last executing test programs: 8.861700293s ago: executing program 2 (id=14): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x4, 0x521, &(0x7f0000000640)="$eJzs3d9rK1kdAPDvTJtue2/XZlXkuuDu4q7cu+hN2q2rVWR3BdGnBXV9v9Y2LaVpU5p0vS2LdvEPEERU8A/wRfDBR0H2TxDhgr6LiiJ6rz7qHZlkqv2RtLFNm2v6+cBpzsmZOd9zhmaSmTnMBHBtvRARb0TEWES8HBEzxftpkWK/k/LlHj18ZylPSWTZW39NIineO2grL49HxM1itcmI+OqXIr6RnIzb3N1bX6zXa9tFudra2Ko2d/furm0srtZWa5vz83M/j4hXF2azwoXGWY6I177wxx989ydffO2Xn/jm7+79+c638m597kOdfkfE0oUC9NBpu9TeFgfybbR9GcGGJB9PaWzYvQAAoB/5b/z3R8RH27//Z2Ks/WsOAAAAGCXZ69PxzyQiAwAAAEZWGhHTkaSVYi7AdKRppdKZw/vBuJHWG83Wx1caO5vLeV1EOUrpylq9NlvMFS5HKcnLc8Uc24PyK8fK8xHxTER8f2aqXa4sNerLwz75AQAAANfEzeePHv//YyZt5wEAAIARU+5ZAAAAAEaFQ34AAAAYfY7/AQAAYKR9+c0385QdPMd7+e3dnfXG23eXa831ysbOUmWpsb1VWW00Vtv37Ns4q716o7H1ydjcuV9t1ZqtanN3795GY2ezdW/tyCOwAQAAgCv0zPPv/TaJiP3PTrVTFPcBBDjiD8PuADBIY8PuADA048PuADA0pTOXsIeAUZecUX9y8k7nXGH86nL6AwAADN7tD5+8/j9R1J19bgD4f2auDwBcP0ev7k0NrR/A1SuddwbgrUH3BBiW93VenupV3/PmHX1c/++cY8iyc3UMAAAYmOl2StJKcQwwHWlaqUQ8HY+zcpSSlbV6bbao+81M6am8PNdeMzlzzjAAAAAAAAAAAAAAAAAAAAAAAAAA0JFlSWQAAADASItI/5S07+YfcXvmpemjZweOPfXrx2/98P5iq7U9FzGR/G0mf2siIlo/Kt5/JfNIAAAAABiuqfxP5zi9eJ0bdpcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDWPHr6zdJCuMu5fPh8R5W7xx2Oy/ToZpYi48fckxg+tl0TE2ADi778bEbe6xU/icZZl5aIX3eJPXXL8cnvTdI+fRsTNAcSH6+y9fP/zRrfPXxovtF+7f/7Gi3RRvfd/6X/2f2M99j9PHyv38uyDn1V7xn834tnx7vufg/hJJ/6REHnhxT7H+PWv7e11rTjUZLf4h2NVWxtb1ebu3t21jcXV2mptc35+7lMLn154dWG2urJWrxV/u4b53kd+8fi08d/oEb98dPwntv9LfY0+i389uP/wA51CqVv8Oy92//691SN+Wnz3fazI5/W3D/L7nfxhz/3018+dNv7lHuOfPGP8d/oaf3zm5a985/dda05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERdt5/WB9udJyMTZy0w+IV29jEz27c7/48XaueDqJzLZRVYfjwF0Y+LE53QszttgErGft9XnPyQAADBi/vuj/7QrSAAAAAAAAAAAAAAAAAAAAMBlOudtySYjou+Fj8fcH85QAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9e8AAAD//zDU0hs=") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x79e, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 8.141399693s ago: executing program 2 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x81, 0x20) write(r0, &(0x7f0000000000)="37af90a0d36ea4e6fdc8239eb5b839609beb2dcd", 0x14) 7.828518039s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000011000100"/25], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="500000001000010400000000000000000000000000000000000000000000000008000300687372302800128008000100687372001c00028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2, @ANYBLOB="51808d72c9628a526aa3d69686158dfad0584f929e4f2c573b1440e9bc93ebf678c4646bf94eff73f907f5787a54acbb6d4552f690d755568195e9d0c14152d08bd9b32842858ee44f5cb17cc06b1c58e3bd5293f47ff7037db81cae8c4e6084f04b24765ed7fb4adf896d04412e3abdb002c46f90882a00bcd965a14cf60b606d8d1dc6faf0ff", @ANYRES32], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000300)={'hsr0\x00', 0x1}) 7.641689625s ago: executing program 2 (id=21): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x80000) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 7.551738316s ago: executing program 4 (id=22): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r0, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 7.405945741s ago: executing program 2 (id=23): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x18d8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) 7.212699058s ago: executing program 0 (id=24): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000007, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8000, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) 7.163564529s ago: executing program 1 (id=2): r0 = socket(0x1d, 0x2, 0x6) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @remote, 0x6e}, 0x1c) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x8000000000000007, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) 7.022085928s ago: executing program 3 (id=25): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0xeffc}, &(0x7f0000000280)=0x90) 6.758130396s ago: executing program 5 (id=6): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c00198008000200", @ANYRES16=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 6.504095841s ago: executing program 5 (id=26): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x942e1000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x2) 6.421238499s ago: executing program 4 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000ffdbdf250700000020000180060001"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x800) 6.160364899s ago: executing program 0 (id=28): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) write$P9_RWALK(r0, &(0x7f00000002c0)={0x9, 0x6f, 0x1}, 0x9) 6.051317995s ago: executing program 4 (id=29): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='environ\x00') 5.877587305s ago: executing program 1 (id=30): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x38}}, 0x0) 5.800151016s ago: executing program 3 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x8, 0x18, 0x1000, 0x0, 0x0, {[@nop, @timestamp={0x8, 0xa, 0x8, 0x3}]}}}}}}}}, 0x0) 5.231806234s ago: executing program 1 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x200}, 0x0, 0x0, 0x0, 0x40000000080004, 0x0, 0xfffffffffffff001, 0x5, 0x4f2a, 0x0, 0x3}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.622225029s ago: executing program 0 (id=33): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="400003"], 0x6) 4.247200036s ago: executing program 3 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b040000000000000000020000005000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000e0800034000000004100300000000000000656469720000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) 4.072284704s ago: executing program 4 (id=35): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008001, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x2}, 0x10) 3.76909495s ago: executing program 5 (id=36): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)="22a108000000000000009646ced13e932687629c4360a54a5387958eeea817feafba64bf542ee6869b4495f30929f9a2fb70943a28adbeb07da74c8ef9debd1440ff7c", 