last executing test programs: 3.707966982s ago: executing program 0 (id=12): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="a716814f00a8a7dd4e129d307008", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x5}, 0x50) 3.563356089s ago: executing program 0 (id=16): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x0, 0x3, 0x4a}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) close(r0) 3.411641966s ago: executing program 0 (id=19): unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) 3.289464521s ago: executing program 4 (id=22): pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r2}, 0x10) dup(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) 3.154438647s ago: executing program 4 (id=23): write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x1030023, &(0x7f0000000140)=ANY=[@ANYRESHEX=0x0]) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x18000000000002a0, 0x6d, 0x0, &(0x7f0000000140)="b9ff03076003008cb89e08f086dd", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.121034551s ago: executing program 4 (id=24): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0xec) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff1e0000000000000000000000000000000000000000000000000000000000000000004000"/192]) 2.942393289s ago: executing program 4 (id=26): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000001c0)=ANY=[], 0x1, 0xa5c, &(0x7f0000001240)="$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") setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x8) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x5aa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400ee", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 2.84587015s ago: executing program 0 (id=29): ptrace(0x10, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) move_pages(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000600), 0x2) 2.004369697s ago: executing program 4 (id=39): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x100500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.93931596s ago: executing program 0 (id=41): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1d, 0x2, {{0x2, [0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x80], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xc1, 0x0, 0x0, 0x7, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1.879543475s ago: executing program 0 (id=44): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a3200000000140000001100"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 1.230741657s ago: executing program 2 (id=66): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x82040, 0x90) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xf600) mount$9p_fd(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x4000, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.229961708s ago: executing program 2 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1843, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) 1.142562087s ago: executing program 2 (id=69): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) 1.066121827s ago: executing program 2 (id=70): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4080000b62c851373113900000000008510000002000000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) unshare(0x2c020400) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1], 0x2000, 0x0) msgrcv(r5, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) write$binfmt_script(r7, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0xfea7) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) 721.853698ms ago: executing program 1 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xfdef}], 0x1) 350.412542ms ago: executing program 3 (id=81): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 332.601422ms ago: executing program 3 (id=82): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000480)="a716814f00a8a7dd4e129d307008", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x5}, 0x50) 318.911451ms ago: executing program 1 (id=83): r0 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f00000001c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r0, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0, 0x1000}) io_uring_enter(r0, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) 291.226908ms ago: executing program 3 (id=84): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00') preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x92, 0x0) 290.06275ms ago: executing program 3 (id=85): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000001280)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x11ee, &(0x7f0000003680)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) syz_mount_image$msdos(&(0x7f0000021900), &(0x7f00000001c0)='./file1/file2\x00', 0x1a4a438, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0xb, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x2) 232.414116ms ago: executing program 2 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 171.126414ms ago: executing program 3 (id=87): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r2}, 0x18) r3 = io_uring_setup(0x167c, &(0x7f00000003c0)={0x0, 0x800000, 0x400, 0x2, 0x12d}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) 78.447084ms ago: executing program 1 (id=88): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000280)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x38, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty, [], "29c640353063be4e"}}}}}}}, 0x0) 78.091877ms ago: executing program 3 (id=89): socket(0x1e, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000c7bc", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000002c0)}, 0x20) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000f, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 75.471148ms ago: executing program 1 (id=90): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000011646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000400)='itimer_state\x00', r2, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x18) setitimer(0x2, 0x0, 0x0) 38.541764ms ago: executing program 1 (id=91): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_cmd={0x1f}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x43, 0x4000, @fd_index=0x1, 0x4000006, 0x0, 0x0, 0x9, 0x1, {0x2}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 15.712652ms ago: executing program 1 (id=92): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000680)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x473, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYuiIKIo6KEeY7ItodtGmii2FpuKeBKkoGfxKPoXeBNB1JPg1ZMnKRTtpa2nyMzOpJttNrFmk4nd3w82+74z7+48T+br3ffdDaBrDWV/kogdEfFbRAw0qksbDDWerl05N3n9yrnJJBYWXv8zydtdvXJusmxavm57URlOI9KPkmIjS82eOXtiol6vnS7qo3Mn3x6dPXP2iXdPThyvHa+dGj9y5PChsaefGn+yI3lmeV3d98HM/r0vvnnxlcmjF9/66Zss3h3F+uY8OmUoS/yvhVzrukc7vbGK7WwqJ70VBsIt6YmIbHf15ef/QPTEjZ03EC98WGlwwLrK7k1b2q+eXwBuY0lUHQFQjfJGn33+LR8b1PXYFC4/2/gAlOV9rXg01vRGWrTpa/l820lDEXF0/u8vskes0zgEAECzTyY/fzl7fv/61y9lfY+BxTVp3JM//57/3VXMoQxGxJ0RsTsi7oqIPRFxd0Te9t6IuG+N8dzc/0kvrfEtV5T1/54p5raW9v/K3l8M9hS1nXn+fcmx6XrtYPE/GY6+LVl9bIVtfPf8r5+2W9fc/8se2fbLvmARx6XelgG6qYm5ibxT2gGXL0Ts610u/2RxJiCJiL0Rse/W3npXWZh+7Kv97Rqtnv8KOjDPtPBllt58lv98tORfSprnJ6dvmp8c3Rr12sHR8qi42c+/fPxau+2vKf8OuFxrPDft/9Ymg0nzfO1sZ7f/H4//tD95I59n7i+WvTcxN3d6LKI/yS9nS5eP33htWS/bZ8f/8IHlz//dxWuy/O+PiOwgfiAiHoyIh4rYH46IRyLiwAo5/vjc6vlHWtH+vxAxtez1b/H4b9n/t17oOfHDt+22/+/2/+G8NFwsya9/q1gunOxy0RrgWv53AAAA8H+R5t+BT9KRxXKajow0vsO/J+5I6zOzc48fm3nn1FTju/KD0ZeWI10DxXhofbpeG0vmi3dsjI+OF2PF5XjpoWLc+LOebXl9ZHKmPlVx7tDttrc5/zN/9FQdHbDOti27dLx/wwMBKtA6j54urZ5/NVwM4Hbl99rQvVY5/9ONigPYeO7/0L2WO//Pt9TNBcDtyf0fupfzH7pU+n3VEQAVcv+HrrSW3/WvY2Hr5gijmsJm3Sl5IaIspJsiHoV1KlR9ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiMfwIAAP//2wzmew==") 3.856181ms ago: executing program 4 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca", 0xfdef}], 0x1) 0s ago: executing program 2 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. [ 24.946250][ T6515] cgroup: Unknown subsys name 'net' [ 25.095538][ T6515] cgroup: Unknown subsys name 'cpuset' [ 25.097560][ T6515] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 25.243308][ T6515] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 27.847316][ T6532] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 27.849283][ T6532] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 27.860690][ T6534] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 27.872857][ T6531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 27.873631][ T6539] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 27.873948][ T6539] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 27.874646][ T6539] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 27.874898][ T6539] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 27.875188][ T6539] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 27.876714][ T6539] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 27.876860][ T6541] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 27.877233][ T6539] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 27.877333][ T6539] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 27.877808][ T6541] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 27.878685][ T6541] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 27.879010][ T6541] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 27.879954][ T6541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 27.880137][ T6541] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 27.883659][ T6541] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 27.885802][ T6541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 27.886460][ T6532] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 27.901532][ T6132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 27.907836][ T6543] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 27.914930][ T6543] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 27.915519][ T6543] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 28.052268][ T6538] chnl_net:caif_netlink_parms(): no params data found [ 28.070265][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 28.121528][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.123154][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.124949][ T6538] bridge_slave_0: entered allmulticast mode [ 28.125792][ T6538] bridge_slave_0: entered promiscuous mode [ 28.127012][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.127029][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.127080][ T6538] bridge_slave_1: entered allmulticast mode [ 