last executing test programs: 8.954423686s ago: executing program 1 (id=50): inotify_add_watch(0xffffffffffffffff, 0x0, 0x81000482) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$EVIOCGSND(0xffffffffffffffff, 0x8040451a, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mount(0x0, 0x0, 0x0, 0x2200020, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x236000, 0x1000, 0x0, 0x1}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0x1000}, {0x0}], 0x2, 0x0, 0x0, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 8.128045426s ago: executing program 1 (id=56): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x60}, 0x41) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000001880)={0x1, @pix={0xffff, 0x2, 0x30314742, 0x7, 0x6, 0x0, 0x1, 0x800, 0x0, 0x8, 0x2, 0x6}}) 6.796637328s ago: executing program 1 (id=61): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresuid(0x0, 0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 5.884656498s ago: executing program 1 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[], 0x0) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r4, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0x14}], 0x1}, 0x0) 5.42842455s ago: executing program 3 (id=69): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000180)={[{@nodiscard}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000003c0)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c0e1c200217033026e212e259ed"], 0xf) openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x40000, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x1, 0x7, 0x2) futex(0x0, 0xd, 0xfffffffe, 0x0, 0x0, 0x6fd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100114, 0x0, 0xfffffffffffffd25) 5.164430695s ago: executing program 2 (id=72): r0 = socket(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000100)={[{@noload}, {@quota}, {@lazytime}, {@errors_remount}, {@quota}, {@quota}]}, 0x3, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socket$kcm(0xa, 0x3, 0x73) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x1, 'syz1\x00'}) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)) 5.147835703s ago: executing program 4 (id=73): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000200000b704000000000000850000003400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x100000) 5.107539614s ago: executing program 4 (id=74): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1cc4}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$eJzs3c9rXFsdAPDvnUx+mLYmgmDrKiBooGRiamwVXFRciGChoGvbYTINNZNMyUxKEwK1iOBG0OJC0E3XVevOrT+2+i/oRkRaqqbltbzFI487P5KZZCad9E1m3ms+H7jJOffHnPO9P849yT3cCeDUmkl/ZCIuRMTPk4ipxvwkIkZrqWzE1fp6r3a2C+mUxO7u9/6X1NZ5ubNdiJZtYnIyzjQy5yPiLz+JuJg5XG5lc2slXyoV1xv5+erqnfnK5tbc7dX8cnG5uHZ5YXHx0pWvXhnvX6zv/X3r7LNffPtLv7/6/o8/9+Rnf03iapxtLGuNo19mYqa+T2I03YVtvtXvwoYsGXYFeCvppTlSv8rjQkxlY6z3bbMnWTEA4MTcj4hdAOCUSdz/AeCUaf4f4OXOdiGddu8P9/8Rg/b8mxExUY+/+XyzviTbeGY3UXsOOvkyaXvekUTEdB/Kn4mI3/zxB79Npzih55AAnfzoQUTcnJ5ptv/77U9yaMxCXe8DMr7cTBwxOGDmQF77B4Pzp7T/87X9/t/+9ZfZ6/9Eh/7PeIdr923MRPuIk8PXf+ZpH4rpKu3/fWN0f2zbq5b4G6ZHGrlztT7faHLrdqmYtm2fjojZGB1P8wudP742vGz2xQcv2ua2RNza//v/wx8+TstPf++vkXmaPdDkLuWr+X7Ennr+IOLz2U7xJ3vHP+nS/73eYxnf+fpPf91tWRp/Gm9zao//5EeV7T6K+GJ0jr8paYxPbB6GtvGJl+drp8N886To4A//+tVkt/Jbj386peXX/xY4199Au0iP/+TR8U8nreM1K8cv42+Ppv4ce+NJ23WPv6nz+T+WfL+Wbl5K9/LV6vpCxFjy3cPzL+1v28w310/jn/1C5+v/qPM/jeVmj/Fnn/33d92W7cXfnHEo/oaJHgs7pjT+pWMd/46J9E/hLovypSevVka6ld/b8V9MEyOzjTm9tH9da5ovlcZa1nnrHQcAAAAAAAAAAAAAAAAAAAAAAAAAx5CpvaQ0yeT20plMLhe17/D+bExmSuVK9eKt8sbaUv1lptMxOh4RtVddTrW8D3Wh8T78Zv7SgfxXIuIzEfHL8U/V8rlCubQ07OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOFMl+//T/1nvP779VBrCACciIk3rvGiOJCKAAAD8+b7f0SMn3w9AIDB6en+DwC8U9z/AeD0mcgMuwYAwKBNRGSHXQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADeadevXUun3dc724U0v3R3c2OlfHduqVhZya1uFHKF8vqd3HK5vFwq5grl1ZZN/9Hp80rl8p3FWNu4N18tVqrzlc2tG6vljbXqjdur+eXijeLowCIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgN5VNrdW8qVScb2ReDwZ0T5nQImRRoX6+clzZwcdxSASu1P1PfVxqU/fExMH5/x77p/nj9rq4aHTWOIjJ4bZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnwYAAD//0ldFl4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbebf8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="16"], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) setgroups(0x1, &(0x7f0000000100)=[0x0]) fallocate(r0, 0x0, 0x3f, 0x8000c62) 5.015635153s ago: executing program 0 (id=75): r0 = socket(0x2, 0x80805, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x18d7, 0x0, 0x0, &(0x7f0000ffe000), 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x44}, 0x20) sendmmsg$inet_sctp(r0, &(0x7f0000000e40), 0x0, 0x0) 5.003585564s ago: executing program 1 (id=76): syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001500)=""/184, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) 4.279076524s ago: executing program 2 (id=77): userfaultfd(0x801) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb77d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) 4.231772419s ago: executing program 4 (id=78): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3.82591962s ago: executing program 0 (id=79): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x7) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) 3.716033328s ago: executing program 3 (id=80): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x8, 0x32}, 0x0, @in=@private=0xa0100ee, 0x0, 0x0, 0x0, 0xb7, 0x7fffffff, 0xfffffffe}}, 0xe8) sendmmsg(r0, 0x0, 0x0, 0x1c) 3.33605778s ago: executing program 2 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, 0x0, 0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(0x0, 0x0, 0x2c, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 3.249050337s ago: executing program 4 (id=82): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf9477000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x7, 0x180) sendmmsg$inet(r0, &(0x7f00000016c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r5, 0x40}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={0x0}, 0x1, 0x0, 0x0, 0x50046}, 0x800) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 2.890208964s ago: executing program 0 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00'}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r5}, 0x10) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback, 0x0, 0x0, 0xce2c, &(0x7f0000002100), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) 2.788342853s ago: executing program 3 (id=84): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x22, 0xfffffff7, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x54, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r6}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.363683153s ago: executing program 