last executing test programs: 9.72611994s ago: executing program 0 (id=67): io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 8.966794074s ago: executing program 0 (id=72): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 6.118462865s ago: executing program 1 (id=81): io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$eJzs3M1rHOcZAPBnRqsP23JXLqXUvVilFBtK17KLTG0KtYtLLz0U2mvBQl4ZofUHkoorWdBV8g+EJP9ALjkkJsGH+OxLArnmkjjXmBwCJihWAiEkCrMfkiztSpa1q1Hk3w9ezfsxM+/zaKSdeWF3A3hhDWc/0ojjEXEliSg2+tOI6KvVBiKq9f2WlxbGv1laGE9iZeVfXyaRRMSTpYXx5rmSxvZIozEQER/9NYmfv7x53pm5+amxSqU83Wifnr1+6/TM3PwfJq+PXStfK984c+5Po2dHz42cH+1Yrt9+dvH+17/5++fV7976/u5Xr72ZxMUYbIytz6OR9a4Nx/Dq72S9QkSMdeD8+0FPI5/1eSaFbQ5KuxwUAABtpeue4X4ZxeiJtYe3Yrz/ca7BAQAAAB2x0hOxAgAAABxwifU/AAAAHHDN9wE8WVoYb5Z835Gwtx5fioihev7LjVIfKUS1th2I3og4/CSJ9R9rTeqH7dpwRDz69Py7WYkWn0PutupiRPyq1fVPavkPNT4JvTH/NCJGOjD/8Ib2Tyn/ix2YP+/8AXgxPbhUv5Ftvv+lq88/0eL+V2hx73oeed//ms9/y5ue/9by72nz/PfPZ5zjTiFutxvL8v/z/b+90yzZ/Nl2V0ntwOPFiF8XWuWfrOaftMn/yjbnTqJ+iuIPt8vt9sk7/5U3Ik5G6/ybkq2/n+j0xGSlPFL/2XKOxQ9H3243f975Z9f/cJv8t7j+A1nfrafO1P5Lff5z+fK9TZ2N3bfPP/2iL/l3rdbX6Pnf2Ozs9JmIvuQfm/vPbp1vc5/mObL8T/126///Vn//2WtCtfG3kaWy2Nhm7Zc2zPmXu3feaxdPc/2X5/W/uvPrX+t75Rnn+N0Hr57a2Nf8fq3169+sZPM/SuprYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoSiNiMJK0FBFJrZ6mpVLEkYj4RRxOKzdnZn8/cfO/N65mYxFD0ZtOTFbKIxFRrLeTrH2mVl9rn93Q/mNEHIuI14uHau3S+M3K1byTBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNWRiBiMJC1FRBoRy8U0LZXyjgoAAADouKG8AwAAAAC6zvofAAAADj7rfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrs2IkHD5OIqF44VCuZvsZYb66RAd2W5h0AkJuevAMAclPIOwAgNztc43tcgAMo2WZ8oGVv9urR35V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANifTh5/8DCJiOqFQ7WS6WuM9bY84sQeRgd0U5p3AEBuerYaLOxdHMDee+5/8aOdjQPYe63X+MCLJNlmfGBtn+rTI/1diwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/WewVpK0FBFprZ6mpVLE0YgYit5kYrJSHomIn0XEJ8Xe/qzdn3fQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNzM3PzUWKVSnn6eSrK7w1VU2lX+vz/C2NtKUqsM5B1GvZL3KxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHmYmZufGqtUytMzeUcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5G1mbn5qrFIpTz9D5d5Odl5XyTtHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy82MAAAD//1sCDDY=") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 6.030761377s ago: executing program 2 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc88a846fe", 0x14, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 6.030371848s ago: executing program 3 (id=83): r0 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x193042, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r7 = syz_io_uring_setup(0x363, &(0x7f00000004c0)={0x0, 0x3b40, 0x13080, 0xffffffff, 0x2b7, 0x0, r6}, &(0x7f0000000080), &(0x7f0000000180), &(0x7f0000000000)) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r8, r9, 0x0, 0x2000fb) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 6.003132718s ago: executing program 0 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setxattr$security_ima(&(0x7f0000000080)='.\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x3, 0x2, 0x4, 0x0, 0x1, "b8"}, 0xa, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000600)) 4.487517067s ago: executing program 2 (id=85): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x8000, 0xffffffffffffffff, 0x7fffffff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 4.310479672s ago: executing program 3 (id=86): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setlease(r0, 0x400, 0x2) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 4.09962441s ago: executing program 1 (id=87): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @a}) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) 3.963396894s ago: executing program 3 (id=88): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffffd, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x73, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x3d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x58, 0x50, 0x7f}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x3c, r8, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 3.912034485s ago: executing program 2 (id=89): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xd, 0x0, 0x480c5}, 0x80d4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f00000000c0)=0x18) 3.328138314s ago: executing program 0 (id=90): ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r0, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) 2.730345102s ago: executing program 3 (id=91): r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000680)=[{0x1, 0x6}, {0x0, 0x2, 0x1000}, {0x2, 0x9, 0x1000}, {0x1, 0xe173, 0x1000}], 0x4) semop(r0, &(0x7f0000000440)=[{0x4, 0x44b6, 0x1800}], 0x1) 2.679577904s ago: executing program 0 (id=92): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 2.637509676s ago: executing program 1 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x5, 0xa, 0x1, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r4, &(0x7f0000000380)="fad33075218151db00316f3a277fedbc88a846fe", 0x14, 0x6008092, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @remote}, 0x14) 2.385394264s ago: executing program 2 (id=94): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x50deecda08de2091}, @TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x1, 0x9, 0xe5ae, 0x42, 0x5}, {0x8, 0x3, 0x7cb, 0x200, 0xf5b, 0x7}, 0x7, 0x80000000, 0x1cd8}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getgroups(0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f00000003c0)={[{@norecovery}, {}, {@mb_optimize_scan}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@resgid}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") 