last executing test programs: 32.931811159s ago: executing program 3 (id=7): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000100)='^', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$cgroup_subtree(r1, &(0x7f00000001c0)=ANY=[], 0x32600) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0xffcc) 32.618236161s ago: executing program 3 (id=8): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000007c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000007fc0)={0x2020}, 0x2020) 32.572085392s ago: executing program 3 (id=9): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000010008188e6b62aa737", 0xd}], 0x1}, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 31.679095681s ago: executing program 3 (id=14): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x80800c, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESHEX], 0x0, 0x254, &(0x7f00000005c0)="$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") openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$9p_unix(&(0x7f0000000240)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000b40)='./file0\x00', 0x0, 0x12c9498, 0x0) mount$cgroup(0x0, &(0x7f0000002800)='./file0\x00', 0x0, 0x20040ac, &(0x7f0000000040)={[{@name={'name', 0x3d, 'none'}}]}) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000000840)={0x2020}, 0x2020) 31.640036715s ago: executing program 3 (id=15): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0xb, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r0, 0x2fef9dd7, 0x1) 29.508291581s ago: executing program 3 (id=22): socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 29.503066171s ago: executing program 32 (id=22): socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 7.543931687s ago: executing program 4 (id=219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2}, './bus\x00'}) setns(0xc9, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6.105848904s ago: executing program 1 (id=223): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x8001, 0xfffffbff}, 0x80}}]}, {0x4}, {0x0, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) 6.06527925s ago: executing program 5 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000000c0)={[{}]}, 0x1, 0x1cf, &(0x7f00000002c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="0c0000000100000002"], 0x3414c0) 5.976061304s ago: executing program 1 (id=226): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 5.511535864s ago: executing program 4 (id=228): socket$inet6_tcp(0xa, 0x1, 0x0) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$netlink(0x10, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0x11, 0x5, r3, 0x1, 0x4, 0x6, @random="97b0e521f37a"}, 0x14) 4.838697272s ago: executing program 0 (id=229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000700)={0x54, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}, @release={0x40046306, 0x2}], 0xa4, 0x0, &(0x7f0000000600)="d483fbb8f98b47b37af6aa94981c7bbd31a022a229fe0106a6d880160d75aaaffc0176736698e19edebe4f1fa87d061d6a900fd356a56eb2c0619cd2aef8834df4b849a21b3bce71e67402a896694b5bbb6e3561476a6155e00a92d086fdc503c1a40785828cd0fe50e47640aceb1b1572d91bc0caa15d1e8c198e8e92d91f77a2df574d3e85d41de27e4400c6fbe93cf2d602aaad7e44c38c32bdacccaae19f5d432234"}) 4.838256721s ago: executing program 4 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459"], 0x10}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000080)=[{&(0x7f0000000000)="91", 0x1}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000002800)=@file={0x0, './file0\x00'}, 0x6e) 4.835976638s ago: executing program 1 (id=231): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0xa, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r4, &(0x7f0000000500)="01", 0x1) read(r3, &(0x7f0000000000), 0x4) write(r4, &(0x7f0000000600)="000010000033000040", 0x9) read(r3, &(0x7f0000000140), 0x10) ppoll(&(0x7f0000000800)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) 4.692293657s ago: executing program 0 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000007d123d57d108d222609e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.360178844s ago: executing program 5 (id=234): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x101c02) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xb7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x1) 3.949044932s ago: executing program 4 (id=235): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r5) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001640)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f6d616363656e746575726f2c73686f7200000000500000006e6e742c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c696f63686172736a743d6d5063726f6d616e6961702c756ee95f786c6574653d312c73686f72746e616d653d6c6f7765722c636f6465706167653d3935302c73686f72746e616d653d6d697865df675d6407eedf7f642c726f6469722c696f636861727365743d63703835302c726f646972"], 0x81, 0x2a6, &(0x7f0000000180)="$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") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 3.923562125s ago: executing program 1 (id=236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_sock_diag(0x10, 0x3, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[]) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 3.784248126s ago: executing program 0 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r6, {0x0, 0xec2fa4b81eaeea5e}, {0xc, 0xb}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x54815}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.302077936s ago: executing program 2 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x4, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x4) 3.16653236s ago: executing program 0 (id=239): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='`\x00', @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00\x00\x00'], 0x60}, 0x1, 0x0, 0x0, 0x40c1}, 0x20054) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x2, 0x2, 0x0, "0ba7dfad1cfbb5a12e6a2bdee79988d940d2c1aebd746fc04a0026d174932d46"}) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)={[&(0x7f0000000340)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000500), 0x0) 3.165717627s ago: executing program 2 (id=240): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) 3.126344672s ago: executing program 5 (id=241): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0xd3b, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x1}}}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x6, 0x3, 0x6}, {0xeaae, 0xffff0001, 0x80, 0x6}}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000)={[{@noblock_validity}]}, 0x3, 0x50d, &(0x7f0000000100)="$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") close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r2, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f00000004c0)="70b7", 0x5dc}], 0x1}, 0x0) 3.068618956s ago: executing program 4 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0x0, 0xee01) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0x0, 0x0) 3.016424329s ago: executing program 2 (id=243): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000180)={0x0, 0x6c00}) socket$inet_tcp(0x2, 0x1, 0x0) 2.70947916s ago: executing program 1 (id=244): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x3, 0x28e, &(0x7f0000000640)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r4, 0x1000) 1.627128745s ago: executing program 2 (id=245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x9}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) fchdir(0xffffffffffffffff) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r6, &(0x7f00000001c0)=0x720, 0x12) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="10000000161459"], 0x10}}, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, &(0x7f0000000080)=[{&(0x7f0000000000)="91", 