2 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x76, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0x8}, {0x9}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x9, 0x2}}]}}]}, 0x44}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000b00000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) 1.975318618s ago: executing program 4 (id=86): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x4000, &(0x7f0000000300)=ANY=[], 0x3, 0x2cb, &(0x7f0000000ac0)="$eJzs3U9LW1kYx/GfJmNiHE0Ww8AMDHOY2cxsgpN5ATNhUBgmMMUaabsoXOtNG3KbyL3BEik1m9JtX4d02V2h7RtwU7rpvjspFLpxUXqL9yaaaJLGkD9avx+Q8yTPeXKO5ihPLiTuX3t8t1Tw0gWrqum40bRU14GUOowaphrjdBDPqFVdv899ePPT1es3/svmcksrxixnV//MGGMWfn5+7/6TX15W59aeLjyLaS91c/995u3ezN4P+59W7xQ9U/RMuVI1llmvVKrWumObjaJXShtzxbEtzzbFsme7bfmCU9ncrBmrvDGf2HRtzzNWuWZKds1UK6bq1ox12yqWTTqdNvMJXW7RPubkd1dWrGzXtB8Z6o4wcrOd7nTdbL1zMr87hj0BAIBzpnf/H/b63fv/3Fo4nqX///7L/b9E/z8i9bZbXfr/b8e4IYyc62atROP3tx39PwAAAAAAAAAAAAAAAAAAAAAAF8GB7yd9308ejo27gtsxSXFJfiN/VNDP28pxYbQ+/37LV9fnP/TXhLaLIWt5415cch5t5bfy4RjmswUV5cjWopL6GJyHhjBe/je3tGgCKb1wdhr1O1v5iGLN+qZUp/qpqBQ+QHv9N0q0rp9RUt91Xj9jOtXP6LdfW+rTSurVLVXkaCM418f1D/4w5p//cyfqZ4N5AAAAAAB8DdLmyKnX70E+mBDX6XxY33J9wPf9nV7XB068vo7qR64lAgAAAAAwFl5tu2Q5ju0OEMQkDVYuDbxor8D3paE+4EBBRJNcvVvwt6RzsI1xBXE1z5gZpPydznRE/T7mRCVN/MdyhmDSf5kAAAAADJtX2z7+Bz/9ev1wRLsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBy6vfzwJrzT6WaiZ6f9nckMvZvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADhHPgcAAP//ps0YVA==") landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r3, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x111) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000080)={0x7, 0x200001ff, 0xfffffffffffffffd}) 1.91049816s ago: executing program 0 (id=87): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x11, 0x3, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) mprotect(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x100000a) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) openat(0xffffffffffffff9c, 0x0, 0x42, 0x2) mount$9p_virtio(0x0, 0x0, 0x0, 0x8408, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xffefef7b, 0x0, 0x2, 0x10, "1b090000400000003e0000e678000000301000"}) syz_open_pts(r2, 0x20800) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 1.909860766s ago: executing program 3 (id=88): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000001c0)={r1, 0x0, 0xd}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x8000}}, 0x26) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.832913956s ago: executing program 0 (id=89): socket(0x1, 0x5, 0x0) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r3, 0x289e0cb5, 0x0) 1.295486382s ago: executing program 2 (id=90): syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @remote}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1610, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x4002014) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 1.277611133s ago: executing program 3 (id=91): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() io_uring_setup(0x4fa8, &(0x7f00000002c0)={0x0, 0xc02f, 0x8, 0x0, 0x93}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) fsetxattr$smack_xattr_label(r1, 0x0, 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x10b442, 0x79) openat(0xffffffffffffff9c, 0x0, 0x42, 0xe) io_uring_setup(0xc5e, 0x0) lsm_set_self_attr(0x64, &(0x7f0000000080)={0x6b, 0x7, 0x20}, 0x20, 0x0) 981.024813ms ago: executing program 4 (id=92): r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x10101, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) r1 = socket(0x26, 0xa, 0x43f5) openat(0xffffffffffffffff, 0x0, 0x10080, 0x11) pipe2$watch_queue(0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580), 0x18d880, 0x0) syz_emit_vhci(&(0x7f00000028c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x1c}, @l2cap_cid_signaling={{0x18}, [@l2cap_move_chan_rsp={{0xf, 0x5, 0x4}, {0x7f, 0x3}}, @l2cap_move_chan_cfm={{0x10, 0x8, 0x4}, {0xd, 0xa2b3}}, @l2cap_disconn_rsp={{0x7, 0x1, 0x4}, {0x4, 0xecb}}]}}, 0x21) syz_clone(0x1100, &(0x7f0000002900)="4c244272cdced9b267c75fa987ad7263f49bf14da683ba081b974272abeadf250b36cfab040f1444dabaa2b14890778d8663838eded40918efe1292fe44a", 0x3e, &(0x7f0000002980), &(0x7f00000029c0), 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000004100)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000040c0)={&(0x7f0000003ac0)={0x2c, r2, 0x800, 0x3, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xffffffff, 0x59}}}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x5c8c1) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x40404, 0x0) 271.690956ms ago: executing program 0 (id=93): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) getsockopt$packet_int(r3, 0x107, 0x15, 0x0, &(0x7f0000001600)) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) read(r4, &(0x7f0000000280)=""/193, 0xc1) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a010300000000"], 0x28}}, 0x0) 122.526798ms ago: executing program 1 (id=94): syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000001c0)=0x3d8f, 0x4) shutdown(0xffffffffffffffff, 0x1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r5 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000100)=@tipc=@id={0x1e, 0x3, 0x2}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x220}, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x7}, 0x1c) 117.037931ms ago: executing program 3 (id=95): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000200)={0x2, @vbi={0x113, 0x100, 0x1, 0x34565559, [0x800], [0x6, 0x5], 0x2}}) write(0xffffffffffffffff, &(0x7f0000000100), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200080c1, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x5}, 0x1c) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=96): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fsetxattr$smack_xattr_label(r2, &(0x7f0000000080)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000300)={0x2, 0x4e20, @loopback}, 0x10) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 28.374459][ T4697] cgroup: Unknown subsys name 'net' [ 28.554598][ T4697] cgroup: Unknown subsys name 'cpuset' [ 28.556016][ T4697] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.737374][ T4697] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.041944][ T4722] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.042059][ T4722] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.042349][ T4722] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.042438][ T4722] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.042542][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.043317][ T4722] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.043445][ T4722] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.043571][ T4722] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.043767][ T4722] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.044640][ T4722] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.044819][ T4722] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.044866][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.045025][ T4722] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.045380][ T4722] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.046004][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.047301][ T4722] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.047466][ T4722] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.047632][ T4722] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.048656][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.049135][ T4722] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.049293][ T4722] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.049454][ T4722] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.049605][ T4722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.050686][ T4723] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.050862][ T4723] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.461390][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.461673][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.461733][ T4708] bridge_slave_0: entered allmulticast mode [ 30.462186][ T4708] bridge_slave_0: entered promiscuous mode [ 30.477184][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.477212][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.477269][ T4708] bridge_slave_1: entered allmulticast mode [ 30.477704][ T4708] bridge_slave_1: entered promiscuous mode [ 30.480978][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.481002][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.481047][ T4711] bridge_slave_0: entered allmulticast mode [ 30.481430][ T4711] bridge_slave_0: entered promiscuous mode [ 30.482128][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.482149][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.482242][ T4711] bridge_slave_1: entered allmulticast mode [ 30.482635][ T4711] bridge_slave_1: entered promiscuous mode [ 30.492808][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.494169][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.510046][ T4711] team0: Port device team_slave_0 added [ 30.513993][ T4711] team0: Port device team_slave_1 added [ 30.519867][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.524007][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.558389][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.558400][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.558412][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.559319][ T4708] team0: Port device team_slave_0 added [ 30.559502][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.559510][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.559525][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.560158][ T4708] team0: Port device team_slave_1 added [ 30.575418][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.575454][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.575513][ T4709] bridge_slave_0: entered allmulticast mode [ 30.575932][ T4709] bridge_slave_0: entered promiscuous mode [ 30.576671][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.576690][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.576778][ T4709] bridge_slave_1: entered allmulticast mode [ 30.577155][ T4709] bridge_slave_1: entered promiscuous mode [ 30.589446][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.589454][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.589469][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.590215][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.590223][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.590247][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.616880][ T4709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.617914][ T4709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.627937][ T4717] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.627984][ T4717] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.628035][ T4717] bridge_slave_0: entered allmulticast mode [ 30.628439][ T4717] bridge_slave_0: entered promiscuous mode [ 30.629540][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.629569][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.629619][ T4710] bridge_slave_0: entered allmulticast mode [ 30.630034][ T4710] bridge_slave_0: entered promiscuous mode [ 30.639386][ T4708] hsr_slave_0: entered promiscuous mode [ 30.639721][ T4708] hsr_slave_1: entered promiscuous mode [ 30.643568][ T4717] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.643629][ T4717] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.643734][ T4717] bridge_slave_1: entered allmulticast mode [ 30.644141][ T4717] bridge_slave_1: entered promiscuous mode [ 30.644977][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.644998][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.645082][ T4710] bridge_slave_1: entered allmulticast mode [ 30.646112][ T4710] bridge_slave_1: entered promiscuous mode [ 30.650391][ T4709] team0: Port device team_slave_0 added [ 30.651223][ T4709] team0: Port device team_slave_1 added [ 30.670911][ T4711] hsr_slave_0: entered promiscuous mode [ 30.671183][ T4711] hsr_slave_1: entered promiscuous mode [ 30.671375][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.671410][ T4711] Cannot create hsr debugfs directory [ 30.681242][ T4717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.682732][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.683000][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.683010][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.683024][ T4709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.684534][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.684542][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.684555][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.696102][ T4717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.702009][ T4717] team0: Port device team_slave_0 added [ 30.702719][ T4717] team0: Port device team_slave_1 added [ 30.707408][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.713891][ T4710] team0: Port device team_slave_0 added [ 30.719262][ T4710] team0: Port device team_slave_1 added [ 30.729050][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.729059][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.729075][ T4717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.730093][ T4717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.730100][ T4717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.730114][ T4717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.756459][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.756469][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.756483][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.758791][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.758798][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.758810][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.770983][ T4709] hsr_slave_0: entered promiscuous mode [ 30.771270][ T4709] hsr_slave_1: entered promiscuous mode [ 30.771449][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 30.771458][ T4709] Cannot create hsr debugfs directory [ 30.794595][ T4717] hsr_slave_0: entered promiscuous mode [ 30.794885][ T4717] hsr_slave_1: entered promiscuous mode [ 30.795081][ T4717] debugfs: 'hsr0' already exists in 'hsr' [ 30.795090][ T4717] Cannot create hsr debugfs directory [ 30.807760][ T4710] hsr_slave_0: entered promiscuous mode [ 30.808081][ T4710] hsr_slave_1: entered promiscuous mode [ 30.808279][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.808289][ T4710] Cannot create hsr debugfs directory [ 30.891857][ T4708] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.896296][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.897981][ T4708] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.899012][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.899543][ T4708] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.900466][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.900731][ T4708] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.901560][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.926511][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.928565][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.928865][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.930046][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.931376][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.931407][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.931541][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.931570][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.932438][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.936318][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.936813][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.938041][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.946129][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.946157][ T4711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.946222][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.946260][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.972840][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.980849][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.981269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.981671][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.982325][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.996180][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.996507][ T4709] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.997464][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.998277][ T4709] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.999840][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.001980][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.002009][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.013801][ T4709] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.014943][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.015226][ T4709] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.016317][ T4709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.027836][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.030863][ T4717] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.032086][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.032655][ T4717] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.038131][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.039450][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.039474][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.048174][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.061768][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.064928][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.065095][ T4717] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.066360][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.066740][ T4717] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.067671][ T4717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.070034][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.070058][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.072108][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.072968][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.087184][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.087200][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.088877][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.090494][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.091776][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.091799][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.106908][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.108103][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.129644][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.133709][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.141420][ T4708] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.141435][ T4708] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.149563][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.149587][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.149976][ T3356] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.149996][ T3356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.211697][ T4717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.249730][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.254967][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.256163][ T4717] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.266442][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.266466][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.272308][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.272335][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.283502][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.292426][ T4711] veth0_vlan: entered promiscuous mode [ 31.300453][ T4711] veth1_vlan: entered promiscuous mode [ 31.309178][ T4711] veth0_macvtap: entered promiscuous mode [ 31.310641][ T4711] veth1_macvtap: entered promiscuous mode [ 31.324355][ T4717] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.324372][ T4717] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.327820][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.327844][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.328215][ T95] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.328235][ T95] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.362636][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.365935][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.390065][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.395722][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.408349][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.408365][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.426758][ T4709] veth0_vlan: entered promiscuous mode [ 31.427411][ T4708] veth0_vlan: entered promiscuous mode [ 31.429423][ T4709] veth1_vlan: entered promiscuous mode [ 31.430083][ T4708] veth1_vlan: entered promiscuous mode [ 31.441246][ T4709] veth0_macvtap: entered promiscuous mode [ 31.442286][ T4709] veth1_macvtap: entered promiscuous mode [ 31.490310][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.492898][ T1186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.492910][ T1186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.493371][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.493870][ T1186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.501226][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.514348][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.514361][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.520515][ T4708] veth0_macvtap: entered promiscuous mode [ 31.542633][ T4708] veth1_macvtap: entered promiscuous mode [ 31.547600][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.548325][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.548856][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.550863][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.552928][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.569604][ T3356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.569616][ T3356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.587649][ T4717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.589461][ T4711] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.596226][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.596261][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.619515][ T4717] veth0_vlan: entered promiscuous mode [ 31.622968][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.622980][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.623207][ T95] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623655][ T95] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623680][ T95] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623698][ T95] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.623715][ T95] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.660135][ T4717] veth1_vlan: entered promiscuous mode [ 31.672208][ T911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.672221][ T911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.677780][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.688180][ T4880] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 31.700290][ T4717] veth0_macvtap: entered promiscuous mode [ 31.701417][ T4717] veth1_macvtap: entered promiscuous mode [ 31.702197][ T1186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.702207][ T1186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.730560][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.736324][ T4717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.739336][ T40] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.739565][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.768417][ T1186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.797010][ T911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.797023][ T911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.802581][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.802594][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.805023][ T95] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.856999][ T4898] loop5: detected capacity change from 0 to 7 [ 31.874859][ T4898] loop5: [ 31.874881][ T4898] loop5: partition table partially beyond EOD, truncated [ 31.921650][ T4710] veth0_vlan: entered promiscuous mode [ 31.955116][ T4710] veth1_vlan: entered promiscuous mode [ 31.970036][ T4710] veth0_macvtap: entered promiscuous mode [ 31.971363][ T4710] veth1_macvtap: entered promiscuous mode [ 31.977095][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.979719][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.017394][ T40] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283598][ T4719] Bluetooth: hci0: command tx timeout [ 32.283828][ T4719] Bluetooth: hci4: command tx timeout [ 32.284024][ T4719] Bluetooth: hci2: command tx timeout [ 32.284214][ T4719] Bluetooth: hci3: command tx timeout [ 32.284726][ T4719] Bluetooth: hci1: command tx timeout [ 32.306986][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.307151][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.310978][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.310990][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.396551][ T40] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.646079][ T911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.646095][ T911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.345593][ T4919] capability: warning: `syz.2.13' uses deprecated v2 capabilities in a way that may be insecure [ 33.358447][ T13] IPVS: starting estimator thread 0... [ 33.358746][ T4919] FAULT_INJECTION: forcing a failure. [ 33.358746][ T4919] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 33.358770][ T4919] CPU: 0 UID: 0 PID: 4919 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT [ 33.358781][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 33.358786][ T4919] Call trace: [ 33.358789][ T4919] show_stack+0x2c/0x3c (C) [ 33.358810][ T4919] __dump_stack+0x30/0x40 [ 33.358822][ T4919] dump_stack_lvl+0xd8/0x12c [ 33.358833][ T4919] dump_stack+0x1c/0x28 [ 33.358844][ T4919] should_fail_ex+0x418/0x58c [ 33.358857][ T4919] should_fail+0x14/0x24 [ 33.358868][ T4919] should_fail_usercopy+0x20/0x30 [ 33.358884][ T4919] _inline_copy_from_user+0x3c/0x174 [ 33.358898][ T4919] do_ip_vs_set_ctl+0x26c/0x93c [ 33.358910][ T4919] nf_setsockopt+0xa0/0xe4 [ 33.358922][ T4919] ip_setsockopt+0x118/0x128 [ 33.358933][ T4919] tcp_setsockopt+0xcc/0xe8 [ 33.358941][ T4919] sock_common_setsockopt+0xb0/0xcc [ 33.358951][ T4919] do_sock_setsockopt+0x1f0/0x330 [ 33.358962][ T4919] __sys_setsockopt+0x104/0x170 [ 33.358971][ T4919] __arm64_sys_setsockopt+0xc8/0xe4 [ 33.358981][ T4919] invoke_syscall+0x98/0x244 [ 33.358993][ T4919] el0_svc_common+0xec/0x23c [ 33.359005][ T4919] do_el0_svc+0x4c/0x5c [ 33.359016][ T4919] el0_svc+0x60/0x1d8 [ 33.359027][ T4919] el0t_64_sync_handler+0x44/0x104 [ 33.359037][ T4919] el0t_64_sync+0x198/0x19c [ 33.463127][ T4923] IPVS: using max 60 ests per chain, 144000 per kthread [ 34.012683][ T4942] syzkaller0: entered promiscuous mode [ 34.012703][ T4942] syzkaller0: entered allmulticast mode [ 34.023637][ T4944] loop2: detected capacity change from 0 to 128 [ 34.037102][ T4944] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.144929][ T4708] FAT-fs (loop2): error, invalid access to FAT (entry 0xffff0000) [ 34.144945][ T4708] FAT-fs (loop2): Filesystem has been set read-only [ 34.148338][ T4708] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.282518][ T4952] Bluetooth: MGMT ver 1.23 [ 34.323236][ T4719] Bluetooth: hci3: command tx timeout [ 34.323271][ T4719] Bluetooth: hci2: command tx timeout [ 34.323289][ T4719] Bluetooth: hci4: command tx timeout [ 34.323304][ T4719] Bluetooth: hci0: command tx timeout [ 34.323393][ T51] Bluetooth: hci1: command tx timeout [ 34.851201][ T4967] loop1: detected capacity change from 0 to 512 [ 34.857603][ T4965] syzkaller0: entered promiscuous mode [ 34.857619][ T4965] syzkaller0: entered allmulticast mode [ 34.877396][ T4967] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.902255][ T4717] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.326026][ T4978] binder: 4977:4978 tried to acquire reference to desc 0, got 1 instead [ 35.327046][ T4978] binder: 4977:4978 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 35.327059][ T4978] binder: 4978 RLIMIT_NICE not set [ 35.327095][ T4978] binder: 4978 RLIMIT_NICE not set [ 35.333132][ T4802] binder: release 4977:4978 transaction 12 out, still active [ 35.333149][ T4802] binder: release 4977:4978 transaction 5 in, still active [ 35.335300][ T4802] binder: undelivered TRANSACTION_COMPLETE [ 35.335386][ T4802] binder: release 4977:4978 transaction 5 out, still active [ 35.335399][ T4802] binder: undelivered TRANSACTION_COMPLETE [ 35.335410][ T4802] binder: send failed reply for transaction 12, target dead [ 35.335423][ T4802] binder: send failed reply for transaction 5, target dead [ 35.362713][ T4980] loop0: detected capacity change from 0 to 256 [ 35.371656][ T4980] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 35.372952][ T4982] FAULT_INJECTION: forcing a failure. [ 35.372952][ T4982] name failslab, interval 1, probability 0, space 0, times 1 [ 35.372970][ T4982] CPU: 0 UID: 0 PID: 4982 Comm: syz.2.30 Not tainted syzkaller #0 PREEMPT [ 35.372982][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.372988][ T4982] Call trace: [ 35.372991][ T4982] show_stack+0x2c/0x3c (C) [ 35.373011][ T4982] __dump_stack+0x30/0x40 [ 35.373024][ T4982] dump_stack_lvl+0xd8/0x12c [ 35.373035][ T4982] dump_stack+0x1c/0x28 [ 35.373046][ T4982] should_fail_ex+0x418/0x58c [ 35.373062][ T4982] should_failslab+0xc4/0x120 [ 35.373075][ T4982] __kmalloc_cache_noprof+0x94/0x5fc [ 35.373084][ T4982] sctp_transport_new+0x90/0x5b0 [ 35.373093][ T4982] sctp_assoc_add_peer+0x164/0xf74 [ 35.373106][ T4982] sctp_connect_new_asoc+0x2b4/0x5ec [ 35.373118][ T4982] sctp_sendmsg+0xdd8/0x17bc [ 35.373130][ T4982] inet_sendmsg+0xb4/0xd8 [ 35.373139][ T4982] __sock_sendmsg+0xc8/0x17c [ 35.373149][ T4982] ____sys_sendmsg+0x3f8/0x6c8 [ 35.373158][ T4982] ___sys_sendmsg+0x198/0x224 [ 35.373168][ T4982] __sys_sendmmsg+0x204/0x580 [ 35.373178][ T4982] __arm64_sys_sendmmsg+0xac/0xc8 [ 35.373188][ T4982] invoke_syscall+0x98/0x244 [ 35.373200][ T4982] el0_svc_common+0xec/0x23c [ 35.373211][ T4982] do_el0_svc+0x4c/0x5c [ 35.373222][ T4982] el0_svc+0x60/0x1d8 [ 35.373238][ T4982] el0t_64_sync_handler+0x44/0x104 [ 35.373249][ T4982] el0t_64_sync+0x198/0x19c [ 35.437700][ T4980] FAT-fs (loop0): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 35.437717][ T4980] FAT-fs (loop0): Filesystem has been set read-only [ 35.475558][ T4987] Zero length message leads to an empty skb [ 36.404495][ T4719] Bluetooth: hci4: command tx timeout [ 36.416055][ T4719] Bluetooth: hci2: command tx timeout [ 36.416076][ T4719] Bluetooth: hci3: command tx timeout [ 36.418417][ T51] Bluetooth: hci0: command tx timeout [ 36.422346][ T4721] Bluetooth: hci1: command tx timeout [ 37.417872][ T5025] FAULT_INJECTION: forcing a failure. [ 37.417872][ T5025] name failslab, interval 1, probability 0, space 0, times 0 [ 37.417893][ T5025] CPU: 1 UID: 0 PID: 5025 Comm: syz.3.43 Not tainted syzkaller #0 PREEMPT [ 37.417904][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 37.417909][ T5025] Call trace: [ 37.417912][ T5025] show_stack+0x2c/0x3c (C) [ 37.417933][ T5025] __dump_stack+0x30/0x40 [ 37.417948][ T5025] dump_stack_lvl+0xd8/0x12c [ 37.417960][ T5025] dump_stack+0x1c/0x28 [ 37.417971][ T5025] should_fail_ex+0x418/0x58c [ 37.417986][ T5025] should_failslab+0xc4/0x120 [ 37.418001][ T5025] __kmalloc_cache_noprof+0x94/0x5fc [ 37.418010][ T5025] sctp_add_bind_addr+0x9c/0x2e8 [ 37.418023][ T5025] sctp_copy_local_addr_list+0x2f8/0x4a4 [ 37.418035][ T5025] sctp_copy_one_addr+0xb0/0x1e0 [ 37.418046][ T5025] sctp_bind_addr_copy+0x178/0x284 [ 37.418058][ T5025] sctp_assoc_set_bind_addr_from_ep+0x128/0x184 [ 37.418067][ T5025] sctp_connect_new_asoc+0x28c/0x5ec [ 37.418080][ T5025] sctp_sendmsg+0xdd8/0x17bc [ 37.418092][ T5025] inet_sendmsg+0xb4/0xd8 [ 37.418101][ T5025] __sock_sendmsg+0xc8/0x17c [ 37.418111][ T5025] ____sys_sendmsg+0x3f8/0x6c8 [ 37.418121][ T5025] ___sys_sendmsg+0x198/0x224 [ 37.418131][ T5025] __sys_sendmmsg+0x204/0x580 [ 37.418141][ T5025] __arm64_sys_sendmmsg+0xac/0xc8 [ 37.418152][ T5025] invoke_syscall+0x98/0x244 [ 37.418164][ T5025] el0_svc_common+0xec/0x23c [ 37.418176][ T5025] do_el0_svc+0x4c/0x5c [ 37.418187][ T5025] el0_svc+0x60/0x1d8 [ 37.418198][ T5025] el0t_64_sync_handler+0x44/0x104 [ 37.418208][ T5025] el0t_64_sync+0x198/0x19c [ 37.608726][ T5023] pimreg: entered allmulticast mode [ 37.610214][ T5023] pimreg: left allmulticast mode [ 37.795018][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 37.795322][ T5032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.44'. [ 37.795354][ T5032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 38.218751][ T5039] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 38.221253][ T5039] loop2: detected capacity change from 0 to 512 [ 38.265985][ T5039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 