2.311553536s ago: executing program 1 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {0x2, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @rand_addr=0x64010100}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @ipv4={'\x00', '\xff\xff', @multicast2}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc804}, 0x2) 1.722176425s ago: executing program 3 (id=96): io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r0 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x103482) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 1.721245545s ago: executing program 1 (id=104): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pwritev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0xffff8001, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.720641705s ago: executing program 2 (id=97): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20000000) 1.55430978s ago: executing program 1 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setxattr$security_ima(&(0x7f0000000080)='.\x00', &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x3, 0x2, 0x4, 0x0, 0x1, "b8"}, 0xa, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, &(0x7f0000000600)) 1.55348975s ago: executing program 0 (id=107): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) getdents64(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) socket$kcm(0x29, 0x5, 0x0) socket(0x1e, 0x805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r3, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r4, 0x3) accept4$bt_l2cap(r4, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) 1.343049607s ago: executing program 2 (id=99): r0 = io_uring_setup(0x68f1, &(0x7f00000005c0)={0x0, 0x48c7, 0x8, 0x7, 0x1000168}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000000c0)={[{@errors_remount}, {@dax_inode}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@sysvgroups}, {@block_validity}, {@quota}]}, 0x3, 0x45f, &(0x7f0000000400)="$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") r1 = socket$kcm(0x23, 0x5, 0x0) listen(r1, 0x800) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x80000) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1fa8, 0x2b0e}, &(0x7f0000000080)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$eJzs3E2IVeUbAPDnnJnxYxz/d/wTTUWglGgRjjrXahVoixZtXAhCH0JDXj/w6oR3ojShLBAhIlpIghDTMlrkokURQbSJoBYtCiJJqBZhWCEt2t2495w7XvQM2dXruU2/H5y573nvued5X85weB845wngP2tNRGyNiKGImIyISt6f5lu8lG2t445Vz+5rbUk0mzt+SyKJiFr17L7OuZL8c0X+s2UR8f+tSTw8fHXcxpGjB6br9drhfH/j7MFnNjaOHN2w/+D03tre2qHqlgemprbcX33wxs313MTLMTW1deS99WtOfvnxa9+0xjuWf9c9jxspWaBzWz+ClWikq50UXG8GzxunXv+o7DEAADdfmq/9h9vr/0oMRbZ4O3/uyUuVeHG07PEBAAAA16/ZHMo/AQAAgMUrkfsDAADAItd5DqBWPbuvs92sZw9W3BtxcVtEjGfxO+8XZ98Ot98fjvzd0pE+xL/rfB9O+g80Hi03/lc7y42/6t1y4899V278p9aVG/+nH8qNv3Z1ufFPzUR8si0rgHD1/S9t1zzoWBIRS/OaBsuv6exDf3vE6k8v3/+OXXX/S+fvf60zXc+LWCfnLpwo6p94JOLi8Yg7hoviJ/Pxk7ymQ682fH18V1H/qosRzbcj1kVx/OiKv3B9iI179tdrm7K/xfGrLzxeKerf/lk2/9EF4o/nxw111YnoxenRXR+sLOjfOZnFv+fu4ut/W9f8/5fX5hjvIf6a2+vbi/rXvZrF373A/Luv/6oe4nbM/dL4saj//S3XcVIAoGdpe22TpJPz7TSdnMzWe7fEaFqfaczet2fm2UO7szXQeIyknaVWth4ZSVr7m/O1SWd/6or9ar6GOFlZ3t6ffHqmvrvsyQMAAMAiNxbx/ROvfDix4or8/+dKlv8DAAAA/36t/P/OubfOtNp/FD4dCQAAAAyKerO337Xy/0snfv085P8AAACwaMn/AQAAYPHr5P9jC9T/W9lVu29TXn/4i8rI0j37l8XmsgcPAAAAXJNW/p9++9j5xpGjB6br9dphDY2BajyU/6cOyniSARtPvxsl3pwAAIC+uLzoL3skAAAAQP+kF5KIaG3rK2vHbl39zkT3t0uSP9vVAZZExHNndrz5/PTs7OHNrf7f5/tnT+f9U2XNAQAAAOjWydM7eTwAAAAAAAAAAAAAADD4bkY58bLnCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI3zVwAAAP//QNGSjg==") read(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000000c0)={r6, 0x3}, &(0x7f0000000100)=0x8) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") 0s ago: executing program 3 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ptrace$ARCH_MAP_VDSO_32(0x1e, r0, 0xfffffffffffffffd, 0x2002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x1415, 0x103, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x4000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) syz_emit_ethernet(0x73, &(0x7f0000001000)={@local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f15b88", 0x3d, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, {[@srh={0x3b, 0x0, 0x4, 0x0, 0x58, 0x50, 0x7f}, @fragment={0x5e, 0x0, 0x1, 0x1, 0x0, 0x15, 0x68}], @payload_named={{{{{0x2d, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, 0x2, 0x2, 0x0, 0x2, 0x7, 0x2, 0x2, 0xa, 0x2, 0x1, 0x4e24, 0x4e24}, 0x3, 0x1}, 0x3, 0x2}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x3c, r8, 0x9d292b3bf99534c1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 79.945482][ T5757] cgroup: Unknown subsys name 'net' [ 80.081921][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.742194][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.864749][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.894101][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.902814][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.911322][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.919991][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.920406][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.930173][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.937947][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.949392][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.952501][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.962410][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.970066][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.978257][ T5787] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.979510][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.996325][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.997639][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.005297][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.018038][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.021601][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.026567][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.034698][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.051133][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.084113][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.097352][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.492664][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 84.570156][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 84.660075][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 84.710499][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.719723][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.727424][ T5771] bridge_slave_0: entered allmulticast mode [ 84.735497][ T5771] bridge_slave_0: entered promiscuous mode [ 84.750328][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.757732][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.765077][ T5771] bridge_slave_1: entered allmulticast mode [ 84.772456][ T5771] bridge_slave_1: entered promiscuous mode [ 84.855578][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.863006][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.870696][ T5769] bridge_slave_0: entered allmulticast mode [ 84.878924][ T5769] bridge_slave_0: entered promiscuous mode [ 84.912014][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.936641][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.954197][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.961380][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.969803][ T5769] bridge_slave_1: entered allmulticast mode [ 84.977658][ T5769] bridge_slave_1: entered promiscuous mode [ 85.020321][ T5771] team0: Port device team_slave_0 added [ 85.056414][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.063863][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.071168][ T5770] bridge_slave_0: entered allmulticast mode [ 85.079642][ T5770] bridge_slave_0: entered promiscuous mode [ 85.089346][ T5771] team0: Port device team_slave_1 added [ 85.111943][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 85.127932][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.137758][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.145344][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.152564][ T5770] bridge_slave_1: entered allmulticast mode [ 85.160298][ T5770] bridge_slave_1: entered promiscuous mode [ 85.186295][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.193375][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.219922][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.234975][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.241948][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.268360][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.282543][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.349605][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.362340][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.422117][ T5769] team0: Port device team_slave_0 added [ 85.454264][ T5770] team0: Port device team_slave_0 added [ 85.461785][ T5769] team0: Port device team_slave_1 added [ 85.480717][ T5771] hsr_slave_0: entered promiscuous mode [ 85.487284][ T5771] hsr_slave_1: entered promiscuous mode [ 85.498198][ T5770] team0: Port device team_slave_1 added [ 85.561063][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.568672][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.594730][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.617233][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.624986][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.632219][ T5773] bridge_slave_0: entered allmulticast mode [ 85.639648][ T5773] bridge_slave_0: entered promiscuous mode [ 85.651178][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.659936][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.667480][ T5773] bridge_slave_1: entered allmulticast mode [ 85.674873][ T5773] bridge_slave_1: entered promiscuous mode [ 85.681911][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.691422][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.718346][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.734931][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.741927][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.772061][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.829564][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.840279][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.866666][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.916569][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.948600][ T5770] hsr_slave_0: entered promiscuous mode [ 85.955126][ T5770] hsr_slave_1: entered promiscuous mode [ 85.961245][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.969167][ T5770] Cannot create hsr debugfs directory [ 85.979595][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.016818][ T5773] team0: Port device team_slave_0 added [ 86.044267][ T5779] Bluetooth: hci3: command tx timeout [ 86.069268][ T5773] team0: Port device team_slave_1 added [ 86.105924][ T5769] hsr_slave_0: entered promiscuous mode [ 86.112364][ T5769] hsr_slave_1: entered promiscuous mode [ 86.119453][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.124231][ T5782] Bluetooth: hci0: command tx timeout [ 86.128864][ T5769] Cannot create hsr debugfs directory [ 86.133218][ T5779] Bluetooth: hci1: command tx timeout [ 86.179220][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.186519][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.212905][ T5779] Bluetooth: hci2: command tx timeout [ 86.218796][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.258699][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.265739][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.292507][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.471787][ T5773] hsr_slave_0: entered promiscuous mode [ 86.478475][ T5773] hsr_slave_1: entered promiscuous mode [ 86.485046][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.492659][ T5773] Cannot create hsr debugfs directory [ 86.598098][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.624059][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.634609][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.646687][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.781550][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.805328][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.850264][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.882796][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.898934][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.918088][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.937590][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.948126][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.089034][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.118305][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.144002][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.159410][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.194933][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.265266][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.325618][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.332985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.372886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.380234][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.417149][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.437447][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.510990][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.558477][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.565726][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.581956][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.589176][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.609547][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.668505][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.675728][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.717891][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.729548][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.736773][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.828226][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.869688][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.876926][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.920164][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.927362][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.133948][ T5779] Bluetooth: hci3: command tx timeout [ 88.201719][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.212700][ T5779] Bluetooth: hci1: command tx timeout [ 88.216117][ T5782] Bluetooth: hci0: command tx timeout [ 88.285855][ T5782] Bluetooth: hci2: command tx timeout [ 88.380214][ T5771] veth0_vlan: entered promiscuous mode [ 88.408314][ T5771] veth1_vlan: entered promiscuous mode [ 88.421986][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.512125][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.555065][ T5769] veth0_vlan: entered promiscuous mode [ 88.561553][ T5771] veth0_macvtap: entered promiscuous mode [ 88.572994][ T5771] veth1_macvtap: entered promiscuous mode [ 88.612580][ T5769] veth1_vlan: entered promiscuous mode [ 88.636130][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.668450][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.691891][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.705631][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.714971][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.724761][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.739272][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.756856][ T5770] veth0_vlan: entered promiscuous mode [ 88.792005][ T5770] veth1_vlan: entered promiscuous mode [ 88.835984][ T5769] veth0_macvtap: entered promiscuous mode [ 88.870442][ T5769] veth1_macvtap: entered promiscuous mode [ 88.918211][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.933131][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.988491][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.997225][ T5773] veth0_vlan: entered promiscuous mode [ 89.012361][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.019520][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.034480][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.047631][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.061554][ T5770] veth0_macvtap: entered promiscuous mode [ 89.077660][ T5773] veth1_vlan: entered promiscuous mode [ 