0x1}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r10 = socket$unix(0x1, 0x1, 0x0) connect$unix(r10, &(0x7f0000002800)=@file={0x0, './file0\x00'}, 0x6e) 1.584466726s ago: executing program 5 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prlimit64(0x0, 0xe, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={0x0}}, 0x20000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)={0x4c, r2, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd, 0x82}, {0x5, 0x87}}]}, 0x4c}}, 0x0) 1.584221084s ago: executing program 4 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x3, 0x0, 0x0) 1.474222749s ago: executing program 0 (id=248): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x22, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}}}}}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1.471436926s ago: executing program 5 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) setuid(0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23}, 0x18}}, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) 137.894918ms ago: executing program 2 (id=250): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0xa, 0x2, 0x0) ptrace$getregs(0xc, r0, 0x2000000000000eb, &(0x7f0000000300)=""/180) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x9}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000280)="c021", 0x2}], 0x1) 137.60941ms ago: executing program 0 (id=251): r0 = socket(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r4, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x28180ff, 0x0, 0xfc, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) 137.375807ms ago: executing program 1 (id=252): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x2, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) r1 = syz_open_dev$evdev(0x0, 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x88}}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x10000055}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 223.792µs ago: executing program 5 (id=253): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x376, 0x0, 0x0, 0x51, 0x0, 0x4, 0x0, 0x0, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x7ca53c09, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffffc, 0x4, 0x10000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x8000000000000000}) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r5, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000d40)={0x0, 0x7}, 0x8) close(r5) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000600)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x5, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x40000, 0x1000000000004, 0x2, 0xa78a}, 0xfffffffe, 0x0, 0x2, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x4, 0x2, 0x2}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@grpjquota}]}, 0x1, 0x603, &(0x7f0000000700)="$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") syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file1\x00', 0xa18c14, &(0x7f0000001640)=ANY=[@ANYBLOB="73686f72746e616d653d6c6f6d616363656e746575726f2c73686f7200000000500000006e6e742c636f6465706167653d3835372c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c696f63686172736a743d6d5063726f6d616e6961702c756ee95f786c6574653d312c73686f72746e616d653d6c6f7765722c636f6465706167653d3935302c73686f72746e616d653d6d697865df675d6407eedf7f642c726f6469722c696f636861727365743d63703835302c726f646972"], 0x81, 0x2a6, &(0x7f0000000180)="$eJzs3U9rI2UYAPBn0kmaqpAcPInggB48ld39BBukwmJOSg560cXtgiRhoYGAfzDuybvgye/gd/ADePEbePAoeLMHcSSZmSRNpu1WYla6v99lnsz7PPP+ydsWCnnzyevj4aMnk8dPv/o12u0kGvfjfpwn0Y1GVL4JAOA2Oc/z+CMvXJebRisi8k75qrGH4QEA/4HzPD941r//AMDt8MGHH73X6/dP3s+ydsT42+kgieJatPcex2cxitO4E534KyJfKuJXHvRPIs2y6p8B06MYRIw//rl83fs9YlF/NzrR3axvlVnZQrw1nk0H857n12a8lET08qRIuRedeDUib0b5kOLy7oP+yb1suz4GrXj7zR/K8f99GsfRiV8+jScxikeLR6zqv76bZe/k3//5ZTGDQUQymw4OF3kr+cFe3hAAAAAAAAAAAAAAAAAAAAAAAF4Ix9lSd/38nOo0wOPj+vZLzwcqT/iZrZ2vcyfLsuoYn+mgGUV9Gq+lkT6/mQMAAAAAAAAAAAAAAAAAAMD/x+TzL4YPR6PTswvBT/k8OLoyZzNI1+5UH+u/vqo+GP4YcfOqZwnioBzaKNnqIqmadtDX4U2Sj+o6jcZla5iOohj8dzcf2Bu7muCVQbW7hg+TuCa5Xb9J1nZdtQ3PJkndhkwXTVtPzmuW7uDSYbR2NPfWy/+2/Kh2oeYzbi4X82JVe/5Ort1p7vgnZUOy8989AAAAAAAAAAAAAAAAAADARasP/cZvW41Pn8uQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvVt//vwyiu3lnM5iVxYs7jauTD88mNd129zxNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbrl/AgAA//9BoFPu") openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) 0s ago: executing program 2 (id=254): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mq_open(&(0x7f0000003c00)='-\x00', 0x40, 0x300, &(0x7f0000003c40)={0xfe00000000000000, 0x4, 0x0, 0x5}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) readv(r1, &(0x7f00000001c0), 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x240488d4}, 0x8020) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.140' (ED25519) to the list of known hosts. [ 28.171695][ T4698] cgroup: Unknown subsys name 'net' [ 28.321599][ T4698] cgroup: Unknown subsys name 'cpuset' [ 28.323692][ T4698] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.492298][ T4698] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 29.313063][ T4713] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.315019][ T4713] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.316727][ T4713] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.342336][ T4726] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.342804][ T4726] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.343373][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.343655][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.343799][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.344205][ T4726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.344571][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.344778][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.345372][ T4726] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.346402][ T4727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.346490][ T4727] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.346561][ T4726] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.346635][ T4725] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.347052][ T4726] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.349777][ T4726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.351410][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.351591][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.356133][ T4717] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.356471][ T4728] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.356513][ T4728] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.357990][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.361144][ T4728] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.737327][ T4719] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.737600][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.737713][ T4719] bridge_slave_0: entered allmulticast mode [ 29.738190][ T4719] bridge_slave_0: entered promiscuous mode [ 29.757418][ T4719] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.759118][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.760349][ T4719] bridge_slave_1: entered allmulticast mode [ 29.760808][ T4719] bridge_slave_1: entered promiscuous mode [ 29.786636][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.786714][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.786774][ T4711] bridge_slave_0: entered allmulticast mode [ 29.787242][ T4711] bridge_slave_0: entered promiscuous mode [ 29.788391][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.788414][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.788466][ T4711] bridge_slave_1: entered allmulticast mode [ 29.788980][ T4711] bridge_slave_1: entered promiscuous mode [ 29.810927][ T4719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.812350][ T4719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.820947][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.821027][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.821332][ T4710] bridge_slave_0: entered allmulticast mode [ 29.821982][ T4710] bridge_slave_0: entered promiscuous mode [ 29.822944][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.822968][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.823054][ T4710] bridge_slave_1: entered allmulticast mode [ 29.823468][ T4710] bridge_slave_1: entered promiscuous mode [ 29.832582][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.833913][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.835243][ T4712] bridge_slave_0: entered allmulticast mode [ 29.836804][ T4712] bridge_slave_0: entered promiscuous mode [ 29.840042][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.841646][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.845202][ T4719] team0: Port device team_slave_0 added [ 29.846249][ T4720] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.846650][ T4720] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.846707][ T4720] bridge_slave_0: entered allmulticast mode [ 29.847125][ T4720] bridge_slave_0: entered promiscuous mode [ 29.848201][ T4720] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.848222][ T4720] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.848270][ T4720] bridge_slave_1: entered allmulticast mode [ 29.848756][ T4720] bridge_slave_1: entered promiscuous mode [ 29.851136][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.851212][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.851235][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.851287][ T4712] bridge_slave_1: entered allmulticast mode [ 29.852033][ T4712] bridge_slave_1: entered promiscuous mode [ 29.859847][ T4711] team0: Port device team_slave_0 added [ 29.864719][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.868115][ T4719] team0: Port device team_slave_1 added [ 29.868836][ T4711] team0: Port device team_slave_1 added [ 29.878553][ T4712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.879515][ T4712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.892445][ T4720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.893412][ T4720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.902766][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.904019][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.908618][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.909304][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.909322][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.909344][ T4719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.909783][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.909798][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.909819][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.914965][ T4710] team0: Port device team_slave_0 added [ 29.916121][ T4710] team0: Port device team_slave_1 added [ 29.916783][ T4712] team0: Port device team_slave_0 added [ 29.917768][ T4712] team0: Port device team_slave_1 added [ 29.918030][ T4719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.918036][ T4719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.918048][ T4719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.926828][ T4720] team0: Port device team_slave_0 added [ 29.927610][ T4720] team0: Port device team_slave_1 added [ 29.945272][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.945299][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.945315][ T4720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.952787][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.952796][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.952811][ T4712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.959562][ T4720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.959570][ T4720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.959581][ T4720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.960007][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.960016][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.960030][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.961592][ T4712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.961601][ T4712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.961615][ T4712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.969068][ T4719] hsr_slave_0: entered promiscuous mode [ 29.969438][ T4719] hsr_slave_1: entered promiscuous mode [ 29.972657][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.972666][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.972682][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.998383][ T4712] hsr_slave_0: entered promiscuous mode [ 29.998731][ T4712] hsr_slave_1: entered promiscuous mode [ 29.999172][ T4712] debugfs: 'hsr0' already exists in 'hsr' [ 29.999209][ T4712] Cannot create hsr debugfs directory [ 30.001301][ T4711] hsr_slave_0: entered promiscuous mode [ 30.001876][ T4711] hsr_slave_1: entered promiscuous mode [ 30.002102][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 30.002112][ T4711] Cannot create hsr debugfs directory [ 30.009632][ T4710] hsr_slave_0: entered promiscuous mode [ 30.010627][ T4710] hsr_slave_1: entered promiscuous mode [ 30.011006][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.011018][ T4710] Cannot create hsr debugfs directory [ 30.015420][ T4720] hsr_slave_0: entered promiscuous mode [ 30.016919][ T4720] hsr_slave_1: entered promiscuous mode [ 30.018160][ T4720] debugfs: 'hsr0' already exists in 'hsr' [ 30.019203][ T4720] Cannot create hsr debugfs directory [ 30.169778][ T4710] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.174371][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.174990][ T4710] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.176946][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.177583][ T4710] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.179291][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.183203][ T4710] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.185508][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.200720][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.200777][ T4710] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.200929][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.200979][ T4710] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.205030][ T4712] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.207069][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.207376][ T4712] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.209451][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.213766][ T4712] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.216135][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.216726][ T4712] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.218290][ T4712] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.242296][ T4719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.243771][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.244498][ T4719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.245849][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.252226][ T4719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.254556][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.262621][ T4719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.263672][ T4719] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.265747][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.269363][ T4712] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.269406][ T4712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.269552][ T4712] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.269588][ T4712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.277850][ T4720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.280557][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.283045][ T4720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.285228][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.289013][ T4720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.291314][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.291654][ T4720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.293332][ T4720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.297131][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.298438][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.299971][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.301539][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.311256][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.335562][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.335617][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.342682][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.344978][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.345839][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.345866][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.346396][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.348710][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.354644][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.356841][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.357504][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.359335][ T4711] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.387747][ T4712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.395651][ T4720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.408336][ T4720] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.418192][ T4719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.425797][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.425840][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.426224][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.426242][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.441548][ T4712] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.453504][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.453548][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.453932][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.453953][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.486501][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.490568][ T4719] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.507731][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.507781][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.531815][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.542636][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.542681][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.546865][ T3636] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.546903][ T3636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.555892][ T4719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.560338][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.560387][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.590000][ T4711] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.593609][ T4711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.630781][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.679256][ T4720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.715236][ T4720] veth0_vlan: entered promiscuous mode [ 30.717291][ T4720] veth1_vlan: entered promiscuous mode [ 30.728356][ T4712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.736461][ T4720] veth0_macvtap: entered promiscuous mode [ 30.743865][ T4720] veth1_macvtap: entered promiscuous mode [ 30.754038][ T4712] veth0_vlan: entered promiscuous mode [ 30.763746][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.769084][ T4720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.787170][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787425][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787444][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.787461][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.806937][ T4712] veth1_vlan: entered promiscuous mode [ 30.811629][ T4719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.836635][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.838701][ T4710] veth0_vlan: entered promiscuous mode [ 30.850826][ T4710] veth1_vlan: entered promiscuous mode [ 30.859109][ T4712] veth0_macvtap: entered promiscuous mode [ 30.863408][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.863438][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.868584][ T4712] veth1_macvtap: entered promiscuous mode [ 30.875233][ T4710] veth0_macvtap: entered promiscuous mode [ 30.882282][ T4710] veth1_macvtap: entered promiscuous mode [ 30.887181][ T4719] veth0_vlan: entered promiscuous mode [ 30.889512][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 30.889544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.891040][ T4719] veth1_vlan: entered promiscuous mode [ 30.902028][ T4719] veth0_macvtap: entered promiscuous mode [ 30.905449][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.907257][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.908678][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.909794][ T4712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.911143][ T4719] veth1_macvtap: entered promiscuous mode [ 30.933330][ T4711] veth0_vlan: entered promiscuous mode [ 30.937020][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.938080][ T4719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.940132][ T15] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941811][ T3798] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941846][ T3798] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941872][ T3798] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941895][ T3798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941925][ T3798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941945][ T3798] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.941965][ T3798] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.951577][ T4711] veth1_vlan: entered promiscuous mode [ 30.969371][ T742] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.969421][ T742] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.969443][ T742] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.969460][ T742] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.972388][ T4720] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.016845][ T3798] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.018424][ T3798] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.029783][ T4711] veth0_macvtap: entered promiscuous mode [ 31.038743][ T4711] veth1_macvtap: entered promiscuous mode [ 31.044794][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.045783][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.052988][ T15] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.053041][ T15] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.054188][ T3636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.054201][ T3636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.057318][ T4892] syz_tun: entered allmulticast mode [ 31.061666][ T15] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.061710][ T15] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.075555][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.077004][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.087616][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.088975][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.102700][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.102729][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.117938][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.117965][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.144439][ T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.144470][ T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.157038][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.157069][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.370913][ T4722] Bluetooth: hci3: command tx timeout [ 31.440463][ T4722] Bluetooth: hci4: command tx timeout [ 31.450597][ T4722] Bluetooth: hci2: command tx timeout [ 31.452060][ T4722] Bluetooth: hci0: command tx timeout [ 31.452258][ T4722] Bluetooth: hci1: command tx timeout [ 31.583232][ T4906] syzkaller0: entered promiscuous mode [ 31.583273][ T4906] syzkaller0: entered allmulticast mode [ 31.594510][ T4908] binder: 4907:4908 tried to acquire reference to desc 0, got 1 instead [ 31.596730][ T4908] binder_alloc: 4907: pid 4907 spamming oneway? 1 buffers allocated for a total size of 4096 [ 31.601568][ T4826] binder: undelivered TRANSACTION_COMPLETE [ 31.601598][ T4826] binder: undelivered TRANSACTION_COMPLETE [ 31.610076][ T4826] binder: undelivered transaction 6, process died. [ 31.611942][ T4826] binder: undelivered transaction 5, process died. [ 31.832422][ T4890] syz_tun: left allmulticast mode [ 31.852367][ T4918] Zero length message leads to an empty skb [ 32.057666][ T4921] bridge0: port 3(syz_tun) entered blocking state [ 32.057723][ T4921] bridge0: port 3(syz_tun) entered disabled state [ 32.057831][ T4921] syz_tun: entered allmulticast mode [ 32.058383][ T4921] syz_tun: entered promiscuous mode [ 32.058609][ T4921] bridge0: port 3(syz_tun) entered blocking state [ 32.058644][ T4921] bridge0: port 3(syz_tun) entered forwarding state [ 32.072276][ T4921] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 32.106782][ T4923] syzkaller0: entered promiscuous mode [ 32.107844][ T4923] syzkaller0: entered allmulticast mode [ 32.520058][ T4925] loop3: detected capacity change from 0 to 128 [ 32.534499][ T4925] ======================================================= [ 32.534499][ T4925] WARNING: The mand mount option has been deprecated and [ 32.534499][ T4925] and is ignored by this kernel. Remove the mand [ 32.534499][ T4925] option from the mount to silence this warning. [ 32.534499][ T4925] ======================================================= [ 32.843847][ T4929] configfs-gadget.g1 gadget.0: HOST MAC ba:4b:b6:66:34:4e [ 32.844196][ T4929] configfs-gadget.g1 gadget.0: MAC 46:27:f9:53:67:7e [ 33.100750][ T4819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.251285][ T4819] usb 1-1: Dual-Role OTG device on HNP port [ 33.251492][ T4819] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 33.251503][ T4819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.269835][ T4819] cdc_eem 1-1:1.0 usb1: register 'cdc_eem' at usb-dummy_hcd.0-1, CDC EEM Device, f6:0f:f8:e8:df:06 [ 33.373648][ T4976] syzkaller0: entered promiscuous mode [ 33.373680][ T4976] syzkaller0: entered allmulticast mode [ 33.520285][ T4713] Bluetooth: hci1: command tx timeout [ 33.520322][ T4713] Bluetooth: hci0: command tx timeout [ 33.520349][ T4713] Bluetooth: hci2: command tx timeout [ 33.520407][ T4722] Bluetooth: hci4: command tx timeout [ 34.673772][ T294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.716395][ T4722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 34.717854][ T4722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 34.719212][ T4722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 34.723243][ T4722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 34.724748][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 34.886783][ T5008] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.888736][ T5008] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.888862][ T5008] bridge_slave_0: entered allmulticast mode [ 34.889556][ T5008] bridge_slave_0: entered promiscuous mode [ 34.891358][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.891381][ T5008] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.891460][ T5008] bridge_slave_1: entered allmulticast mode [ 34.892236][ T5008] bridge_slave_1: entered promiscuous mode [ 34.908358][ T5008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.911558][ T5008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.924313][ T5008] team0: Port device team_slave_0 added [ 34.925388][ T5008] team0: Port device team_slave_1 added [ 34.948745][ T5008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.948769][ T5008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.948798][ T5008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.951883][ T5008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.951892][ T5008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.951913][ T5008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.005941][ T294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.022549][ T5008] hsr_slave_0: entered promiscuous mode [ 35.024159][ T5008] hsr_slave_1: entered promiscuous mode [ 35.026027][ T5008] debugfs: 'hsr0' already exists in 'hsr' [ 35.027427][ T5008] Cannot create hsr debugfs directory [ 35.049610][ T5033] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 35.126836][ T5008] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 35.134059][ T5008] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.360473][ T294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.408448][ T5008] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 35.416611][ T5008] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.417076][ T5008] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 35.421999][ T5008] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.424528][ T5008] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 35.427023][ T5008] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.435384][ T5040] tipc: Started in network mode [ 35.436440][ T5040] tipc: Node identity 1000001, cluster identity 4711 [ 35.437823][ T5040] tipc: Node number set to 16777217 [ 35.439725][ T5040] tipc: Enabled bearer , priority 1 [ 35.446208][ T5008] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.446260][ T5008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.446346][ T5008] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.446376][ T5008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.456563][ T5039] tipc: Resetting bearer [ 35.462011][ T5039] tipc: Disabling bearer [ 35.478950][ T5008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.485263][ T742] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.486779][ T742] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.492110][ T5008] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.496359][ T742] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.496406][ T742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.499611][ T3636] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.499654][ T3636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.508578][ T294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.548615][ T5049] loop0: detected capacity change from 0 to 1024 [ 35.583012][ T5049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.602086][ T4713] Bluetooth: hci0: command tx timeout [ 35.602128][ T4713] Bluetooth: hci2: command tx timeout [ 35.602158][ T4713] Bluetooth: hci1: command tx timeout [ 35.625531][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.641796][ T294] bridge_slave_1: left