last executing test programs: 3m49.909311328s ago: executing program 3 (id=175): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x64) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000280), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) fsmount(0xffffffffffffffff, 0x0, 0x7a) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r6, 0x8004e500, &(0x7f0000000100)) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) pwritev2(r7, &(0x7f0000000600)=[{&(0x7f0000000480)}, {&(0x7f0000000540)="c5", 0x1}], 0x2, 0x25e, 0x1, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001780)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001680)=""/109, 0x6d, 0x0, &(0x7f0000001700)=""/97, 0x61}, &(0x7f00000017c0)=0x40) socket$nl_generic(0x10, 0x3, 0x10) 3m47.730560306s ago: executing program 3 (id=182): syz_read_part_table(0x63a, &(0x7f0000000640)="$eJzs0z+IXFUbB+DfvXdn7ky+XSZ8pBAjZgtrC7eJxZIs+AexSFC0sLGyE4uAhYXMLAloJ4IgFpomoFgYBLWKaCG7YiHGKlhJWGxFEG0CV+6Zmd0gosIGo+F52L33nnPec85757w3/KcN57fqoGdy7wd9q5tOk9lKMlj0X29HmSVd13XzjvXkqfefeOjJx9u8ubqcvV6Vx2FZcNzP7f9PPlsGm4NduskDV7Myzmx214ff7jb7OVypkxPJqZvTKqM/pXn70vdVLh7/q1d6JUfKfe2PBsejv//b8O93eXNncr7u2rW1UsulWB+sZmVsr2vSTatqsKzypY3Pksxuyf7NskqrKtcefXnvvqsn+xzqNsnuZB7TLoN/KMW3vWiV76ja//Sm5TorX0zzQvaD+rDtgw1P95ePq9Vbkj2HVervwrnh5yvlZK5dPHa9qur051enzvT1wa9dt70okhvdKDmxniN1qZv2dicPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcUVaSDPdbX2VjnPHx1+rTqavkm9K5kfYgvknydbVovNEeev/LmzuT8xfOjdMuFh0MB8ux3UHOvFPSO5r0w3X5y3aS0dMlZHjoBLityvn3p/jS5i+Lg1/N/LTz/+++GC/jfh6OpsdeLM1ZMlp2f3TTUtWpUs1ZTu/NC/R/i1bXlJmKBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADubA8/8tj62a26TVJVo0lSH720U0Zm5dp1Te7+9Jn3nv9ya7T7XHKm/STJjer365xt5/crddrck9y/0reG2Xs1efet/rnZj636Zbd+/IfekD/zWwAAAP//HUJmeQ==") 3m45.605327111s ago: executing program 0 (id=189): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0xa) fstat(r6, &(0x7f00000002c0)) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2b9, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0xb0) 3m45.39217948s ago: executing program 3 (id=190): syz_emit_vhci(&(0x7f0000000200)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x3, 0x4}}, 0x9) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x8, 0x0, 0x401}}}, 0x7) 3m45.245674574s ago: executing program 3 (id=193): r0 = fsopen(&(0x7f00000000c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x10}) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x813400, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/2065], 0x853) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r8, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$snapshot(r8, &(0x7f0000000180)="9b9560a0d70cd0887238d478b82dae90d5878bf4015fd3b4f97e9efccd2f9ba8e080dcda6cb2503f971cbad73e400e42d6ac9c52157205b762319b7c3d959db5702229e9a27c5baebdc6a6c17b1e7e8482922d154d04e33aee20f8d83335", 0x5e) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f0000000100)={0x9, 0x4}) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3m44.45967313s ago: executing program 0 (id=210): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) preadv2(r0, &(0x7f0000000000)=[{&(0x7f0000001200)=""/4096, 0x24000}], 0x2, 0x0, 0x0, 0x0) 3m44.401441594s ago: executing program 0 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7c}}, 0x0) 3m44.349368099s ago: executing program 0 (id=214): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000380)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m44.331111197s ago: executing program 3 (id=215): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca", 0x25) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x4, 0x1, 0xe, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0}, 0x40) 3m44.061401263s ago: executing program 0 (id=216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 3m44.001381296s ago: executing program 0 (id=219): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) 3m29.122466435s ago: executing program 32 (id=215): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4082, 0xff2}], 0x0, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca", 0x25) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map, 0x4, 0x1, 0xe, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0}, 0x40) 3m28.614157555s ago: executing program 33 (id=219): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) 3m18.445377412s ago: executing program 5 (id=514): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000800)={@flat=@handle={0x73682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x0, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 3m18.398492483s ago: executing program 5 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000000c0)=""/55, 0x37}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000540)=""/206, 0xce}, {&(0x7f0000000cc0)=""/201, 0xc9}, {&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000ec0)=""/130, 0x82}], 0x7}, 0x5d}], 0x1, 0x10022, 0x0) 3m17.166580536s ago: executing program 2 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 3m16.623788976s ago: executing program 5 (id=526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) 3m15.114656562s ago: executing program 2 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000011c0)=ANY=[@ANYBLOB="7dc103"]) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f0000000280)={0x11, 0x17, r3, 0x1, 0xf, 0x6, @multicast}, 0x14) 3m15.053603326s ago: executing program 5 (id=535): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4604, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000040)=0x8000, 0x4) unshare(0x20000400) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x8, 0xfffffffe, 0x16) ftruncate(r0, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sync_file_range(r0, 0x889, 0x8, 0x2) 3m15.026062576s ago: executing program 5 (id=537): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) 3m14.917720406s ago: executing program 2 (id=540): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0xb, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0x1, 0x1, 0x1, "feec64c361b6d83bb5684a562aaca1dac5ed7ceca0fbd8c119922ab8b5cea6e8", 0x721517}) 3m14.265020782s ago: executing program 5 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 3m14.182491278s ago: executing program 34 (id=543): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0xc, 0x0, &(0x7f00000006c0)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) 3m13.787014893s ago: executing program 2 (id=550): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000001080)={[{@barrier_val={'barrier', 0x3d, 0x8}}, {@user_xattr}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@noblock_validity}, {@init_itable}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@noinit_itable}, {@nodioread_nolock}]}, 0x4, 0xbce, &(0x7f0000002380)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x173) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x1, &(0x7f00000000c0)=ANY=[], 0x1e, 0x1c0, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x100) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) socket$inet6(0xa, 0x1, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x31056, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 3m13.677547891s ago: executing program 2 (id=551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x5, 0x6, 0x4}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x1, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x5, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0x800, 0x4, 0x4, 0x7, 0x3, 0x9, 0x4c75, 0x80000000, 0x2, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x0, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0xded, 0x8008, 0x400, 0x80, 0x0, 0x9, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x82c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x1c000, 0x3fe, 0x403, 0x200006, 0x1, 0x9, 0x5, 0x1000005, 0x5f31, 0x2d, 0x4e4, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x47, 0x8200, 0x1, 0xfe000000, 0x8, 0xffffffff, 0x4, 0x4, 0x3, 0x50, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x407, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xa2, 0x8000, 0x0, 0x5, 0xb, 0x5, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0x8000004, 0x6d01, 0x2, 0x38, 0x800083, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x6, 0x6, 0xca, 0x1ff, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xe, 0x0, 0x5, 0x1c, 0x8, 0x4, 0x8, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x2, 0x5, 0x3, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x9, 0x1, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0xfffffffe, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x9, 0x9602, 0x40007, 0xaf, 0x5, 0x6, 0x227, 0x2, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf3c, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x1, 0xb1e, 0x2000d7, 0x201, 0xffff3441, 0x4]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 3m13.377604953s ago: executing program 2 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0xa0363159}}) 3m13.327136097s ago: executing program 35 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0xa0363159}}) 10.419954833s ago: executing program 8 (id=1209): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r1, 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r5}) 10.31834537s ago: executing program 8 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 9.881134593s ago: executing program 6 (id=1211): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket(0x2, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 9.005069395s ago: executing program 8 (id=1214): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r3, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) 8.932220233s ago: executing program 6 (id=1215): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.657306227s ago: executing program 6 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 6.877683844s ago: executing program 7 (id=1221): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0)="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", 0x467, 0x6000000000000000, 0x0, 0x0) 6.634770009s ago: executing program 4 (id=1222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r3 = fanotify_init(0xf00, 0x1000) fanotify_mark(r3, 0x105, 0x10000839, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r3, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) 6.616671515s ago: executing program 6 (id=1223): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r2, 0x29, 0xcd, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000700)=0x8, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 6.116783104s ago: executing program 1 (id=1224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 5.733088495s ago: executing program 7 (id=1225): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 5.607155644s ago: executing program 4 (id=1226): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, 0x0) 5.509653205s ago: executing program 8 (id=1227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r6, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 5.183579872s ago: executing program 1 (id=1228): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 4.613477812s ago: executing program 7 (id=1229): socket$inet6(0xa, 0x2, 0x0) socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 4.598290368s ago: executing program 4 (id=1230): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x11, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"6739669f274d13b691eb645b00e4f5b53e0ca34dd02ac6cdc67c5e3126628168", r1, 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r8}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x5a042, 0x0) unshare(0x26000400) getsockopt$MRT(r9, 0x0, 0xce, &(0x7f0000000140), &(0x7f0000000180)=0x4) 4.44361669s ago: executing program 6 (id=1231): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x1000421, 0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x20, 0x4, 0x44, 0x0, 0x0, 0x1}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x400c0, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0xd}, 0x1c) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) 3.95858018s ago: executing program 8 (id=1232): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e21, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00'], 0x1, 0x26c, &(0x7f0000000340)="$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") r4 = socket(0x40000000015, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r4) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0xc000) 3.952646311s ago: executing program 1 (id=1233): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x1, 0x9, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x4, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000003, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x7, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x11, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e8, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0x0, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x953, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xffff, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xa3ae, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff7, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r8}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x5a042, 0x0) unshare(0x26000400) getsockopt$MRT(r9, 0x0, 0xce, &(0x7f0000000140), &(0x7f0000000180)=0x4) 3.69200189s ago: executing program 7 (id=1234): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) 3.691431945s ago: executing program 4 (id=1235): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000001000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts-cbc-aes-neon\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48041}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r5, &(0x7f0000002c00)=""/4082, 0xff2, 0x7) recvfrom$inet_nvme(r4, &(0x7f0000000040)=""/37, 0x25, 0x40000061, 0x0, 0x0) 2.508664399s ago: executing program 6 (id=1236): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2.508128291s ago: executing program 1 (id=1237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 2.507665597s ago: executing program 7 (id=1238): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x9}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x80) 2.50730512s ago: executing program 4 (id=1239): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r0, &(0x7f00000000c0)="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", 0x4e0, 0x6000000000000000, 0x0, 0x0) 2.29300793s ago: executing program 8 (id=1240): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) connect$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) 2.203649997s ago: executing program 7 (id=1241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet6_buf(r3, 0x29, 0xcd, 0x0, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) 1.421954488s ago: executing program 4 (id=1242): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}], [], 0x2c}) 1.347731849s ago: executing program 1 (id=1243): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) shutdown(r6, 0x1) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000400000000000eb130000001800018014000200"], 0x2c}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_ENTITIES(0xffffffffffffffff, 0xc1007c01, &(0x7f0000000c00)) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 0s ago: executing program 1 (id=1244): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r6 = socket$inet6(0xa, 0x3, 0x1) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) connect$l2tp6(r6, &(0x7f0000000140)={0xa, 0x0, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x20) kernel console output (not intermixed with test programs): luetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.843204][ T4681] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.843359][ T4681] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.843537][ T4681] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.843887][ T4681] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.844204][ T4681] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.844314][ T4681] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.844593][ T4681] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.844793][ T4681] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.845097][ T4681] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.849579][ T4681] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.849715][ T4681] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.849838][ T4681] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.852916][ T4681] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.853106][ T4681] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.854117][ T4681] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.854236][ T4681] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.876009][ T4669] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.876289][ T4669] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.220161][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.220455][ T4666] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.220566][ T4666] bridge_slave_0: entered allmulticast mode [ 31.223840][ T4666] bridge_slave_0: entered promiscuous mode [ 31.239872][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.239917][ T4666] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.239986][ T4666] bridge_slave_1: entered allmulticast mode [ 31.240415][ T4666] bridge_slave_1: entered promiscuous mode [ 31.264958][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.266213][ T4670] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.267561][ T4670] bridge_slave_0: entered allmulticast mode [ 31.269045][ T4670] bridge_slave_0: entered promiscuous mode [ 31.272049][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.273300][ T4670] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.274624][ T4670] bridge_slave_1: entered allmulticast mode [ 31.276104][ T4670] bridge_slave_1: entered promiscuous mode [ 31.287810][ T4666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.295289][ T4675] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.296549][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.297958][ T4675] bridge_slave_0: entered allmulticast mode [ 31.299496][ T4675] bridge_slave_0: entered promiscuous mode [ 31.301501][ T4675] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.302763][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.304155][ T4675] bridge_slave_1: entered allmulticast mode [ 31.305685][ T4675] bridge_slave_1: entered promiscuous mode [ 31.310495][ T4666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.317775][ T4670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.318867][ T4670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.331163][ T4666] team0: Port device team_slave_0 added [ 31.345742][ T4674] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.347032][ T4674] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.348516][ T4674] bridge_slave_0: entered allmulticast mode [ 31.350162][ T4674] bridge_slave_0: entered promiscuous mode [ 31.352377][ T4666] team0: Port device team_slave_1 added [ 31.353986][ T4670] team0: Port device team_slave_0 added [ 31.354789][ T4670] team0: Port device team_slave_1 added [ 31.358792][ T4675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.362602][ T4674] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.363834][ T4674] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.365169][ T4674] bridge_slave_1: entered allmulticast mode [ 31.366640][ T4674] bridge_slave_1: entered promiscuous mode [ 31.377969][ T4675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.392106][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.393379][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.393412][ T4670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.394233][ T4670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.394241][ T4670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.394256][ T4670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.412173][ T4674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.413121][ T4674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.419166][ T4666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.419189][ T4666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.419202][ T4666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.420008][ T4665] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.420320][ T4665] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.420393][ T4665] bridge_slave_0: entered allmulticast mode [ 31.421194][ T4665] bridge_slave_0: entered promiscuous mode [ 31.422073][ T4665] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.422097][ T4665] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.422185][ T4665] bridge_slave_1: entered allmulticast mode [ 31.422619][ T4665] bridge_slave_1: entered promiscuous mode [ 31.432723][ T4670] hsr_slave_0: entered promiscuous mode [ 31.433084][ T4670] hsr_slave_1: entered promiscuous mode [ 31.437456][ T4675] team0: Port device team_slave_0 added [ 31.438240][ T4675] team0: Port device team_slave_1 added [ 31.444308][ T4666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.444330][ T4666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.444343][ T4666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.456813][ T4666] hsr_slave_0: entered promiscuous mode [ 31.458303][ T4666] hsr_slave_1: entered promiscuous mode [ 31.459459][ T4666] debugfs: 'hsr0' already exists in 'hsr' [ 31.460465][ T4666] Cannot create hsr debugfs directory [ 31.477507][ T4674] team0: Port device team_slave_0 added [ 31.479550][ T4674] team0: Port device team_slave_1 added [ 31.481738][ T4665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.483313][ T4665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.488184][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.488207][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.488621][ T4675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.489250][ T4675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.489259][ T4675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.489275][ T4675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.509747][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.510730][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.510751][ T4674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.518702][ T4675] hsr_slave_0: entered promiscuous mode [ 31.519553][ T4675] hsr_slave_1: entered promiscuous mode [ 31.519765][ T4675] debugfs: 'hsr0' already exists in 'hsr' [ 31.519774][ T4675] Cannot create hsr debugfs directory [ 31.531432][ T4674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.531452][ T4674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.531466][ T4674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.540383][ T4665] team0: Port device team_slave_0 added [ 31.541856][ T4665] team0: Port device team_slave_1 added [ 31.564205][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.564229][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.564259][ T4665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.564795][ T4665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.564808][ T4665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.564826][ T4665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.591544][ T4665] hsr_slave_0: entered promiscuous mode [ 31.592889][ T4665] hsr_slave_1: entered promiscuous mode [ 31.594156][ T4665] debugfs: 'hsr0' already exists in 'hsr' [ 31.595167][ T4665] Cannot create hsr debugfs directory [ 31.602713][ T4674] hsr_slave_0: entered promiscuous mode [ 31.604123][ T4674] hsr_slave_1: entered promiscuous mode [ 31.605347][ T4674] debugfs: 'hsr0' already exists in 'hsr' [ 31.606381][ T4674] Cannot create hsr debugfs directory [ 31.681739][ T4670] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.684581][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.684937][ T4670] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.686977][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.693069][ T4670] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.695272][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.695575][ T4670] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.697333][ T4670] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.720883][ T4670] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.720931][ T4670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.721232][ T4670] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.721276][ T4670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.729958][ T4666] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.732377][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.732675][ T4666] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.734495][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.741681][ T4666] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.742920][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.743204][ T4666] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.745480][ T4666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.760542][ T4666] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.760581][ T4666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.760708][ T4666] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.760743][ T4666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.768658][ T4675] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.771450][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.772558][ T4675] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.773504][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.773745][ T4675] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.776502][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.779600][ T4675] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.782232][ T4675] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.794474][ T4670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.802843][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.804266][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.805686][ T4707] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.807025][ T4707] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.822492][ T4670] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.828077][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.828125][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.828885][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.828906][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.842886][ T4666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.849629][ T4674] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.852694][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.857977][ T4674] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.860286][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.861285][ T4674] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.863011][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.867729][ T4674] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.869785][ T4674] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.878018][ T4666] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.885280][ T4670] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.885304][ T4670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.893418][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.893457][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.893816][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.893836][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.902225][ T4675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.911164][ T4675] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.924540][ T4665] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.926738][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.928849][ T4665] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.933676][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.935282][ T4665] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.937370][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.938897][ T4665] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.943059][ T4665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.946619][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.946659][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.974874][ T4675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.976791][ T4675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.986616][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.986658][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.026886][ T4665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.035520][ T4665] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.047119][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.047159][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.055845][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.055884][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.073430][ T4674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.078538][ T4665] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.078572][ T4665] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.094983][ T4670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.106419][ T4674] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.122379][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.122428][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.122958][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.122976][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.146727][ T4670] veth0_vlan: entered promiscuous mode [ 32.156211][ T4670] veth1_vlan: entered promiscuous mode [ 32.180067][ T4670] veth0_macvtap: entered promiscuous mode [ 32.182826][ T4670] veth1_macvtap: entered promiscuous mode [ 32.187660][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.190450][ T4670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.200422][ T39] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.200586][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.206197][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.206417][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.226036][ T4666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.253401][ T4666] veth0_vlan: entered promiscuous mode [ 32.256874][ T4666] veth1_vlan: entered promiscuous mode [ 32.264545][ T4666] veth0_macvtap: entered promiscuous mode [ 32.267858][ T4666] veth1_macvtap: entered promiscuous mode [ 32.281768][ T4707] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.281805][ T4707] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.286633][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.287737][ T4666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.305190][ T4707] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.305241][ T4707] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.305259][ T4707] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.305275][ T4707] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.308125][ T4675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.320383][ T4707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.320412][ T4707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.353366][ T4675] veth0_vlan: entered promiscuous mode [ 32.355298][ T4675] veth1_vlan: entered promiscuous mode [ 32.365928][ T4665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.387099][ T4675] veth0_macvtap: entered promiscuous mode [ 32.390005][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.390031][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.404494][ T4670] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.405204][ T4675] veth1_macvtap: entered promiscuous mode [ 32.407992][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.408005][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.431123][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.442300][ T4675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.453702][ T1194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453748][ T1194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453782][ T1194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.453810][ T1194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.464628][ T4674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.524499][ T4674] veth0_vlan: entered promiscuous mode [ 32.532903][ T4674] veth1_vlan: entered promiscuous mode [ 32.543819][ T4674] veth0_macvtap: entered promiscuous mode [ 32.794319][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.795892][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.798503][ T4674] veth1_macvtap: entered promiscuous mode [ 32.803291][ T4853] wg2 speed is unknown, defaulting to 1000 [ 32.807314][ T4853] wg2 speed is unknown, defaulting to 1000 [ 32.809556][ T4853] wg2 speed is unknown, defaulting to 1000 [ 32.858758][ T4853] infiniband syz2: set active [ 32.858790][ T4853] infiniband syz2: added wg2 [ 32.879939][ T10] wg2 speed is unknown, defaulting to 1000 [ 32.891116][ T4669] Bluetooth: hci4: command tx timeout [ 32.892402][ T4669] Bluetooth: hci0: command tx timeout [ 32.893480][ T4669] Bluetooth: hci2: command tx timeout [ 32.893555][ T4669] Bluetooth: hci3: command tx timeout [ 32.893618][ T4669] Bluetooth: hci1: command tx timeout [ 32.897511][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.899062][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.906128][ T4853] RDS/IB: syz2: added [ 32.906220][ T4853] smc: adding ib device syz2 with port count 1 [ 32.906253][ T4853] smc: ib device syz2 port 1 has no pnetid [ 32.915775][ T4853] wg2 speed is unknown, defaulting to 1000 [ 32.919132][ T4331] wg2 speed is unknown, defaulting to 1000 [ 32.919955][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.922624][ T4674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.926046][ T1194] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.926163][ T1194] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.926237][ T1194] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.926265][ T1194] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.953142][ T4665] veth0_vlan: entered promiscuous mode [ 33.319807][ T4665] veth1_vlan: entered promiscuous mode [ 33.325925][ T4853] wg2 speed is unknown, defaulting to 1000 [ 33.381790][ T4853] wg2 speed is unknown, defaulting to 1000 [ 33.384743][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.384757][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.405443][ T4665] veth0_macvtap: entered promiscuous mode [ 33.414095][ T4665] veth1_macvtap: entered promiscuous mode [ 33.418605][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.418634][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.422886][ T4853] wg2 speed is unknown, defaulting to 1000 [ 33.435289][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.437909][ T4665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.449961][ T1194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450064][ T1194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450241][ T1194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.450310][ T1194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.873542][ T4853] wg2 speed is unknown, defaulting to 1000 [ 34.074445][ T1194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.074476][ T1194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.085654][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.085680][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.936394][ T4884] tipc: Started in network mode [ 34.936437][ T4884] tipc: Node identity 3e0eff666183, cluster identity 4711 [ 34.936543][ T4884] tipc: Enabled bearer , priority 0 [ 34.940778][ T4884] syzkaller0: entered promiscuous mode [ 34.941829][ T4884] syzkaller0: entered allmulticast mode [ 34.959080][ T4884] tipc: Resetting bearer [ 34.968124][ T4887] syz_tun: entered allmulticast mode [ 34.975646][ T4667] Bluetooth: hci1: command tx timeout [ 34.975675][ T4667] Bluetooth: hci3: command tx timeout [ 34.975703][ T4667] Bluetooth: hci2: command tx timeout [ 34.975721][ T4667] Bluetooth: hci0: command tx timeout [ 34.975738][ T4667] Bluetooth: hci4: command tx timeout [ 34.976080][ T4887] dvmrp1: entered allmulticast mode [ 35.001146][ T4881] tipc: Resetting bearer [ 35.005519][ T4881] tipc: Disabling bearer [ 35.009606][ T4885] syz_tun: left allmulticast mode [ 35.355370][ T4892] loop2: detected capacity change from 0 to 1024 [ 35.357569][ T4892] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.407775][ T4892] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.114047][ T4908] loop3: detected capacity change from 0 to 512 [ 36.345059][ T4908] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.16: inode has both inline data and extents flags [ 36.345164][ T4908] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.349657][ T4908] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.16: couldn't read orphan inode 15 (err -117) [ 36.349746][ T4908] loop3: lost filesystem error report for type 5 error -117 [ 36.351609][ C0] EXT4-fs (loop3): error count since last fsck: 2 [ 36.351623][ C0] EXT4-fs (loop3): initial error at time 36: ext4_orphan_get:1397: inode 15 [ 36.351639][ C0] EXT4-fs (loop3): last error at time 36: ext4_orphan_get:1402 [ 36.366618][ T4908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.947857][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.132493][ T4669] Bluetooth: hci4: command tx timeout [ 37.132534][ T4669] Bluetooth: hci0: command tx timeout [ 37.132561][ T4669] Bluetooth: hci2: command tx timeout [ 37.132580][ T4669] Bluetooth: hci3: command tx timeout [ 37.132597][ T4669] Bluetooth: hci1: command tx timeout [ 37.173196][ T4919] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 37.173216][ T4919] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 37.173506][ T4919] vhci_hcd vhci_hcd.0: Device attached [ 37.197986][ T4919] loop2: detected capacity change from 0 to 512 [ 37.525504][ T4781] usb 6-1: new low-speed USB device number 2 using vhci_hcd [ 37.939717][ T4920] vhci_hcd: connection reset by peer [ 37.947137][ T4674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.970181][ T4790] vhci_hcd vhci_hcd.2: stop threads [ 37.970387][ T4790] vhci_hcd vhci_hcd.2: release socket [ 37.971058][ T4790] vhci_hcd vhci_hcd.2: disconnect device [ 37.985746][ T4917] syzkaller0: entered promiscuous mode [ 37.985775][ T4917] syzkaller0: entered allmulticast mode [ 38.904805][ T4935] loop2: detected capacity change from 0 to 1024 [ 38.906871][ T4935] ======================================================= [ 38.906871][ T4935] WARNING: The mand mount option has been deprecated and [ 38.906871][ T4935] and is ignored by this kernel. Remove the mand [ 38.906871][ T4935] option from the mount to silence this warning. [ 38.906871][ T4935] ======================================================= [ 38.917111][ T4935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.917138][ T4935] EXT4-fs: Ignoring removed bh option [ 38.919833][ T4935] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 39.419282][ T4667] Bluetooth: hci1: command tx timeout [ 39.419719][ T4669] Bluetooth: hci3: command tx timeout [ 39.419778][ T4667] Bluetooth: hci2: command tx timeout [ 39.419808][ T4667] Bluetooth: hci0: command tx timeout [ 39.419833][ T4667] Bluetooth: hci4: command tx timeout [ 39.646798][ T4945] loop3: detected capacity change from 0 to 128 [ 39.662539][ T4945] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.554976][ T4674] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.578989][ T4969] binder: 4968:4969 tried to acquire reference to desc 0, got 1 instead [ 40.648061][ T4969] binder: 4968:4969 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 40.650406][ T4969] binder: 4969 RLIMIT_NICE not set [ 40.651626][ T4969] binder: 4969 RLIMIT_NICE not set [ 40.652888][ T4969] binder: 4969 RLIMIT_NICE not set [ 40.663060][ T4762] binder: undelivered TRANSACTION_COMPLETE [ 40.663094][ T4762] binder: undelivered transaction 6, process died. [ 40.665583][ T4762] binder: undelivered TRANSACTION_COMPLETE [ 40.871329][ T4979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.31'. [ 41.109564][ T4986] loop2: detected capacity change from 0 to 4096 [ 41.121984][ T4986] EXT4-fs (loop2): Test dummy encryption mode enabled [ 41.146016][ T4986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.960550][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.34'. [ 42.441588][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.479698][ T4999] loop2: detected capacity change from 0 to 256 [ 42.516514][ T4999] FAT-fs (loop2): Directory bread(block 64) failed [ 42.517864][ T4999] FAT-fs (loop2): Directory bread(block 65) failed [ 42.519362][ T4999] FAT-fs (loop2): Directory bread(block 66) failed [ 42.519407][ T4999] FAT-fs (loop2): Directory bread(block 67) failed [ 42.519459][ T4999] FAT-fs (loop2): Directory bread(block 68) failed [ 42.519483][ T4999] FAT-fs (loop2): Directory bread(block 69) failed [ 42.519523][ T4999] FAT-fs (loop2): Directory bread(block 70) failed [ 42.519542][ T4999] FAT-fs (loop2): Directory bread(block 71) failed [ 42.519571][ T4999] FAT-fs (loop2): Directory bread(block 72) failed [ 42.519586][ T4999] FAT-fs (loop2): Directory bread(block 73) failed [ 42.727739][ T4781] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 43.403098][ T5014] loop2: detected capacity change from 0 to 1024 [ 43.403449][ T5014] EXT4-fs: Ignoring removed orlov option [ 43.403473][ T5014] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.413398][ T5014] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a854c018, mo2=0002] [ 43.413444][ T5014] System zones: 0-1, 3-12 [ 43.414037][ T5014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.442389][ T5014] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 43.521281][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.640008][ T5022] netlink: 'syz.1.41': attribute type 5 has an invalid length. [ 46.349731][ T5072] syzkaller0: entered promiscuous mode [ 46.349763][ T5072] syzkaller0: entered allmulticast mode [ 47.293808][ T5087] syzkaller0: entered promiscuous mode [ 47.337720][ T5087] syzkaller0: entered allmulticast mode [ 48.365851][ T5106] syzkaller0: entered promiscuous mode [ 48.367069][ T5106] syzkaller0: entered allmulticast mode [ 48.705817][ T5106] tipc: Started in network mode [ 48.705854][ T5106] tipc: Node identity 2266201c0a27, cluster identity 4711 [ 48.707513][ T5106] tipc: Enabled bearer , priority 0 [ 48.716030][ T5106] tipc: Resetting bearer [ 48.716142][ T5106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.716167][ T5106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.725134][ T5105] tipc: Resetting bearer [ 48.729396][ T5105] tipc: Disabling bearer [ 49.309916][ T4679] Bluetooth: hci0: command 0x0406 tx timeout [ 50.363934][ T5130] syzkaller0: entered promiscuous mode [ 50.363971][ T5130] syzkaller0: entered allmulticast mode [ 50.919860][ T5132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.72'. [ 50.973164][ T5139] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 51.081217][ T5131] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 51.815141][ T5161] syzkaller0: entered promiscuous mode [ 51.815173][ T5161] syzkaller0: entered allmulticast mode [ 51.909279][ T5163] loop2: detected capacity change from 0 to 128 [ 51.918674][ T5163] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.935586][ T5163] syz_tun: entered allmulticast mode [ 51.952470][ T4675] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 54.013795][ T5194] loop1: detected capacity change from 0 to 256 [ 54.028200][ T5194] FAT-fs (loop1): Directory bread(block 64) failed [ 54.029423][ T5194] FAT-fs (loop1): Directory bread(block 65) failed [ 54.031426][ T5194] FAT-fs (loop1): Directory bread(block 66) failed [ 54.031464][ T5194] FAT-fs (loop1): Directory bread(block 67) failed [ 54.031503][ T5194] FAT-fs (loop1): Directory bread(block 68) failed [ 54.031521][ T5194] FAT-fs (loop1): Directory bread(block 69) failed [ 54.036580][ T5194] FAT-fs (loop1): Directory bread(block 70) failed [ 54.037827][ T5194] FAT-fs (loop1): Directory bread(block 71) failed [ 54.037862][ T5194] FAT-fs (loop1): Directory bread(block 72) failed [ 54.037875][ T5194] FAT-fs (loop1): Directory bread(block 73) failed [ 54.044313][ T5145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 54.741913][ T5206] wg2 speed is unknown, defaulting to 1000 [ 54.932615][ T5206] loop3: detected capacity change from 0 to 1024 [ 54.943065][ T5206] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (4096), stripe is disabled [ 54.972940][ T5206] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 2: comm syz.3.90: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.973175][ T5206] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.973578][ T5206] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 54.973600][ T5206] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 48: comm syz.3.90: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.973615][ T5206] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 54.973685][ T5206] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 54.973693][ T5206] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.90: Failed to acquire dquot type 0 [ 54.973703][ T5206] loop3: lost filesystem error report for type 5 error -117 [ 54.973825][ T5206] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 54.973835][ T5206] loop3: lost filesystem error report for type 5 error -117 [ 54.974100][ T5206] EXT4-fs error (device loop3): ext4_evict_inode:267: inode #11: comm syz.3.90: mark_inode_dirty error [ 54.974112][ T5206] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 54.974256][ T5206] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 54.974334][ T5206] EXT4-fs (loop3): 1 orphan inode deleted [ 54.974796][ T5206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.997845][ T4790] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 55.003520][ T4790] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 55.003542][ T4790] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 0 [ 55.715155][ T5215] syzkaller0: entered promiscuous mode [ 55.715189][ T5215] syzkaller0: entered allmulticast mode [ 55.835351][ T5220] loop2: detected capacity change from 0 to 512 [ 55.858326][ T5222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 55.933709][ T5216] Zero length message leads to an empty skb [ 55.957013][ T4674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.959122][ T4674] EXT4-fs error (device loop3): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 55.959151][ T4674] loop3: lost filesystem error report for type 5 error -117 [ 55.966413][ T4674] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 55.966443][ T4674] loop3: lost filesystem error report for type 5 