89.087548][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.100369][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.112411][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.122127][ T5770] veth1_macvtap: entered promiscuous mode [ 89.139646][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.149297][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158468][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.169983][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.223146][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.239969][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.252019][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.263004][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.276114][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.302151][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.315316][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.332586][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.348469][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.361694][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.411553][ T5773] veth0_macvtap: entered promiscuous mode [ 89.429417][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.441994][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.451755][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.460908][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.476536][ T5773] veth1_macvtap: entered promiscuous mode [ 89.500027][ T5839] Zero length message leads to an empty skb [ 89.544328][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.557462][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.572946][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.593729][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.608104][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.620245][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.637692][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.713822][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.722152][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.739581][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.739625][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.739637][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.739650][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.739660][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.739673][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.741137][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.802088][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.802169][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.802200][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.802230][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.837333][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.837356][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.991979][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.992002][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.160497][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.179068][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.213604][ T5782] Bluetooth: hci3: command tx timeout [ 90.281542][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.290214][ T5782] Bluetooth: hci0: command tx timeout [ 90.295886][ T5782] Bluetooth: hci1: command tx timeout [ 90.328822][ T5847] Bluetooth: MGMT ver 1.22 [ 90.338613][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.365144][ T5782] Bluetooth: hci2: command tx timeout [ 90.405273][ T5849] syz.1.7[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.430227][ T5849] loop1: detected capacity change from 0 to 1024 [ 90.453938][ T5849] ext4: Unknown parameter 'smackfsfloor' [ 90.496716][ T5849] capability: warning: `syz.1.7' uses deprecated v2 capabilities in a way that may be insecure [ 90.544082][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.585325][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.647674][ T5852] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 90.712898][ T5854] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 90.744370][ T5856] warning: `syz.1.9' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.348227][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 91.348408][ T5782] CPU: 0 PID: 5782 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 91.348430][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.348443][ T5782] Workqueue: hci0 hci_rx_work [ 91.348482][ T5782] Call Trace: [ 91.348494][ T5782] [ 91.348503][ T5782] dump_stack_lvl+0x18c/0x250 [ 91.348526][ T5782] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 91.348558][ T5782] ? show_regs_print_info+0x20/0x20 [ 91.348578][ T5782] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 91.348620][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 91.348664][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 91.348688][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 91.348733][ T5782] kobject_add_internal+0x61c/0xcc0 [ 91.348773][ T5782] kobject_add+0x164/0x240 [ 91.348805][ T5782] ? kobject_init+0x1e0/0x1e0 [ 91.348853][ T5782] ? _raw_spin_unlock+0x3a/0x40 [ 91.348885][ T5782] ? get_device_parent+0x366/0x390 [ 91.348921][ T5782] device_add+0x408/0xc50 [ 91.348956][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 91.348987][ T5782] le_conn_complete_evt+0xf5d/0x1540 [ 91.349018][ T5782] ? hci_event_packet+0x4cb/0x1270 [ 91.349058][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 91.349089][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 