allmulticast mode [ 35.644229][ T294] bridge_slave_1: left promiscuous mode [ 35.644642][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.656472][ T294] bridge_slave_0: left allmulticast mode [ 35.656504][ T294] bridge_slave_0: left promiscuous mode [ 35.656590][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.733121][ T294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.742409][ T294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.745851][ T294] bond0 (unregistering): Released all slaves [ 35.802360][ T5008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.194371][ T5095] cgroup: Invalid name [ 36.379143][ T4400] 8021q: adding VLAN 0 to HW filter on device eth0 [ 36.478285][ T294] hsr_slave_0: left promiscuous mode [ 36.479552][ T294] hsr_slave_1: left promiscuous mode [ 36.480152][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.481601][ T294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.484772][ T294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.485113][ T294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.491414][ T294] veth1_macvtap: left promiscuous mode [ 36.491479][ T294] veth0_macvtap: left promiscuous mode [ 36.491553][ T294] veth1_vlan: left promiscuous mode [ 36.491611][ T294] veth0_vlan: left promiscuous mode [ 36.599338][ T294] team0 (unregistering): Port device team_slave_1 removed [ 36.605451][ T294] team0 (unregistering): Port device team_slave_0 removed [ 36.691572][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.692034][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.783190][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.787930][ T5099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.800493][ T4722] Bluetooth: hci3: command tx timeout [ 36.821089][ T5117] loop0: detected capacity change from 0 to 512 [ 36.861494][ T5117] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 36.861552][ T5117] EXT4-fs (loop0): failed to open journal device unknown-block(8,0) -ENXIO [ 36.902442][ T5123] binder: 5122:5123 tried to acquire reference to desc 0, got 1 instead [ 36.902850][ T5123] binder: 5122:5123 got transaction with invalid data ptr [ 36.902911][ T5123] binder: 5122:5123 transaction call to 5122:0 failed 11/29201/-14, code 0 size 0-24 line 3511 [ 37.081957][ T39] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.082015][ T39] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.082050][ T39] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.082096][ T39] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.082918][ T4400] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.087466][ T5008] veth0_vlan: entered promiscuous mode [ 37.121160][ T5008] veth1_vlan: entered promiscuous mode [ 37.130899][ T5127] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 37.177719][ T5008] veth0_macvtap: entered promiscuous mode [ 37.179053][ T5008] veth1_macvtap: entered promiscuous mode [ 37.196659][ T5008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.219211][ T5008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.228498][ T5127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 37.256196][ T5127] bridge1: entered promiscuous mode [ 37.261508][ T5127] batman_adv: batadv0: Adding interface: bridge1 [ 37.261537][ T5127] batman_adv: batadv0: The MTU of interface bridge1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.261564][ T5127] batman_adv: batadv0: Not using interface bridge1 (retrying later): interface not active [ 37.292106][ T742] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.293378][ T3798] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.293466][ T3798] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.293523][ T3798] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.367436][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.367490][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.383599][ T5123] syz.2.40 (5123): drop_caches: 2 [ 37.406954][ T4826] binder: undelivered TRANSACTION_ERROR: 29201 [ 37.428503][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.428536][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.440502][ T4722] Bluetooth: hci4: command tx timeout [ 37.443034][ T5141] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 37.443059][ T5141] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 37.680317][ T4722] Bluetooth: hci1: command tx timeout [ 37.680444][ T4722] Bluetooth: hci2: command tx timeout [ 37.680513][ T4722] Bluetooth: hci0: command tx timeout [ 38.231840][ T5164] loop0: detected capacity change from 0 to 512 [ 38.795235][ T5164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.880363][ T4713] Bluetooth: hci3: command tx timeout [ 39.074630][ T5175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.50'. [ 39.107349][ T5175] netlink: 'syz.2.50': attribute type 10 has an invalid length. [ 39.107390][ T5175] netlink: 40 bytes leftover after parsing attributes in process `syz.2.50'. [ 39.107519][ T5175] dummy0: entered promiscuous mode [ 39.130805][ T5178] binder: 5177:5178 tried to acquire reference to desc 0, got 1 instead [ 39.133191][ T5178] binder_alloc: 5177: pid 5177 spamming oneway? 1 buffers allocated for a total size of 4096 [ 39.136900][ T5178] binder_alloc: 5177: pid 5177 spamming oneway? 2 buffers allocated for a total size of 5120 [ 39.148198][ T4826] binder: undelivered TRANSACTION_COMPLETE [ 39.148230][ T4826] binder: undelivered TRANSACTION_COMPLETE [ 39.148250][ T4826] binder: undelivered TRANSACTION_COMPLETE [ 39.190279][ T1095] binder: undelivered transaction 17, process died. [ 39.190322][ T1095] binder: undelivered transaction 18, process died. [ 39.190355][ T1095] binder: undelivered transaction 16, process died. [ 39.314224][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.354082][ T4400] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.387334][ T5184] syzkaller0: entered promiscuous mode [ 39.388678][ T5184] syzkaller0: entered allmulticast mode [ 40.491741][ T5207] syzkaller0: entered promiscuous mode [ 40.491799][ T5207] syzkaller0: entered allmulticast mode [ 40.639219][ T5209] bridge0: port 3(syz_tun) entered disabled state [ 40.682671][ T5209] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.682862][ T5209] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.694934][ T5227] dlm: Using TCP for communications [ 40.700145][ T5227] dlm: cannot start dlm midcomms -99 [ 41.614907][ T4713] Bluetooth: hci3: command tx timeout [ 41.645327][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.651117][ T5209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.783039][ T4400] 8021q: adding VLAN 0 to HW filter on device eth3 [ 41.813379][ T39] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.813871][ T39] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.813899][ T39] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.813925][ T39] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.859808][ T5247] loop1: detected capacity change from 0 to 512 [ 41.861854][ T5247] EXT4-fs: Ignoring removed oldalloc option [ 41.867572][ T5235] syzkaller0: entered promiscuous mode [ 41.867609][ T5235] syzkaller0: entered allmulticast mode [ 41.892292][ T5247] EXT4-fs (loop1): failed to initialize system zone (-117) [ 41.894018][ T5247] EXT4-fs (loop1): mount failed [ 42.284615][ T5259] loop4: detected capacity change from 0 to 512 [ 42.324834][ T5259] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 42.327275][ T5259] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.331644][ T5259] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 42.331738][ T5259] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.338449][ T5259] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 42.345411][ T5259] EXT4-fs (loop4): 1 truncate cleaned up [ 42.348342][ T5259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.448331][ T4710] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.728239][ T5267] syzkaller0: entered promiscuous mode [ 42.730766][ T5267] syzkaller0: entered allmulticast mode [ 43.481919][ T5291] netlink: 'syz.2.75': attribute type 10 has an invalid length. [ 43.484965][ T5291] syz_tun: entered promiscuous mode [ 43.492756][ T5291] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 43.497689][ T5293] netlink: 'syz.5.76': attribute type 10 has an invalid length. [ 43.499451][ T5293] syz_tun: entered promiscuous mode [ 43.502238][ T5293] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 43.506626][ T39] bond0: (slave bond_slave_0): interface is now down [ 43.506653][ T39] bond0: (slave bond_slave_1): interface is now down [ 43.511477][ T39] bond0: (slave bond_slave_0): interface is now down [ 43.511491][ T39] bond0: (slave bond_slave_1): interface is now down [ 43.520938][ T3636] bond0: (slave bond_slave_0): interface is now down [ 43.520968][ T3636] bond0: (slave bond_slave_1): interface is now down [ 43.521009][ T3636] bond0: (slave syz_tun): interface is now down [ 43.523332][ T3636] bond0: now running without any active interface! [ 43.530715][ T39] bond0: (slave bond_slave_0): interface is now down [ 43.530742][ T39] bond0: (slave bond_slave_1): interface is now down [ 43.530757][ T39] bond0: (slave syz_tun): interface is now down [ 43.533737][ T39] bond0: now running without any active interface! [ 43.576932][ T5295] syzkaller0: entered promiscuous mode [ 43.578183][ T5295] syzkaller0: entered allmulticast mode [ 43.684170][ T4713] Bluetooth: hci3: command tx timeout [ 43.713133][ T5306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 43.875801][ T5315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.84'. [ 43.917132][ T5319] syzkaller0: entered promiscuous mode [ 43.918375][ T5319] syzkaller0: entered allmulticast mode [ 43.937643][ T5321] binder: 5320:5321 tried to acquire reference to desc 0, got 1 instead [ 43.940090][ T5321] binder: release 5320:5321 transaction 23 out, still active [ 43.960704][ T5321] binder: undelivered TRANSACTION_COMPLETE [ 43.967739][ T4826] binder: send failed reply for transaction 23, target dead [ 44.154752][ T5330] warning: `syz.1.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 44.681166][ T5335] binder: 5334:5335 tried to acquire reference to desc 0, got 1 instead [ 44.683719][ T5335] binder: 5334:5335 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 44.686620][ T5335] binder: 5335 RLIMIT_NICE not set [ 44.688109][ T5335] binder: 5335 RLIMIT_NICE not set [ 44.689813][ T5335] binder: release 5334:5335 transaction 28 in, still active [ 44.692838][ T5335] binder: send failed reply for transaction 28 to 5334:5335 [ 44.694921][ T4471] binder: undelivered TRANSACTION_COMPLETE [ 44.694973][ T4471] binder: undelivered TRANSACTION_ERROR: 29189 [ 44.746254][ T5341] syzkaller0: entered promiscuous mode [ 44.746864][ T5341] syzkaller0: entered allmulticast mode [ 46.389176][ T5388] netlink: 14 bytes leftover after parsing attributes in process `syz.4.109'. [ 46.544138][ T5393] loop5: detected capacity change from 0 to 512 [ 46.546943][ T5393] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.557892][ T5393] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 46.685176][ T5393] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #15: comm syz.5.108: corrupted xattr block 252: invalid header [ 46.685259][ T5393] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.689485][ T5393] EXT4-fs (loop5): Remounting filesystem read-only [ 46.689529][ T5393] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 46.689896][ T5393] EXT4-fs (loop5): 1 orphan inode deleted [ 46.690508][ T5393] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.703353][ T5397] binder: 5396:5397 tried to acquire reference to desc 0, got 1 instead [ 46.703605][ T5397] binder: 5396:5397 got transaction with invalid data ptr [ 46.703633][ T5397] binder: 5396:5397 transaction call to 5396:0 failed 33/29201/-14, code 0 size 0-24 line 3511 [ 46.771285][ T5397] syz.1.111 (5397): drop_caches: 2 [ 46.843684][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.259144][ T5008] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.380905][ T5471] syzkaller0: entered promiscuous mode [ 47.380951][ T5471] syzkaller0: entered allmulticast mode [ 47.461107][ T5483] fuse: Bad value for 'fd' [ 47.559978][ T5501] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 47.581609][ T5501] bond1 (unregistering): Released all slaves [ 49.169002][ T5577] loop1: detected capacity change from 0 to 128 [ 49.192458][ T5573] loop5: detected capacity change from 0 to 8192 [ 49.223084][ T5573] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 49.261460][ T5577] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 49.349137][ T4712] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.352691][ T5584] loop0: detected capacity change from 0 to 512 [ 49.362297][ T5584] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 49.518892][ T4713] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 49.518928][ T4713] CPU: 0 UID: 0 PID: 4713 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT [ 49.518943][ T4713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 49.518949][ T4713] Workqueue: hci3 hci_rx_work [ 49.518969][ T4713] Call trace: [ 49.518972][ T4713] show_stack+0x2c/0x3c (C) [ 49.518988][ T4713] __dump_stack+0x30/0x40 [ 49.519003][ T4713] dump_stack_lvl+0xd8/0x12c [ 49.519015][ T4713] dump_stack+0x1c/0x28 [ 49.519026][ T4713] sysfs_warn_dup+0x9c/0xb8 [ 49.519038][ T4713] sysfs_create_dir_ns+0x190/0x1f4 [ 49.519050][ T4713] kobject_add_internal+0x290/0x6f0 [ 49.519060][ T4713] kobject_add_varg+0x9c/0xe8 [ 49.519072][ T4713] kobject_add+0x110/0x1c8 [ 49.519084][ T4713] device_add+0x394/0x9e0 [ 49.519098][ T4713] hci_conn_add_sysfs+0xbc/0x1e8 [ 49.519109][ T4713] le_conn_complete_evt+0xc68/0x10f8 [ 49.519119][ T4713] hci_le_conn_complete_evt+0x114/0x3d8 [ 49.519128][ T4713] hci_le_meta_evt+0x2b0/0x46c [ 49.519139][ T4713] hci_event_packet+0x4c0/0x9c8 [ 49.519149][ T4713] hci_rx_work+0x2f4/0xd78 [ 49.519161][ T4713] process_scheduled_works+0x788/0x10b8 [ 49.519172][ T4713] worker_thread+0x798/0xbd0 [ 49.519182][ T4713] kthread+0x304/0x3d4 [ 49.519191][ T4713] ret_from_fork+0x10/0x20 [ 49.519232][ T4713] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 49.519247][ T4713] Bluetooth: hci3: failed to register connection device [ 49.621997][ T5601] Illegal XDP return value 3211038720 on prog (id 18) dev syz_tun, expect packet loss! [ 49.699504][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.703552][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.619654][ T5658] syz.0.166 uses obsolete (PF_INET,SOCK_PACKET) [ 51.611134][ T5680] dummy_hcd dummy_hcd.0: remove, state 1 [ 51.611489][ T5680] usb usb1: USB disconnect, device number 1 [ 51.612091][ T5680] usb 1-1: USB disconnect, device number 2 [ 51.614718][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 51.617267][ T5680] cdc_eem 1-1:1.0 usb1: unregister 'cdc_eem' usb-dummy_hcd.0-1, CDC EEM Device [ 51.969071][ T5680] dummy_hcd dummy_hcd.0: stopped [ 51.969110][ T5680] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 52.065240][ T5710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.177'. [ 52.117367][ T5713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.156760][ T4471] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 52.162253][ T4471] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.178767][ T5731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.190687][ T5713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 52.531944][ T5763] loop0: detected capacity change