723][ T6521] el0t_64_sync+0x198/0x19c [ 98.289037][ T4715] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.361050][ T6532] fuse: Unknown parameter 'user_i00000000000000000000' [ 98.465315][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.655460][ T6543] set_capacity_and_notify: 2 callbacks suppressed [ 98.655705][ T6543] loop5: detected capacity change from 0 to 4096 [ 98.669866][ T6538] input: syz1 as /devices/virtual/input/input3 [ 98.671188][ T6543] EXT4-fs (loop5): Test dummy encryption mode enabled [ 98.693925][ T6543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.698718][ T6543] trusted_key: syz.5.448 sent an empty control message without MSG_MORE. [ 98.747343][ T6543] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 80: comm syz.5.448: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.753095][ T6544] EXT4-fs error (device loop5): ext4_find_dest_de:2050: inode #12: block 80: comm syz.5.448: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.784403][ T5062] EXT4-fs error (device loop5): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /74/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.785964][ T5062] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.787391][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.787616][ T5062] EXT4-fs error (device loop5): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /74/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.787926][ T5062] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.788066][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.788177][ T5062] EXT4-fs error (device loop5): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /74/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.789552][ T5062] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.789792][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.789999][ T5062] EXT4-fs error (device loop5): ext4_readdir:265: inode #12: block 80: comm syz-executor: path /74/file1/file0: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.790295][ T5062] EXT4-fs error (device loop5): ext4_empty_dir:3101: inode #12: block 80: comm syz-executor: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 98.790438][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.790842][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.791469][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.791888][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.792529][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.793000][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.793512][ T5062] EXT4-fs warning (device loop5): ext4_empty_dir:3104: inode #12: comm syz-executor: directory missing '..' [ 98.908075][ T6552] pim6reg0: tun_chr_ioctl cmd 1074812117 [ 98.908517][ T6552] __nla_validate_parse: 46 callbacks suppressed [ 98.908526][ T6552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.452'. [ 98.982584][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982628][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982644][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982658][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982670][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982682][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982694][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982705][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 98.982716][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 99.000512][ T6559] FAULT_INJECTION: forcing a failure. [ 99.000512][ T6559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.000531][ T6559] CPU: 0 UID: 0 PID: 6559 Comm: syz.4.454 Not tainted syzkaller #0 PREEMPT [ 99.000543][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.000548][ T6559] Call trace: [ 99.000551][ T6559] show_stack+0x2c/0x3c (C) [ 99.000569][ T6559] __dump_stack+0x30/0x40 [ 99.000580][ T6559] dump_stack_lvl+0xd8/0x12c [ 99.000589][ T6559] dump_stack+0x1c/0x28 [ 99.000598][ T6559] should_fail_ex+0x414/0x588 [ 99.000608][ T6559] should_fail+0x14/0x24 [ 99.000615][ T6559] should_fail_usercopy+0x20/0x30 [ 99.000624][ T6559] _inline_copy_from_user+0x40/0x180 [ 99.000634][ T6559] __arm64_sys_mount+0x18c/0x380 [ 99.000643][ T6559] invoke_syscall+0x98/0x244 [ 99.000652][ T6559] el0_svc_common+0xe8/0x23c [ 99.000662][ T6559] do_el0_svc+0x48/0x58 [ 99.000671][ T6559] el0_svc+0x64/0x260 [ 99.000679][ T6559] el0t_64_sync_handler+0x48/0x148 [ 99.000686][ T6559] el0t_64_sync+0x198/0x19c [ 99.089571][ T5062] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.151162][ T5732] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.228523][ T6562] loop2: detected capacity change from 0 to 128 [ 99.230834][ T6562] vfat: Unknown parameter '0x0000000000000000' [ 99.243575][ T5732] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.253168][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.254050][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.254351][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.254696][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.254923][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.424133][ T5732] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.433525][ T6563] wg1 speed is unknown, defaulting to 1000 [ 99.502258][ T6586] netlink: 'syz.0.461': attribute type 21 has an invalid length. [ 99.507976][ T5732] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.548027][ T6584] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 99.550914][ T6584] vhci_hcd vhci_hcd.2: invalid port number 96 [ 99.552253][ T6586] netlink: 'syz.0.461': attribute type 62 has an invalid length. [ 99.554268][ T6584] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 99.620480][ T6594] syzkaller1: entered promiscuous mode [ 99.621927][ T6594] syzkaller1: entered allmulticast mode [ 99.753851][ T6604] fuse: Unknown parameter 'user_id00000000000000000000' [ 99.836627][ T5732] bridge_slave_1: left allmulticast mode [ 99.836663][ T5732] bridge_slave_1: left promiscuous mode [ 99.836752][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.842443][ T5732] bridge_slave_0: left allmulticast mode [ 99.842466][ T5732] bridge_slave_0: left promiscuous mode [ 99.843992][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.032095][ T5732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.058326][ T5732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.088037][ T5732] bond0 (unregistering): Released all slaves [ 100.111730][ T6607] syzkaller1: entered promiscuous mode [ 100.111789][ T6607] syzkaller1: entered allmulticast mode [ 100.245887][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.245971][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.246242][ T6563] bridge_slave_0: entered allmulticast mode [ 100.246778][ T6563] bridge_slave_0: entered promiscuous mode [ 100.247715][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.247734][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.247786][ T6563] bridge_slave_1: entered allmulticast mode [ 100.248300][ T6563] bridge_slave_1: entered promiscuous mode [ 100.260194][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.260284][ T5732] tipc: Left network mode [ 100.264228][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.265027][ T6623] syzkaller1: entered promiscuous mode [ 100.265041][ T6623] syzkaller1: entered allmulticast mode [ 100.293392][ T6563] team0: Port device team_slave_0 added [ 100.294217][ T6563] team0: Port device team_slave_1 added [ 100.303435][ T6616] loop3: detected capacity change from 0 to 512 [ 100.319532][ T6616] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.468: inode has both inline data and extents flags [ 100.321234][ T6616] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.325352][ T6616] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.468: couldn't read orphan inode 15 (err -117) [ 100.325406][ T6616] loop3: lost filesystem error report for type 5 error -117 [ 100.332775][ T6616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.394887][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.394915][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.394934][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.395578][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.395585][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.395595][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.413094][ T4397] 8021q: adding VLAN 0 to HW filter on device eth4 [ 100.456787][ T6563] hsr_slave_0: entered promiscuous mode [ 100.458882][ T6563] hsr_slave_1: entered promiscuous mode [ 100.460770][ T6563] debugfs: 'hsr0' already exists in 'hsr' [ 100.462226][ T6563] Cannot create hsr debugfs directory [ 100.466321][ T4717] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.770718][ T6563] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 100.774341][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.775561][ T6563] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 100.796994][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.797394][ T6563] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 100.841701][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.843918][ T4397] 8021q: adding VLAN 0 to HW filter on device eth5 [ 100.847185][ T6563] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 100.850509][ T6563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.881139][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.881211][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.881323][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.881370][ T6563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.890008][ T5732] hsr_slave_0: left promiscuous mode [ 100.891402][ T5732] hsr_slave_1: left promiscuous mode [ 100.891955][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.891976][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.893727][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.893748][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.901202][ T5732] veth1_macvtap: left promiscuous mode [ 100.901256][ T5732] veth0_macvtap: left promiscuous mode [ 100.901299][ T5732] veth1_vlan: left promiscuous mode [ 100.901548][ T5732] veth0_vlan: left promiscuous mode [ 101.637344][ T50] Bluetooth: hci1: command tx timeout [ 101.881289][ T6678] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 101.923571][ T6686] loop0: detected capacity change from 0 to 512 [ 101.930272][ T6686] EXT4-fs (loop0): blocks per group (34) and clusters per group (32768) inconsistent [ 101.933333][ T6686] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 101.979154][ T255] smc: removing ib device syz2 [ 102.129995][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 102.139505][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 102.314856][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.365505][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.369858][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.384685][ T6705] fuse: Unknown parameter 'user_id00000000000000000000' [ 102.403999][ T6686] bond1 (unregistering): Released all slaves [ 102.411878][ T4941] ================================================================== [ 102.411890][ T4941] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x60/0x174 [ 102.411915][ T4941] Read of size 8 at addr ffff0000dad5a2f0 by task kworker/0:5/4941 [ 102.411922][ T4941] [ 102.411927][ T4941] CPU: 0 UID: 0 PID: 4941 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT [ 102.411936][ T4941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 102.411941][ T4941] Workqueue: events smc_ib_port_event_work [ 102.411956][ T4941] Call trace: [ 102.411958][ T4941] show_stack+0x2c/0x3c (C) [ 102.411972][ T4941] __dump_stack+0x30/0x40 [ 102.411982][ T4941] dump_stack_lvl+0xd8/0x12c [ 102.411991][ T4941] print_address_description+0xb0/0x238 [ 102.411999][ T4941] print_report+0x68/0x84 [ 102.412006][ T4941] kasan_report+0x8c/0xc4 [ 102.412015][ T4941] __asan_report_load8_noabort+0x20/0x2c [ 102.412025][ T4941] __ethtool_get_link_ksettings+0x60/0x174 [ 102.412034][ T4941] ipvlan_ethtool_get_link_ksettings+0x48/0x58 [ 102.412044][ T4941] __ethtool_get_link_ksettings+0x118/0x174 [ 102.412052][ T4941] ib_get_eth_speed+0x154/0x6b0 [ 102.412060][ T4941] rxe_query_port+0x98/0x36c [ 102.412071][ T4941] ib_query_port+0x168/0x770 [ 102.412080][ T4941] smc_ib_port_event_work+0x104/0x8ac [ 102.412089][ T4941] process_scheduled_works+0x79c/0x1098 [ 102.412098][ T4941] worker_thread+0x754/0xba0 [ 102.412106][ T4941] kthread+0x2f8/0x3c8 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 102.412113][ T4941] ret_from_fork+0x10/0x20 [ 102.412120][ T4941] [ 102.412122][ T4941] Allocated by task 5062: [ 102.412126][ T4941] kasan_save_track+0x40/0x78 [ 102.412133][ T4941] kasan_save_alloc_info+0x44/0x54 [ 102.412141][ T4941] __kasan_kmalloc+0x9c/0xb4 [ 102.412147][ T4941] __kvmalloc_node_noprof+0x3d8/0x880 [ 102.412155][ T4941] alloc_netdev_mqs+0xac/0xe60 [ 102.412162][ T4941] rtnl_create_link+0x2c8/0xb94 [ 102.412169][ T4941] rtnl_newlink_create+0x210/0x768 [ 102.412177][ T4941] rtnl_newlink+0xdc4/0x113c [ 102.412184][ T4941] rtnetlink_rcv_msg+0x66c/0x9c8 [ 102.412192][ T4941] netlink_rcv_skb+0x22c/0x410 [ 102.412200][ T4941] rtnetlink_rcv+0x28/0x38 [ 102.412207][ T4941] netlink_unicast+0x610/0x800 [ 102.412214][ T4941] netlink_sendmsg+0x63c/0x920 [ 102.412223][ T4941] __sock_sendmsg+0xc8/0x138 [ 102.412231][ T4941] __sys_sendto+0x254/0x338 [ 102.412239][ T4941] __arm64_sys_sendto+0xd8/0xf8 [ 102.412247][ T4941] invoke_syscall+0x98/0x244 [ 102.412256][ T4941] el0_svc_common+0xe8/0x23c [ 102.412263][ T4941] do_el0_svc+0x48/0x58 [ 102.412271][ T4941] el0_svc+0x64/0x260 [ 102.412277][ T4941] el0t_64_sync_handler+0x48/0x148 [ 102.412282][ T4941] el0t_64_sync+0x198/0x19c [ 102.412288][ T4941] [ 102.412290][ T4941] Freed by task 5732: [ 102.412293][ T4941] kasan_save_track+0x40/0x78 [ 102.412299][ T4941] kasan_save_free_info+0x58/0x70 [ 102.412307][ T4941] __kasan_slab_free+0x74/0xa4 [ 102.412314][ T4941] kfree+0x188/0x690 [ 102.412320][ T4941] kvfree+0x30/0x40 [ 102.412330][ T4941] netdev_release+0x88/0xb0 [ 102.412337][ T4941] device_release+0xa8/0x1c8 [ 102.412347][ T4941] kobject_put+0x1dc/0x4bc [ 102.412354][ T4941] netdev_run_todo+0xab4/0xc48 [ 102.412360][ T4941] rtnl_unlock+0x14/0x20 [ 102.412366][ T4941] default_device_exit_batch+0x584/0x600 [ 102.412373][ T4941] ops_undo_list+0x428/0x818 [ 102.412379][ T4941] cleanup_net+0x470/0x6b8 [ 102.412383][ T4941] process_scheduled_works+0x79c/0x1098 [ 102.412390][ T4941] worker_thread+0x754/0xba0 [ 102.412396][ T4941] kthread+0x2f8/0x3c8 [ 102.412402][ T4941] ret_from_fork+0x10/0x20 [ 102.412407][ T4941] [ 102.412408][ T4941] The buggy address belongs to the object at ffff0000dad5a000 [ 102.412408][ T4941] which belongs to the cache kmalloc-cg-4k of size 4096 [ 102.412414][ T4941] The buggy address is located 752 bytes inside of [ 102.412414][ T4941] freed 4096-byte region [ffff0000dad5a000, ffff0000dad5b000) [ 102.412421][ T4941] [ 102.412427][ T4941] The buggy address belongs to the physical page: [ 102.412431][ T4941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11ad58 [ 102.412438][ T4941] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 102.412444][ T4941] memcg:ffff0000dad59011 [ 102.412447][ T4941] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff) [ 102.412455][ T4941] page_type: f5(slab) [ 102.412462][ T4941] raw: 05ffc00000000040 ffff0000c001d500 dead000000000100 dead000000000122 [ 102.412468][ T4941] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff0000dad59011 [ 102.412473][ T4941] head: 05ffc00000000040 ffff0000c001d500 dead000000000100 dead000000000122 [ 102.412479][ T4941] head: 0000000000000000 0000200000040004 00000000f5000000 ffff0000dad59011 [ 102.412484][ T4941] head: 05ffc00000000003 fffffdffc36b5601 00000000ffffffff 00000000ffffffff [ 102.412489][ T4941] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 102.412492][ T4941] page dumped because: kasan: bad access detected [ 102.412495][ T4941] [ 102.412497][ T4941] Memory state around the buggy address: [ 102.412500][ T4941] ffff0000dad5a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.412504][ T4941] ffff0000dad5a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.412509][ T4941] >ffff0000dad5a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.412512][ T4941] ^ [ 102.412516][ T4941] ffff0000dad5a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.412520][ T4941] ffff0000dad5a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.412523][ T4941] ================================================================== [ 102.418103][ T4941] Disabling lock debugging due to kernel taint [ 102.656573][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.675001][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.683863][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.683913][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.693823][ T1848] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.693870][ T1848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.771221][ T4397] 8021q: adding VLAN 0 to HW filter on device eth6 [ 103.063789][ T5732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.093603][ T4397] 8021q: adding VLAN 0 to HW filter on device eth7 [ 103.120842][ T5732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.187980][ T5732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.257810][ T5732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.526215][ T5732] bridge_slave_1: left allmulticast mode [ 103.526245][ T5732] bridge_slave_1: left promiscuous mode [ 103.526329][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.528967][ T5732] bridge_slave_0: left allmulticast mode [ 103.528978][ T5732] bridge_slave_0: left promiscuous mode [ 103.529024][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.839668][ T5732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.866428][ T5732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.907219][ T5732] bond0 (unregistering): Released all slaves [ 104.019758][ T4397] 8021q: adding VLAN 0 to HW filter on device eth10 [ 104.131397][ T4397] 8021q: adding VLAN 0 to HW filter on device eth8 [ 104.194760][ T5732] hsr_slave_0: left promiscuous mode [ 104.196187][ T5732] hsr_slave_1: left promiscuous mode [ 104.196369][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.196380][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.197610][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.197621][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.202394][ T5732] veth1_macvtap: left promiscuous mode [ 104.202412][ T5732] veth0_macvtap: left promiscuous mode [ 104.202449][ T5732] veth1_vlan: left promiscuous mode [ 104.202472][ T5732] veth0_vlan: left promiscuous mode [ 104.272523][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 104.274878][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 104.311933][ T4397] 8021q: adding VLAN 0 to HW filter on device eth9 [ 104.415722][ T4397] 8021q: adding VLAN 0 to HW filter on device eth11 [ 104.939147][ T5732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.999874][ T4397] 8021q: adding VLAN 0 to HW filter on device eth12 [ 105.020118][ T5732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.084705][ T5732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.094543][ T4397] 8021q: adding VLAN 0 to HW filter on device eth13 [ 105.138257][ T5732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.184721][ T4397] 8021q: adding VLAN 0 to HW filter on device eth14 [ 105.232231][ T5732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.290104][ T4397] 8021q: adding VLAN 0 to HW filter on device eth15 [ 105.305643][ T5732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.367777][ T5732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.383122][ T4397] 8021q: adding VLAN 0 to HW filter on device eth16 [ 105.431021][ T5732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.481667][ T4397] 8021q: adding VLAN 0 to HW filter on device eth18 [ 105.492117][ T5732] bridge_slave_1: left allmulticast mode [ 105.492146][ T5732] bridge_slave_1: left promiscuous mode [ 105.492217][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.499676][ T5732] bridge_slave_0: left allmulticast mode [ 105.499705][ T5732] bridge_slave_0: left promiscuous mode [ 105.499773][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.666189][ T5732] bridge_slave_1: left allmulticast mode [ 105.666221][ T5732] bridge_slave_1: left promiscuous mode [ 105.666297][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.906512][ T5732] bridge_slave_1: left allmulticast mode [ 105.906542][ T5732] bridge_slave_1: left promiscuous mode [ 105.906610][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.909367][ T5732] bridge_slave_0: left allmulticast mode [ 105.909378][ T5732] bridge_slave_0: left promiscuous mode [ 105.909441][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.158788][ T5732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.177010][ T5732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.217289][ T5732] bond0 (unregistering): Released all slaves [ 106.330886][ T5732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.350019][ T5732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.352969][ T5732] bond0 (unregistering): Released all slaves [ 106.354464][ T5732] bond1 (unregistering): Released all slaves [ 106.494108][ T5732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.526923][ T5732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.547445][ T5732] bond0 (unregistering): Released all slaves [ 106.551271][ T9] wg1 speed is unknown, defaulting to 1000 [ 106.551297][ T9] syz0: Port: 1 Link DOWN [ 106.606912][ T5732] tipc: Left network mode [ 106.720447][ T4397] 8021q: adding VLAN 0 to HW filter on device eth17 [ 106.901228][ T4397] 8021q: adding VLAN 0 to HW filter on device eth19 [ 107.070565][ T4397] 8021q: adding VLAN 0 to HW filter on device eth20 [ 107.160466][ T4397] 8021q: adding VLAN 0 to HW filter on device eth21 [ 107.250585][ T5732] hsr_slave_0: left promiscuous mode [ 107.252015][ T5732] hsr_slave_1: left promiscuous mode [ 107.252812][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.253227][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.261777][ T5732] hsr_slave_0: left promiscuous mode [ 107.263046][ T5732] hsr_slave_1: left promiscuous mode [ 107.263230][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.263241][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.264360][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.264368][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.270240][ T5732] hsr_slave_0: left promiscuous mode [ 107.271305][ T5732] hsr_slave_1: left promiscuous mode [ 107.271497][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.271507][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.275119][ T5732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.275136][ T5732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.280885][ T5732] veth1_macvtap: left promiscuous mode [ 107.280910][ T5732] veth0_macvtap: left promiscuous mode [ 107.280937][ T5732] veth1_vlan: left promiscuous mode [ 107.280957][ T5732] veth0_vlan: left promiscuous mode [ 107.284950][ T5732] veth1_macvtap: left promiscuous mode [ 107.285071][ T5732] veth0_macvtap: left promiscuous mode [ 107.285104][ T5732] veth1_vlan: left promiscuous mode [ 107.285129][ T5732] veth0_vlan: left promiscuous mode [ 107.379780][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 107.382591][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 107.460278][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 107.464042][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 107.542847][ T5732] team0 (unregistering): Port device team_slave_1 removed [ 107.545398][ T5732] team0 (unregistering): Port device team_slave_0 removed [ 107.580768][ T4397] 8021q: adding VLAN 0 to HW filter on device eth22 [ 107.680808][ T4397] 8021q: adding VLAN 0 to HW filter on device eth23