error -117 [ 55.969821][ T4674] EXT4-fs error (device loop3): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 55.969858][ T4674] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 56.033970][ T5220] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.471688][ T5236] loop3: detected capacity change from 0 to 4096 [ 56.792870][ T5238] random: crng reseeded on system resumption [ 57.485381][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.126455][ T5246] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 58.231724][ T5236] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.279922][ T5236] fs-verity (loop3, inode 16): Unknown hash algorithm number: 0 [ 58.537062][ T5252] loop2: detected capacity change from 0 to 128 [ 58.546356][ T5252] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.550168][ T5255] loop0: detected capacity change from 0 to 256 [ 58.680478][ C1] Illegal XDP return value 16128 on prog (id 12) dev veth0_to_bridge, expect packet loss! [ 58.891738][ T5258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.891978][ T5258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.616754][ T5269] loop1: detected capacity change from 0 to 1024 [ 59.622973][ T5269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 61.369227][ T4674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.104618][ T5275] mmap: syz.1.106 (5275) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 62.626269][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 62.629697][ T4675] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.374032][ T5290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 63.566927][ T5293] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 63.566970][ T5293] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 64.623694][ T26] cfg80211: failed to load regulatory.db [ 65.372700][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.373995][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.918634][ T5314] loop3: detected capacity change from 0 to 2048 [ 65.944324][ T5314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.879448][ T5321] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 67.120843][ T4674] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.136386][ T5326] loop1: detected capacity change from 0 to 256 [ 67.137993][ T5326] vfat: Unknown parameter 'nnonumtail' [ 67.144811][ T5326] loop1: detected capacity change from 0 to 1024 [ 67.189610][ T5326] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 69.039026][ T5346] loop2: detected capacity change from 0 to 2048 [ 69.056344][ T5346] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.147802][ T5342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 69.916860][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.237016][ T5367] loop2: detected capacity change from 0 to 512 [ 70.248330][ T5367] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 70.271647][ T5367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.049172][ T5394] loop3: detected capacity change from 0 to 1024 [ 72.070488][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.746223][ T5399] loop2: detected capacity change from 0 to 1024 [ 72.765483][ T5399] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 72.765539][ T5399] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 72.765553][ T5399] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.133: Failed to acquire dquot type 0 [ 72.765566][ T5399] loop2: lost filesystem error report for type 5 error -117 [ 72.774071][ T5399] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 72.776668][ T5399] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.133: corrupted inode contents [ 72.776691][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.780865][ C1] EXT4-fs (loop2): error count since last fsck: 3 [ 72.780890][ C1] EXT4-fs (loop2): initial error at time 72: ext4_acquire_dquot:7034 [ 72.780912][ C1] EXT4-fs (loop2): last error at time 72: ext4_do_update_inode:5690: inode 13 [ 72.787358][ T5399] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #13: comm syz.2.133: mark_inode_dirty error [ 72.787395][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.854027][ T5399] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.133: corrupted inode contents [ 72.854065][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.857573][ T5399] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.133: mark_inode_dirty error [ 72.857596][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.860656][ T5399] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.133: corrupted inode contents [ 72.860676][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.863904][ T5399] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 72.863929][ T5399] loop2: lost filesystem error report for type 5 error -117 [ 72.867664][ T5399] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #13: comm syz.2.133: corrupted inode contents [ 72.867681][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.867840][ T5399] EXT4-fs error (device loop2): ext4_truncate:4690: inode #13: comm syz.2.133: mark_inode_dirty error [ 72.867854][ T5399] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.868574][ T5399] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 72.868592][ T5399] loop2: lost filesystem error report for type 5 error -117 [ 72.869566][ T5399] EXT4-fs (loop2): 1 truncate cleaned up [ 72.870048][ T5399] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.483275][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.460693][ T4679] Bluetooth: hci2: command 0x0406 tx timeout [ 75.675673][ T5431] can0: slcan on ttyS3. [ 75.755289][ T5432] capability: warning: `syz.2.138' uses 32-bit capabilities (legacy support in use) [ 76.190917][ T5431] can0 (unregistered): slcan off ttyS3. [ 77.945352][ T12] Bluetooth: (null): Invalid header checksum [ 78.760225][ T5490] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 79.022265][ T5492] loop1: detected capacity change from 0 to 128 [ 79.044142][ T5492] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.056849][ T5498] futex_wake_op: syz.2.156 tries to shift op by -1; fix this program [ 79.082292][ T4670] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.173252][ T5504] loop1: detected capacity change from 0 to 1024 [ 79.177271][ T5504] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 79.177367][ T5504] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 79.178258][ T5504] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 79.178399][ T5504] EXT4-fs (loop1): orphan cleanup on readonly fs [ 79.183531][ T5501] futex_wake_op: syz.0.153 tries to shift op by 32; fix this program [ 79.571479][ T5504] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.157: Inode bitmap for bg 0 marked uninitialized [ 79.571553][ T5504] loop1: lost filesystem error report for type 5 error -117 [ 79.576040][ T5504] EXT4-fs (loop1): Remounting filesystem read-only [ 79.576736][ T5504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.070047][ T30] audit: type=1326 audit(81.010:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074328][ T30] audit: type=1326 audit(81.020:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074373][ T30] audit: type=1326 audit(81.020:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074397][ T30] audit: type=1326 audit(81.020:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074419][ T30] audit: type=1326 audit(81.030:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074439][ T30] audit: type=1326 audit(81.040:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074459][ T30] audit: type=1326 audit(81.040:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 81.074478][ T30] audit: type=1326 audit(81.040:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5515 comm="syz.2.162" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb49789e8 code=0x7ffc0000 [ 82.303484][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.087538][ T5568] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 83.787499][ T5577] wg2 speed is unknown, defaulting to 1000 [ 84.084761][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.173'. [ 84.104770][ T5573] loop0: detected capacity change from 0 to 256 [ 84.105063][ T5573] vfat: Unknown parameter 'nonumtailá' [ 84.227830][ T5583] loop1: detected capacity change from 0 to 256 [ 84.701044][ T5585] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffe000 [ 85.080716][ T26] IPVS: starting estimator thread 0... [ 85.094894][ T5583] FAT-fs (loop1): Directory bread(block 64) failed [ 85.094930][ T5583] FAT-fs (loop1): Directory bread(block 65) failed [ 85.094961][ T5583] FAT-fs (loop1): Directory bread(block 66) failed [ 85.094973][ T5583] FAT-fs (loop1): Directory bread(block 67) failed [ 85.094996][ T5583] FAT-fs (loop1): Directory bread(block 68) failed [ 85.095007][ T5583] FAT-fs (loop1): Directory bread(block 69) failed [ 85.095030][ T5583] FAT-fs (loop1): Directory bread(block 70) failed [ 85.095040][ T5583] FAT-fs (loop1): Directory bread(block 71) failed [ 85.095063][ T5583] FAT-fs (loop1): Directory bread(block 72) failed [ 85.095073][ T5583] FAT-fs (loop1): Directory bread(block 73) failed [ 85.110382][ T5585] Memory failure: 0x21d09f: unhandlable page. [ 85.110416][ T5585] Memory failure: 0x21d09f: recovery action for get hwpoison page: Ignored [ 85.207142][ T5590] IPVS: using max 59 ests per chain, 141600 per kthread [ 85.223152][ T5597] loop3: detected capacity change from 0 to 2048 [ 85.327880][ T5602] x_tables: duplicate underflow at hook 4 [ 86.198022][ T5597] loop3: p2 < > p3 < p5 > p4 [ 86.199206][ T5597] loop3: partition table partially beyond EOD, truncated [ 86.476137][ T5597] loop3: p2 start 4278190080 is beyond EOD, truncated [ 86.486209][ T5597] loop3: p4 size 8192 extends beyond EOD, truncated [ 86.488992][ T5597] loop3: p5 size 8192 extends beyond EOD, truncated [ 87.022196][ T4298] loop3: p2 < > p3 < p5 > p4 [ 87.022920][ T4298] loop3: partition table partially beyond EOD, truncated [ 87.023454][ T4298] loop3: p2 start 4278190080 is beyond EOD, truncated [ 87.029663][ T4298] loop3: p4 size 8192 extends beyond EOD, truncated [ 87.031421][ T4298] loop3: p5 size 8192 extends beyond EOD, truncated [ 87.290825][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.187'. [ 87.571343][ T4658] udevd[4658]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 87.574245][ T4657] udevd[4657]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 87.575913][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 87.585011][ T4659] udevd[4659]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 87.586354][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 87.587833][ T4655] udevd[4655]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 87.711131][ T5639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 87.767022][ T5640] loop0: detected capacity change from 0 to 256 [ 88.056417][ T5646] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 88.390512][ T5668] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 88.390512][ T5668] Please contact the netfilter-devel mailing list or update your nftables rules. [ 88.668728][ T5682] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.678154][ T4769] wg2 speed is unknown, defaulting to 1000 [ 88.829396][ T5686] binder: 5685:5686 got reply transaction with no transaction stack [ 88.829438][ T5686] binder: 5685:5686 transaction reply to 0:0 failed 7/29201/-71, code 0 size 0-0 line 3139 [ 88.829762][ T26] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.093147][ T5724] loop2: detected capacity change from 0 to 512 [ 90.174446][ T5724] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 90.185778][ T5724] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.229: inode #1792: comm syz.2.229: iget: illegal inode # [ 90.185852][ T5724] loop2: lost filesystem error report for type 5 error -117 [ 90.190627][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 90.190654][ C0] EXT4-fs (loop2): initial error at time 90: ext4_get_journal_inode:5896 [ 90.190680][ C0] EXT4-fs (loop2): last error at time 90: ext4_get_journal_inode:5896 [ 90.230897][ T5724] EXT4-fs (loop2): Remounting filesystem read-only [ 90.230932][ T5724] EXT4-fs (loop2): no journal found [ 90.230953][ T5724] EXT4-fs (loop2): can't get journal size [ 90.238231][ T5724] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 90.240219][ T5724] EXT4-fs (loop2): failed to initialize system zone (-22) [ 90.240322][ T5724] EXT4-fs (loop2): mount failed [ 90.397794][ T4669] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 90.397829][ T4669] Bluetooth: Wrong link type (-22) [ 90.872839][ T5747] loop2: detected capacity change from 0 to 512 [ 90.883213][ T5747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.894532][ T5747] Option 'HmHÜ(ŠG±SšÐCzæŠD%NpäàÜw.n\ʉ¨AâàÕŒ'©›ÚMÔ$v>ÒhÞ›7õ÷½¦ó^ýMâÀк»1w' to dns_resolver key: bad/missing value [ 90.923439][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.190445][ T5770] tipc: Started in network mode [ 91.191681][ T5770] tipc: Node identity , cluster identity 4711 [ 91.192948][ T5770] tipc: Failed to obtain node identity [ 91.194155][ T5770] tipc: Enabling of bearer rejected, failed to enable media [ 91.560125][ T5784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.255'. [ 91.560542][ T5784] netlink: 60 bytes leftover after parsing attributes in process `syz.4.255'. [ 91.611501][ T4669] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 91.611563][ T4669] Bluetooth: hci3: Injecting HCI hardware error event [ 91.612228][ T4669] Bluetooth: hci3: hardware error 0x00 [ 92.219264][ T5810] loop2: detected capacity change from 0 to 512 [ 92.222053][ T5810] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.123884][ T5810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 93.169479][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 93.690669][ T4669] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 94.073188][ T5833] loop1: detected capacity change from 0 to 512 [ 94.076183][ T5833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.092951][ T5833] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 3381 (only 1 groups) [ 94.121258][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.115800][ T5852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.275'. [ 95.414157][ T4669] Bluetooth: hci4: Invalid handle: 0xfe00 > 0x0eff [ 95.611935][ T5883] loop1: detected capacity change from 0 to 128 [ 95.862038][ T5883] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.874737][ T5883] fscrypt (loop1, inode 12): Unsupported encryption flags (0x3d) [ 95.886280][ T4670] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.972932][ T5912] loop1: detected capacity change from 0 to 4096 [ 96.973352][ T5912] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.974129][ T5912] EXT4-fs (loop1): Test dummy encryption mode enabled [ 97.012374][ T5912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.067035][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.068851][ T5937] ucma_write: process 255 (syz.2.304) changed security contexts after opening file descriptor, this is not allowed. [ 98.918269][ T5955] loop2: detected capacity change from 0 to 512 [ 98.920431][ T5955] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.920481][ T5955] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.924283][ T5955] EXT4-fs (loop2): 1 truncate cleaned up [ 98.924743][ T5955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.037228][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.097566][ T5965] netlink: 104 bytes leftover after parsing attributes in process `syz.2.316'. [ 100.682320][ T6009] GUP no longer grows