from 0 to 1024 [ 52.635890][ T5763] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.163179][ T5800] Soft offlining pfn 0x135435 at process virtual address 0x20000000 [ 53.164336][ T5800] Soft offline: 0x135435: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 53.179867][ T5801] block device autoloading is deprecated and will be removed. [ 53.307840][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.509389][ T5817] process 'syz.0.186' launched './file0' with NULL argv: empty string added [ 53.682646][ T5816] netlink: 'syz.5.188': attribute type 83 has an invalid length. [ 53.838498][ T5840] fuse: Bad value for 'fd' [ 54.296640][ T5856] syzkaller0: entered promiscuous mode [ 54.296678][ T5856] syzkaller0: entered allmulticast mode [ 54.514410][ T5881] loop0: detected capacity change from 0 to 1024 [ 54.572579][ T5881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.207234][ T4711] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.363396][ T5928] team0: Port device vxlan0 added [ 55.364437][ T3636] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.375623][ T3636] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.377131][ T3636] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.378459][ T3636] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.434098][ T5942] xt_connbytes: Forcing CT accounting to be enabled [ 55.435641][ T5942] xt_NFQUEUE: number of total queues is 0 [ 56.766285][ T5984] loop5: detected capacity change from 0 to 1024 [ 57.040762][ T4713] Bluetooth: hci4: command 0x2016 tx timeout [ 57.609186][ T5984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.824103][ T5997] ptrace attach of "ci-upstream-gce-arm64/syz-executor exec"[4720] was attempted by " [ 58.123266][ T5008] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.132156][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 58.132237][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 58.198558][ T6002] loop0: detected capacity change from 0 to 512 [ 58.203025][ T6002] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.053638][ T6027] loop5: detected capacity change from 0 to 8 [ 59.068412][ T4722] Bluetooth: hci4: command 0x2016 tx timeout [ 59.114547][ T6027] squashfs: SQUASHFS error: Xattrs in filesystem, these will be ignored [ 59.114569][ T6027] unable to read xattr id index table [ 59.421339][ T6031] binder: 6030:6031 tried to acquire reference to desc 0, got 1 instead [ 59.424063][ T6031] binder: 6030:6031 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 59.426890][ T6031] binder: 6031 RLIMIT_NICE not set [ 59.426915][ T6031] binder: 6031 RLIMIT_NICE not set [ 59.429387][ T6031] binder: release 6030:6031 transaction 45 out, still active [ 59.429418][ T6031] binder: release 6030:6031 transaction 38 in, still active [ 59.429632][ T6031] binder: undelivered TRANSACTION_COMPLETE [ 59.429762][ T6031] binder: 6030:6031 got reply transaction with bad transaction stack, transaction 38 has target 0:0 [ 59.429782][ T6031] binder: 6030:6031 transaction reply to 0:0 failed 46/29201/-71, code 0 size 0-0 line 3170 [ 59.429818][ T6031] binder: 6031 RLIMIT_NICE not set [ 59.437123][ T4723] binder: release 6030:6031 transaction 45 in, still active [ 59.437137][ T4723] binder: release 6030:6031 transaction 38 out, still active [ 59.437146][ T4723] binder: send failed reply for transaction 45, target dead [ 59.437158][ T4723] binder: send failed reply for transaction 38, target dead [ 59.437168][ T4723] binder: undelivered TRANSACTION_ERROR: 29201 [ 59.541610][ T6044] Soft offlining pfn 0x1396f3 at process virtual address 0x20000000 [ 59.546442][ T6044] Soft offline: 0x1396f3: page migration failed 1, type 0x5ffc0000002101c(referenced|uptodate|dirty|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 60.942833][ T6072] tipc: Enabled bearer , priority 0 [ 60.945920][ T6072] syzkaller0: entered promiscuous mode [ 60.948402][ T6072] syzkaller0: entered allmulticast mode [ 60.959137][ T6072] tipc: Resetting bearer [ 60.965357][ T6068] tipc: Resetting bearer [ 60.969166][ T6068] tipc: Disabling bearer [ 61.467229][ T6081] loop5: detected capacity change from 0 to 512 [ 61.492669][ T6081] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 62.568212][ T5008] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 62.859706][ T6116] Soft offlining pfn 0x13bd00 at process virtual address 0x20000000 [ 62.863953][ T6116] Soft offline: 0x13bd00: page migration failed 1, type 0x5ffc0000002103c(referenced|uptodate|dirty|lru|arch_1|swapbacked|node=0|zone=2|lastcpupid=0x7ff) [ 64.376777][ T1595] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.376857][ T1595] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.377465][ T1595] Unable to handle kernel paging request at virtual address dfff80000000000c [ 64.377481][ T1595] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 64.377494][ T1595] Mem abort info: [ 64.377504][ T1595] ESR = 0x0000000096000005 [ 64.377514][ T1595] EC = 0x25: DABT (current EL), IL = 32 bits [ 64.377524][ T1595] SET = 0, FnV = 0 [ 64.377532][ T1595] EA = 0, S1PTW = 0 [ 64.377540][ T1595] FSC = 0x05: level 1 translation fault [ 64.377548][ T1595] Data abort info: [ 64.377554][ T1595] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 64.377562][ T1595] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 64.377570][ T1595] GCS = 0, Overlay = 0, DirtyBit = 0 [ 64.377578][ T1595] [dfff80000000000c] address between user and kernel address ranges [ 64.377639][ T1595] Internal error: Oops: 0000000096000005 [#1] SMP [ 64.393355][ T1595] Modules linked in: [ 64.394014][ T1595] CPU: 1 UID: 0 PID: 1595 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT [ 64.395487][ T1595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 64.397226][ T1595] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 64.398607][ T1595] pc : dummy_queue+0x16c/0x6e4 [ 64.399403][ T1595] lr : dummy_queue+0x138/0x6e4 [ 64.400217][ T1595] sp : ffff800095a37710 [ 64.400906][ T1595] x29: ffff800095a37740 x28: 1fffe0001951781b x27: ffff0000ca8bcc00 [ 64.402292][ T1595] x26: ffff0000f0538b00 x25: dfff800000000000 x24: ffff0000ca8bc0d8 [ 64.403672][ T1595] x23: dfff800000000000 x22: 1fffe0001e0a7160 x21: 0000000000000060 [ 64.405125][ T1595] x20: ffff0000ca8bc0e0 x19: ffff0000f0538b10 x18: 1fffe00035bc9e28 [ 64.406556][ T1595] x17: 0000000000b000b0 x16: ffffa28800000000 x15: 0000000000000000 [ 64.407976][ T1595] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 64.409395][ T1595] x11: ffff80008a590e28 x10: 0000000000000203 x9 : 00000000000006a8 [ 64.410786][ T1595] x8 : 000000000000000c x7 : 0000000000000000 x6 : 0000000000000000 [ 64.412182][ T1595] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff8000835b74fc [ 64.413532][ T1595] x2 : 0000000000000003 x1 : ffff0000c9caba80 x0 : 0000000000000000 [ 64.414860][ T1595] Call trace: [ 64.415402][ T1595] dummy_queue+0x16c/0x6e4 (P) [ 64.416216][ T1595] usb_ep_queue+0xe4/0x578 [ 64.416990][ T1595] eth_start_xmit+0x78c/0xe14 [ 64.417776][ T1595] dev_hard_start_xmit+0x1dc/0x9d4 [ 64.418643][ T1595] sch_direct_xmit+0x1ac/0x3b0 [ 64.419475][ T1595] __dev_queue_xmit+0x1130/0x2bc0 [ 64.420368][ T1595] tx+0xa0/0x1cc [ 64.420997][ T1595] kthread+0x178/0x340 [ 64.421698][ T1595] kthread+0x304/0x3d4 [ 64.422440][ T1595] ret_from_fork+0x10/0x20 [ 64.423257][ T1595] Code: 97579421 f94002a8 91018115 d343fea8 (38f96908) [ 64.424491][ T1595] ---[ end trace 0000000000000000 ]--- [ 64.647601][ T1595] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 64.649015][ T1595] SMP: stopping secondary CPUs [ 64.649841][ T1595] Kernel Offset: disabled [ 64.650590][ T1595] CPU features: 0x14000000,003c0008,27020501,5427fea7 [ 64.651728][ T1595] Memory Limit: none [ 64.868450][ T1595] Rebooting in 86400 seconds..