28.127616][ T6538] bridge_slave_1: entered promiscuous mode [ 28.129972][ T6536] chnl_net:caif_netlink_parms(): no params data found [ 28.132720][ T6526] chnl_net:caif_netlink_parms(): no params data found [ 28.170075][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.170135][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.170219][ T6533] bridge_slave_0: entered allmulticast mode [ 28.170637][ T6533] bridge_slave_0: entered promiscuous mode [ 28.175063][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.195358][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.196670][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.197917][ T6533] bridge_slave_1: entered allmulticast mode [ 28.199253][ T6533] bridge_slave_1: entered promiscuous mode [ 28.201550][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.202980][ T6527] chnl_net:caif_netlink_parms(): no params data found [ 28.226069][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.227412][ T6536] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.228645][ T6536] bridge_slave_0: entered allmulticast mode [ 28.230052][ T6536] bridge_slave_0: entered promiscuous mode [ 28.242554][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.245418][ T6536] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.246632][ T6536] bridge_slave_1: entered allmulticast mode [ 28.248143][ T6536] bridge_slave_1: entered promiscuous mode [ 28.256828][ T6538] team0: Port device team_slave_0 added [ 28.258530][ T6538] team0: Port device team_slave_1 added [ 28.260988][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.262032][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.273030][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.273121][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.273184][ T6526] bridge_slave_0: entered allmulticast mode [ 28.273605][ T6526] bridge_slave_0: entered promiscuous mode [ 28.275154][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.275170][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.275218][ T6526] bridge_slave_1: entered allmulticast mode [ 28.275676][ T6526] bridge_slave_1: entered promiscuous mode [ 28.287413][ T6527] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.287460][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.287518][ T6527] bridge_slave_0: entered allmulticast mode [ 28.287943][ T6527] bridge_slave_0: entered promiscuous mode [ 28.289202][ T6527] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.289220][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.289286][ T6527] bridge_slave_1: entered allmulticast mode [ 28.289729][ T6527] bridge_slave_1: entered promiscuous mode [ 28.303262][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.303293][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.303319][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.304466][ T6533] team0: Port device team_slave_0 added [ 28.304767][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.304781][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.304936][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.320071][ T6536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.325544][ T6533] team0: Port device team_slave_1 added [ 28.332946][ T6536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.339058][ T6526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.340305][ T6526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.350550][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.351711][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.355151][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.357614][ T6527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.358997][ T6527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.362917][ T6536] team0: Port device team_slave_0 added [ 28.367802][ T6526] team0: Port device team_slave_0 added [ 28.371987][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.372012][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.372029][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.382540][ T6536] team0: Port device team_slave_1 added [ 28.386536][ T6526] team0: Port device team_slave_1 added [ 28.396680][ T6527] team0: Port device team_slave_0 added [ 28.397477][ T6527] team0: Port device team_slave_1 added [ 28.401254][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.401286][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.401298][ T6536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.410140][ T6538] hsr_slave_0: entered promiscuous mode [ 28.411476][ T6538] hsr_slave_1: entered promiscuous mode [ 28.417514][ T6536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.417538][ T6536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.417556][ T6536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.425729][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.425750][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.425767][ T6526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.426352][ T6526] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.426359][ T6526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.426371][ T6526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.456012][ T6536] hsr_slave_0: entered promiscuous mode [ 28.456321][ T6536] hsr_slave_1: entered