last executing test programs: 12.576487714s ago: executing program 1 (id=101): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 11.616262789s ago: executing program 1 (id=103): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0xa4}, 0x48) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x154}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 11.080039127s ago: executing program 0 (id=105): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0xfffffffc, 0x0, r4}, &(0x7f0000000600)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r5, 0x2ded, 0x4000, 0x8, 0x0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r8, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xf6f, &(0x7f0000000680)={0x0, 0x4b46, 0x2, 0x0, 0x2ea}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x84301) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x200000000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r10, 0x0) 9.510657262s ago: executing program 1 (id=107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r1, r0, 0x0, 0x578410eb) openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], 0xffffffffffffffff, 0x0, 0x0}) 7.856027448s ago: executing program 1 (id=108): semget(0x3, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x400000000000027, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 7.782376029s ago: executing program 3 (id=109): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xfd, 0x1, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x96}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x200000005, 0x0, 0x2, 0xf7fffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x80007, 0x0, 0x0, 0xf0ee, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.547400152s ago: executing program 0 (id=110): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$inet(r0, 0x0, 0x4048081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 7.235382627s ago: executing program 2 (id=111): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 6.867394393s ago: executing program 2 (id=112): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 5.898835048s ago: executing program 2 (id=113): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 5.78080692s ago: executing program 0 (id=114): socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x10, 0x803, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 4.927025813s ago: executing program 2 (id=115): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0xa4}, 0x48) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0x58, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x58}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f00000002c0), &(0x7f0000000300)=r0}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x709d29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x2, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x2, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xf5, 0x2}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x4, 0x5, 0x0, 0x0, "508b276597b6c58b"}, 0x1}}]}, 0x154}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 4.876745364s ago: executing program 1 (id=116): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d40102030109021200010000000009"], 0x0) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x800}, &(0x7f0000000100)=0x0, &(0x7f0000000300)) r1 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @private=0xa010102}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000bc0), 0x1, 0x50e, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000500)={0x200, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r6, &(0x7f0000000280)=':', 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f000000cf40)='htcp\x00', 0x5) shutdown(r6, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) 4.358427412s ago: executing program 3 (id=117): r0 = syz_open_dev$video(&(0x7f0000000040), 0x7, 0x2000) ioctl$VIDIOC_G_SELECTION(r0, 0xc0405668, &(0x7f0000000080)={0x1, 0x0, 0x1, {0x2, 0x9, 0x31}}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2810800, &(0x7f0000000b00)={[{@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@uni_xlateno}, {@shortname_lower}, {@nonumtail}, {@shortname_win95}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@utf8no}, {@fat=@usefree}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@rodir}, {@fat=@sys_immutable}, {@utf8no}]}, 0x4, 0x33c, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x78) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_clone(0x10004000, &(0x7f0000000180)="0f1d66366ef5c9add2d9e8cb72aa1f785b0943a6c93629106739cf8cc9f8346fa21fea8ad229e59357748b6a2f30a043b30a4d7b5d0f06c65ecb0a5d4eb749502a754625d2e95db383aace5bd486c6effc554114fa4e83602947c5748b3f78114e48b1129f9607f76bdb7e7e2a2f7cb83016c4b51b75de35bdf1699c30530d3269abcc96aac0f66f3424fd3edb4efa4ea5afe924a78a7f", 0x97, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000380)="fef5fff59ff0f08c4dbef21b6f6a797d59a0ee6aa95407bb8b8deda46cfa15be5f8449574ec04c6d896bdfbc71fe6f7de549a12915a6a22aa0f96585a7d47a7cbbc59823a29f2a20203923c609e1acbc699825cfd05a8fd922dfd76cd3677e2a739def0851bcde8335f160d2e9e57d4fd2b21f9f9e34b38ff5778f26d6788c0460a62a2296884b47eb8d8155c46f5f56cc52d6c4a51da077731fc2bcf40b3ed2985692821e1a64de126b4100b5db9e79015e753d58000388d5994c07ba7264f45a") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000004c0)={0x404043000, 0x3ff, 0x4, 0x2}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000580)=0xff06ff) 4.047499967s ago: executing program 3 (id=118): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_AIE_ON(r3, 0x7001) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, 0x0, 0x0}, 0x94) 2.826194596s ago: executing program 3 (id=119): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x401, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r2, 0x5453, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x6, 0x4, 0x2, 0x4, 0x10d0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x5, 