0x43) connect$pptp(r3, &(0x7f00000001c0)={0x18, 0x2, {0xfffe, @multicast2}}, 0x1e) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x9, 0xbf3ffe01, 0x8001, 0x2, "202b9809007d0000cd681ec267a000", 0x6, 0xd}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x4, 0x4, 0x8}, 0x50) 3.588554975s ago: executing program 3 (id=37): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 3.585404064s ago: executing program 2 (id=38): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x24040021) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f0000000000)=0x8000, 0x4) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/29, 0x17, 0xffffff7f}, 0x6}], 0x636, 0x40010003, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmmsg(r0, 0x0, 0x0, 0xfff0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0x20, &(0x7f0000000080)={@in={{0x2, 0x0, @multicast2}}, 0x3, 0x0, 0x1a, 0x0, "5e3b86774ef89ec669fabcaff49c2eeb8c4614c85b196a0c67a7768e058e3008931c08d43101cb8242bc42b8e0662749302c1ffcd1d1190000000000000000000000000000000000000000000200"}, 0xd8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x2000c046, &(0x7f0000000340)={0x2, 0x4e21, @remote}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 3.255384166s ago: executing program 4 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x4101, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) 1.590612074s ago: executing program 5 (id=40): syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @random="ed272f08deb0", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) 1.478216628s ago: executing program 1 (id=41): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) pwrite64(r1, &(0x7f0000000100)='\n', 0x1, 0x8000c5b) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x181441, 0x148) fallocate(r2, 0x20, 0x4000, 0x8000) 1.365347702s ago: executing program 3 (id=42): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0xfffd, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xb8, 0x19, 0x301, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@empty, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f0000000340)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0x1, @dev, @mcast2, {[], @ni={0x8b, 0x0, 0x0, 0xf, 0x9, 0x401b}}}}}}, 0x0) 1.066909217s ago: executing program 5 (id=43): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x70bd37, 0xfffffffc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.041684847s ago: executing program 0 (id=44): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000010c0)=0x14, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xef, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000004a00037e58dfc300000000000a"], 0x24}}, 0x400040c0) 703.429437ms ago: executing program 3 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = add_key(&(0x7f0000002340)='big_key\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f00000010c0)=""/4096, 0x1000) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x8080, 0x8, 0x3, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_ublk_add_dev(r7, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x71, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@any_dev={0x4, 0x58e, 0x0, 0x0, 0x1000, 0x9, 0xffffffffffffffff}}}, &(0x7f0000000440)=0x0) syz_ublk_setup_queues(r7, r9, &(0x7f0000000340)={0x0, 0xfb7e, 0x3000, 0x2, 0x3cf, 0x0, r3}, &(0x7f00000007c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd3db, 0x200, 0xfffffffd, 0x3de, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e00, 0x200, 0xfffffffe, 0x278}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdada, 0x1000, 0x3, 0x321}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9b3, 0x20, 0x3, 0x80000c4}}], 0x4, &(0x7f0000000e00)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xf6}, 0x0, r8, '\x00', {0x5, 0xe81, 0x0, 0x0}}, 0x0) add_key(&(0x7f00000001c0)='user\x00', 0x0, &(0x7f0000000a40), 0x0, 0xfffffffffffffffb) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000140)={0xf, 0x4cd, 0x2, 0x3, 0x1, "c4249d0788fa8dccada7257c3105714622383e", 0xe3b, 0x5}) socket$kcm(0xa, 0x5, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/consoles\x00', 0x0, 0x0) preadv(r10, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="f7ffff603800df0000951d32120434739d2e35637f21d827fa0000000000000099f5bce032392fb69e62f2e6ef8b00"/56], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)=""/119, 0x77}], 0x1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000dc0)={r7, 0x0, 0x2d, 0x1e, @val=@kprobe_multi=@syms={0x1, 0x0, &(0x7f0000000d80), 0x0, 0x7}}, 0x30) socket$kcm(0x2, 0x5, 0x0) 571.712211ms ago: executing program 0 (id=46): r0 = syz_io_uring_setup(0x2d64, &(0x7f0000000340)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0x6, 0x0, 0x0) 532.53031ms ago: executing program 5 (id=47): socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d63703933362c726f6469722c6e6f6e756d7461696c3d302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c636f6465706167653d313235352c00fac46bc2f5a64bdb2ce5a115cbf2e8c5b33f47978eb637bdfd11811351b16287319012ba8ed91ee7812631e3a6a461a4b364651404383b7338369131453be6821135f37199b1ce7f100d583385e3458524f3a4bf2630635aff2cdc33eb"], 0x25, 0x353, &(0x7f0000000100)="$eJzs3U1oHGUYAOB3O2k2Ddbdg1D0tHoTpLQRL54SSoViDlIZ/Lu42NSf7FrI4kJ6yGYvlupJ8SLoyVsPeuxZPIh48+DVClIVL/ZWaHBk/2ezG7s5bH/weQ7h5f2+d753JkNmEpIvb7Zi88LRuHjr1s1YWirEwuqZ1bhdiHIciSR6dmOqjxen5wGAB9ztLIu/s567z/50eRB59gPAw6v7/H/7+ChRPETx1Ufm0RIAMGczfv//0tTspbm1BQDM0cTz/6mx4X0/5l8Y/k4AAPDwevm1119cW484X6ksRdSvNNNmGs+PxtcuxrtRi404FaXYi+i9KPTeFjofXzi3fvZUpeP3cqQRWamZRtRbzbT3prCWdOuLcTpKUe7XZ8P6pFO/ExGVSiUidlvd9aNeaKZHY7m//i/LsRErUYrHJuojzq2fXan0RFof1Lci2rE0OIlO/yejFD+9FZeiFheiUzvqf+d0pXImWx+rb14rducBAAAAAAAAAAAAAAAAAAAAAMA8nKwMleOjKxFpM42s3mp+eH7/hPLY/jhpb7i/P1C7tz9QVhzsznM12b8/0Pj+PM10IY7c1zMHAAAAAAAAAAAAAAAAAACAB0djezGqtdrGVmP78mY+aOUy7//w9XfHYjC00C99LxlVRT85dpzBxGGmNVz08mY1G5ZnSW7OMEgiop/ZrV67Puw4P6eYP+DkWRQnhgr9nqq12vEnf/tiWtU/nWC3m0li4rKMB4X++rmh+qOdxFJE7B1UdXCwcpc5N7IsO6h85/PJqihELMSh25gh+P7mO48/2zjxXDfzbX/Th6efKb1y47Ov/tys1qLduzK12uJWYy+b4cidXieHktz9U+hf58KUO2F60B5l2luN7Wry81+vPvHJj/smJ9Pvnyyf+eDgtb7Zn1nsBYWI8uAi/FerR6fc/NODN+4M797Df+JOfLlavb7z6x+zVuW+SNioAwAAAAAAAAAAAAAAAAAA7onc34rPpDDvhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPhj9//9c0J7IzBLcacXkUHFjq3Hg4sfu6akCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/9m8AAAD//1BTcK8=") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000b40)={0x52, 