last executing test programs: 7m23.4670988s ago: executing program 0 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_any}], [], 0x6b}}) sched_setscheduler(0x0, 0x1, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x17f) 7m23.372272623s ago: executing program 0 (id=38): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r3, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1=0xe0000306}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 7m23.220360328s ago: executing program 0 (id=40): r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netfilter\x00') timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getdents64(r0, &(0x7f0000000000)=""/90, 0x5a) getdents(r0, &(0x7f0000000100)=""/67, 0x43) 7m22.064586725s ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r0}, './file1\x00'}) 7m21.697189817s ago: executing program 0 (id=50): fcntl$notify(0xffffffffffffffff, 0x402, 0x80000034) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r2, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r3, 0x24, 0x0, 0x3a2, &(0x7f0000000100)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) 7m21.211870213s ago: executing program 0 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 7m20.752310118s ago: executing program 32 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) 6m30.888213798s ago: executing program 1 (id=192): socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) unshare(0x28000600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffff, 0x3, 0x4, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 6m30.489329481s ago: executing program 1 (id=193): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) connect$nfc_llcp(r0, &(0x7f0000000340)={0x27, 0x0, 0x1, 0x7, 0x36, 0x3, "eb1fbf9869c10ffb69994678f9c5516b5d9dcd4fb19b4514e3780e70ea492f0d44427fea6c0b39272302a1c725b25320b91a73553de4130c50a9c715e205c0", 0x1}, 0x60) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 6m30.167812741s ago: executing program 1 (id=195): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 6m29.896871969s ago: executing program 1 (id=197): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f0000005600)="$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") symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chroot(&(0x7f0000000100)='./file7\x00') chdir(&(0x7f00000003c0)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) 6m26.599653366s ago: executing program 1 (id=206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c844}, 0x881) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0xfffd) close_range(r0, 0xffffffffffffffff, 0x0) 6m25.224015871s ago: executing program 1 (id=211): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba42", 0x2, 0x4002, 0x0, 0x0) 6m24.713175837s ago: executing program 33 (id=211): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f00000019c0)="ba42", 0x2, 0x4002, 0x0, 0x0) 1m59.414614594s ago: executing program 3 (id=1099): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m57.735679328s ago: executing program 3 (id=1101): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) close(r4) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m54.420104365s ago: executing program 3 (id=1108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000009380)={&(0x7f0000002300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xa}, {0xdedf0d8c1d41c28, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m47.499875139s ago: executing program 3 (id=1121): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) syz_open_procfs(0x0, 0x0) 1m44.711712799s ago: executing program 3 (id=1132): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x46a, 0x4) 1m42.539541039s ago: executing program 3 (id=1134): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9cfa, 0x0) getdents(0xffffffffffffffff, 0x0, 0x416d) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r3, 0x80, 0x2, 0x8}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044050) 1m26.786475017s ago: executing program 34 (id=1134): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x9cfa, 0x0) getdents(0xffffffffffffffff, 0x0, 0x416d) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd28, 0x25dfdbcd, {0x7, 0x0, 0x0, r3, 0x80, 0x2, 0x8}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x24044050) 31.158929174s ago: executing program 6 (id=1241): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc185f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r4 = fcntl$dupfd(r0, 0x0, r0) read$alg(r4, 0x0, 0x6c) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x2, 0x0, @tick, {0xfd, 0x1}, {0x0, 0x57}, @time=@time={0xbc}}, {0x0, 0x40, 0x0, 0x0, @time={0x7, 0x8}, {}, {}, @note={0x0, 0xfd}}], 0x38) io_uring_setup(0x1b7b, 0x0) 23.498787891s ago: executing program 6 (id=1246): openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x14) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010001", 0x7) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @remote}}) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000bd1f9c480000000000000000000000000000000000000000000000000000000000000000ffffffff00ce6e0009000000000000000a00"/196]) accept4$alg(r3, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, &(0x7f0000001440)) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) 23.497536571s ago: executing program 5 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x163042) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) recvmmsg(r5, &(0x7f0000003040)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000002580)=""/241, 0xf1}], 0x1, &(0x7f0000002800)=""/246, 0xf6}, 0x8001}], 0x1, 0x40014102, 0x0) close(r3) 22.128798405s ago: executing program 5 (id=1247): io_setup(0x2, &(0x7f00000001c0)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) 20.561430356s ago: executing program 5 (id=1248): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x2}, 0xa) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f00000000c0)={@host, 0x6}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000080)='./file1\x00', 0x2200802, &(0x7f0000000040)={[{@ikeep}]}, 0x1, 0xbad7, &(0x7f000001c300)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB='namecase=1,keep_last_dots,uid=', @ANYRESHEX=0xee00, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRESDEC], 0x1, 0x1533, &(0x7f0000006800)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x0, 0x81}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 20.027349043s ago: executing program 6 (id=1249): openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x46a, 0x4) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400241, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) 17.616150121s ago: executing program 6 (id=1251): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1bb, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, r0, 0x8857c000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, 0x0, 0xa) openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/custom1\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 16.225973506s ago: executing program 4 (id=1255): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xda52000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.676122901s ago: executing program 4 (id=1257): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) unlink(&(0x7f0000002800)='./file0\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x2000000, 0x231, 0x50565559, 0x5, 0xa, [{0x9, 0x6}, {0x6, 0x7}, {0x0, 0xfffffff8}, {0x8, 0x6}, {0x5, 0x7e1}, {0x7, 0x7}, {0x6, 0xb6b}, {0xffffffff, 0xfffffff7}], 0x66, 0x0, 0x3, 0x2}}) r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000002200)=ANY=[@ANYBLOB="0500000010000000040000050000000000fc000002000000"]) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f043, 0x8}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000041000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r3, @ANYBLOB="080004"], 0x4c}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f00000002c0)={0x7, {{0xa, 0x4e24, 0x3, @remote, 0xb}}, {{0xa, 0x4e20, 0xa, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}}, 0x108) 11.611346275s ago: executing program 2 (id=1258): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000100)) epoll_create1(0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0xa, 0x3, 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 11.360504413s ago: executing program 2 (id=1259): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x7, 0x2) preadv(r2, 0x0, 0x0, 0x3, 0xffff) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = io_uring_setup(0x3ca9, &(0x7f00000000c0)={0x0, 0xd4ea, 0x2, 0x2, 0x3}) io_uring_enter(r3, 0x6a8a, 0xffefffff, 0x21, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc01c5869, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2c2, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 9.248639492s ago: executing program 6 (id=1260): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) listen(0xffffffffffffffff, 0xff) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x4008015) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0xc000) r3 = syz_open_procfs(0x0, &(0x7f0000002440)='net/ipv6_route\x00') preadv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x5fae, 0x4) 8.444015497s ago: executing program 5 (id=1261): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semop(0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(r3, 0xffffffffffffffff, 0x0, 0x7ffff004) 8.045202331s ago: executing program 4 (id=1262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r3, &(0x7f0000007700)={0x2020}, 0x2020) 8.018203751s ago: executing program 2 (id=1263): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x8008af00, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0xc185f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) r4 = fcntl$dupfd(r0, 0x0, r0) read$alg(r4, 0x0, 0x6c) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x2, 0x0, @tick, {0xfd, 0x1}, {0x0, 0x57}, @time=@time={0xbc}}, {0x0, 0x40, 0x0, 0x0, @time={0x7, 0x8}, {}, {}, @note={0x0, 0xfd}}], 0x38) io_uring_setup(0x1b7b, 0x0) 7.880082216s ago: executing program 6 (id=1264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mount$bpf(0x200000000000, 0x0, 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 3.526230336s ago: executing program 4 (id=1265): clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2902}) socket$packet(0x11, 0x3, 0x300) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) prctl$PR_SET_PDEATHSIG(0x1, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) creat(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.502969887s ago: executing program 2 (id=1266): mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)={[{@stripe}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nogrpid}, {@sysvgroups}, {@orlov}, {@grpquota}, {@noauto_da_alloc}]}, 0x1, 