promiscuous mode [ 28.456528][ T6536] debugfs: 'hsr0' already exists in 'hsr' [ 28.456572][ T6536] Cannot create hsr debugfs directory [ 28.467212][ T6533] hsr_slave_0: entered promiscuous mode [ 28.467846][ T6533] hsr_slave_1: entered promiscuous mode [ 28.468045][ T6533] debugfs: 'hsr0' already exists in 'hsr' [ 28.468055][ T6533] Cannot create hsr debugfs directory [ 28.469131][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.469142][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.469156][ T6527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.472123][ T6526] hsr_slave_0: entered promiscuous mode [ 28.472404][ T6526] hsr_slave_1: entered promiscuous mode [ 28.472586][ T6526] debugfs: 'hsr0' already exists in 'hsr' [ 28.472595][ T6526] Cannot create hsr debugfs directory [ 28.485524][ T6527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.485544][ T6527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.485557][ T6527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.558474][ T6527] hsr_slave_0: entered promiscuous mode [ 28.558788][ T6527] hsr_slave_1: entered promiscuous mode [ 28.558978][ T6527] debugfs: 'hsr0' already exists in 'hsr' [ 28.558988][ T6527] Cannot create hsr debugfs directory [ 28.615007][ T6538] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.618166][ T6538] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.621727][ T6538] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.632510][ T6538] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.657558][ T6536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.661111][ T6536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.663408][ T6536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.666931][ T6536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.689282][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.689332][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.689504][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.689528][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.692289][ T6536] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.692311][ T6536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.692367][ T6536] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.692390][ T6536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.705899][ T6526] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.708822][ T6526] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.711641][ T6526] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.715528][ T6526] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.742723][ T6533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.748091][ T6526] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.748133][ T6526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.748199][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.748223][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.753284][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.758966][ T6533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.761316][ T6533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.763668][ T6533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.788421][ T6536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.792828][ T6527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.797290][ T6527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.802395][ T2212] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.803706][ T2212] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.808254][ T2212] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.809522][ T2212] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.811514][ T2212] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.812815][ T2212] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.820914][ T6538] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.823593][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.823637][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.826416][ T6527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.831803][ T6527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.837944][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.837980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.859780][ T6536] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.870668][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.876171][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.876211][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.895316][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.906239][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.911578][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.911618][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.913021][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.913036][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.919158][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.922753][ T6536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.928462][ T6527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.931779][ T6538] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.947707][ T15] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.947742][ T15] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.948061][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.948075][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.948470][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.948485][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.957822][ T6527] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.980563][ T2212] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.980608][ T2212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.980908][ T2212] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.980930][ T2212] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.996836][ T6527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.064837][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.075951][ T6533] veth0_vlan: entered promiscuous mode [ 29.082422][ T6533] veth1_vlan: entered promiscuous mode [ 29.092952][ T6536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.099330][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.116934][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.129073][ T6533] veth0_macvtap: entered promiscuous mode [ 29.137533][ T6533] veth1_macvtap: entered promiscuous mode [ 29.140359][ T6527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.143242][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.149911][ T6538] veth0_vlan: entered promiscuous mode [ 29.160721][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.163603][ T15] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.164516][ T15] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.165383][ T4538] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.165766][ T4538] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.168252][ T6538] veth1_vlan: entered promiscuous mode [ 29.171502][ T6536] veth0_vlan: entered promiscuous mode [ 29.178874][ T6526] veth0_vlan: entered promiscuous mode [ 29.181440][ T6526] veth1_vlan: entered promiscuous mode [ 29.193011][ T6536] veth1_vlan: entered promiscuous mode [ 29.214664][ T6526] veth0_macvtap: entered promiscuous mode [ 29.228167][ T6526] veth1_macvtap: entered promiscuous mode [ 29.239325][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.239355][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.255969][ T6538] veth0_macvtap: entered promiscuous mode [ 29.258700][ T6538] veth1_macvtap: entered promiscuous mode [ 29.270417][ T6527] veth0_vlan: entered promiscuous mode [ 29.271680][ T6536] veth0_macvtap: entered promiscuous mode [ 29.273358][ T6536] veth1_macvtap: entered promiscuous mode [ 29.281168][ T6527] veth1_vlan: entered promiscuous mode [ 29.287139][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.288300][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.288570][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.288578][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.297896][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.298138][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.298162][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.298183][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.305036][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.308494][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.328697][ T4538] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.332712][ T6533] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.337043][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.339033][ T15] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.339085][ T15] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.339105][ T15] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.341607][ T6536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.344410][ T2212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.344869][ T2212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.345285][ T2212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.345336][ T2212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.367138][ T6527] veth0_macvtap: entered promiscuous mode [ 29.368158][ T6527] veth1_macvtap: entered promiscuous mode [ 29.372254][ T6644] syz.1.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 29.375478][ T6644] CPU: 1 UID: 0 PID: 6644 Comm: syz.1.2 Not tainted syzkaller #0 PREEMPT [ 29.375494][ T6644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 29.375499][ T6644] Call trace: [ 29.375503][ T6644] show_stack+0x2c/0x3c (C) [ 29.375519][ T6644] __dump_stack+0x30/0x40 [ 29.375530][ T6644] dump_stack_lvl+0xd8/0x12c [ 29.375538][ T6644] dump_stack+0x1c/0x28 [ 29.375544][ T6644] warn_alloc+0x1f8/0x30c [ 29.375555][ T6644] __vmalloc_node_range_noprof+0x114/0xf70 [ 29.375563][ T6644] vmalloc_user_noprof+0xf0/0x14c [ 29.375570][ T6644] xskq_create+0xbc/0x168 [ 29.375578][ T6644] xsk_init_queue+0xb0/0x118 [ 29.375584][ T6644] xsk_setsockopt+0x478/0x684 [ 29.375590][ T6644] do_sock_setsockopt+0x1ec/0x328 [ 29.375600][ T6644] __arm64_sys_setsockopt+0x170/0x1e0 [ 29.375608][ T6644] invoke_syscall+0x98/0x2b8 [ 29.375616][ T6644] el0_svc_common+0x130/0x23c [ 29.375622][ T6644] do_el0_svc+0x48/0x58 [ 29.375627][ T6644] el0_svc+0x58/0x180 [ 29.375636][ T6644] el0t_64_sync_handler+0x84/0x12c [ 29.375644][ T6644] el0t_64_sync+0x198/0x19c [ 29.391704][ T6644] Mem-Info: [ 29.391720][ T6644] active_anon:22 inactive_anon:4607 isolated_anon:0 [ 29.391720][ T6644] active_file:1798 