0xfffb, 0x1, {0x0, 0x1}, {0x47, 0x2}, @cond=[{0x23, 0xfffc, 0x2a, 0x4, 0x8001, 0x400}, {0xf, 0x9, 0x4, 0xffff, 0x6, 0x731}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) 503.960277ms ago: executing program 4 (id=48): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0xc0803, 0x196) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x5a, 0x6010000000000ffd, 0x0, 0x0, 0x19, 0x14, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) write$tcp_congestion(r1, 0x0, 0x0) 0s ago: executing program 2 (id=49): write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. [ 91.317507][ T24] cfg80211: failed to load regulatory.db [ 95.677996][ T5593] cgroup: Unknown subsys name 'net' [ 95.865034][ T5593] cgroup: Unknown subsys name 'cpuset' [ 95.875278][ T5593] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 97.588855][ T5593] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 100.478971][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 100.503314][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.513272][ T5632] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 100.526508][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 100.530138][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 100.534516][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 100.545698][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 100.549830][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.558914][ T5632] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 100.570837][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 100.571700][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 100.581571][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 100.586637][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.600662][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 100.600779][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 100.611822][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 100.616144][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 100.629659][ T5632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 100.631645][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 100.642221][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 100.645912][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 100.652446][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 100.659920][ T5633] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.673136][ T5636] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 100.675843][ T5620] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.683642][ T5636] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 100.689958][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.694559][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 100.701383][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 100.710060][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.670687][ T5624] Bluetooth: hci1: command tx timeout [ 102.750374][ T5624] Bluetooth: hci5: command tx timeout [ 102.756876][ T5630] Bluetooth: hci3: command tx timeout [ 102.832190][ T5630] Bluetooth: hci4: command tx timeout [ 102.838842][ T5624] Bluetooth: hci2: command tx timeout [ 102.839514][ T4923] Bluetooth: hci0: command tx timeout [ 103.375272][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.384387][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.395772][ T5612] bridge_slave_0: entered allmulticast mode [ 103.404266][ T5612] bridge_slave_0: entered promiscuous mode [ 103.462151][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.469542][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.476772][ T5612] bridge_slave_1: entered allmulticast mode [ 103.485170][ T5612] bridge_slave_1: entered promiscuous mode [ 103.525712][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.533009][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.540943][ T5614] bridge_slave_0: entered allmulticast mode [ 103.549111][ T5614] bridge_slave_0: entered promiscuous mode [ 103.628244][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.635580][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.643382][ T5614] bridge_slave_1: entered allmulticast mode [ 103.651580][ T5614] bridge_slave_1: entered promiscuous mode [ 103.738644][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.779113][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.786480][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.794180][ T5615] bridge_slave_0: entered allmulticast mode [ 103.802693][ T5615] bridge_slave_0: entered promiscuous mode [ 103.827357][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.866203][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.873496][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.882052][ T5615] bridge_slave_1: entered allmulticast mode [ 103.890177][ T5615] bridge_slave_1: entered promiscuous mode [ 103.900407][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.924124][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.931683][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.939020][ T5616] bridge_slave_0: entered allmulticast mode [ 103.947388][ T5616] bridge_slave_0: entered promiscuous mode [ 103.987371][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.010593][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.018072][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.025507][ T5616] bridge_slave_1: entered allmulticast mode [ 104.033434][ T5616] bridge_slave_1: entered