0x100000, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac05]}]]}, 0x30}}, 0x4000800) 2.825308656s ago: executing program 0 (id=120): socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) 2.490590671s ago: executing program 2 (id=121): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40880, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000200)) 1.828152801s ago: executing program 0 (id=122): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) sendmsg$inet(r0, 0x0, 0x4048081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 1.605392845s ago: executing program 3 (id=123): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.486438107s ago: executing program 1 (id=124): semget(0x3, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2}, {{}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x59}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000000c0), 0x400000000000027, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 334.593665ms ago: executing program 0 (id=125): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xfd, 0x1, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x96}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(r0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x200000005, 0x0, 0x2, 0xf7fffffffffffffc, 0x0, 0x0, {0x0, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x80007, 0x0, 0x0, 0xf0ee, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 334.173215ms ago: executing program 2 (id=126): prlimit64(0x0, 0xe, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), 0x0}, 0x20) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl']) 0s ago: executing program 3 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x289d, 0x0, &(0x7f0000000340), &(0x7f0000000380)) r2 = syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0xfec9, 0x1000, 0x5, 0x3d1, 0x0, r1}, 0x0, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0xfffffffffffffffe, 0x1000}], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) close(0x3) close(0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c23003f) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, 0x0, 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r8, 0x1, 0xfffffffe, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.222' (ED25519) to the list of known hosts. [ 82.541641][ T5777] cgroup: Unknown subsys name 'net' [ 82.681409][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.407131][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.501164][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.510123][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.518035][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.532107][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.541011][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.550042][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.557997][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.567610][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.578401][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.599522][ T5104] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.650805][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.658973][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.666652][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.674614][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.683111][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.693446][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.702722][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.710632][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.722522][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.743890][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.752005][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.804507][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.819986][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.827663][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.077341][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 87.311442][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.322135][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.330531][ T5786] bridge_slave_0: entered allmulticast mode [ 87.338826][ T5786] bridge_slave_0: entered promiscuous mode [ 87.353085][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.360527][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.368246][ T5786] bridge_slave_1: entered allmulticast mode [ 87.377641][ T5786] bridge_slave_1: entered promiscuous mode [ 87.430563][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 87.556664][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.585929][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.619923][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 87.713970][ T5786] team0: Port device team_slave_0 added [ 87.727619][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 87.748893][ T5786] team0: Port device team_slave_1 added [ 87.872136][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.879230][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.906117][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.940499][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.947976][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.955562][ T5791] bridge_slave_0: entered allmulticast mode [ 87.967851][ T5791] bridge_slave_0: entered promiscuous mode [ 88.039365][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.046495][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.073880][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.091565][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.099427][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.107678][ T5791] bridge_slave_1: entered allmulticast mode [ 88.116387][ T5791] bridge_slave_1: entered promiscuous mode [ 