the stack in syz.1.332 (6009): 20004000-2000a000 (20002000) [ 100.684573][ T6009] CPU: 1 UID: 0 PID: 6009 Comm: syz.1.332 Not tainted syzkaller #0 PREEMPT [ 100.684597][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.684607][ T6009] Call trace: [ 100.684613][ T6009] show_stack+0x2c/0x3c (C) [ 100.684632][ T6009] __dump_stack+0x30/0x40 [ 100.684645][ T6009] dump_stack_lvl+0xd8/0x12c [ 100.684655][ T6009] dump_stack+0x1c/0x28 [ 100.684665][ T6009] gup_vma_lookup+0x1b4/0x1d4 [ 100.684678][ T6009] __get_user_pages+0x2fc/0x20f0 [ 100.684691][ T6009] get_user_pages_remote+0x288/0x830 [ 100.684703][ T6009] __access_remote_vm+0x1dc/0x698 [ 100.684714][ T6009] access_remote_vm+0x48/0x60 [ 100.684724][ T6009] proc_pid_cmdline_read+0x4a4/0x97c [ 100.684734][ T6009] do_loop_readv_writev+0x248/0x3d8 [ 100.684747][ T6009] vfs_readv+0x274/0x588 [ 100.684758][ T6009] do_preadv+0x120/0x234 [ 100.684769][ T6009] __arm64_sys_preadv+0xa0/0xb8 [ 100.684780][ T6009] invoke_syscall+0x98/0x244 [ 100.684791][ T6009] el0_svc_common+0xe8/0x23c [ 100.684802][ T6009] do_el0_svc+0x48/0x58 [ 100.684817][ T6009] el0_svc+0x60/0x25c [ 100.684830][ T6009] el0t_64_sync_handler+0x48/0x148 [ 100.684841][ T6009] el0t_64_sync+0x198/0x19c [ 100.689752][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 100.689767][ T6006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 102.205393][ T6045] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.525765][ T6053] loop8: detected capacity change from 0 to 8 [ 102.529403][ T6053] Dev loop8: unable to read RDB block 8 [ 102.529435][ T6053] loop8: unable to read partition table [ 102.529519][ T6053] loop8: partition table beyond EOD, truncated [ 102.529538][ T6053] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 102.863992][ T6059] Injecting memory failure for pfn 0x123918 at process virtual address 0x20fff000 [ 102.871044][ T6059] Memory failure: 0x123918: Sending SIGBUS to syz.2.350:6059 due to hardware memory corruption [ 102.871129][ T6059] Memory failure: 0x123918: recovery action for dirty LRU page: Recovered [ 102.873340][ T6059] capability: warning: `syz.2.350' uses deprecated v2 capabilities in a way that may be insecure [ 103.005144][ T6071] xt_hashlimit: size too large, truncated to 1048576 [ 103.034882][ T6074] netlink: 32 bytes leftover after parsing attributes in process `syz.4.357'. [ 103.370470][ T6082] loop2: detected capacity change from 0 to 512 [ 103.451205][ T6082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.472799][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.588527][ T6092] loop1: detected capacity change from 0 to 512 [ 103.728163][ T6092] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 103.747371][ T6093] loop2: detected capacity change from 0 to 2048 [ 103.752000][ T6092] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: comm syz.1.360: inode #1792: comm syz.1.360: iget: illegal inode # [ 103.752031][ T6092] loop1: lost filesystem error report for type 5 error -117 [ 103.752279][ T6092] EXT4-fs (loop1): Remounting filesystem read-only [ 103.752296][ T6092] EXT4-fs (loop1): no journal found [ 103.752306][ T6092] EXT4-fs (loop1): can't get journal size [ 103.759501][ T6092] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 103.761625][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 103.761640][ C1] EXT4-fs (loop1): initial error at time 103: ext4_get_journal_inode:5896 [ 103.761657][ C1] EXT4-fs (loop1): last error at time 103: ext4_get_journal_inode:5896 [ 103.766063][ T6092] EXT4-fs (loop1): failed to initialize system zone (-22) [ 103.766122][ T6092] EXT4-fs (loop1): mount failed [ 103.792895][ T6093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.837959][ T4679] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 103.841324][ T4679] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 103.842744][ T4679] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 103.851990][ T4679] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 103.853979][ T4679] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 103.882123][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.355887][ T4679] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.359181][ T4679] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.370198][ T4679] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.373669][ T4679] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.380175][ T4679] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 104.417645][ T6101] wg2 speed is unknown, defaulting to 1000 [ 104.488423][ T39] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.509032][ T6119] wg2 speed is unknown, defaulting to 1000 [ 104.567773][ T39] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.592185][ T6101] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.593568][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.593638][ T6101] bridge_slave_0: entered allmulticast mode [ 104.594097][ T6101] bridge_slave_0: entered promiscuous mode [ 104.598617][ T6101] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.599931][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.601332][ T6101] bridge_slave_1: entered allmulticast mode [ 104.602920][ T6101] bridge_slave_1: entered promiscuous mode [ 104.608234][ T39] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.617900][ T6101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.622852][ T6101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.636185][ T6101] team0: Port device team_slave_0 added [ 104.639433][ T6101] team0: Port device team_slave_1 added [ 104.651239][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.652576][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.657286][ T6101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.659776][ T6101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.659810][ T6101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.659824][ T6101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.683096][ T6101] hsr_slave_0: entered promiscuous mode [ 104.684629][ T6101] hsr_slave_1: entered promiscuous mode [ 104.686538][ T6101] debugfs: 'hsr0' already exists in 'hsr' [ 104.687730][ T6101] Cannot create hsr debugfs directory [ 104.696506][ T39] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.748251][ T6119] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.749887][ T6119] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.750025][ T6119] bridge_slave_0: entered allmulticast mode [ 104.753249][ T6119] bridge_slave_0: entered promiscuous mode [ 104.755641][ T6119] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.757035][ T6119] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.758522][ T6119] bridge_slave_1: entered allmulticast mode [ 104.759022][ T6119] bridge_slave_1: entered promiscuous mode [ 104.782227][ T6119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.784967][ T6119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.795555][ T6119] team0: Port device team_slave_0 added [ 104.797944][ T6119] team0: Port device team_slave_1 added [ 104.806588][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.807682][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.807702][ T6119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.818238][ T6119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.819544][ T6119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.821150][ T6119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.914257][ T4669] Bluetooth: hci4: link tx timeout [ 104.914320][ T4669] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 104.915066][ T4669] Bluetooth: hci4: link tx timeout [ 104.915075][ T4669] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 104.918599][ T6153] loop2: detected capacity change from 0 to 512 [ 105.030950][ T39] bridge_slave_1: left allmulticast mode [ 105.031001][ T39] bridge_slave_1: left promiscuous mode [ 105.032185][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.035106][ T39] bridge_slave_0: left allmulticast mode [ 105.035332][ T39] bridge_slave_0: left promiscuous mode [ 105.035406][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.168877][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.192834][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.216837][ T6159] Bluetooth: MGMT ver 1.23 [ 105.231649][ T39] bond0 (unregistering): Released all slaves [ 105.234291][ T6101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.236751][ T6101] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.237080][ T6101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.240486][ T6101] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.251853][ T6101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.254288][ T6101] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.254634][ T6101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.258633][ T6101] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.262878][ T6119] hsr_slave_0: entered promiscuous mode [ 105.271224][ T6119] hsr_slave_1: entered promiscuous mode [ 105.271480][ T6119] debugfs: 'hsr0' already exists in 'hsr' [ 105.271497][ T6119] Cannot create hsr debugfs directory [ 105.348132][ T6179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.378'. [ 105.454283][ T4356] 8021q: adding VLAN 0 to HW filter on device eth0 [ 105.621526][ T6101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.643746][ T6101] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.658394][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.658440][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.658970][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.658988][ T4790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.697219][ T6192] loop2: detected capacity change from 0 to 32768 [ 105.714186][ T6192] loop2: p1 p3 < > [ 105.719645][ T4356] 8021q: adding VLAN 0 to HW filter on device eth1 [ 105.732937][ T6101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.765659][ T6119] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.772242][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.774061][ T6119] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.779161][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.783834][ T6119] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.787008][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.797201][ T39] hsr_slave_0: left promiscuous mode [ 105.798576][ T39] hsr_slave_1: left promiscuous mode [ 105.800247][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.801904][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.803655][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.806230][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.815549][ T39] veth1_macvtap: left promiscuous mode [ 105.816780][ T39] veth0_macvtap: left promiscuous mode [ 105.817881][ T39] veth1_vlan: left promiscuous mode [ 105.818842][ T39] veth0_vlan: left promiscuous mode [ 105.888738][ T5623] udevd[5623]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 105.890583][ T4659] udevd[4659]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 105.930665][ T4679] Bluetooth: hci5: command tx timeout [ 105.970578][ T39] team0 (unregistering): Port device team_slave_1 removed [ 105.976676][ T39] team0 (unregistering): Port device team_slave_0 removed [ 106.034999][ T6119] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.037729][ T6119] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.043188][ T4356] 8021q: adding VLAN 0 to HW filter on device eth3 [ 106.142806][ T6119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.164252][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.183692][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.183744][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.187126][ T3645] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.187161][ T3645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.311909][ T6101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.349148][ T6270] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.353627][ T39] IPVS: stop unused estimator thread 0... [ 106.403019][ T4356] 8021q: adding VLAN 0 to HW filter on device eth2 [ 106.410975][ T4679] Bluetooth: hci3: command tx timeout [ 106.444570][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.523923][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.527011][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.390'. [ 106.531234][ T6119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.537240][ T6101] veth0_vlan: entered promiscuous mode [ 106.544544][ T6101] veth1_vlan: entered promiscuous mode [ 106.559411][ T6300] loop1: detected capacity change from 0 to 512 [ 106.569317][ T6300] EXT4-fs: Ignoring removed bh option [ 106.570058][ T6300] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 106.573713][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.590474][ T6300] EXT4-fs (loop1): 1 truncate cleaned up [ 106.597972][ T6300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.602849][ T6101] veth0_macvtap: entered promiscuous mode [ 106.613829][ T6101] veth1_macvtap: entered promiscuous mode [ 106.615350][ T6300] netlink: 16 bytes leftover after parsing attributes in process `syz.1.392'. [ 106.617340][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.392'. [ 106.620802][ T6300] macvlan0: entered allmulticast mode [ 106.622956][ T6300] veth1_vlan: entered allmulticast mode [ 106.646437][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.653617][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.661916][ T6101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.672017][ T4670] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.678861][ T40] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.678907][ T40] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.678934][ T40] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.678954][ T40] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.795356][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.795390][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.870816][ T39] bridge_slave_1: left allmulticast mode [ 106.871992][ T39] bridge_slave_1: left promiscuous mode [ 106.873073][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.875385][ T39] bridge_slave_0: left allmulticast mode [ 106.876465][ T39] bridge_slave_0: left promiscuous mode [ 106.877494][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.880465][ T39] dvmrp1: left allmulticast mode [ 106.981094][ T4679] Bluetooth: hci4: command 0x0406 tx timeout [ 107.003092][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.032256][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.062730][ T39] bond0 (unregistering): Released all slaves [ 107.090995][ T6119] veth0_vlan: entered promiscuous mode [ 107.095205][ T6119] veth1_vlan: entered promiscuous mode [ 107.102382][ T6325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.104794][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.104807][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.115612][ T6119] veth0_macvtap: entered promiscuous mode [ 107.122104][ T6119] veth1_macvtap: entered promiscuous mode [ 107.136060][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.139365][ T6119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.144210][ T1194] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.144319][ T1194] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.144361][ T1194] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.144389][ T1194] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.258457][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.258483][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.277209][ T1194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.277235][ T1194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.598556][ T4356] 8021q: adding VLAN 0 to HW filter on device eth5 [ 107.633602][ T6368] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.633646][ T6368] vhci_hcd vhci_hcd.2: invalid port number 96 [ 107.634150][ T6368] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 107.706751][ T4679] Bluetooth: Unexpected continuation frame (len 4) [ 107.947519][ T39] hsr_slave_0: left promiscuous mode [ 107.948644][ T39] hsr_slave_1: left promiscuous mode [ 107.948966][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.948980][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.949934][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.949947][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.956278][ T39] veth1_macvtap: left promiscuous mode [ 107.956316][ T39] veth0_macvtap: left promiscuous mode [ 107.956744][ T39] veth1_vlan: left promiscuous mode [ 107.956796][ T39] veth0_vlan: left promiscuous mode [ 108.020793][ T4679] Bluetooth: hci5: command tx timeout [ 108.144884][ T39] team0 (unregistering): Port device team_slave_1 removed [ 108.158216][ T39] team0 (unregistering): Port device team_slave_0 removed [ 108.274899][ T4356] 8021q: adding VLAN 0 to HW filter on device eth4 [ 108.522206][ T4679] Bluetooth: hci3: command tx timeout [ 108.864102][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.864611][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.908379][ T4356] 8021q: adding VLAN 0 to HW filter on device eth6 [ 108.932302][ T6475] process 'syz.1.437' launched './file0' with NULL argv: empty string added [ 109.050699][ T4679] Bluetooth: hci4: command 0x0406 tx timeout [ 109.129209][ T4356] 8021q: adding VLAN 0 to HW filter on device eth7 [ 109.260327][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 109.638809][ T6525] tipc: Started in network mode [ 109.639878][ T6525] tipc: Node identity e6f8c3aa74a5, cluster identity 4711 [ 109.642291][ T6525] tipc: Enabled bearer , priority 0 [ 109.651246][ T6525] syzkaller0: entered promiscuous mode [ 109.652354][ T6525] syzkaller0: entered allmulticast mode [ 109.653768][ T6525] tipc: Resetting bearer [ 109.664738][ T6524] tipc: Resetting bearer [ 110.231542][ T4669] Bluetooth: hci5: command tx timeout [ 110.572250][ T4669] Bluetooth: hci3: command tx timeout [ 110.585682][ T6562] fuse: Bad value for 'fd' [ 110.748250][ T6574] loop2: detected capacity change from 0 to 512 [ 110.748954][ T6574] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.756314][ T6574] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 110.758996][ T6574] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 110.760885][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.261745][ T6576] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 212 vs 220 free clusters [ 111.318173][ T6524] tipc: Disabling bearer [ 111.322048][ T4922] tipc: Node number set to 2455618474 [ 111.343304][ T4675] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.405436][ T6585] veth0_to_hsr: entered promiscuous mode [ 111.439047][ T6591] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 111.447187][ T6589] Bluetooth: hci0: unsupported parameter 3079 [ 111.447214][ T6589] Bluetooth: hci0: invalid len left 4, exp >= 224 [ 111.485835][ T6595] loop5: detected capacity change from 0 to 512 [ 111.499795][ T6595] EXT4-fs (loop5): Test dummy encryption mode enabled [ 111.499837][ T6595] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 111.529963][ T6595] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.473: bad orphan inode 131083 [ 111.530004][ T6595] loop5: lost filesystem error report for type 5 error -117 [ 111.531900][ T6595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.559525][ T6595] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 111.576595][ T6101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.872885][ T6634] wg2 speed is unknown, defaulting to 1000 [ 112.201596][ T6647] overlayfs: failed to clone upperpath [ 112.260690][ T4679] Bluetooth: hci5: command tx timeout [ 112.294342][ T6649] overlayfs: failed to clone upperpath [ 112.667734][ T4679] Bluetooth: hci3: command tx timeout [ 112.814621][ T4679] Bluetooth: hci2: unexpected event for opcode 0x040d [ 112.826935][ T4679] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 113.708412][ T6707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 114.433372][ T4679] Bluetooth: hci5: command 0x0406 tx timeout [ 114.498298][ T6725] binder: 6724:6725 tried to acquire reference to desc 0, got 1 instead [ 114.499703][ T24] binder: release 6724:6725 transaction 12 out, still active [ 114.499715][ T24] binder: undelivered TRANSACTION_COMPLETE [ 114.509254][ T24] binder: send failed reply for transaction 12, target dead [ 114.609276][ T6731] syzkaller0: entered promiscuous mode [ 114.609321][ T6731] syzkaller0: entered allmulticast mode [ 115.539328][ T6740] netlink: 'syz.6.518': attribute type 1 has an invalid length. [ 115.582840][ T6744] binder: 6743:6744 tried to acquire reference to desc 0, got 1 instead [ 115.587827][ T6744] binder: 6743:6744 BC_FREE_BUFFER matched unreturned or currently freeing buffer at offset 0 [ 115.590237][ T4677] binder: undelivered TRANSACTION_COMPLETE [ 115.611555][ T4776] binder: undelivered transaction 17, process died. [ 115.780268][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 116.155639][ T6745] vlan2: entered allmulticast mode [ 116.160697][ T6745] veth0_to_bond: entered allmulticast mode [ 116.188546][ T6759] syzkaller0: entered promiscuous mode [ 116.188581][ T6759] syzkaller0: entered allmulticast mode [ 116.370154][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.6.528'. [ 116.659753][ T6781] fuse: Bad value for 'fd' [ 117.674881][ T6779] bridge_slave_1: left allmulticast mode [ 117.674917][ T6779] bridge_slave_1: left promiscuous mode [ 117.675413][ T6779] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.678689][ T6779] bridge_slave_0: left allmulticast mode [ 117.679312][ T6779] bridge_slave_0: left promiscuous mode [ 117.679386][ T6779] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.829648][ T6820] loop5: detected capacity change from 0 to 128 [ 117.834106][ T6820] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 117.845851][ T6815] syzkaller0: entered promiscuous mode [ 117.845885][ T6815] syzkaller0: entered allmulticast mode [ 117.869392][ T6820] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 117.871532][ T6820] FAT-fs (loop5): Filesystem has been set read-only [ 117.933135][ T6829] overlayfs: failed to clone upperpath [ 118.269531][ T6843] binder: 6842:6843 tried to acquire reference to desc 0, got 1 instead [ 118.270017][ T6843] binder: release 6842:6843 transaction 22 out, still active [ 118.270388][ T6843] binder: undelivered TRANSACTION_COMPLETE [ 118.270962][ T6843] binder: 6842:6843 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 118.270984][ T6843] binder: 6843 RLIMIT_NICE not set [ 118.271239][ T6843] binder: 6843 RLIMIT_NICE not set [ 118.271470][ T6843] binder: send failed reply for transaction 22, target dead [ 118.271639][ T6843] binder: 6842:6843 ioctl c0306201 20000680 returned -14 [ 118.305462][ T6846] binder: 6845:6846 tried to acquire reference to desc 0, got 1 instead [ 118.307152][ T6846] binder: 6845:6846 ioctl c0306201 200003c0 returned -14 [ 118.360519][ T6854] binder: 6845:6854 got transaction with invalid fd, -956477606 [ 118.360557][ T6854] binder: 6854:6845 translate fd array failed [ 118.366984][ T6854] binder: 6845:6854 transaction call to 6845:0 failed 27/29201/-9, code 0 size 112-24 line 3649 [ 118.665536][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.729577][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.804539][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.846790][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.865232][ T4679] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 118.867041][ T4679] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 118.868243][ T4679] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 118.869027][ T4679] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 118.869274][ T4679] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.003619][ T6894] fuse: Bad value for 'fd' [ 119.021908][ T6871] wg2 speed is unknown, defaulting to 1000 [ 119.072350][ T39] bridge_slave_1: left allmulticast mode [ 119.072384][ T39] bridge_slave_1: left promiscuous mode [ 119.072491][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.075524][ T39] bridge_slave_0: left allmulticast mode [ 119.075538][ T39] bridge_slave_0: left promiscuous mode [ 119.075602][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.141241][ T6905] loop2: detected capacity change from 0 to 4096 [ 119.144673][ T6905] EXT4-fs (loop2): Test dummy encryption mode enabled [ 119.149649][ T6905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.240483][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.262036][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.272121][ T39] bond0 (unregistering): Released all slaves [ 119.295732][ T6903] syzkaller0: entered promiscuous mode [ 119.295768][ T6903] syzkaller0: entered allmulticast mode [ 119.332695][ T6434] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.339361][ T39] tipc: Left network mode [ 119.369221][ T6434] syz_tun (unregistering): left allmulticast mode [ 119.459811][ T6871] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.459891][ T6871] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.459952][ T6871] bridge_slave_0: entered allmulticast mode [ 119.460395][ T6871] bridge_slave_0: entered promiscuous mode [ 119.461523][ T6871] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.461544][ T6871] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.461598][ T6871] bridge_slave_1: entered allmulticast mode [ 119.462015][ T6871] bridge_slave_1: entered promiscuous mode [ 119.472530][ T6871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.473460][ T6871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.493288][ T6871] team0: Port device team_slave_0 added [ 119.494125][ T6871] team0: Port device team_slave_1 added [ 119.504357][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.504386][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.504399][ T6871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.504927][ T6871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.504934][ T6871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 119.504947][ T6871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.572669][ T6871] hsr_slave_0: entered promiscuous mode [ 119.573595][ T6871] hsr_slave_1: entered promiscuous mode [ 119.573792][ T6871] debugfs: 'hsr0' already exists in 'hsr' [ 119.573806][ T6871] Cannot create hsr debugfs directory [ 119.640659][ T4669] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.647146][ T4669] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.648045][ T4669] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.652717][ T4669] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.654311][ T4669] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.777538][ T39] hsr_slave_0: left promiscuous mode [ 119.778770][ T39] hsr_slave_1: left promiscuous mode [ 119.779058][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.779074][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.783103][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.783126][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.788880][ T39] veth1_macvtap: left promiscuous mode [ 119.788913][ T39] veth0_macvtap: left promiscuous mode [ 119.788959][ T39] veth1_vlan: left promiscuous mode [ 119.788988][ T39] veth0_vlan: left promiscuous mode [ 119.908667][ T39] team0 (unregistering): Port device team_slave_1 removed [ 119.917242][ T39] team0 (unregistering): Port device team_slave_0 removed [ 119.944692][ T6964] loop1: detected capacity change from 0 to 512 [ 119.945378][ T6964] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.958761][ T6964] EXT4-fs error (device loop1): ext4_init_orphan_info:618: comm syz.1.558: orphan file block 0: bad magic [ 119.958796][ T6964] loop1: lost filesystem error report for type 5 error -117 [ 119.959445][ T6964] EXT4-fs (loop1): mount failed [ 119.996735][ T6871] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.005966][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.007834][ T6871] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.011591][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.013956][ T6871] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.017164][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.020244][ T6871] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.032760][ T6871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.038468][ T4356] 8021q: adding VLAN 0 to HW filter on device eth8 [ 120.108421][ T6871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.335536][ T6947] wg2 speed is unknown, defaulting to 1000 [ 120.342729][ T6871] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.358266][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.358307][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.380144][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.380189][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.599128][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.610379][ T4356] 8021q: adding VLAN 0 to HW filter on device eth9 [ 120.659064][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.704759][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.706159][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.707702][ T6947] bridge_slave_0: entered allmulticast mode [ 120.709298][ T6947] bridge_slave_0: entered promiscuous mode [ 120.711867][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.713345][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.714722][ T6947] bridge_slave_1: entered allmulticast mode [ 120.716289][ T6947] bridge_slave_1: entered promiscuous mode [ 120.725981][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.732054][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.742983][ T6947] team0: Port device team_slave_0 added [ 120.746018][ T6947] team0: Port device team_slave_1 added [ 120.754659][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.765235][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.765261][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.765400][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.765976][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.765983][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.765995][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.778411][ T6947] hsr_slave_0: entered promiscuous mode [ 120.778712][ T6947] hsr_slave_1: entered promiscuous mode [ 120.778916][ T6947] debugfs: 'hsr0' already exists in 'hsr' [ 120.778925][ T6947] Cannot create hsr debugfs directory [ 121.101184][ T4669] Bluetooth: hci1: command tx timeout [ 121.690740][ T4669] Bluetooth: hci4: command tx timeout [ 121.732107][ T6871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.776558][ T7038] loop6: detected capacity change from 0 to 256 [ 121.783597][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.859882][ T7038] FAT-fs (loop6): Directory bread(block 64) failed [ 121.861349][ T7038] FAT-fs (loop6): Directory bread(block 65) failed [ 121.862593][ T7038] FAT-fs (loop6): Directory bread(block 66) failed [ 121.863970][ T7038] FAT-fs (loop6): Directory bread(block 67) failed [ 121.864020][ T7038] FAT-fs (loop6): Directory bread(block 68) failed [ 121.864038][ T7038] FAT-fs (loop6): Directory bread(block 69) failed [ 121.864070][ T7038] FAT-fs (loop6): Directory bread(block 70) failed [ 121.864087][ T7038] FAT-fs (loop6): Directory bread(block 71) failed [ 121.864116][ T7038] FAT-fs (loop6): Directory bread(block 72) failed [ 121.864131][ T7038] FAT-fs (loop6): Directory bread(block 73) failed [ 121.878019][ T6947] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 121.880236][ T6947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 121.881865][ T6947] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 121.883938][ T6947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 121.885737][ T6947] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 121.902820][ T6947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 121.903136][ T6947] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 121.907516][ T6947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.022775][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.038877][ T6871] veth0_vlan: entered promiscuous mode [ 122.059548][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.200986][ T39] bridge_slave_1: left allmulticast mode [ 122.201022][ T39] bridge_slave_1: left promiscuous mode [ 122.201127][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.203548][ T39] bridge_slave_0: left allmulticast mode [ 122.203560][ T39] bridge_slave_0: left promiscuous mode [ 122.203622][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.376332][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.402132][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.431649][ T39] bond0 (unregistering): Released all slaves [ 122.435538][ T4356] 8021q: adding VLAN 0 to HW filter on device eth10 [ 122.439624][ T6871] veth1_vlan: entered promiscuous mode [ 122.455780][ T3645] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.455829][ T3645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.465707][ T6871] veth0_macvtap: entered promiscuous mode [ 122.468256][ T6871] veth1_macvtap: entered promiscuous mode [ 122.471619][ T1194] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.471658][ T1194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.485208][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.495739][ T6871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.517690][ T39] tipc: Left network mode [ 122.518256][ T3645] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.518319][ T3645] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.518344][ T3645] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.518361][ T3645] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.519921][ T6947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.573706][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.573736][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.707051][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.707087][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.949980][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.217481][ T4669] Bluetooth: hci1: command tx timeout [ 123.383439][ T39] hsr_slave_0: left promiscuous mode [ 123.384698][ T39] hsr_slave_1: left promiscuous mode [ 123.384981][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.384992][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.386557][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.386572][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.394484][ T39] veth1_macvtap: left promiscuous mode [ 123.394523][ T39] veth0_macvtap: left promiscuous mode [ 123.394619][ T39] veth1_vlan: left promiscuous mode [ 123.394641][ T39] veth0_vlan: left promiscuous mode [ 123.513548][ T39] team0 (unregistering): Port device team_slave_1 removed [ 123.517501][ T39] team0 (unregistering): Port device team_slave_0 removed [ 123.593488][ T6947] veth0_vlan: entered promiscuous mode [ 123.598105][ T6947] veth1_vlan: entered promiscuous mode [ 123.656734][ T6947] veth0_macvtap: entered promiscuous mode [ 123.657962][ T6947] veth1_macvtap: entered promiscuous mode [ 123.667780][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.676746][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.678709][ T4790] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.678828][ T4790] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.678987][ T4790] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.751683][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.772369][ T4669] Bluetooth: hci4: command tx timeout [ 124.248867][ T4790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.248899][ T4790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.266702][ T4707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 124.266728][ T4707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.543055][ T4356] 8021q: adding VLAN 0 to HW filter on device eth11 [ 124.933483][ T7191] loop6: detected capacity change from 0 to 512 [ 124.986866][ T7191] fscrypt (loop6, inode 2): Error -61 getting encryption context [ 124.987034][ T7191] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -61 [ 124.987085][ T7191] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #13: comm syz.6.580: iget: bad i_size value: 12154757448730 [ 124.987104][ T7191] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 124.988699][ T7191] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.580: couldn't read orphan inode 13 (err -117) [ 124.988720][ T7191] loop6: lost filesystem error report for type 5 error -117 [ 124.991598][ T7191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.348941][ T4669] Bluetooth: hci1: command tx timeout [ 125.369197][ T7212] binder: 7210:7212 tried to acquire reference to desc 0, got 1 instead [ 125.379537][ T7212] binder: 7210:7212 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 125.383028][ T7212] binder: 7212 RLIMIT_NICE not set [ 125.383066][ T7212] binder: 7212 RLIMIT_NICE not set [ 125.387463][ T7212] binder_debug: 1 callbacks suppressed [ 125.387508][ T7212] binder: release 7210:7212 transaction 32 in, still active [ 125.391655][ T7212] binder: send failed reply for transaction 32 to 7210:7212 [ 125.395049][ T24] binder: release 7210:7212 transaction 39 out, still active [ 125.395077][ T24] binder: undelivered TRANSACTION_COMPLETE [ 125.395099][ T24] binder: undelivered TRANSACTION_ERROR: 29189 [ 125.395113][ T24] binder: undelivered TRANSACTION_COMPLETE [ 125.415128][ T4781] binder: send failed reply for transaction 39, target dead [ 125.446172][ T7218] syzkaller0: entered promiscuous mode [ 125.446210][ T7218] syzkaller0: entered allmulticast mode [ 125.460512][ T7223] lo: entered allmulticast mode [ 125.468344][ T4356] 8021q: adding VLAN 0 to HW filter on device eth13 [ 125.468572][ T7222] syzkaller0: entered promiscuous mode [ 125.468598][ T7222] syzkaller0: entered allmulticast mode [ 125.498224][ T7225] loop1: detected capacity change from 0 to 512 [ 125.502891][ T7225] EXT4-fs: Ignoring removed orlov option [ 125.504058][ T7225] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 125.877929][ T6119] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.886298][ T4669] Bluetooth: hci4: command tx timeout [ 126.176370][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 126.176419][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.207959][ T7262] syzkaller0: entered promiscuous mode [ 126.207993][ T7262] syzkaller0: entered allmulticast mode [ 126.220479][ T4356] 8021q: adding VLAN 0 to HW filter on device eth12 [ 126.661910][ T7287] loop1: detected capacity change from 0 to 256 [ 126.677680][ T7287] FAT-fs (loop1): Directory bread(block 64) failed [ 126.678962][ T7287] FAT-fs (loop1): Directory bread(block 65) failed [ 126.681355][ T7287] FAT-fs (loop1): Directory bread(block 66) failed [ 126.683109][ T7287] FAT-fs (loop1): Directory bread(block 67) failed [ 126.684503][ T7287] FAT-fs (loop1): Directory bread(block 68) failed [ 126.684522][ T7287] FAT-fs (loop1): Directory bread(block 69) failed [ 126.684570][ T7287] FAT-fs (loop1): Directory bread(block 70) failed [ 126.684583][ T7287] FAT-fs (loop1): Directory bread(block 71) failed [ 126.684607][ T7287] FAT-fs (loop1): Directory bread(block 72) failed [ 126.684618][ T7287] FAT-fs (loop1): Directory bread(block 73) failed [ 126.699083][ T4356] 8021q: adding VLAN 0 to HW filter on device eth14 [ 127.370831][ T4669] Bluetooth: hci1: command tx timeout [ 127.609470][ T4356] 8021q: adding VLAN 0 to HW filter on device eth15 [ 127.934581][ T4669] Bluetooth: hci4: command tx timeout [ 130.443085][ T7387] loop6: detected capacity change from 0 to 256 [ 131.392923][ T7393] syz_tun: entered allmulticast mode [ 131.402256][ T7391] syz_tun: entered allmulticast mode [ 131.404910][ T7391] dvmrp6: entered allmulticast mode [ 131.443703][ T7391] pimreg: entered allmulticast mode [ 131.580223][ T7391] pimreg: left allmulticast mode [ 132.577964][ T7404] loop7: detected capacity change from 0 to 512 [ 132.850840][ T7404] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 133.543924][ T7417] loop7: detected capacity change from 0 to 512 [ 133.544256][ T7417] EXT4-fs: Ignoring removed orlov option [ 133.601404][ T7417] EXT4-fs (loop7): Test dummy encryption mode enabled [ 133.601440][ T7417] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.626443][ T7417] EXT4-fs (loop7): 1 truncate cleaned up [ 133.626935][ T7417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.460864][ T30] audit: type=1326 audit(134.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7413 comm="syz.7.625" exe="/root/ci-upstream-gce-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff843789e8 code=0x0 [ 135.050280][ T7433] team0: Port device vxlan0 added [ 135.074105][ T4790] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.075700][ T3645] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.075771][ T3645] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.075835][ T3645] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.216779][ T6871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.380786][ T7454] dvmrp6: entered allmulticast mode [ 135.426953][ T7457] IPv6: addrconf: prefix option has invalid lifetime [ 136.085809][ T7405] Set syz1 is full, maxelem 65536 reached [ 137.172126][ T7494] loop7: detected capacity change from 0 to 512 [ 137.172654][ T7494] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.172681][ T7494] EXT4-fs: inline encryption not supported [ 137.172706][ T7494] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.190467][ T7494] EXT4-fs (loop7): Test dummy encryption mode enabled [ 137.190502][ T7494] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 137.207298][ T7494] EXT4-fs (loop7): 1 truncate cleaned up [ 137.207778][ T7494] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.717435][ T7501] tipc: Started in network mode [ 137.717473][ T7501] tipc: Node identity ae4d5455cd1c, cluster identity 4711 [ 137.717537][ T7501] tipc: Enabled bearer , priority 0 [ 137.717857][ T7501] syzkaller0: entered promiscuous mode [ 137.717867][ T7501] syzkaller0: entered allmulticast mode [ 137.723906][ T6871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.733652][ T7501] tipc: Resetting bearer [ 137.737497][ T7500] tipc: Resetting bearer [ 137.743396][ T7500] tipc: Disabling bearer [ 138.962717][ T7526] loop6: detected capacity change from 0 to 512 [ 141.009370][ T7577] loop7: detected capacity change from 0 to 512 [ 141.026445][ T7577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.039591][ T7577] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 141.048608][ T7577] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.660: bad orphan inode 131083 [ 141.048635][ T7577] loop7: lost filesystem error report for type 5 error -117 [ 141.049526][ T7577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.746326][ T7618] syzkaller0: entered promiscuous mode [ 141.746358][ T7618] syzkaller0: entered allmulticast mode [ 141.824902][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.664'. [ 141.873895][ T6871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.225113][ T7639] netlink: 172 bytes leftover after parsing attributes in process `syz.6.666'. [ 142.617586][ T4669] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 142.617626][ T4669] CPU: 0 UID: 0 PID: 4669 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT [ 142.617642][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.617650][ T4669] Workqueue: hci4 hci_rx_work [ 142.617670][ T4669] Call trace: [ 142.617673][ T4669] show_stack+0x2c/0x3c (C) [ 142.617691][ T4669] __dump_stack+0x30/0x40 [ 142.617702][ T4669] dump_stack_lvl+0xd8/0x12c [ 142.617712][ T4669] dump_stack+0x1c/0x28 [ 142.617722][ T4669] sysfs_warn_dup+0x9c/0xb8 [ 142.617734][ T4669] sysfs_create_dir_ns+0x190/0x1f4 [ 142.617746][ T4669] kobject_add_internal+0x28c/0x6e8 [ 142.617759][ T4669] kobject_add_varg+0x98/0xe4 [ 142.617770][ T4669] kobject_add+0x110/0x1cc [ 142.617780][ T4669] device_add+0x390/0x9e4 [ 142.617790][ T4669] hci_conn_add_sysfs+0xc0/0x1f4 [ 142.617804][ T4669] le_conn_complete_evt+0xc3c/0x109c [ 142.617812][ T4669] hci_le_conn_complete_evt+0x114/0x40c [ 142.617825][ T4669] hci_le_meta_evt+0x2d4/0x49c [ 142.617834][ T4669] hci_event_packet+0x4e4/0xa00 [ 142.617842][ T4669] hci_rx_work+0x2fc/0xd1c [ 142.617853][ T4669] process_one_work+0x78c/0x173c [ 142.617864][ T4669] process_scheduled_works+0xdc/0x13c [ 142.617874][ T4669] worker_thread+0x770/0xbd0 [ 142.617885][ T4669] kthread+0x2f0/0x3c0 [ 142.617894][ T4669] ret_from_fork+0x10/0x20 [ 142.617932][ T4669] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 142.617947][ T4669] Bluetooth: hci4: failed to register connection device [ 144.157576][ T7708] netlink: 'syz.4.676': attribute type 4 has an invalid length. [ 145.123100][ T7734] syzkaller0: entered promiscuous mode [ 145.123135][ T7734] syzkaller0: entered allmulticast mode [ 148.999041][ T7842] loop7: detected capacity change from 0 to 1024 [ 148.999443][ T7842] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.999482][ T7842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.662631][ T7842] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.956190][ T6871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.723845][ T4669] Bluetooth: hci2: command 0x0406 tx timeout [ 153.739170][ T4669] Bluetooth: hci4: Malformed MSFT vendor event: 0x02 [ 154.699620][ T7937] syzkaller0: entered promiscuous mode [ 154.702017][ T7937] syzkaller0: entered allmulticast mode [ 155.697639][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 155.698454][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.1.724'. [ 155.698545][ T7971] netlink: 36 bytes leftover after parsing attributes in process `syz.1.724'. [ 158.780457][ T30] audit: type=1400 audit(158.760:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8007 comm="syz.8.735" saddr=172.30.0.9 daddr=172.20.20.170 netif=wpan0 [ 161.504760][ T8047] fuse: Bad value for 'fd' [ 166.784855][ T8127] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 166.784855][ T8127] The task syz.7.764 (8127) triggered the difference, watch for misbehavior. [ 166.797191][ T8127] loop7: detected capacity change from 0 to 256 [ 167.247852][ T8127] FAT-fs (loop7): Directory bread(block 64) failed [ 167.247887][ T8127] FAT-fs (loop7): Directory bread(block 65) failed [ 167.247920][ T8127] FAT-fs (loop7): Directory bread(block 66) failed [ 167.247935][ T8127] FAT-fs (loop7): Directory bread(block 67) failed [ 167.247961][ T8127] FAT-fs (loop7): Directory bread(block 68) failed [ 167.247975][ T8127] FAT-fs (loop7): Directory bread(block 69) failed [ 167.248000][ T8127] FAT-fs (loop7): Directory