promiscuous mode [ 104.099378][ T5612] team0: Port device team_slave_0 added [ 104.151246][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.176633][ T5612] team0: Port device team_slave_1 added [ 104.211115][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.218553][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.225878][ T5613] bridge_slave_0: entered allmulticast mode [ 104.234041][ T5613] bridge_slave_0: entered promiscuous mode [ 104.242183][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.249525][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.256847][ T5611] bridge_slave_0: entered allmulticast mode [ 104.265231][ T5611] bridge_slave_0: entered promiscuous mode [ 104.276912][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.288886][ T5614] team0: Port device team_slave_0 added [ 104.315700][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.329067][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.351786][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.359086][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.368465][ T5613] bridge_slave_1: entered allmulticast mode [ 104.377014][ T5613] bridge_slave_1: entered promiscuous mode [ 104.384413][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.391902][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.399126][ T5611] bridge_slave_1: entered allmulticast mode [ 104.407142][ T5611] bridge_slave_1: entered promiscuous mode [ 104.431534][ T5614] team0: Port device team_slave_1 added [ 104.438282][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.445332][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.472440][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.552435][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.559712][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.585753][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.599740][ T5616] team0: Port device team_slave_0 added [ 104.634173][ T5615] team0: Port device team_slave_0 added [ 104.667139][ T5616] team0: Port device team_slave_1 added [ 104.676362][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.689706][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.702103][ T5615] team0: Port device team_slave_1 added [ 104.708582][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.715834][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.742520][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.753927][ T4923] Bluetooth: hci1: command tx timeout [ 104.778481][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.790572][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.829335][ T4923] Bluetooth: hci3: command tx timeout [ 104.829458][ T5624] Bluetooth: hci5: command tx timeout [ 104.849631][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.857120][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.883156][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.909384][ T5624] Bluetooth: hci2: command tx timeout [ 104.910223][ T4923] Bluetooth: hci4: command tx timeout [ 104.920682][ T5624] Bluetooth: hci0: command tx timeout [ 105.007778][ T5612] hsr_slave_0: entered promiscuous mode [ 105.014954][ T5612] hsr_slave_1: entered promiscuous mode [ 105.023515][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.030689][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.056901][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.084833][ T5611] team0: Port device team_slave_0 added [ 105.091826][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.098836][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.125151][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.138628][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.145954][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.172657][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.194064][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.201421][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.227572][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.244130][ T5613] team0: Port device team_slave_0 added [ 105.252817][ T5611] team0: Port device team_slave_1 added [ 105.296800][ T5614] hsr_slave_0: entered promiscuous mode [ 105.303992][ T5614] hsr_slave_1: entered promiscuous mode [ 105.310860][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 105.316703][ T5614] Cannot create hsr debugfs directory [ 105.335037][ T5613] team0: Port device team_slave_1 added [ 105.471134][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.478212][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.506233][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.552265][ T5615] hsr_slave_0: entered promiscuous mode [ 105.558936][ T5615] hsr_slave_1: entered promiscuous mode [ 105.565949][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 105.571728][ T5615] Cannot create hsr debugfs directory [ 105.586188][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.593360][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.619576][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.632666][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.640362][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.666764][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.708923][ T5616] hsr_slave_0: entered promiscuous mode [ 105.715665][ T5616] hsr_slave_1: entered promiscuous mode [ 105.722555][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 105.728404][ T5616] Cannot create hsr debugfs directory [ 105.742982][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.750240][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.776833][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.995931][ T5613] hsr_slave_0: entered promiscuous mode [ 106.002997][ T5613] hsr_slave_1: entered promiscuous mode [ 106.009494][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 106.015333][ T5613] Cannot create hsr debugfs directory [ 106.077038][ T5611] hsr_slave_0: entered promiscuous