inactive_file:4288 isolated_file:0 [ 29.391720][ T6644] unevictable:768 dirty:1536 writeback:0 [ 29.391720][ T6644] slab_reclaimable:9808 slab_unreclaimable:86435 [ 29.391720][ T6644] mapped:28720 shmem:948 pagetables:844 [ 29.391720][ T6644] sec_pagetables:0 bounce:0 [ 29.391720][ T6644] kernel_misc_reclaimable:0 [ 29.391720][ T6644] free:1439922 free_pcp:22618 free_cma:7360 [ 29.391746][ T6644] Node 0 active_anon:88kB inactive_anon:18428kB active_file:7192kB inactive_file:17152kB unevictable:3072kB isolated(anon):0kB isolated(file):0kB mapped:114880kB dirty:6144kB writeback:0kB shmem:3792kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9224kB pagetables:3376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 29.391763][ T6644] Node 0 DMA free:3076864kB boost:0kB min:20864kB low:26080kB high:31296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145728kB managed:3080192kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:29440kB [ 29.391786][ T6644] lowmem_reserve[]: 0 0 3491 3491 3491 [ 29.391807][ T6644] Node 0 Normal free:2682824kB boost:0kB min:24188kB low:30232kB high:36276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:88kB inactive_anon:18428kB active_file:7192kB inactive_file:17152kB unevictable:3072kB writepending:6144kB present:5242880kB managed:3575796kB mlocked:0kB bounce:0kB free_pcp:90472kB local_pcp:42096kB free_cma:0kB [ 29.391825][ T6644] lowmem_reserve[]: 0 0 0 0 0 [ 29.398307][ T6644] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 1*256kB (C) 1*512kB (C) 0*1024kB 0*2048kB 751*4096kB (MC) = 3076864kB [ 29.398367][ T6644] Node 0 Normal: 12*4kB (UM) 17*8kB (UM) 10*16kB (UME) 11*32kB (ME) 5*64kB (ME) 3*128kB (ME) 4*256kB (M) 7*512kB (M) 4*1024kB (UM) 5*2048kB (M) 650*4096kB (M) = 2682744kB [ 29.398439][ T6644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 29.398445][ T6644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=32768kB [ 29.398451][ T6644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 29.398456][ T6644] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=64kB [ 29.398461][ T6644] 7055 total pagecache pages [ 29.398465][ T6644] 0 pages in swap cache [ 29.398468][ T6644] Free swap = 124996kB [ 29.398471][ T6644] Total swap = 124996kB [ 29.398475][ T6644] 2097152 pages RAM [ 29.398478][ T6644] 0 pages HighMem/MovableOnly [ 29.398481][ T6644] 433155 pages reserved [ 29.398484][ T6644] 8192 pages cma reserved [ 29.398487][ T6644] 0 pages hwpoisoned [ 29.434730][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.434764][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.451002][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.452151][ T6527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.455316][ T2212] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.458558][ T4538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.459073][ T4538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.459556][ T4538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.498210][ T15] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.498246][ T15] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.500907][ T6651] loop1: detected capacity change from 0 to 512 [ 29.520169][ T2212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.520203][ T2212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.522293][ T6651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.543162][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.543196][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.556875][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.556906][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.569162][ T292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.569190][ T292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.588819][ T292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.588842][ T292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 29.604958][ T6533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.636868][ T2212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 29.636906][ T2212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 30.426047][ T6132] Bluetooth: hci4: command tx timeout [ 30.426286][ T6132] Bluetooth: hci2: command tx timeout [ 30.426483][ T6132] Bluetooth: hci1: command tx timeout [ 30.427472][ T6534] Bluetooth: hci0: command tx timeout [ 30.476618][ T6672] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 30.703117][ T6543] Bluetooth: hci3: command tx timeout [ 30.802855][ T6679] Illegal XDP return value 714264769 on prog (id 2) dev N/A, expect packet loss! [ 30.843331][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843377][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843388][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843396][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843403][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843410][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843417][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843424][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843430][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843436][ T6609] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.843485][ T6609] hid-generic 0000:0000:0000.0001: reserved main item tag 0xd [ 30.850840][ T6609] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 30.867071][ T6687] pimreg: entered allmulticast mode [ 30.876402][ T6688] loop2: detected capacity change from 0 to 128 [ 30.884926][ T6688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 30.884979][ T6688] System zones: 1-3, 19-19, 35-36 [ 30.885836][ T6688] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 30.891488][ T6688] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 5001471 (only 1 groups) [ 30.897387][ T6687] pimreg: left allmulticast mode [ 30.927374][ T31] audit: type=1326 audit(30.890:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.927418][ T31] audit: type=1326 audit(30.890:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.930871][ T31] audit: type=1326 audit(30.900:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=219 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.931061][ T31] audit: type=1326 audit(30.900:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.931128][ T31] audit: type=1326 audit(30.900:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.931329][ T31] audit: type=1326 audit(30.900:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.938742][ T31] audit: type=1326 audit(30.910:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.938767][ T31] audit: type=1326 audit(30.910:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.938780][ T31] audit: type=1326 audit(30.910:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.940780][ T31] audit: type=1326 audit(30.910:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6676 comm="syz.3.10" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9395c068 code=0x7ffc0000 [ 30.963151][ T6536] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.986338][ T6693] veth0_to_team: entered promiscuous mode [ 31.129610][ T6701] loop1: detected capacity change from 0 to 1024 [ 31.133255][ T6701] EXT4-fs: Ignoring removed bh option [ 31.133304][ T6701] EXT4-fs: inline encryption not supported [ 31.141300][ T6701] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 31.143048][ T6701] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 31.155787][ T6701] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.20: lblock 2 mapped to illegal pblock 2 (length 1) [ 31.157918][ T6701] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.20: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.159890][ T6701] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.20: Failed to acquire dquot type 0 [ 31.163563][ T6701] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 31.165847][ T6701] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.20: mark_inode_dirty error [ 31.167452][ T6701] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 31.167722][ T6701] EXT4-fs (loop1): 1 orphan inode deleted [ 31.168187][ T6701] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.183562][ T4538] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 31.187319][ T4538] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:7: Failed to release dquot type 0 [ 31.278147][ T6699] fido_id[6699]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 31.287956][ T6701] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.20: lblock 0 mapped to illegal pblock 48 (length 1) [ 31.367133][ T6713] loop4: detected capacity change from 0 to 128 [ 31.394918][ T6713] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 31.394986][ T6713] System zones: 1-3, 19-19, 35-36 [ 31.399535][ T6533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.413446][ T6713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 31.483340][ T6527] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.070504][ T6730] 9pnet_fd: Insufficient options for proto=fd [ 32.504782][ T6543] Bluetooth: hci0: command tx timeout [ 32.504823][ T6543] Bluetooth: hci1: command tx timeout [ 32.504859][ T6543] Bluetooth: hci2: command tx timeout [ 32.504877][ T6543] Bluetooth: hci4: command tx timeout [ 32.530324][ T6753] netlink: 56 bytes leftover after parsing attributes in process `syz.0.41'. [ 32.551437][ T6750] netlink: 'syz.4.39': attribute type 10 has an invalid length. [ 32.681545][ T6764] syz.0.44 uses obsolete (PF_INET,SOCK_PACKET) [ 32.682671][ T6773] netlink: 96 bytes leftover after parsing attributes in process `syz.2.50'. [ 32.744763][ T6534] Bluetooth: hci3: command tx timeout [ 32.766235][ T6781] netlink: 56 bytes leftover after parsing attributes in process `syz.2.54'. [ 33.264782][ T6814] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 33.264911][ T6814] pim6reg0: linktype set to 823 [ 33.365798][ T6822] loop2: detected capacity change from 0 to 128 [ 33.385249][ T6822] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.494609][ T6828] loop3: detected capacity change from 0 to 8192 [ 33.569619][ T6832] process 'syz.2.70' launched './file1' with NULL argv: empty string added [ 34.198057][ T6857] loop3: detected capacity change from 0 to 8192 [ 34.239322][ T6536] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.313163][ T6860] tipc: Started in network mode [ 34.314326][ T6860] tipc: Node identity d67f4fd3576c, cluster identity 4711 [ 34.315840][ T6860] tipc: Enabled bearer , priority 0 [ 34.322232][ T6860] syzkaller0: entered promiscuous mode [ 34.322274][ T6860] syzkaller0: entered allmulticast mode [ 