88.131900][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.139451][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.146974][ T5796] bridge_slave_0: entered allmulticast mode [ 88.154386][ T5796] bridge_slave_0: entered promiscuous mode [ 88.163630][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.170915][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.178679][ T5796] bridge_slave_1: entered allmulticast mode [ 88.186879][ T5796] bridge_slave_1: entered promiscuous mode [ 88.277486][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.284895][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.292223][ T5790] bridge_slave_0: entered allmulticast mode [ 88.300706][ T5790] bridge_slave_0: entered promiscuous mode [ 88.310761][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.323782][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.349137][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.361777][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.374903][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.382102][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.389681][ T5790] bridge_slave_1: entered allmulticast mode [ 88.397248][ T5790] bridge_slave_1: entered promiscuous mode [ 88.449804][ T5786] hsr_slave_0: entered promiscuous mode [ 88.456543][ T5786] hsr_slave_1: entered promiscuous mode [ 88.507608][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.534829][ T5791] team0: Port device team_slave_0 added [ 88.544089][ T5796] team0: Port device team_slave_0 added [ 88.552827][ T5796] team0: Port device team_slave_1 added [ 88.560910][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.584286][ T5791] team0: Port device team_slave_1 added [ 88.632389][ T5790] team0: Port device team_slave_0 added [ 88.643327][ T5793] Bluetooth: hci0: command tx timeout [ 88.676806][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.684020][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.710043][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.723771][ T5790] team0: Port device team_slave_1 added [ 88.757842][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.765311][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.791793][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.803227][ T5793] Bluetooth: hci1: command tx timeout [ 88.808973][ T5793] Bluetooth: hci3: command tx timeout [ 88.826794][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.833975][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.860065][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.873420][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.880436][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.906438][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.917165][ T5793] Bluetooth: hci2: command tx timeout [ 88.991839][ T5796] hsr_slave_0: entered promiscuous mode [ 88.999468][ T5796] hsr_slave_1: entered promiscuous mode [ 89.006628][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.015113][ T5796] Cannot create hsr debugfs directory [ 89.021784][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.029288][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.055379][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.068675][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.075785][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.103701][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.243627][ T5791] hsr_slave_0: entered promiscuous mode [ 89.250329][ T5791] hsr_slave_1: entered promiscuous mode [ 89.257192][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.265033][ T5791] Cannot create hsr debugfs directory [ 89.345532][ T5790] hsr_slave_0: entered promiscuous mode [ 89.353058][ T5790] hsr_slave_1: entered promiscuous mode [ 89.359557][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.367257][ T5790] Cannot create hsr debugfs directory [ 89.567341][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.610526][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.628239][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.664432][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.801320][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.823625][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.847907][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.872025][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.944257][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.965110][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.008335][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.021459][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.077403][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.103461][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.115915][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.126469][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.138862][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.205810][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.267153][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.274699][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.287617][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.294853][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.468139][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.487901][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.537792][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.589145][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.603945][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.621342][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.645338][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.652589][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.668241][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.675720][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.706389][ T1302] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.713874][ T1302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.723264][ T5793] Bluetooth: hci0: command tx timeout [ 90.740128][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.747418][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.762153][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.771039][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.826731][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.834046][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.883957][ T5793] Bluetooth: hci3: command tx timeout [ 90.889512][ T5793] Bluetooth: hci1: command tx timeout [ 90.927056][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.963117][ T5793] Bluetooth: hci2: command tx timeout [ 90.981482][ T5791] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.991987][ T5791] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.148255][ T5786] veth0_vlan: entered promiscuous mode [ 91.186176][ T5786] veth1_vlan: entered promiscuous mode [ 91.261843][ T5786] veth0_macvtap: entered promiscuous mode [ 91.296389][ T5786] veth1_macvtap: entered promiscuous mode [ 91.371591][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.407873][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.458436][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.503166][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.511956][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.533929][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.622035][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.664470][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.754452][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.798051][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.813186][ T5791] veth0_vlan: entered promiscuous mode [ 91.818869][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.857868][ T5791] veth1_vlan: entered promiscuous mode [ 91.918640][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.943096][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.958441][ T5790] veth0_vlan: entered promiscuous mode [ 91.997292][ T5791] veth0_macvtap: entered promiscuous mode [ 92.013328][ T5790] veth1_vlan: entered promiscuous mode [ 92.024190][ T5796] veth0_vlan: entered promiscuous mode [ 92.040840][ T5791] veth1_macvtap: entered promiscuous mode [ 92.077992][ T5796] veth1_vlan: entered promiscuous mode [ 92.127975][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.140069][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.155169][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.190566][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.205014][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.222043][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.290257][ T5790] veth0_macvtap: entered promiscuous mode [ 92.330474][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.339718][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.350264][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.359200][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.382682][ T5790] veth1_macvtap: entered promiscuous mode [ 92.394147][ T5796] veth0_macvtap: entered promiscuous mode [ 92.423825][ T5796] veth1_macvtap: entered promiscuous mode [ 92.500662][ T785] cfg80211: failed to load regulatory.db [ 92.551674][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.564107][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.574638][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.585665][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.596281][ T5884] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.599153][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.678052][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.691257][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.709822][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.723026][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.737878][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.773418][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.819052][ T5793] Bluetooth: hci0: command tx timeout [ 92.823185][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.963752][ T5789] Bluetooth: hci3: command tx timeout [ 92.970359][ T5793] Bluetooth: hci1: command tx timeout [ 93.052958][ T5793] Bluetooth: hci2: command tx timeout [ 93.330491][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.341311][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.358215][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.372051][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.396865][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.407825][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.419366][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.429738][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.440998][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.451920][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.463574][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.477499][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.492023][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.505386][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.514512][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.525514][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.545458][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.558762][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.605623][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.615226][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.625036][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.635922][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.666261][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.674760][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.759550][ T5888] syz.3.6[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.999368][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.032968][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.108650][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.132221][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.176949][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.198776][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.245875][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.266915][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.554246][ T5898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 94.615953][ T5896] loop0: detected capacity change from 0 to 4096 [ 94.664111][ T5896] ======================================================= [ 94.664111][ T5896] WARNING: The mand mount option has been deprecated and [ 94.664111][ T5896] and is ignored by this kernel. Remove the mand [ 94.664111][ T5896] option from the mount to silence this warning. [ 94.664111][ T5896] ======================================================= [ 94.761686][ T5888] loop3: detected capacity change from 0 to 32768 [ 94.871143][ T5907] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.946381][ T5793] Bluetooth: hci0: command tx timeout [ 94.954170][ T5888] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.045577][ T5793] Bluetooth: hci1: command tx timeout [ 95.051289][ T5793] Bluetooth: hci3: command tx timeout [ 95.193612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.203547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.209568][ T5789] Bluetooth: hci2: command tx timeout [ 95.227815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.240502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.262374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 95.360196][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.370106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #248!!! [ 95.379293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.388903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.403865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 95.819560][ T5916] loop2: detected capacity change from 0 to 1024 [ 97.418337][ T5916] EXT4-fs (loop2): filesystem is read-only [ 97.492530][ T5916] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 97.503605][ T5916] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (11891!=20869) [ 97.515341][ T5916] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 97.526841][ T5916] EXT4-fs error (device loop2): ext4_get_journal_inode:5805: comm syz.2.11: inode #1: comm syz.2.11: iget: illegal inode # [ 97.543988][ T5896] syz.0.8 (5896) used greatest stack depth: 19208 bytes left [ 97.592147][ T5916] EXT4-fs (loop2): no journal found [ 97.597657][ T5916] EXT4-fs (loop2): can't get journal size [ 98.347020][ T5915] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 524288 [ 98.355940][ T5915] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=15) [ 98.368735][ T5916] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.11: iget: special inode unallocated [ 98.473995][ T5888] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 98.576335][ T5916] EXT4-fs (loop2): get root inode failed [ 98.582100][ T5916] EXT4-fs (loop2): mount failed [ 98.596064][ T5915] Remounting filesystem read-only [ 98.601203][ T5915] NILFS (loop0): error -5 truncating bmap (ino=15) [ 98.686917][ T5924] Zero length message leads to an empty skb [ 99.423121][ T5888] XFS (loop3): Starting recovery (logdev: internal) [ 99.501614][ T5791] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 99.577335][ T5888] XFS (loop3): Ending recovery (logdev: internal) [ 99.603922][ T5888] XFS (loop3): Quotacheck needed: Please wait. [ 99.610154][ T5791] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 99.630378][ T5791] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 99.647597][ T5926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.661423][ T5791] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 99.671151][ T5791] NILFS (loop0): discard dirty block: blocknr=28, size=4096 [ 99.679584][ T5791] NILFS (loop0): discard dirty page: offset=4096, ino=3 [ 99.708127][ T5791] NILFS (loop0): discard dirty block: blocknr=29, size=4096 [ 99.720387][ T5888] XFS (loop3): Quotacheck: Done. [ 99.729896][ T5791] NILFS (loop0): discard dirty page: offset=925696, ino=3 [ 99.737325][ T5791] NILFS (loop0): discard dirty block: blocknr=36, size=4096 [ 99.749942][ T5791] NILFS (loop0): discard dirty page: offset=929792, ino=3 [ 99.772391][ T5791] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 99.787341][ T5791] NILFS (loop0): discard dirty page: offset=933888, ino=3 [ 99.803236][ T5786] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 99.822476][ T5791] NILFS (loop0): discard dirty block: blocknr=0, size=4096 [ 100.357052][ T5789] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 102.338750][ T5949] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.385849][ T5949] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.411307][ T5949] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.432249][ T5949] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 102.445596][ T5949] geneve2: entered promiscuous mode [ 102.462550][ T5949] geneve2: entered allmulticast mode [ 103.782727][ T5962] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.281219][ T5962] loop2: detected capacity change from 0 to 128 [ 104.324021][ T5962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.330713][ T5962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 104.370936][ T5962] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.439962][ T5962] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.474456][ T5962] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 105.648108][ T5962] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.351737][ T6021] loop1: detected capacity change from 0 to 128 [ 110.365579][ T6021] qnx6: superblock #1 checksum error [ 114.464671][ T5789] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 116.665952][ T6071] 9pnet_fd: Insufficient options for proto=fd [ 116.727922][ T6066] loop3: detected capacity change from 0 to 32768 [ 116.833846][ T6066] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 116.852036][ T6066] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 117.028186][ T6066] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 117.083969][ T1527] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 117.112090][ T1527] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 117.260576][ T1527] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 148ms [ 117.290175][ T1527] gfs2: fsid=syz:syz.0: jid=0: Done [ 117.303313][ T6066] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 123.113318][ T6102] loop0: detected capacity change from 0 to 32768 [ 124.857613][ T6139] loop0: detected capacity change from 0 to 128 [ 124.870987][ T6139] qnx6: superblock #1 checksum error [ 124.952221][ T5803] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.942989][ T5835] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 127.002421][ T5815] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.021780][ T6155] loop0: detected capacity change from 0 to 4096 [ 127.113337][ T6155] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 127.141231][ T6155] ntfs3: loop0: Failed to load $UpCase (-22). [ 127.153036][ T5835] usb 2-1: Using ep0 maxpacket: 32 [ 127.179207][ T5835] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 127.192505][ T5815] usb 4-1: Using ep0 maxpacket: 32 [ 127.207669][ T5815] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 16129, setting to 1024 [ 127.211403][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.241114][ T5815] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 127.268497][ T5815] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.273236][ T5835] usb 2-1: Product: syz [ 127.281567][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.281762][ T5835] usb 2-1: Manufacturer: syz [ 127.323060][ T5835] usb 2-1: SerialNumber: syz [ 127.336165][ T5815] usb 4-1: Product: syz [ 127.346123][ T5815] usb 4-1: Manufacturer: syz [ 127.358703][ T5815] usb 4-1: SerialNumber: syz [ 127.365476][ T5835] usb 2-1: config 0 descriptor?? [ 127.700089][ T6163] loop1: detected capacity change from 0 to 512 [ 127.742681][ T5815] cdc_ncm 4-1:1.0: bind() failure [ 127.766512][ T6163] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1) [ 127.803571][ T5815] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 127.826544][ T5815] cdc_ncm 4-1:1.1: bind() failure [ 127.868321][ T5815] usb 4-1: USB disconnect, device number 2 [ 127.904661][ T6166] xt_l2tp: invalid flags combination: c [ 129.491728][ T5835] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 129.503462][ T5835] RobotFuzz Open Source InterFace, OSIF: probe of 2-1:0.0 failed with error -110 [ 130.488011][ T5815] usb 2-1: USB disconnect, device number 2 [ 133.747673][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.754508][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.327792][ T6218] loop0: detected capacity change from 0 to 1024 [ 135.414114][ T6218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.453121][ T6218] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.467459][ T6218] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm syz.0.98: lblock 3 mapped to illegal pblock 3 (length 3) [ 136.573045][ T6237] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 136.609892][ T6218] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 136.706795][ T6218] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.706795][ T6218] [ 136.904288][ T1141] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:6: lblock 8 mapped to illegal pblock 8 (length 1) [ 136.948520][ T1141] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 1 with error 117 [ 136.964448][ T1141] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.964448][ T1141] [ 137.004503][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.024580][ T6255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 143.522557][ T2179] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 143.728979][ T6294] loop3: detected capacity change from 0 to 256 [ 143.742542][ T2179] usb 2-1: Using ep0 maxpacket: 32 [ 143.745425][ T6294] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 143.786862][ T2179] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 143.820978][ T2179] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 143.845666][ T2179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.864199][ T2179] usb 2-1: Product: syz [ 143.874769][ T2179] usb 2-1: Manufacturer: syz [ 143.879465][ T2179] usb 2-1: SerialNumber: syz [ 143.923079][ T2179] usb 2-1: config 0 descriptor?? [ 144.299282][ T6290] loop1: detected capacity change from 0 to 512 [ 144.610903][ T6290] EXT4-fs (loop1): first meta block group too large: 4294967295 (group descriptor block count 1) [ 146.534157][ T5835] usb 2-1: USB disconnect, device number 3 [ 148.104523][ T6324] ------------[ cut here ]------------ [ 148.110486][ T6324] WARNING: CPU: 1 PID: 6324 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 148.119554][ T6324] Modules linked in: [ 148.123627][ T6324] CPU: 1 PID: 6324 Comm: syz.2.126 Not tainted 6.6.99-syzkaller #0 [ 148.131577][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.141787][ T6324] RIP: 0010:__alloc_pages+0x2de/0x460 [ 148.147405][ T6324] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 43 1f 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 148.168622][ T6324] RSP: 0018:ffffc9000b37fa80 EFLAGS: 00010246 [ 148.175151][ T6324] RAX: ffffc9000b37fa00 RBX: 1ffff9200166ff54 RCX: 