0x47f, &(0x7f0000000b00)="$eJzs3M9vFFUcAPDvTLdAEGlF/AGiVtHY+IPSgsrBi0YTD5qY6AGPtS0EKdTQmgghshqDR0PinRhP/guePBnjycSrXo0hIUpM+HFxzezM0N3tbqVl2+2PzydZ+t7Oe/Pelzdv+2YeSwCb1lD2RxKxIyJ+i4iBPNtcYCj/cePa+Ymb185PJFGrvftXUi93/dr5ibJoWe+eIjOcRqRfJEUjzWbPnjs5Pj09dabIj8yd+mhk9uy5F06cGj8+dXzq9NiRI4cPjb780tiLXYkz69P1vZ/O7Nvz5vuX3p44eumDbU3HG+PolqEs8L9rda3Hnu52Yz32b20+zqTS695wp/oiIhuu/vr8H4i+mB+8gXjj8552DlhR2Wf2H61v9t9OVWvABpbEsqrF8qoBa0cU9+3Z/W/5WuUlSE9dfTW/AcrivlG88iOVSIu/oP4VbH8oIo5Wb13OXtHyHKLW5rkBAMDd+iFb/zy/cP2XrQkfbCiXFHtDgxFxX0Tsioj7I2J3RDxQlH0oIh5eYvutW0ML15/plWWGdkey9d8rxd5W8/ovLYsM9hW5e+vx9yfHTkxPHYyInRExHP1bs/xou5OXp3j91686td+4/jtazftRrgWLk1ypbG2ocOHb/GeXFqVXP4vYW2kXf1LfCUiiVsvGfk9E7F3aqXeWiRPPfrevU6Hm+G9dXhj/Irqwz1T7JuKZfPyr0RJ/KVl8f3JkW0xPHRwpr4qFfv7l4jud2r+r+LsgG//tzdd/S4mBf5LG/drZpbdx8fcvO95TVv43/pbrPyImx+fGtyTv1festxTvfTI+N3dmNGJL8lY93/T+2HzdMl+Wz+If3t9+/u8q6mTxPxIR2UX8aEQ8FhGPF2P3REQ8GRH7F4n/p9ee+rDTsbUw/pNtP/9uX/+DzeO/9ETfyR+/79T+ovHXP0Gy8T9czw4XdbLxz1PbOsbVuTtlneVezQAAALD+pBGxI5L0wO10mh44kP97+d2xPZ2emZ177tjMx6cn8+8IDEZ/Wj7pGmh4HjqaVIsz5vmx4llxefxQ8dz46/KxwsTM9GQP4wbyed5u/mf+7Ot174AV5/tasHm1zv+0R/0AVt+d/v53PwAbz3LX/9YJsP65/4fNq938v9CSt/aHjcnvf9i82s//raveD2D1LZz/yc35/x4I2Mis/2FTupvv9a9UorLIt/cl1koi0hVroromAlzHiUoXZnePP5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC65L8AAAD//2IA+HU=") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1cfe) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3860}}, 0x20}}, 0x0) stat(0x0, 0x0) io_setup(0x202, 0x0) syz_fuse_handle_req(r0, &(0x7f0000002100)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x18, 0x0, 0x2, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.428090629s ago: executing program 5 (id=1267): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r6, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xafc, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0) 2.595413447s ago: executing program 2 (id=1268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x801, 0x2000004, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42005}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.590422307s ago: executing program 4 (id=1269): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[], 0x90) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) mkdirat(0xffffffffffffff9c, 0x0, 0x93) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019ac0)=""/102400, 0x19000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@setlink={0x34, 0x13, 0x1, 0x400000, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0xfffffdd4}]}]}, 0x34}}, 0x0) 1.732307874s ago: executing program 5 (id=1270): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0xa0, 0x0, 0x0, {{0x6, 0x2, 0x1, 0x7, 0x0, 0x3, {0x3, 0xfffffffffffffffc, 0xa, 0x8000, 0x8, 0xcca1, 0xffffffff, 0x200, 0x8, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x7f}}, {0x0, 0x3}}}, 0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100000001002089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x600], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000002100010000000000000000000a0000400000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) 51.402649ms ago: executing program 2 (id=1271): openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(r2, &(0x7f0000000080)='./bus\x00', 0x0, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8982, 0x0) 0s ago: executing program 4 (id=1272): fsmount(0xffffffffffffffff, 0x0, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket$netlink(0x10, 0x3, 0xf) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): etrying later): interface not active [ 89.681472][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.722542][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.777664][ T5771] team0: Port device team_slave_0 added [ 89.787985][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.802441][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.840943][ T5771] team0: Port device team_slave_1 added [ 89.851585][ T5779] team0: Port device team_slave_0 added [ 89.873568][ T5772] hsr_slave_0: entered promiscuous mode [ 89.883043][ T5772] hsr_slave_1: entered promiscuous mode [ 89.905273][ T5779] team0: Port device team_slave_1 added [ 89.938393][ T5782] team0: Port device team_slave_0 added [ 89.956012][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.963280][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.990995][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.003726][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.013002][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.039191][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.059902][ T5782] team0: Port device team_slave_1 added [ 90.115324][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.122864][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.149664][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.149893][ T5776] Bluetooth: hci0: command tx timeout [ 90.183062][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.190245][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.216364][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.230093][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.237118][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.263417][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.275500][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.282809][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.309632][ T5776] Bluetooth: hci2: command tx timeout [ 90.315192][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.320230][ T5776] Bluetooth: hci1: command tx timeout [ 90.357450][ T5771] hsr_slave_0: entered promiscuous mode [ 90.364127][ T5771] hsr_slave_1: entered promiscuous mode [ 90.370884][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.378849][ T5771] Cannot create hsr debugfs directory [ 90.379501][ T5776] Bluetooth: hci3: command tx timeout [ 90.454969][ T5779] hsr_slave_0: entered promiscuous mode [ 90.462044][ T5779] hsr_slave_1: entered promiscuous mode [ 90.468487][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.477620][ T5779] Cannot create hsr debugfs directory [ 90.587583][ T5782] hsr_slave_0: entered promiscuous mode [ 