34.337014][ T6860] netlink: 2 bytes leftover after parsing attributes in process `syz.2.86'. [ 34.342852][ T6860] tipc: Resetting bearer [ 34.354663][ T6859] tipc: Resetting bearer [ 34.367276][ T6859] tipc: Disabling bearer [ 34.389923][ T6866] mmap: syz.3.89 (6866) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.398903][ T6866] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 34.412752][ T6868] syz.1.90 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.422374][ T6866] team0: Port device dummy0 added [ 34.445696][ T6866] netlink: 'syz.3.89': attribute type 10 has an invalid length. [ 34.446161][ T6866] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 34.480877][ T6866] team0: Failed to send options change via netlink (err -105) [ 34.480977][ T6866] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 34.481218][ T6866] team0: Port device dummy0 removed [ 34.483602][ T6866] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.492814][ T6872] loop1: detected capacity change from 0 to 512 [ 34.515860][ T6874] tipc: Enabled bearer , priority 0 [ 34.516767][ T6874] syzkaller0: entered promiscuous mode [ 34.516779][ T6874] syzkaller0: entered allmulticast mode [ 34.529731][ T6873] tipc: Resetting bearer [ 34.537004][ T6872] EXT4-fs warning (device loop1): ext4_xattr_inode_get:542: inode #11: comm syz.1.92: ea_inode file size=0 entry size=6 [ 34.537100][ T6872] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.537499][ T6872] ------------[ cut here ]------------ [ 34.537509][ T6872] EA inode 11 i_nlink=2 [ 34.537595][ T6872] WARNING: CPU: 1 PID: 6872 at fs/ext4/xattr.c:1053 ext4_xattr_inode_update_ref+0x444/0x488 [ 34.544274][ T6872] Modules linked in: [ 34.544828][ T6872] CPU: 1 UID: 0 PID: 6872 Comm: syz.1.92 Not tainted syzkaller #0 PREEMPT [ 34.545986][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 34.547641][ T6872] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.548720][ T6872] pc : ext4_xattr_inode_update_ref+0x444/0x488 [ 34.549691][ T6872] lr : ext4_xattr_inode_update_ref+0x444/0x488 [ 34.550642][ T6872] sp : ffff8000a3d06f80 [ 34.551216][ T6872] x29: ffff8000a3d07000 x28: 0000000000000000 x27: 1fffe0001ec5f8ef [ 34.552360][ T6872] x26: dfff800000000000 x25: ffff8000a3d06f80 x24: ffff7000147a0df0 [ 34.553621][ T6872] x23: ffff800092e12000 x22: ffff0000f62fc5c8 x21: 0000000000000002 [ 34.554922][ T6872] x20: 0000000000000001 x19: ffff0000f62fc588 x18: 00000000ffffffff [ 34.556234][ T6872] x17: ffff800093524000 x16: ffff80008b0142f8 x15: 0000000000000001 [ 34.557475][ T6872] x14: 1ffff000147a0d60 x13: 0000000000000000 x12: 0000000000000000 [ 34.558673][ T6872] x11: 0000000000080000 x10: 0000000000032eac x9 : e91684ffbceee400 [ 34.559786][ T6872] x8 : e91684ffbceee400 x7 : ffff800080563d30 x6 : 0000000000000000 [ 34.560985][ T6872] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807de9b0 [ 34.561941][ T6872] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 34.562830][ T6872] Call trace: [ 34.563194][ T6872] ext4_xattr_inode_update_ref+0x444/0x488 (P) [ 34.564043][ T6872] ext4_xattr_inode_dec_ref_all+0x76c/0xbfc [ 34.564974][ T6872] ext4_xattr_delete_inode+0x8b0/0xa40 [ 34.565859][ T6872] ext4_evict_inode+0xb98/0x1084 [ 34.566735][ T6872] evict+0x414/0x928 [ 34.567390][ T6872] iput+0x6e4/0x83c [ 34.567933][ T6872] ext4_process_orphan+0x240/0x2b4 [ 34.568688][ T6872] ext4_orphan_cleanup+0x930/0x107c [ 34.569484][ T6872] ext4_fill_super+0x4724/0x4ea4 [ 34.570110][ T6872] get_tree_bdev_flags+0x360/0x414 [ 34.570929][ T6872] get_tree_bdev+0x2c/0x3c [ 34.571586][ T6872] ext4_get_tree+0x28/0x38 [ 34.572178][ T6872] vfs_get_tree+0x90/0x28c [ 34.572919][ T6872] do_new_mount+0x278/0x7f4 [ 34.573688][ T6872] path_mount+0x5b4/0xde0 [ 34.574372][ T6872] __arm64_sys_mount+0x3e8/0x468 [ 34.575148][ T6872] invoke_syscall+0x98/0x2b8 [ 34.575737][ T6872] el0_svc_common+0x130/0x23c [ 34.576441][ T6872] do_el0_svc+0x48/0x58 [ 34.576941][ T6872] el0_svc+0x58/0x180 [ 34.577407][ T6872] el0t_64_sync_handler+0x84/0x12c [ 34.578035][ T6872] el0t_64_sync+0x198/0x19c [ 34.578713][ T6872] irq event stamp: 2688 [ 34.579401][ T6872] hardirqs last enabled at (2687): [] exit_to_kernel_mode+0xc0/0xf0 [ 34.580729][ T6872] hardirqs last disabled at (2688): [] el1_brk64+0x1c/0x48 [ 34.581970][ T6872] softirqs last enabled at (2518): [] handle_softirqs+0xaf8/0xc88 [ 34.583274][ T6872] softirqs last disabled at (2445): [] __do_softirq+0x14/0x20 [ 34.584538][ T6872] ---[ end trace 0000000000000000 ]--- [ 34.587202][ T6872] EXT4-fs (loop1): 1 orphan inode deleted [ 34.587746][ T6872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.595827][ T6534] Bluetooth: hci4: command tx timeout [ 34.595845][ T6543] Bluetooth: hci2: command tx timeout [ 34.595864][ T6534] Bluetooth: hci1: command tx timeout [ 34.595876][ T6543] Bluetooth: hci0: command tx timeout [ 34.603188][ T6873] tipc: Disabling bearer [ 34.632085][ T6533] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.824947][ T6531] Bluetooth: hci3: command tx timeout [ 36.663867][ T6543] Bluetooth: hci2: command tx timeout [ 36.664922][ T6531] Bluetooth: hci0: command tx timeout [ 36.673960][ T6531] Bluetooth: hci1: command tx timeout [ 36.673991][ T6531] Bluetooth: hci4: command tx timeout [ 36.913889][ T6543] Bluetooth: hci3: command tx timeout