0000000000000000 [ 148.183226][ T6324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b37fae8 [ 148.191284][ T6324] RBP: ffffc9000b37fb80 R08: ffffc9000b37fae7 R09: 0000000000000000 [ 148.199378][ T6324] R10: ffffc9000b37fac0 R11: fffff5200166ff5d R12: 000000000000002a [ 148.208178][ T6324] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 148.216365][ T6324] FS: 00007facedb826c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 148.225420][ T6324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.232065][ T6324] CR2: 00007ff7d61b0250 CR3: 000000003091f000 CR4: 00000000003506e0 [ 148.240171][ T6324] Call Trace: [ 148.243555][ T6324] [ 148.246549][ T6324] ? zone_statistics+0x170/0x170 [ 148.251567][ T6324] ? v9fs_fid_find+0x270/0x270 [ 148.256527][ T6324] __kmalloc_large_node+0x8c/0x1e0 [ 148.261826][ T6324] ? v9fs_fid_get_acl+0x4f/0xf0 [ 148.266814][ T6324] __kmalloc+0x111/0x240 [ 148.271164][ T6324] v9fs_fid_get_acl+0x4f/0xf0 [ 148.275988][ T6324] v9fs_get_acl+0x9a/0x350 [ 148.280497][ T6324] v9fs_mount+0x862/0xb40 [ 148.284999][ T6324] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 148.290461][ T6324] legacy_get_tree+0xea/0x180 [ 148.295292][ T6324] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 148.300740][ T6324] vfs_get_tree+0x8c/0x280 [ 148.305948][ T6324] do_new_mount+0x24b/0xa40 [ 148.310545][ T6324] __se_sys_mount+0x2da/0x3c0 [ 148.315502][ T6324] ? __x64_sys_mount+0xc0/0xc0 [ 148.320357][ T6324] ? lockdep_hardirqs_on+0x98/0x150 [ 148.325692][ T6324] ? __x64_sys_mount+0x20/0xc0 [ 148.330525][ T6324] do_syscall_64+0x55/0xb0 [ 148.335119][ T6324] ? clear_bhb_loop+0x40/0x90 [ 148.339869][ T6324] ? clear_bhb_loop+0x40/0x90 [ 148.344700][ T6324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.350688][ T6324] RIP: 0033:0x7facecd8e9a9 [ 148.355249][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.374979][ T6324] RSP: 002b:00007facedb82038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.383530][ T6324] RAX: ffffffffffffffda RBX: 00007facecfb5fa0 RCX: 00007facecd8e9a9 [ 148.391565][ T6324] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 148.399645][ T6324] RBP: 00007facece10d69 R08: 0000200000000580 R09: 0000000000000000 [ 148.408512][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.416706][ T6324] R13: 0000000000000000 R14: 00007facecfb5fa0 R15: 00007ffc63f96bd8 [ 148.424807][ T6324] [ 148.427878][ T6324] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.435200][ T6324] CPU: 1 PID: 6324 Comm: syz.2.126 Not tainted 6.6.99-syzkaller #0 [ 148.443134][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.453211][ T6324] Call Trace: [ 148.456514][ T6324] [ 148.459472][ T6324] dump_stack_lvl+0x16c/0x230 [ 148.464182][ T6324] ? show_regs_print_info+0x20/0x20 [ 148.469443][ T6324] ? load_image+0x3b0/0x3b0 [ 148.474015][ T6324] panic+0x2c0/0x710 [ 148.477958][ T6324] ? bpf_jit_dump+0xd0/0xd0 [ 148.482527][ T6324] __warn+0x2e0/0x470 [ 148.486566][ T6324] ? __alloc_pages+0x2de/0x460 [ 148.491375][ T6324] ? __alloc_pages+0x2de/0x460 [ 148.496178][ T6324] report_bug+0x2be/0x4f0 [ 148.500546][ T6324] ? __alloc_pages+0x2de/0x460 [ 148.505366][ T6324] ? __alloc_pages+0x2de/0x460 [ 148.510176][ T6324] ? __alloc_pages+0x2e0/0x460 [ 148.514984][ T6324] handle_bug+0xcf/0x120 [ 148.519270][ T6324] exc_invalid_op+0x1a/0x50 [ 148.523815][ T6324] asm_exc_invalid_op+0x1a/0x20 [ 148.528716][ T6324] RIP: 0010:__alloc_pages+0x2de/0x460 [ 148.534132][ T6324] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 43 1f 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 148.553774][ T6324] RSP: 0018:ffffc9000b37fa80 EFLAGS: 00010246 [ 148.559909][ T6324] RAX: ffffc9000b37fa00 RBX: 1ffff9200166ff54 RCX: 0000000000000000 [ 148.567970][ T6324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000b37fae8 [ 148.575994][ T6324] RBP: ffffc9000b37fb80 R08: ffffc9000b37fae7 R09: 0000000000000000 [ 148.584015][ T6324] R10: ffffc9000b37fac0 R11: fffff5200166ff5d R12: 000000000000002a [ 148.592018][ T6324] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 148.600041][ T6324] ? zone_statistics+0x170/0x170 [ 148.605031][ T6324] ? v9fs_fid_find+0x270/0x270 [ 148.609837][ T6324] __kmalloc_large_node+0x8c/0x1e0 [ 148.614998][ T6324] ? v9fs_fid_get_acl+0x4f/0xf0 [ 148.619886][ T6324] __kmalloc+0x111/0x240 [ 148.624235][ T6324] v9fs_fid_get_acl+0x4f/0xf0 [ 148.628995][ T6324] v9fs_get_acl+0x9a/0x350 [ 148.633454][ T6324] v9fs_mount+0x862/0xb40 [ 148.637815][ T6324] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 148.643229][ T6324] legacy_get_tree+0xea/0x180 [ 148.647931][ T6324] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 148.653336][ T6324] vfs_get_tree+0x8c/0x280 [ 148.657799][ T6324] do_new_mount+0x24b/0xa40 [ 148.662346][ T6324] __se_sys_mount+0x2da/0x3c0 [ 148.667054][ T6324] ? __x64_sys_mount+0xc0/0xc0 [ 148.671847][ T6324] ? lockdep_hardirqs_on+0x98/0x150 [ 148.677080][ T6324] ? __x64_sys_mount+0x20/0xc0 [ 148.681900][ T6324] do_syscall_64+0x55/0xb0 [ 148.686346][ T6324] ? clear_bhb_loop+0x40/0x90 [ 148.691052][ T6324] ? clear_bhb_loop+0x40/0x90 [ 148.695776][ T6324] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 148.701701][ T6324] RIP: 0033:0x7facecd8e9a9 [ 148.706147][ T6324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.725782][ T6324] RSP: 002b:00007facedb82038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 148.734224][ T6324] RAX: ffffffffffffffda RBX: 00007facecfb5fa0 RCX: 00007facecd8e9a9 [ 148.742227][ T6324] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 148.750406][ T6324] RBP: 00007facece10d69 R08: 0000200000000580 R09: 0000000000000000 [ 148.758667][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.766662][ T6324] R13: 0000000000000000 R14: 00007facecfb5fa0 R15: 00007ffc63f96bd8 [ 148.774679][ T6324] [ 148.778010][ T6324] Kernel Offset: disabled [ 148.782443][ T6324] Rebooting in 86400 seconds..