91.349117][ T5782] ? skb_pull_data+0xfb/0x200 [ 91.349150][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 91.349181][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 91.349216][ T5782] hci_event_packet+0x7ba/0x1270 [ 91.349255][ T5782] ? bis_list+0x290/0x290 [ 91.349287][ T5782] ? kcov_remote_start+0x2b/0x7e0 [ 91.349318][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 91.349347][ T5782] hci_rx_work+0x43a/0xd60 [ 91.349381][ T5782] ? process_scheduled_works+0x96f/0x15d0 [ 91.349410][ T5782] process_scheduled_works+0xa5d/0x15d0 [ 91.349470][ T5782] ? worker_attach_to_pool+0x380/0x380 [ 91.349506][ T5782] ? assign_work+0x3d2/0x5d0 [ 91.349540][ T5782] worker_thread+0xa55/0xfc0 [ 91.349598][ T5782] kthread+0x2fa/0x390 [ 91.349618][ T5782] ? pr_cont_work+0x560/0x560 [ 91.349646][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 91.349668][ T5782] ret_from_fork+0x48/0x80 [ 91.349694][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 91.349717][ T5782] ret_from_fork_asm+0x11/0x20 [ 91.349764][ T5782] [ 91.349973][ T5782] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.350128][ T5782] Bluetooth: hci0: failed to register connection device [ 92.151824][ T9] cfg80211: failed to load regulatory.db [ 92.328169][ T5779] Bluetooth: hci3: command tx timeout [ 92.364825][ T5779] Bluetooth: hci0: command tx timeout [ 92.370355][ T5779] Bluetooth: hci1: command tx timeout [ 92.444286][ T5779] Bluetooth: hci2: command tx timeout [ 92.494867][ T5875] loop2: detected capacity change from 0 to 4096 [ 92.552624][ T5875] EXT4-fs: inline encryption not supported [ 92.692498][ T5875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.747188][ T5875] EXT4-fs (loop2): Test dummy encryption mode enabled [ 92.843082][ T5875] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 93.091034][ T5875] System zones: 0-5 [ 93.205097][ T5875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.178727][ T5899] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.270600][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.288660][ T5904] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 94.596486][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 94.606489][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 94.614090][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 94.624190][ T5779] Workqueue: hci2 hci_rx_work [ 94.628915][ T5779] Call Trace: [ 94.632239][ T5779] [ 94.635206][ T5779] dump_stack_lvl+0x18c/0x250 [ 94.639956][ T5779] ? show_regs_print_info+0x20/0x20 [ 94.645196][ T5779] ? load_image+0x420/0x420 [ 94.649769][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 94.654926][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 94.659638][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 94.664935][ T5779] kobject_add_internal+0x61c/0xcc0 [ 94.670198][ T5779] kobject_add+0x164/0x240 [ 94.674675][ T5779] ? kobject_init+0x1e0/0x1e0 [ 94.679414][ T5779] ? _raw_spin_unlock+0x3a/0x40 [ 94.684325][ T5779] ? get_device_parent+0x366/0x390 [ 94.689494][ T5779] device_add+0x408/0xc50 [ 94.693875][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 94.698855][ T5779] le_conn_complete_evt+0xf5d/0x1540 [ 94.704190][ T5779] ? hci_event_packet+0x4cb/0x1270 [ 94.709388][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 94.715715][ T5779] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 94.721416][ T5779] ? skb_pull_data+0xfb/0x200 [ 94.726159][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 94.731794][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 94.737914][ T5779] hci_event_packet+0x7ba/0x1270 [ 94.742917][ T5779] ? bis_list+0x290/0x290 [ 94.747304][ T5779] ? kcov_remote_start+0x2b/0x7e0 [ 94.752376][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 94.757625][ T5779] hci_rx_work+0x43a/0xd60 [ 94.762109][ T5779] ? process_scheduled_works+0x96f/0x15d0 [ 94.767887][ T5779] process_scheduled_works+0xa5d/0x15d0 [ 94.773548][ T5779] ? worker_attach_to_pool+0x380/0x380 [ 94.779066][ T5779] ? assign_work+0x3d2/0x5d0 [ 94.783722][ T5779] worker_thread+0xa55/0xfc0 [ 94.788406][ T5779] kthread+0x2fa/0x390 [ 94.792513][ T5779] ? pr_cont_work+0x560/0x560 [ 94.797244][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 94.801874][ T5779] ret_from_fork+0x48/0x80 [ 94.806336][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 94.810970][ T5779] ret_from_fork_asm+0x11/0x20 [ 94.815811][ T5779] [ 94.818974][ C0] vkms_vblank_simulate: vblank timer overrun [ 94.848268][ T5779] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 94.886627][ T5779] Bluetooth: hci2: failed to register connection device [ 95.337703][ T5916] loop2: detected capacity change from 0 to 128 [ 95.375403][ T5916] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.415886][ T5916] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 96.060621][ T5773] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.147358][ T5928] netlink: 36 bytes leftover after parsing attributes in process `syz.3.31'. [ 96.523437][ T5945] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.802291][ T5948] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 97.024442][ T5779] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 97.491917][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 97.847944][ T5968] lo speed is unknown, defaulting to 1000 [ 97.855713][ T5968] lo speed is unknown, defaulting to 1000 [ 97.873475][ T5968] lo speed is unknown, defaulting to 1000 [ 97.909473][ T5968] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 97.978542][ T5968] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 98.202950][ T5968] lo speed is unknown, defaulting to 1000 [ 98.220751][ T5968] lo speed is unknown, defaulting to 1000 [ 98.237335][ T5968] lo speed is unknown, defaulting to 1000 [ 98.254569][ T5968] lo speed is unknown, defaulting to 1000 [ 99.153839][ T5980] siw: device registration error -23 [ 100.339488][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz.1.48'. [ 100.696658][ T6000] mmap: syz.0.50 (6000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.086235][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 101.174343][ T5779] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 101.184756][ T5779] CPU: 0 PID: 5779 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 101.192363][ T5779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.202466][ T5779] Workqueue: hci1 hci_rx_work [ 101.207204][ T5779] Call Trace: [ 101.210519][ T5779] [ 101.213487][ T5779] dump_stack_lvl+0x18c/0x250 [ 101.218222][ T5779] ? show_regs_print_info+0x20/0x20 [ 101.223465][ T5779] ? load_image+0x420/0x420 [ 101.228037][ T5779] sysfs_create_dir_ns+0x26e/0x2a0 [ 101.233190][ T5779] ? sysfs_warn_dup+0xa0/0xa0 [ 101.237912][ T5779] ? do_raw_spin_unlock+0x121/0x230 [ 101.243167][ T5779] kobject_add_internal+0x61c/0xcc0 [ 101.248444][ T5779] kobject_add+0x164/0x240 [ 101.252904][ T5779] ? __rwlock_init+0x150/0x150 [ 101.257767][ T5779] ? kobject_init+0x1e0/0x1e0 [ 101.262495][ T5779] ? _raw_spin_unlock+0x28/0x40 [ 101.267413][ T5779] ? get_device_parent+0x366/0x390 [ 101.272576][ T5779] device_add+0x408/0xc50 [ 101.276962][ T5779] hci_conn_add_sysfs+0xd5/0x1e0 [ 101.281953][ T5779] le_conn_complete_evt+0xf5d/0x1540 [ 101.287285][ T5779] ? hci_event_packet+0x4cb/0x1270 [ 101.292465][ T5779] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 101.298757][ T5779] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 101.304445][ T5779] ? skb_pull_data+0xfb/0x200 [ 101.309175][ T5779] hci_le_conn_complete_evt+0x187/0x440 [ 101.314779][ T5779] ? hci_remote_host_features_evt+0x150/0x150 [ 101.320902][ T5779] hci_event_packet+0x7ba/0x1270 [ 101.325896][ T5779] ? bis_list+0x290/0x290 [ 101.330270][ T5779] ? lockdep_hardirqs_on+0x98/0x150 [ 101.335520][ T5779] ? hci_send_to_monitor+0xd7/0x4f0 [ 101.340774][ T5779] hci_rx_work+0x43a/0xd60 [ 101.345254][ T5779] ? process_scheduled_works+0x96f/0x15d0 [ 101.351021][ T5779] process_scheduled_works+0xa5d/0x15d0 [ 101.356640][ T5779] ? worker_attach_to_pool+0x380/0x380 [ 101.362156][ T5779] ? assign_work+0x3d2/0x5d0 [ 101.366796][ T5779] worker_thread+0xa55/0xfc0 [ 101.371473][ T5779] kthread+0x2fa/0x390 [ 101.375576][ T5779] ? pr_cont_work+0x560/0x560 [ 101.380297][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 101.384954][ T5779] ret_from_fork+0x48/0x80 [ 101.389505][ T5779] ? kthread_blkcg+0xd0/0xd0 [ 101.394151][ T5779] ret_from_fork_asm+0x11/0x20 [ 101.398983][ T5779] [ 101.403527][ T5779] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 101.417644][ T5779] Bluetooth: hci1: failed to register connection device [ 101.616032][ T6009] siw: device registration error -23 [ 104.000988][ T6021] loop1: detected capacity change from 0 to 128 [ 104.113170][ T6021] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.234125][ T6021] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.419695][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.727760][ T6035] netlink: 36 bytes leftover after parsing attributes in process `syz.1.65'. [ 104.807296][ T6041] loop0: detected capacity change from 0 to 4096 [ 104.819965][ T6041] EXT4-fs: inline encryption not supported [ 104.842159][ T6041] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 104.861670][ T6041] EXT4-fs (loop0): Test dummy encryption mode enabled [ 104.878986][ T6041] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 104.896183][ T6041] System zones: 0-5 [ 104.902368][ T6041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.223074][ T6041] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 106.118177][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.866740][ T6077] loop1: detected capacity change from 0 to 128 [ 106.920775][ T6077] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.997141][ T6077] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.182678][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.479343][ T5779] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 107.573631][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 108.431099][ T6098] loop1: detected capacity change from 0 to 4096 [ 108.455911][ T6098] EXT4-fs: inline encryption not supported [ 108.749439][ T6098] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 109.544843][ T6098] EXT4-fs (loop1): Test dummy encryption mode enabled [ 109.583163][ T6098] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 109.630757][ T6098] System zones: 0-5 [ 109.705107][ T6098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.933458][ C1] sched: RT throttling activated [ 110.271017][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.573265][ T6134] loop1: detected capacity change from 0 to 128 [ 111.617690][ T6134] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.650975][ T6134] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 111.750242][ T5769] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.060849][ T6145] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 112.069554][ T6145] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 112.261399][ T51] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 