mode [ 106.083878][ T5611] hsr_slave_1: entered promiscuous mode [ 106.090466][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 106.096194][ T5611] Cannot create hsr debugfs directory [ 106.648170][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.664835][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.674002][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.685489][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.718376][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.730070][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.758461][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.769755][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.839698][ T4923] Bluetooth: hci1: command tx timeout [ 106.870669][ T5616] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.882646][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.893662][ T5616] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.904934][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.912318][ T4923] Bluetooth: hci5: command tx timeout [ 106.920343][ T4923] Bluetooth: hci3: command tx timeout [ 106.921628][ T5616] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.937211][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.945798][ T5616] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.956500][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.990005][ T4923] Bluetooth: hci4: command tx timeout [ 106.990252][ T5630] Bluetooth: hci2: command tx timeout [ 107.001831][ T5624] Bluetooth: hci0: command tx timeout [ 107.092496][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.104883][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.121326][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.132279][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.141586][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.153057][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.167414][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.178536][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.303379][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.320228][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.333048][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.344761][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.366330][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.374302][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.385228][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.393716][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.404722][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.551377][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.562151][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.576455][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.588926][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.597461][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.607750][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.626097][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.641899][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.661462][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.700936][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.777130][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.785280][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.797458][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.804655][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.890461][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.904602][ T5611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 107.916186][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.925194][ T5611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 107.935575][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.960609][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.967933][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.981221][ T5611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 107.994124][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.003883][ T5611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.016167][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.060325][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.067551][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.102245][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.233024][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.293963][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.301277][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.326137][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.383061][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.390312][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.491572][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.547202][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.591824][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.599028][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.668648][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.675913][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.723509][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.796285][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.803542][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.869090][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.876608][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.911580][ T5630] Bluetooth: hci1: command tx timeout [ 108.991789][ T5630] Bluetooth: hci3: command tx timeout [ 108.997658][ T5624] Bluetooth: hci5: command tx timeout [ 109.047744][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.070627][ T5624] Bluetooth: hci4: command tx timeout [ 109.076110][ T5630] Bluetooth: hci2: command tx timeout [ 109.077339][ T4923] Bluetooth: hci0: command tx timeout [ 