38.270668][ T5039] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.46: Unimplemented hash flags: 0x0001 [ 38.270686][ T5039] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.46: Corrupt directory, running e2fsck is recommended [ 38.295856][ T5039] bridge0: port 3(syz_tun) entered blocking state [ 38.295927][ T5039] bridge0: port 3(syz_tun) entered disabled state [ 38.296000][ T5039] syz_tun: entered allmulticast mode [ 38.296814][ T5039] syz_tun: entered promiscuous mode [ 38.297044][ T5039] bridge0: port 3(syz_tun) entered blocking state [ 38.297074][ T5039] bridge0: port 3(syz_tun) entered forwarding state [ 38.493147][ T4720] Bluetooth: hci1: command tx timeout [ 38.493173][ T4720] Bluetooth: hci0: command tx timeout [ 38.493188][ T4720] Bluetooth: hci3: command tx timeout [ 38.493204][ T4720] Bluetooth: hci2: command tx timeout [ 38.493279][ T4720] Bluetooth: hci4: command tx timeout [ 38.516450][ T5045] loop3: detected capacity change from 0 to 512 [ 38.517527][ T5045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 38.517538][ T5045] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 38.525889][ T5045] EXT4-fs (loop3): 1 truncate cleaned up [ 38.526797][ T5045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.675945][ T5050] FAULT_INJECTION: forcing a failure. [ 38.675945][ T5050] name failslab, interval 1, probability 0, space 0, times 0 [ 38.676052][ T5050] CPU: 0 UID: 0 PID: 5050 Comm: syz.4.49 Not tainted syzkaller #0 PREEMPT [ 38.676063][ T5050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 38.676069][ T5050] Call trace: [ 38.676072][ T5050] show_stack+0x2c/0x3c (C) [ 38.676094][ T5050] __dump_stack+0x30/0x40 [ 38.676108][ T5050] dump_stack_lvl+0xd8/0x12c [ 38.676119][ T5050] dump_stack+0x1c/0x28 [ 38.676130][ T5050] should_fail_ex+0x418/0x58c [ 38.676145][ T5050] should_failslab+0xc4/0x120 [ 38.676160][ T5050] __kmalloc_noprof+0x108/0x6c8 [ 38.676180][ T5050] sock_kmalloc+0xec/0x1a0 [ 38.676190][ T5050] ip6_mc_msfilter+0x5f0/0xcb0 [ 38.676203][ T5050] ipv6_set_mcast_msfilter+0x204/0x274 [ 38.676212][ T5050] do_ipv6_setsockopt+0xcd8/0x2ba8 [ 38.676221][ T5050] ipv6_setsockopt+0x68/0x16c [ 38.676228][ T5050] tcp_setsockopt+0xcc/0xe8 [ 38.676244][ T5050] sock_common_setsockopt+0xb0/0xcc [ 38.676254][ T5050] do_sock_setsockopt+0x1f0/0x330 [ 38.676264][ T5050] __sys_setsockopt+0x104/0x170 [ 38.676274][ T5050] __arm64_sys_setsockopt+0xc8/0xe4 [ 38.676284][ T5050] invoke_syscall+0x98/0x244 [ 38.676297][ T5050] el0_svc_common+0xec/0x23c [ 38.676308][ T5050] do_el0_svc+0x4c/0x5c [ 38.676320][ T5050] el0_svc+0x60/0x1d8 [ 38.676331][ T5050] el0t_64_sync_handler+0x44/0x104 [ 38.676342][ T5050] el0t_64_sync+0x198/0x19c [ 39.015104][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.454087][ T4709] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.860519][ T5074] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 41.230094][ T5097] loop2: detected capacity change from 0 to 512 [ 41.239958][ T5098] FAULT_INJECTION: forcing a failure. [ 41.239958][ T5098] name failslab, interval 1, probability 0, space 0, times 0 [ 41.239976][ T5098] CPU: 0 UID: 0 PID: 5098 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT [ 41.239987][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 41.239993][ T5098] Call trace: [ 41.239995][ T5098] show_stack+0x2c/0x3c (C) [ 41.240016][ T5098] __dump_stack+0x30/0x40 [ 41.240028][ T5098] dump_stack_lvl+0xd8/0x12c [ 41.240040][ T5098] dump_stack+0x1c/0x28 [ 41.240051][ T5098] should_fail_ex+0x418/0x58c [ 41.240064][ T5098] should_failslab+0xc4/0x120 [ 41.240077][ T5098] __kmalloc_noprof+0x108/0x6c8 [ 41.240090][ T5098] tomoyo_realpath_from_path+0xbc/0x4dc [ 41.240101][ T5098] tomoyo_path_number_perm+0x1f0/0x500 [ 41.240111][ T5098] tomoyo_file_ioctl+0x2c/0x3c [ 41.240122][ T5098] security_file_ioctl+0xdc/0x2b0 [ 41.240131][ T5098] __arm64_sys_ioctl+0xb0/0x1cc [ 41.240144][ T5098] invoke_syscall+0x98/0x244 [ 41.240156][ T5098] el0_svc_common+0xec/0x23c [ 41.240167][ T5098] do_el0_svc+0x4c/0x5c [ 41.240178][ T5098] el0_svc+0x60/0x1d8 [ 41.240190][ T5098] el0t_64_sync_handler+0x44/0x104 [ 41.240200][ T5098] el0t_64_sync+0x198/0x19c [ 41.240210][ T5098] ERROR: Out of memory at tomoyo_realpath_from_path. [ 41.484386][ T5097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.556115][ T5097] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.62: corrupted xattr block 33: invalid header [ 41.557042][ T5097] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.62: corrupted xattr block 33: invalid header [ 41.557225][ T5097] EXT4-fs error (device loop2): ext4_xattr_block_get:608: inode #15: comm syz.2.62: corrupted xattr block 33: invalid header [ 41.757289][ T5107] loop3: detected capacity change from 0 to 8 [ 41.766036][ T5107] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 41.766068][ T5107] unable to read xattr id index table [ 41.768588][ T5107] SQUASHFS error: zlib decompression failed, data probably corrupt [ 41.768670][ T5107] SQUASHFS error: Failed to read block 0x9b: -5 [ 41.768688][ T5107] SQUASHFS error: Unable to read metadata cache entry [99] [ 41.768717][ T5107] SQUASHFS error: Unable to read inode 0x127 [ 42.495065][ T5127] loop3: detected capacity change from 0 to 128 [ 42.504644][ T5127] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.615448][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.681731][ T5135] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 42.686154][ T5135] bridge0: port 3(syz_tun) entered disabled state [ 42.686540][ T5135] syz_tun: left allmulticast mode [ 42.686642][ T5135] bridge0: port 3(syz_tun) entered disabled state [ 42.689316][ T5135] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 42.690830][ T5133] syzkaller0: entered promiscuous mode [ 42.690846][ T5133] syzkaller0: entered allmulticast mode [ 42.699630][ T49] bond0: (slave bond_slave_0): interface is now down [ 42.699644][ T49] bond0: (slave bond_slave_1): interface is now down [ 42.703906][ T5133] tipc: Started in network mode [ 42.703921][ T5133] tipc: Node identity a2dfe3c1bb78, cluster identity 4711 [ 42.704284][ T5133] tipc: Enabled bearer , priority 0 [ 42.707004][ T5133] tipc: Resetting bearer [ 42.711044][ T5132] tipc: Resetting bearer [ 42.715206][ T5132] tipc: Disabling bearer [ 42.716052][ T49] bond0: (slave bond_slave_0): interface is now down [ 42.716064][ T49] bond0: (slave bond_slave_1): interface is now down [ 42.716073][ T49] bond0: (slave syz_tun): interface is now down [ 42.733671][ T5124] bond0: (slave bond_slave_0): interface is now down [ 42.733686][ T5124] bond0: (slave bond_slave_1): interface is now down [ 42.733695][ T5124] bond0: (slave syz_tun): interface