bread(block 70) failed [ 167.248014][ T8127] FAT-fs (loop7): Directory bread(block 71) failed [ 167.248047][ T8127] FAT-fs (loop7): Directory bread(block 72) failed [ 167.248062][ T8127] FAT-fs (loop7): Directory bread(block 73) failed [ 167.682728][ T8140] 9p: Bad value for 'rfdno' [ 168.055903][ T8148] netlink: 'syz.7.771': attribute type 4 has an invalid length. [ 168.812083][ T8161] Soft offlining pfn 0x165d26 at process virtual address 0x20000000 [ 168.815130][ T8161] Soft offlining pfn 0x1224f4 at process virtual address 0x20001000 [ 168.815229][ T8161] Soft offlining pfn 0x1224f3 at process virtual address 0x20002000 [ 168.815323][ T8161] Soft offlining pfn 0x1224f2 at process virtual address 0x20003000 [ 168.815499][ T8161] Soft offlining pfn 0x1224f1 at process virtual address 0x20004000 [ 168.815934][ T8161] Soft offlining pfn 0x1224f0 at process virtual address 0x20005000 [ 168.816532][ T8161] Soft offlining pfn 0x1612df at process virtual address 0x20006000 [ 168.817368][ T8161] Soft offlining pfn 0x1612de at process virtual address 0x20007000 [ 168.818234][ T8161] Soft offlining pfn 0x1612dd at process virtual address 0x20008000 [ 168.819083][ T8161] Soft offlining pfn 0x1612dc at process virtual address 0x20009000 [ 168.819913][ T8161] Soft offlining pfn 0x1612db at process virtual address 0x2000a000 [ 168.820757][ T8161] Soft offlining pfn 0x1612da at process virtual address 0x2000b000 [ 168.821567][ T8161] Soft offlining pfn 0x1612d9 at process virtual address 0x2000c000 [ 168.822372][ T8161] Soft offlining pfn 0x1612d8 at process virtual address 0x2000d000 [ 168.823175][ T8161] Soft offlining pfn 0x16030f at process virtual address 0x2000e000 [ 168.823970][ T8161] Soft offlining pfn 0x16030e at process virtual address 0x2000f000 [ 168.824719][ T8161] Soft offlining pfn 0x16030d at process virtual address 0x20010000 [ 168.825487][ T8161] Soft offlining pfn 0x16030c at process virtual address 0x20011000 [ 169.637247][ T8181] loop6: detected capacity change from 0 to 2048 [ 170.473378][ T8181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.662723][ T8199] netlink: 'syz.8.781': attribute type 4 has an invalid length. [ 171.587610][ T8205] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.780: bg 0: block 345: padding at end of block bitmap is not set [ 171.603480][ T8205] EXT4-fs (loop6): Remounting filesystem read-only [ 171.603643][ T8205] EXT4-fs warning (device loop6): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.6.780: cleanup dec ref error -117 [ 171.642369][ T6119] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.063057][ T8249] netlink: 'syz.7.796': attribute type 4 has an invalid length. [ 175.521475][ T8268] netlink: 'syz.7.799': attribute type 4 has an invalid length. [ 175.782195][ T8282] netlink: 'syz.4.803': attribute type 4 has an invalid length. [ 176.149948][ T8288] loop7: detected capacity change from 0 to 256 [ 176.166542][ T8288] FAT-fs (loop7): Directory bread(block 64) failed [ 176.166579][ T8288] FAT-fs (loop7): Directory bread(block 65) failed [ 176.166606][ T8288] FAT-fs (loop7): Directory bread(block 66) failed [ 176.166618][ T8288] FAT-fs (loop7): Directory bread(block 67) failed [ 176.166641][ T8288] FAT-fs (loop7): Directory bread(block 68) failed [ 176.166652][ T8288] FAT-fs (loop7): Directory bread(block 69) failed [ 176.166673][ T8288] FAT-fs (loop7): Directory bread(block 70) failed [ 176.166684][ T8288] FAT-fs (loop7): Directory bread(block 71) failed [ 176.166705][ T8288] FAT-fs (loop7): Directory bread(block 72) failed [ 176.166715][ T8288] FAT-fs (loop7): Directory bread(block 73) failed [ 176.660887][ T8289] netlink: 'syz.1.806': attribute type 4 has an invalid length. [ 177.343383][ T8300] x_tables: duplicate underflow at hook 4 [ 177.754746][ T8308] netlink: 'syz.1.810': attribute type 4 has an invalid length. [ 181.091012][ T8337] hub 8-0:1.0: USB hub found [ 181.092867][ T8337] hub 8-0:1.0: 8 ports detected [ 181.301907][ T8343] netlink: 'syz.7.819': attribute type 4 has an invalid length. [ 182.926505][ T8350] Soft offlining pfn 0x1661d0 at process virtual address 0x20ffb000 [ 182.936733][ T8353] loop6: detected capacity change from 0 to 128 [ 183.080821][ T8350] Soft offlining pfn 0x123cb0 at process virtual address 0x20ffc000 [ 183.660442][ T8353] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 184.382635][ T6119] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.801667][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.803216][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.818773][ T8411] can0: slcan on ttyS3. [ 190.784596][ T8409] can0 (unregistered): slcan off ttyS3. [ 197.713502][ T8541] netlink: 'syz.6.858': attribute type 4 has an invalid length. [ 200.491278][ T8583] loop6: detected capacity change from 0 to 256 [ 200.491751][ T8583] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 203.656002][ T8606] loop7: detected capacity change from 0 to 256 [ 203.656485][ T8606] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 206.082384][ T8627] loop6: detected capacity change from 0 to 256 [ 206.083003][ T8627] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.193589][ T8637] loop6: detected capacity change from 0 to 256 [ 207.194183][ T8637] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 207.954292][ T8650] hub 8-0:1.0: USB hub found [ 207.954669][ T8650] hub 8-0:1.0: 8 ports detected [ 213.346063][ T8699] netlink: 'syz.1.895': attribute type 4 has an invalid length. [ 217.936761][ T8758] netlink: 'syz.7.906': attribute type 4 has an invalid length. [ 223.136162][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.924'. [ 223.136203][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz.8.924'. [ 230.422378][ T4669] Bluetooth: hci3: command 0x0406 tx timeout [ 234.280268][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 234.280307][ T8899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.949'. [ 241.311236][ T8976] netlink: 'syz.7.969': attribute type 4 has an invalid length. [ 242.693760][ T9001] netlink: 'syz.4.976': attribute type 4 has an invalid length. [ 243.508236][ T9019] loop6: detected capacity change from 0 to 256 [ 243.508828][ T9019] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 243.596438][ T9020] netlink: 'syz.1.982': attribute type 4 has an invalid length. [ 244.151961][ T9028] netlink: 'syz.8.984': attribute type 4 has an invalid length. [ 245.980985][ T4679] Bluetooth: hci1: command 0x0406 tx timeout [ 245.983128][ T4682] Bluetooth: hci4: command 0x0406 tx timeout [ 248.819234][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819296][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.501380][ T9230] hub 8-0:1.0: USB hub found [ 257.502093][ T9230] hub 8-0:1.0: 8 ports detected [ 259.384867][ T9255] hub 8-0:1.0: USB hub found [ 259.385266][ T9255] hub 8-0:1.0: 8 ports detected [ 262.780708][ T9306] loop7: detected capacity change from 0 to 256 [ 262.781204][ T9306] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.974915][ T9350] loop7: detected capacity change from 0 to 256 [ 264.976206][ T9350] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 266.292601][ T9367] .26±ÿ: renamed from lo [ 275.812888][ T9503] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 275.813149][ T9503] Memory failure: 0x21d09f: Sending SIGBUS to syz.4.1098:9503 due to hardware memory corruption [ 275.813452][ T9503] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 275.816893][ T9503] .26±ÿe=0,utf8=: renamed from lo [ 277.516889][ T9548] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 277.516963][ T9548] Memory failure: 0x21d09f: Sending SIGBUS to syz.7.1110:9548 due to hardware memory corruption [ 277.517000][ T9548] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 277.519135][ T9548] loop7: detected capacity change from 0 to 128 [ 277.534368][ T9548] FAT-fs (loop7): bogus number of reserved sectors [ 277.534415][ T9548] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 277.534460][ T9548] FAT-fs (loop7): Can't find a valid FAT filesystem [ 279.858883][ T9580] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 279.861828][ T9580] Memory failure: 0x21d09f: Sending SIGBUS to syz.8.1119:9580 due to hardware memory corruption [ 279.874002][ T9580] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 280.847732][ T9598] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 280.847821][ T9598] Memory failure: 0x21d09f: Sending SIGBUS to syz.8.1124:9598 due to hardware memory corruption [ 280.847857][ T9598] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 280.909089][ T9598] .26±ÿe=0,utf8=: renamed from lo [ 281.656900][ T9605] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 281.656980][ T9605] Memory failure: 0x21d09f: Sending SIGBUS to syz.1.1126:9605 due to hardware memory corruption [ 281.657017][ T9605] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 282.221021][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1129'. [ 283.774745][ T9650] hub 8-0:1.0: USB hub found [ 283.775836][ T9650] hub 8-0:1.0: 8 ports detected [ 284.220411][ T9658] hub 8-0:1.0: USB hub found [ 284.221655][ T9658] hub 8-0:1.0: 8 ports detected [ 286.161254][ T9680] netlink: 'syz.1.1145': attribute type 4 has an invalid length. [ 288.014414][ T9712] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 288.014489][ T9712] Memory failure: 0x21d09f: Sending SIGBUS to syz.7.1152:9712 due to hardware memory corruption [ 288.014524][ T9712] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 288.016426][ T9712] loop7: detected capacity change from 0 to 128 [ 288.224479][ T9712] FAT-fs (loop7): bogus number of reserved sectors [ 288.224511][ T9712] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 288.224533][ T9712] FAT-fs (loop7): Can't find a valid FAT filesystem [ 288.349861][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1154'. [ 288.803663][ T9726] Injecting memory failure for pfn 0x21d09f at process virtual address 0x20ffb000 [ 288.803745][ T9726] Memory failure: 0x21d09f: Sending SIGBUS to syz.4.1155:9726 due to hardware memory corruption [ 288.803779][ T9726] Memory failure: 0x21d09f: recovery action for already poisoned page: Failed [ 290.065996][ T9744] netlink: 'syz.6.1159': attribute type 4 has an invalid length. [ 290.068421][ T9747] netlink: 'syz.8.1160': attribute type 4 has an invalid length. [ 291.144047][ T9761] netlink: 'syz.8.1165': attribute type 4 has an invalid length. [ 291.296806][ T9762] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 292.810821][ T9803] netlink: 'syz.8.1174': attribute type 4 has an invalid length. [ 293.858418][ T9806] hub 8-0:1.0: USB hub found [ 293.859814][ T9806] hub 8-0:1.0: 8 ports detected [ 295.319453][ T9826] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 295.559597][ T9834] loop7: detected capacity change from 0 to 2048 [ 295.646871][ T9834] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.177532][ T9846] netlink: 'syz.1.1184': attribute type 4 has an invalid length. [ 297.665601][ T6871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.058411][ T9861] hub 8-0:1.0: USB hub found [ 298.058810][ T9861] hub 8-0:1.0: 8 ports detected [ 299.407601][ T9882] netlink: 'syz.6.1196': attribute type 4 has an invalid length. [ 300.045130][ T9900] loop7: detected capacity change from 0 to 2048 [ 300.162643][ T9904] netlink: 'syz.6.1199': attribute type 4 has an invalid length. [ 300.382144][ T9900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.987075][ T6871] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.040484][ T9969] hub 8-0:1.0: USB hub found [ 305.040807][ T9969] hub 8-0:1.0: 8 ports detected [ 306.775794][ T9990] netlink: 'syz.7.1221': attribute type 4 has an invalid length. [ 310.291316][ T1573] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.293258][ T1573] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.083298][T10061] netlink: 'syz.4.1239': attribute type 4 has an invalid length. [ 313.100765][T10073] siw: device registration error -23 [ 313.702331][T10073] Unable to handle kernel paging request at virtual address dfff80000000000d [ 313.702385][T10073] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 313.702417][T10073] Mem abort info: [ 313.702430][T10073] ESR = 0x0000000096000005 [ 313.702465][T10073] EC = 0x25: DABT (current EL), IL = 32 bits [ 313.702496][T10073] SET = 0, FnV = 0 [ 313.702510][T10073] EA = 0, S1PTW = 0 [ 313.702528][T10073] FSC = 0x05: level 1 translation fault [ 313.702542][T10073] Data abort info: [ 313.702554][T10073] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 313.702574][T10073] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 313.702588][T10073] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 313.702603][T10073] [dfff80000000000d] address between user and kernel address ranges [ 313.702665][T10073] Internal error: Oops: 0000000096000005 [#1] SMP [ 313.716769][T10073] Modules linked in: [ 313.717434][T10073] CPU: 0 UID: 0 PID: 10073 Comm: syz.6.1236 Tainted: G L syzkaller #0 PREEMPT [ 313.719250][T10073] Tainted: [L]=SOFTLOCKUP [ 313.720029][T10073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.721727][T10073] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 313.723058][T10073] pc : kernel_sock_shutdown+0x4c/0x80 [ 313.723975][T10073] lr : kernel_sock_shutdown+0x28/0x80 [ 313.724939][T10073] sp : ffff800095fe6f20 [ 313.725634][T10073] x29: ffff800095fe6f20 x28: ffff800095fe7500 x27: ffff8000874ab5e0 [ 313.727141][T10073] x26: 0000000000000005 x25: ffff800095fe6fe0 x24: dfff800000000000 [ 313.728598][T10073] x23: 0000000000000002 x22: dfff800000000000 x21: 0000000000000068 [ 313.730047][T10073] x20: ffff0000f0b2e040 x19: 0000000000000002 x18: 1fffe00035c20e20 [ 313.731495][T10073] x17: ffff8000888db000 x16: ffff80008898cfc0 x15: ffff0001ae10710c [ 313.732918][T10073] x14: ffff0001ae107108 x13: 0000000000000001 x12: 0000000000000000 [ 313.734318][T10073] x11: ffff80008a343d08 x10: 0000000000080000 x9 : 0000000000000a5a [ 313.735716][T10073] x8 : 000000000000000d x7 : 0000000000000000 x6 : 0000000000000000 [ 313.737113][T10073] x5 : 0000000000000001 x4 : 0000000000000008 x3 : ffff800080153db0 [ 313.738520][T10073] x2 : 0000000000000007 x1 : ffff0000cea49d00 x0 : 0000000000000001 [ 313.739830][T10073] Call trace: [ 313.740378][T10073] kernel_sock_shutdown+0x4c/0x80 (P) [ 313.741278][T10073] udp_tunnel_sock_release+0x6c/0x88 [ 313.742146][T10073] rxe_net_del+0x114/0x31c [ 313.743014][T10073] rxe_dellink+0x20/0x34 [ 313.743815][T10073] nldev_dellink+0x2ac/0x328 [ 313.744647][T10073] rdma_nl_rcv+0x568/0x828 [ 313.745371][T10073] netlink_unicast+0x610/0x800 [ 313.746175][T10073] netlink_sendmsg+0x63c/0x920 [ 313.747058][T10073] __sock_sendmsg+0xc8/0x138 [ 313.747933][T10073] ____sys_sendmsg+0x418/0x70c [ 313.748781][T10073] ___sys_sendmsg+0x198/0x224 [ 313.749601][T10073] __sys_sendmsg+0x160/0x214 [ 313.750407][T10073] __arm64_sys_sendmsg+0x80/0x94 [ 313.751292][T10073] invoke_syscall+0x98/0x244 [ 313.752114][T10073] el0_svc_common+0xe8/0x23c [ 313.752881][T10073] do_el0_svc+0x48/0x58 [ 313.753645][T10073] el0_svc+0x60/0x25c [ 313.754338][T10073] el0t_64_sync_handler+0x48/0x148 [ 313.755325][T10073] el0t_64_sync+0x198/0x19c [ 313.756179][T10073] Code: 97031e07 f94002a8 9101a115 d343fea8 (38766908) [ 313.757415][T10073] ---[ end trace 0000000000000000 ]--- [ 313.886459][T10073] Kernel panic - not syncing: Oops: Fatal exception [ 313.887679][T10073] SMP: stopping secondary CPUs [ 313.888552][T10073] Kernel Offset: disabled [ 313.889328][T10073] CPU features: 0x08000000,003c0008,27020501,5427fea7 [ 313.890576][T10073] Memory Limit: none [ 314.037740][T10073] Rebooting in 86400 seconds..