109.148635][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.204817][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.284828][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.366429][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.373792][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.456978][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.464221][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.978332][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.309768][ T5616] veth0_vlan: entered promiscuous mode [ 110.370676][ T5616] veth1_vlan: entered promiscuous mode [ 110.525280][ T5612] veth0_vlan: entered promiscuous mode [ 110.556315][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.621578][ T5616] veth0_macvtap: entered promiscuous mode [ 110.651466][ T5612] veth1_vlan: entered promiscuous mode [ 110.698153][ T5616] veth1_macvtap: entered promiscuous mode [ 110.818131][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.881966][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.944437][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.977778][ T5615] veth0_vlan: entered promiscuous mode [ 110.990545][ T5612] veth0_macvtap: entered promiscuous mode [ 111.020544][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.038607][ T5612] veth1_macvtap: entered promiscuous mode [ 111.078853][ T5615] veth1_vlan: entered promiscuous mode [ 111.201106][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.227676][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.257039][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.288483][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.303207][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.368077][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.375424][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.392328][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.459979][ T142] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.526484][ T5615] veth0_macvtap: entered promiscuous mode [ 111.538677][ T5614] veth0_vlan: entered promiscuous mode [ 111.559869][ T142] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.571077][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.583433][ T5615] veth1_macvtap: entered promiscuous mode [ 111.592172][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.658857][ T5614] veth1_vlan: entered promiscuous mode [ 111.783111][ T5616] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 111.792141][ T1153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.831329][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.840227][ T5613] veth0_vlan: entered promiscuous mode [ 111.871381][ T142] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.874059][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.912219][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.926608][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.940492][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.023776][ T5613] veth1_vlan: entered promiscuous mode [ 112.081667][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.091576][ T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.102731][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.140848][ T5614] veth0_macvtap: entered promiscuous mode [ 112.145868][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 112.156592][ T5844] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7'. [ 112.199831][ T1153] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.226833][ T1153] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.266059][ T5614] veth1_macvtap: entered promiscuous mode [ 112.310943][ T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.380640][ T5611] veth0_vlan: entered promiscuous mode [ 112.486922][ T5613] veth0_macvtap: entered promiscuous mode [ 112.524080][ T5611] veth1_vlan: entered promiscuous mode [ 112.558400][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.574721][ T5613] veth1_macvtap: entered promiscuous mode [ 112.583146][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.601814][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.684588][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.750987][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.779299][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.801261][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.809047][ T5853] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 112.833492][ T1088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.997885][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.126814][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.222768][ T5611] veth0_macvtap: entered promiscuous mode [ 113.235893][ T5611] veth1_macvtap: entered promiscuous mode [ 113.256398][ T1153] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.285219][ T1153] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.995805][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.108299][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.274499][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.444556][ T5867] loop2: detected capacity change from 0 to 512 [ 114.457343][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.471771][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.493865][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.507594][ T5867] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 114.696864][ T5867] EXT4-fs (loop2): 1 orphan inode deleted [ 114.713453][ T5867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.738505][ T48] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 114.764533][ T48] EXT4-fs error (device loop2): ext4_release_dquot:7075: comm kworker/u8:3: Failed to release dquot type 1 [ 114.792871][ T5867] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.973372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.982779][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.997174][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.081099][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.107459][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.283063][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.298696][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.313692][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.334406][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.529438][ T142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.575362][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 115.614537][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.647891][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.663526][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 115.680525][ T1088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.747831][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.750097][ T5891] Zero length message leads to an empty skb [ 115.786701][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.916041][ T5800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.963078][ T5800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.836078][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 116.845876][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 117.311085][ T5914] loop0: detected capacity change from 0 to 512 [ 117.372183][ T5914] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.577097][ T5914] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2859: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 117.635092][ T5914] EXT4-fs (loop0): 1 truncate cleaned up [ 117.734473][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.975810][ T5914] EXT4-fs error (device loop0): __ext4_expand_extra_isize:6453: inode #15: comm syz.0.28: bad extra_isize 62 (inode size 256) [ 118.028096][ T5914] EXT4-fs (loop0): Remounting filesystem read-only [ 118.582775][ T5614] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.684941][ T5941] loop0: detected capacity change from 0 to 256 [ 119.757398][ T5941] ======================================================= [ 119.757398][ T5941] WARNING: The mand mount option has been deprecated and [ 119.757398][ T5941] and is ignored by this kernel. Remove the mand [ 119.757398][ T5941] option from the mount to silence this warning. [ 119.757398][ T5941] ======================================================= [ 122.114251][ T5962] loop1: detected capacity change from 0 to 1024 [ 122.355382][ T5952] loop2: detected capacity change from 0 to 4096 [ 122.357470][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.509159][ T5952] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.719446][ T30] audit: type=1800 audit(1786923993.114:2): pid=5948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.38" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 122.965120][ T5983] loop5: detected capacity change from 0 to 256 [ 122.992321][ T5984] loop7: detected capacity change from 0 to 7 [ 123.106047][ T5758] Process accounting resumed [ 123.551717][ T5984] [ 123.554088][ T5984] ====================================================== [ 123.561203][ T5984] WARNING: possible circular locking dependency detected [ 123.568287][ T5984] syzkaller #0 Not tainted [ 123.572713][ T5984] ------------------------------------------------------ [ 123.579740][ T5984] syz.4.48/5984 is trying to acquire lock: [ 123.585566][ T5984] ffff88801caed210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 123.595840][ T5984] [ 123.595840][ T5984] but task is already holding lock: [ 123.603304][ T5984] ffff8880237a7020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 123.614646][ T5984] [ 123.614646][ T5984] which lock already depends on the new lock. [ 123.614646][ T5984] [ 123.625064][ T5984] [ 123.625064][ T5984] the existing dependency chain (in reverse order) is: [ 123.634468][ T5984] [ 123.634468][ T5984] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 123.643142][ T5984] lock_acquire+0x1b9/0x370 [ 123.648211][ T5984] blk_alloc_queue+0x610/0x790 [ 123.653638][ T5984] blk_mq_alloc_queue+0x174/0x290 [ 123.660005][ T5984] __blk_mq_alloc_disk+0x29/0x120 [ 123.665583][ T5984] loop_add+0x498/0xb60 [ 123.670290][ T5984] loop_init+0x1d3/0x200 [ 123.675081][ T5984] do_one_initcall+0x11d/0x700 [ 123.680407][ T5984] kernel_init_freeable+0x6ea/0x7b0 [ 123.686169][ T5984] kernel_init+0x1f/0x1e0 [ 123.691085][ T5984] ret_from_fork+0x72b/0xd50 [ 123.696237][ T5984] ret_from_fork_asm+0x1a/0x30 [ 123.701578][ T5984] [ 123.701578][ T5984] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 123.708841][ T5984] lock_acquire+0x1b9/0x370 [ 123.713898][ T5984] fs_reclaim_acquire+0xc4/0x100 [ 123.719384][ T5984] kmem_cache_alloc_noprof+0x63/0x6a0 [ 123.725327][ T5984] __kernfs_iattrs+0x126/0x450 [ 123.730668][ T5984] __kernfs_setattr+0x4d/0x3c0 [ 123.736078][ T5984] kernfs_iop_setattr+0xda/0x130 [ 123.741617][ T5984] notify_change+0xb25/0x1330 [ 123.746852][ T5984] do_truncate+0x1df/0x240 [ 123.751831][ T5984] path_openat+0x370f/0x4280 [ 123.757076][ T5984] do_file_open+0x20e/0x430 [ 123.762150][ T5984] do_sys_openat2+0x10f/0x1e0 [ 123.767379][ T5984] __x64_sys_openat+0x12d/0x210 [ 123.772778][ T5984] do_syscall_64+0x115/0x870 [ 123.777931][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.784380][ T5984] [ 123.784380][ T5984] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 123.792944][ T5984] check_prev_add+0xeb/0xe60 [ 123.798092][ T5984] __lock_acquire+0x136c/0x1a40 [ 123.803493][ T5984] lock_acquire+0x1b9/0x370 [ 123.808549][ T5984] down_read+0x99/0x4c0 [ 123.813339][ T5984] kernfs_iop_getattr+0x9c/0xf0 [ 123.818754][ T5984] vfs_getattr_nosec+0x2d4/0x430 [ 123.824260][ T5984] vfs_getattr+0x4a/0x60 [ 123.829077][ T5984] loop_query_min_dio_size.isra.0+0x117/0x250 [ 123.835804][ T5984] lo_ioctl+0x13aa/0x1bc0 [ 123.840689][ T5984] blkdev_ioctl+0x5ad/0x6f0 [ 123.845734][ T5984] __x64_sys_ioctl+0x18e/0x210 [ 123.851053][ T5984] do_syscall_64+0x115/0x870 [ 123.856288][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.862825][ T5984] [ 123.862825][ T5984] other info that might help us debug