112.859281][ T6155] loop3: detected capacity change from 0 to 4096 [ 112.879818][ T6155] EXT4-fs: inline encryption not supported [ 113.012410][ T6155] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 113.058107][ T6155] EXT4-fs (loop3): Test dummy encryption mode enabled [ 113.111521][ T6155] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 113.144677][ T6163] loop2: detected capacity change from 0 to 512 [ 113.173936][ T6155] System zones: 0-5 [ 113.184344][ T6155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.197024][ T6163] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 113.376384][ T6163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.053067][ T6163] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2971: inode #17: comm syz.2.99: corrupted xattr block 128: invalid header [ 114.151619][ T6163] EXT4-fs (loop2): Remounting filesystem read-only [ 114.189073][ T6163] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 114.223180][ T6163] EXT4-fs (loop2): 1 orphan inode deleted [ 114.284712][ T6163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.398609][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.441683][ T6163] netlink: 'syz.2.99': attribute type 2 has an invalid length. [ 114.649723][ T6163] ------------[ cut here ]------------ [ 114.655368][ T6163] kernel BUG at net/phonet/socket.c:213! [ 114.708718][ T6163] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 114.714866][ T6163] CPU: 1 PID: 6163 Comm: syz.2.99 Not tainted syzkaller #0 [ 114.722094][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.732186][ T6163] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 114.737966][ T6163] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 114.757627][ T6163] RSP: 0018:ffffc90005527960 EFLAGS: 00010283 [ 114.763726][ T6163] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 114.771750][ T6163] RDX: ffffc9000d3a3000 RSI: 0000000000000050 RDI: 0000000000000051 [ 114.779791][ T6163] RBP: ffffc90005527a10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 114.787833][ T6163] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 114.795828][ T6163] R13: ffff88805b44d400 R14: ffff8880300c0c80 R15: 1ffff92000aa4f30 [ 114.803827][ T6163] FS: 00007f52907df6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 114.812788][ T6163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 114.819411][ T6163] CR2: 000055557be199f8 CR3: 000000002f0b8000 CR4: 00000000003506e0 [ 114.827422][ T6163] Call Trace: [ 114.830741][ T6163] [ 114.833703][ T6163] ? pn_socket_ioctl+0x350/0x350 [ 114.838681][ T6163] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 114.844011][ T6163] ? security_socket_sendmsg+0x80/0xa0 [ 114.849520][ T6163] ? pn_socket_ioctl+0x350/0x350 [ 114.854495][ T6163] ____sys_sendmsg+0x5ba/0x960 [ 114.859294][ T6163] ? __lock_acquire+0x7d40/0x7d40 [ 114.864357][ T6163] ? __asan_memset+0x22/0x40 [ 114.868989][ T6163] ? __sys_sendmsg_sock+0x30/0x30 [ 114.874050][ T6163] ? __import_iovec+0x5f2/0x850 [ 114.878941][ T6163] ? import_iovec+0x73/0xa0 [ 114.883481][ T6163] ___sys_sendmsg+0x2a6/0x360 [ 114.888202][ T6163] ? __sys_sendmsg+0x2a0/0x2a0 [ 114.893029][ T6163] __se_sys_sendmsg+0x1c2/0x2b0 [ 114.897923][ T6163] ? __x64_sys_sendmsg+0x80/0x80 [ 114.902905][ T6163] ? lockdep_hardirqs_on+0x98/0x150 [ 114.908148][ T6163] do_syscall_64+0x55/0xb0 [ 114.912603][ T6163] ? clear_bhb_loop+0x40/0x90 [ 114.917332][ T6163] ? clear_bhb_loop+0x40/0x90 [ 114.922055][ T6163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 114.927989][ T6163] RIP: 0033:0x7f528f99ce59 [ 114.932466][ T6163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.952122][ T6163] RSP: 002b:00007f52907df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.960577][ T6163] RAX: ffffffffffffffda RBX: 00007f528fc15fa0 RCX: 00007f528f99ce59 [ 114.968599][ T6163] RDX: 0000000004004081 RSI: 00002000000002c0 RDI: 0000000000000008 [ 114.976598][ T6163] RBP: 00007f528fa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 114.984593][ T6163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.992605][ T6163] R13: 00007f528fc16038 R14: 00007f528fc15fa0 R15: 00007ffcc9eabff8 [ 115.000613][ T6163] [ 115.003674][ T6163] Modules linked in: [ 115.033725][ T6163] ---[ end trace 0000000000000000 ]--- [ 115.039249][ T6163] RIP: 0010:pn_socket_sendmsg+0x235/0x240 [ 115.293627][ T5782] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 115.316428][ T6163] Code: 41 5f 5d c3 e8 bc 6a cb 00 89 d9 80 e1 07 fe c1 38 c1 0f 8c 0f ff ff ff 48 89 df e8 25 8b 23 f8 e9 02 ff ff ff e8 0b 4c cb f7 <0f> 0b 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 48 89 e5 41 57 41 [ 115.344684][ T6163] RSP: 0018:ffffc90005527960 EFLAGS: 00010283 [ 115.361864][ T6163] RAX: ffffffff89bbdfe5 RBX: 0000000000000000 RCX: 0000000000080000 [ 115.402764][ T6163] RDX: ffffc9000d3a3000 RSI: 0000000000000050 RDI: 0000000000000051 [ 115.450390][ T6163] RBP: ffffc90005527a10 R08: ffffffff8e8b3aef R09: 1ffffffff1d1675d [ 115.478268][ T6163] R10: dffffc0000000000 R11: fffffbfff1d1675e R12: dffffc0000000000 [ 115.491846][ T6163] R13: ffff88805b44d400 R14: ffff8880300c0c80 R15: 1ffff92000aa4f30 [ 115.500161][ T6163] FS: 00007f52907df6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 115.509177][ T6163] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 115.515837][ T6163] CR2: 00007f85b77d4ff8 CR3: 000000002f0b8000 CR4: 00000000003506e0 [ 115.524305][ T6163] Kernel panic - not syncing: Fatal exception [ 115.530983][ T6163] Kernel Offset: disabled [ 115.535313][ T6163] Rebooting in 86400 seconds..