is now down [ 42.734821][ T5124] bond0: now running without any active interface! [ 42.769897][ T5137] loop2: detected capacity change from 0 to 512 [ 42.771413][ T5137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.778861][ T5137] EXT4-fs (loop2): 1 truncate cleaned up [ 42.787839][ T5137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.818390][ T5142] loop4: detected capacity change from 0 to 2048 [ 42.875966][ T5142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.630305][ T4708] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.717320][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.965957][ T5162] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 44.090717][ T5162] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 44.195928][ T4709] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.814319][ T5175] hub 9-0:1.0: USB hub found [ 44.814761][ T5175] hub 9-0:1.0: 8 ports detected [ 45.351929][ T5184] sctp: [Deprecated]: syz.4.82 (pid 5184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.351929][ T5184] Use struct sctp_sack_info instead [ 46.016857][ T5195] loop4: detected capacity change from 0 to 128 [ 46.022366][ T5195] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.757378][ T4721] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 47.757397][ T4721] Bluetooth: Wrong link type (-22) [ 47.757635][ T4721] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 47.757642][ T4721] Bluetooth: Wrong link type (-22) [ 48.410264][ T5228] loop2: detected capacity change from 0 to 256 [ 48.413823][ T5228] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.418654][ T5228] FAT-fs (loop2): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 48.418734][ T5228] FAT-fs (loop2): Filesystem has been set read-only [ 48.429840][ T5228] [ 48.431431][ T5228] ====================================================== [ 48.432766][ T5228] WARNING: possible circular locking dependency detected [ 48.434048][ T5228] syzkaller #0 Not tainted [ 48.434893][ T5228] ------------------------------------------------------ [ 48.436228][ T5228] syz.2.96/5228 is trying to acquire lock: [ 48.437267][ T5228] ffff0000f7240a68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x58c/0xa24 [ 48.439447][ T5228] [ 48.439447][ T5228] but task is already holding lock: [ 48.440780][ T5228] ffff0000f7240ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1d8/0x51c [ 48.442498][ T5228] [ 48.442498][ T5228] which lock already depends on the new lock. [ 48.442498][ T5228] [ 48.444350][ T5228] [ 48.444350][ T5228] the existing dependency chain (in reverse order) is: [ 48.446007][ T5228] [ 48.446007][ T5228] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 48.447392][ T5228] lock_sock_nested+0x58/0x110 [ 48.448350][ T5228] smc_listen_out+0xe0/0x3b4 [ 48.449295][ T5228] smc_listen_work+0x410/0xc58 [ 48.450269][ T5228] process_scheduled_works+0x91c/0x1250 [ 48.451402][ T5228] worker_thread+0x798/0xbd0 [ 48.452335][ T5228] kthread+0x304/0x3d4 [ 48.453181][ T5228] ret_from_fork+0x10/0x20 [ 48.454135][ T5228] [ 48.454135][ T5228] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 48.455973][ T5228] __lock_acquire+0x1660/0x2b08 [ 48.456978][ T5228] lock_acquire+0x13c/0x320 [ 48.457875][ T5228] __flush_work+0x594/0xa24 [ 48.458836][ T5228] __cancel_work_sync+0xc8/0x144 [ 48.459824][ T5228] cancel_work_sync+0x24/0x38 [ 48.460773][ T5228] smc_clcsock_release+0x64/0xe8 [ 48.461758][ T5228] __smc_release+0x514/0x698 [ 48.462666][ T5228] smc_close_non_accepted+0xd8/0x254 [ 48.463709][ T5228] smc_close_active+0x7e4/0x9d0 [ 48.464610][ T5228] __smc_release+0x90/0x698 [ 48.465488][ T5228] smc_release+0x248/0x51c [ 48.466353][ T5228] __sock_release+0xa0/0x1d4 [ 48.467267][ T5228] sock_close+0x24/0x38 [ 48.468136][ T5228] __fput+0x338/0x74c [ 48.468984][ T5228] fput_close_sync+0x10c/0x278 [ 48.469979][ T5228] __arm64_sys_close+0x80/0x110 [ 48.470946][ T5228] invoke_syscall+0x98/0x244 [ 48.471859][ T5228] el0_svc_common+0xec/0x23c [ 48.472777][ T5228] do_el0_svc+0x4c/0x5c [ 48.473635][ T5228] el0_svc+0x60/0x1d8 [ 48.474436][ T5228] el0t_64_sync_handler+0x44/0x104 [ 48.475449][ T5228] el0t_64_sync+0x198/0x19c [ 48.476370][ T5228] [ 48.476370][ T5228] other info that might help us debug this: [ 48.476370][ T5228] [ 48.478227][ T5228] Possible unsafe locking scenario: [ 48.478227][ T5228] [ 48.479579][ T5228] CPU0 CPU1 [ 48.480573][ T5228] ---- ---- [ 48.481564][ T5228] lock(sk_lock-AF_SMC/1); [ 48.482407][ T5228] lock((work_completion)(&new_smc->smc_listen_work)); [ 48.484146][ T5228] lock(sk_lock-AF_SMC/1); [ 48.485469][ T5228] lock((work_completion)(&new_smc->smc_listen_work)); [ 48.486780][ T5228] [ 48.486780][ T5228] *** DEADLOCK *** [ 48.486780][ T5228] [ 48.488253][ T5228] locks held by syz.2.96/5228: 3, last CPU#0: [ 48.489402][ T5228] #0: ffff0000f0b6cd00 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: __sock_release+0x7c/0x1d4 [ 48.491351][ T5228] #1: ffff0000f7240ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x1d8/0x51c [ 48.493119][ T5228] #2: ffff800088c41960 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x108/0xa24 [ 48.494829][ T5228] [ 48.494829][ T5228] stack backtrace: [ 48.495912][ T5228] CPU: 0 UID: 0 PID: 5228 Comm: syz.2.96 Not tainted syzkaller #0 PREEMPT [ 48.497516][ T5228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 48.499322][ T5228] Call trace: [ 48.499927][ T5228] show_stack+0x2c/0x3c (C) [ 48.500762][ T5228] __dump_stack+0x30/0x40 [ 48.501539][ T5228] dump_stack_lvl+0xd8/0x12c [ 48.502386][ T5228] dump_stack+0x1c/0x28 [ 48.503127][ T5228] print_circular_bug+0x328/0x330 [ 48.504063][ T5228] check_noncircular+0x158/0x174 [ 48.504975][ T5228] __lock_acquire+0x1660/0x2b08 [ 48.505874][ T5228] lock_acquire+0x13c/0x320 [ 48.506705][ T5228] __flush_work+0x594/0xa24 [ 48.507518][ T5228] __cancel_work_sync+0xc8/0x144 [ 48.508428][ T5228] cancel_work_sync+0x24/0x38 [ 48.509334][ T5228] smc_clcsock_release+0x64/0xe8 [ 48.510245][ T5228] __smc_release+0x514/0x698 [ 48.511075][ T5228] smc_close_non_accepted+0xd8/0x254 [ 48.512062][ T5228] smc_close_active+0x7e4/0x9d0 [ 48.512953][ T5228] __smc_release+0x90/0x698 [ 48.513798][ T5228] smc_release+0x248/0x51c [ 48.514612][ T5228] __sock_release+0xa0/0x1d4 [ 48.515430][ T5228] sock_close+0x24/0x38 [ 48.516172][ T5228] __fput+0x338/0x74c [ 48.516895][ T5228] fput_close_sync+0x10c/0x278 [ 48.517764][ T5228] __arm64_sys_close+0x80/0x110 [ 48.518669][ T5228] invoke_syscall+0x98/0x244 [ 48.519530][ T5228] el0_svc_common+0xec/0x23c [ 48.520407][ T5228] do_el0_svc+0x4c/0x5c [ 48.521197][ T5228] el0_svc+0x60/0x1d8 [ 48.521948][ T5228] el0t_64_sync_handler+0x44/0x104 [ 48.522901][ T5228] el0t_64_sync+0x198/0x19c