this: [ 123.862825][ T5984] [ 123.873098][ T5984] Chain exists of: [ 123.873098][ T5984] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 123.873098][ T5984] [ 123.888043][ T5984] Possible unsafe locking scenario: [ 123.888043][ T5984] [ 123.895542][ T5984] CPU0 CPU1 [ 123.901044][ T5984] ---- ---- [ 123.906420][ T5984] lock(&q->q_usage_counter(io)#24); [ 123.911897][ T5984] lock(fs_reclaim); [ 123.918443][ T5984] lock(&q->q_usage_counter(io)#24); [ 123.926385][ T5984] rlock(&root->kernfs_iattr_rwsem); [ 123.931827][ T5984] [ 123.931827][ T5984] *** DEADLOCK *** [ 123.931827][ T5984] [ 123.940154][ T5984] 3 locks held by syz.4.48/5984: [ 123.945105][ T5984] #0: ffff8880207e9430 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 123.955560][ T5984] #1: ffff8880237a7020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 123.967392][ T5984] #2: ffff8880237a7058 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 123.979445][ T5984] [ 123.979445][ T5984] stack backtrace: [ 123.985388][ T5984] CPU: 1 UID: 0 PID: 5984 Comm: syz.4.48 Not tainted syzkaller #0 PREEMPT(full) [ 123.985435][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 123.985459][ T5984] Call Trace: [ 123.985473][ T5984] [ 123.985487][ T5984] dump_stack_lvl+0x100/0x190 [ 123.985537][ T5984] print_circular_bug.cold+0x178/0x1c7 [ 123.985603][ T5984] check_noncircular+0x146/0x160 [ 123.985665][ T5984] check_prev_add+0xeb/0xe60 [ 123.985714][ T5984] __lock_acquire+0x136c/0x1a40 [ 123.985766][ T5984] lock_acquire+0x1b9/0x370 [ 123.985809][ T5984] ? kernfs_iop_getattr+0x9c/0xf0 [ 123.985868][ T5984] ? __pfx___might_resched+0x10/0x10 [ 123.985917][ T5984] down_read+0x99/0x4c0 [ 123.985973][ T5984] ? kernfs_iop_getattr+0x9c/0xf0 [ 123.986027][ T5984] ? find_held_lock+0x2b/0x80 [ 123.986086][ T5984] ? __pfx_down_read+0x10/0x10 [ 123.986139][ T5984] ? kernfs_root+0xee/0x2a0 [ 123.986190][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986251][ T5984] kernfs_iop_getattr+0x9c/0xf0 [ 123.986314][ T5984] vfs_getattr_nosec+0x2d4/0x430 [ 123.986376][ T5984] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 123.986434][ T5984] vfs_getattr+0x4a/0x60 [ 123.986498][ T5984] loop_query_min_dio_size.isra.0+0x117/0x250 [ 123.986547][ T5984] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 123.986612][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986663][ T5984] lo_ioctl+0x13aa/0x1bc0 [ 123.986713][ T5984] ? __pfx_lo_ioctl+0x10/0x10 [ 123.986757][ T5984] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 123.986810][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986858][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.986904][ T5984] ? rcu_is_watching+0x12/0xc0 [ 123.986961][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987007][ T5984] ? trace_sched_exit_tp+0x120/0x160 [ 123.987065][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987111][ T5984] ? blk_get_meta_cap+0xd4/0x6c0 [ 123.987175][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987223][ T5984] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 123.987301][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987348][ T5984] ? blkdev_common_ioctl+0x515/0x2b80 [ 123.987390][ T5984] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 123.987427][ T5984] ? __pfx_futex_wait+0x10/0x10 [ 123.987465][ T5984] ? preempt_schedule_irq+0x7b/0x90 [ 123.987512][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987565][ T5984] ? irqentry_exit+0x24d/0xa00 [ 123.987613][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987660][ T5984] ? lockdep_hardirqs_on+0x78/0x100 [ 123.987707][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987753][ T5984] ? irqentry_exit+0x24d/0xa00 [ 123.987799][ T5984] ? srso_alias_return_thunk+0x5/0xfbef5 [ 123.987858][ T5984] ? file_to_blk_mode+0x10/0x150 [ 123.987897][ T5984] ? __pfx_lo_ioctl+0x10/0x10 [ 123.987944][ T5984] blkdev_ioctl+0x5ad/0x6f0 [ 123.987980][ T5984] ? __pfx_blkdev_ioctl+0x10/0x10 [ 123.988020][ T5984] ? __pfx_blkdev_ioctl+0x10/0x10 [ 123.988058][ T5984] __x64_sys_ioctl+0x18e/0x210 [ 123.988108][ T5984] do_syscall_64+0x115/0x870 [ 123.988161][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.988201][ T5984] RIP: 0033:0x7f68ed99e0d9 [ 123.988232][ T5984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.988277][ T5984] RSP: 002b:00007f68ebbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.988315][ T5984] RAX: ffffffffffffffda RBX: 00007f68edc25fa0 RCX: 00007f68ed99e0d9 [ 123.988340][ T5984] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 123.988364][ T5984] RBP: 00007f68eda35024 R08: 0000000000000000 R09: 0000000000000000 [ 123.988388][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.988412][ T5984] R13: 00007f68edc26038 R14: 00007f68edc25fa0 R15: 00007ffc644ab248 [ 123.988450][ T5984] [ 124.497319][ T5983] FAT-fs (loop5): data area starts beyond volume (274 > 64) [ 125.039275][ T5983] FAT-fs (loop5): Can't find a valid FAT filesystem [ 125.101300][ T5615] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.161644][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 125.171616][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.181402][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.191836][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.201493][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.210329][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.220036][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.229778][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.239449][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.247985][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 125.257621][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 125.889419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.093322][ T5613] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.270408][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.276795][ T1300] ieee802154 phy1 wpan1: encryption failed: -22