90.594269][ T5782] hsr_slave_1: entered promiscuous mode [ 90.601195][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.608873][ T5782] Cannot create hsr debugfs directory [ 90.986879][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.012083][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.023778][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.036454][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.125732][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.145851][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.156767][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.173956][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.259656][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.290499][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.310910][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.334818][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.401707][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.442998][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.461174][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.474341][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.486335][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.520508][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.557014][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.564524][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.597037][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.604288][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.677147][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.752470][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.812386][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.819669][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.865088][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.872320][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.916133][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.944835][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.015158][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.027497][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.064937][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.072162][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.107178][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.114531][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.162964][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.170322][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.221046][ T5776] Bluetooth: hci0: command tx timeout [ 92.235063][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.242527][ T27] cfg80211: failed to load regulatory.db [ 92.242546][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.382949][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.392221][ T5776] Bluetooth: hci1: command tx timeout [ 92.397727][ T5776] Bluetooth: hci2: command tx timeout [ 92.460389][ T5776] Bluetooth: hci3: command tx timeout [ 92.523260][ T5772] veth0_vlan: entered promiscuous mode [ 92.606235][ T5772] veth1_vlan: entered promiscuous mode [ 92.624896][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.727000][ T5772] veth0_macvtap: entered promiscuous mode [ 92.812467][ T5772] veth1_macvtap: entered promiscuous mode [ 92.828093][ T5779] veth0_vlan: entered promiscuous mode [ 92.872173][ T5779] veth1_vlan: entered promiscuous mode [ 92.918154][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.959191][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.997429][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.019260][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.035698][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.050261][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.063841][ T5779] veth0_macvtap: entered promiscuous mode [ 93.093465][ T5779] veth1_macvtap: entered promiscuous mode [ 93.163535][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.197936][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.216004][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.230617][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.256018][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.294105][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.305057][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.318513][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.343408][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.363407][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.416588][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.434778][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.455016][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.465039][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.475595][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.484709][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.541987][ T5782] veth0_vlan: entered promiscuous mode [ 93.605199][ T5771] veth0_vlan: entered promiscuous mode [ 93.663052][ T5782] veth1_vlan: entered promiscuous mode [ 93.697056][ T5771] veth1_vlan: entered promiscuous mode [ 93.746727][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 93.818718][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.839331][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.868246][ T5771] veth0_macvtap: entered promiscuous mode [ 93.891650][ T5771] veth1_macvtap: entered promiscuous mode [ 93.936650][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.947827][ T5782] veth0_macvtap: entered promiscuous mode [ 93.954309][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.976351][ T5782] veth1_macvtap: entered promiscuous mode [ 94.006262][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.021244][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.034010][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.045128][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.060037][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.076531][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.087256][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.098504][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.109568][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.123183][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.145877][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.162915][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.190937][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210896][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.243490][ T5839] syz.3.4[5839]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.259745][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.278926][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.294148][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.305150][ T5776] Bluetooth: hci0: command tx timeout [ 94.316695][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.327120][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.343293][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.356328][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.406045][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.423828][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.436636][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.453665][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.464018][ T5776] Bluetooth: hci1: command tx timeout [ 94.469415][ T5776] Bluetooth: hci2: command tx timeout [ 94.482021][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.508448][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.538773][ T5776] Bluetooth: hci3: command tx timeout [ 94.562889][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.632272][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.641995][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.652460][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.661520][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.853413][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.879857][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.935579][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.957405][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.970398][ T5839] loop3: detected capacity change from 0 to 40427 [ 94.994285][ T5839] F2FS-fs (loop3): Corrupted extension count (327717 + 1 > 64) [ 95.022509][ T5839] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 95.043176][ T5839] F2FS-fs (loop3): invalid crc value [ 95.064257][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.087275][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.105491][ T5839] F2FS-fs (loop3): Found nat_bits in checkpoint [ 95.166182][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.208726][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.298341][ T5839] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 95.331372][ T5839] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 95.563669][ T5839] syz.3.4: attempt to access beyond end of device [ 95.563669][ T5839] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 95.647165][ T5853] ======================================================= [ 95.647165][ T5853] WARNING: The mand mount option has been deprecated and [ 95.647165][ T5853] and is ignored by this kernel. Remove the mand [ 95.647165][ T5853] option from the mount to silence this warning. [ 95.647165][ T5853] ======================================================= [ 95.799598][ T5779] syz-executor: attempt to access beyond end of device [ 95.799598][ T5779] loop3: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 95.856443][ T5779] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 96.380056][ T5776] Bluetooth: hci0: command tx timeout [ 96.543589][ T5776] Bluetooth: hci2: command tx timeout [ 96.543599][ T5777] Bluetooth: hci1: command tx timeout [ 96.619909][ T5776] Bluetooth: hci3: command tx timeout [ 97.871973][ T5776] Bluetooth: hci1: unexpected cc 0x0c0d length: 7 > 5 [ 98.126088][ T5905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20'. [ 98.379185][ T5913] vxcan1: entered promiscuous mode [ 98.744731][ T5921] syzkaller1: entered promiscuous mode [ 98.750371][ T5921] syzkaller1: entered allmulticast mode [ 99.006202][ T5927] loop0: detected capacity change from 0 to 512 [ 99.047979][ T5927] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.29: inode has both inline data and extents flags [ 99.066315][ T5927] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.29: couldn't read orphan inode 15 (err -117) [ 99.085345][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.215233][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.634702][ T5940] netlink: 'syz.0.34': attribute type 1 has an invalid length. [ 99.960157][ T5947] Illegal XDP return value 1127352693 on prog (id 4) dev syz_tun, expect packet loss! [ 100.970748][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.45'. [ 101.303618][ T5978] loop2: detected capacity change from 0 to 736 [ 101.432887][ T5978] rock: directory entry would overflow storage [ 101.452495][ T5978] rock: sig=0x3b10, size=4, remaining=3 [ 101.779226][ T5990] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.028096][ T5996] loop2: detected capacity change from 0 to 256 [ 102.069769][ T5996] exfat: Unknown parameter 'etro' [ 102.124115][ T5780] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 102.173532][ T1122] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.314619][ T1122] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.426151][ T1122] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.552628][ T1122] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.380615][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.390177][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.399984][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.428850][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.444045][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 103.452612][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.189511][ T6033] lo speed is unknown, defaulting to 1000 [ 104.195769][ T6033] lo speed is unknown, defaulting to 1000 [ 104.204821][ T6033] lo speed is unknown, defaulting to 1000 [ 104.219725][ T6033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.238879][ T6033] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.318333][ T6033] lo speed is unknown, defaulting to 1000 [ 104.328665][ T6033] lo speed is unknown, defaulting to 1000 [ 104.336116][ T6033] lo speed is unknown, defaulting to 1000 [ 104.344462][ T6033] lo speed is unknown, defaulting to 1000 [ 104.352003][ T6033] lo speed is unknown, defaulting to 1000 [ 104.799844][ T6042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.833663][ T6042] team0: Port device batadv1 added [ 105.194828][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.71'. [ 105.509339][ T5776] Bluetooth: hci1: command tx timeout [ 105.573156][ T6013] chnl_net:caif_netlink_parms(): no params data found [ 105.688973][ T6060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.872945][ T6065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.888505][ T6065] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 105.906267][ T6065] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 105.931694][ T6065] bond1: (slave xfrm1): making interface the new active one [ 105.949863][ T6065] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 105.981856][ T1122] hsr_slave_0: left promiscuous mode [ 105.992865][ T1122] hsr_slave_1: left promiscuous mode [ 106.016267][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.031227][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.070499][ T1122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.077994][ T1122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.120430][ T1122] bridge_slave_1: left allmulticast mode [ 106.152937][ T1122] bridge_slave_1: left promiscuous mode [ 106.182965][ T1122] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.248501][ T1122] bridge_slave_0: left allmulticast mode [ 106.258882][ T1122] bridge_slave_0: left promiscuous mode [ 106.270791][ T1122] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.337261][ T1122] veth1_macvtap: left promiscuous mode [ 106.343760][ T1122] veth0_macvtap: left promiscuous mode [ 106.349994][ T1122] veth1_vlan: left promiscuous mode [ 106.355919][ T1122] veth0_vlan: left promiscuous mode [ 107.120788][ T1122] team0 (unregistering): Port device team_slave_1 removed [ 107.167119][ T1122] team0 (unregistering): Port device team_slave_0 removed [ 107.215457][ T1122] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.272795][ T1122] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.599594][ T5776] Bluetooth: hci1: command tx timeout [ 107.636854][ T1122] bond0 (unregistering): Released all slaves [ 107.748862][ T6086] syz_tun: entered allmulticast mode [ 107.968348][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.976090][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.983702][ T6013] bridge_slave_0: entered allmulticast mode [ 107.998822][ T6013] bridge_slave_0: entered promiscuous mode [ 108.021447][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.029548][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.036912][ T6013] bridge_slave_1: entered allmulticast mode [ 108.085453][ T6013] bridge_slave_1: entered promiscuous mode [ 108.270767][ T6013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.311831][ T6013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.429464][ T6013] team0: Port device team_slave_0 added [ 108.470098][ T6013] team0: Port device team_slave_1 added [ 108.559679][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.566987][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.657696][ T6013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.673800][ T6107] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.683347][ T6107] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.694069][ T6107] bridge0: entered allmulticast mode [ 108.730272][ T6013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.737446][ T6013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.791041][ T6013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.816155][ T6110] bridge_slave_1: left allmulticast mode [ 108.835166][ T6110] bridge_slave_1: left promiscuous mode [ 108.863643][ T6110] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.936509][ T6110] bridge_slave_0: left allmulticast mode [ 108.951633][ T6110] bridge_slave_0: left promiscuous mode [ 108.958400][ T6110] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.243741][ T6120] netlink: 20 bytes leftover after parsing attributes in process `syz.2.87'. [ 109.371582][ T6013] hsr_slave_0: entered promiscuous mode [ 109.429348][ T6013] hsr_slave_1: entered promiscuous mode [ 109.660033][ T5776] Bluetooth: hci1: command tx timeout [ 109.808061][ T6013] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.834044][ T6013] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.852962][ T6013] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.873972][ T6013] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 110.037798][ T6013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.073813][ T6013] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.108497][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.117685][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.162006][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.169356][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.262760][ T6013] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.590286][ T6159] loop2: detected capacity change from 0 to 1024 [ 110.598095][ T6159] EXT4-fs: Ignoring removed bh option [ 110.656760][ T6159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 110.669416][ T6159] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.703283][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 3) [ 110.722894][ T6159] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 110.736706][ T6159] EXT4-fs (loop2): This should not happen!! Data will be lost [ 110.736706][ T6159] [ 110.831082][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.855373][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.871695][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.891702][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.911716][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.933700][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.949643][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.965129][ T6159] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 110.984714][ T6158] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #15: block 3: comm syz.2.92: lblock 3 mapped to illegal pblock 3 (length 1) [ 111.177066][ T6013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.290617][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 111.765992][ T5776] Bluetooth: hci1: command tx timeout [ 111.774581][ T6176] loop1: detected capacity change from 0 to 40427 [ 111.847104][ T6176] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 111.860080][ T6176] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 111.867396][ T6176] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 112.253386][ T6190] xt_connbytes: Forcing CT accounting to be enabled [ 112.260647][ T6190] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 113.145450][ T6197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.96'. [ 113.158049][ T6013] veth0_vlan: entered promiscuous mode [ 113.206837][ T6204] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.225445][ T6013] veth1_vlan: entered promiscuous mode [ 113.365418][ T6013] veth0_macvtap: entered promiscuous mode [ 113.437538][ T6013] veth1_macvtap: entered promiscuous mode [ 113.532042][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.578768][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.610331][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.641798][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.675592][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.728364][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.813597][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.874084][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.008768][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.134329][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.235474][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.346154][ T6013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.474323][ T6013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.639311][ T6013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.007178][ T6013] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.044758][ T6013] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.107102][ T6013] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.138751][ T6013] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.293394][ T6221] 0x000000003c39-0x000000003c58 : "" [ 115.355500][ T6221] ftl_cs: FTL header corrupt! [ 115.421426][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.453489][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.530086][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.546395][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.990684][ T6226] loop3: detected capacity change from 0 to 40427 [ 116.036468][ T6226] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 116.053546][ T6226] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 116.062769][ T6226] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 116.534367][ T6242] xt_connbytes: Forcing CT accounting to be enabled [ 117.499526][ T6264] xt_hashlimit: size too large, truncated to 1048576 [ 117.776885][ T6269] syz.4.109: vmalloc error: size 9223372036854775807, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 117.793123][ T6269] CPU: 0 PID: 6269 Comm: syz.4.109 Not tainted syzkaller #0 [ 117.800505][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.810651][ T6269] Call Trace: [ 117.813982][ T6269] [ 117.816966][ T6269] dump_stack_lvl+0x18c/0x250 [ 117.821739][ T6269] ? show_regs_print_info+0x20/0x20 [ 117.826993][ T6269] ? load_image+0x420/0x420 [ 117.831580][ T6269] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 117.838134][ T6269] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 117.844681][ T6269] warn_alloc+0x246/0x340 [ 117.849075][ T6269] ? zone_watermark_ok_safe+0x230/0x230 [ 117.854691][ T6269] ? __mutex_trylock_common+0x159/0x260 [ 117.860315][ T6269] __vmalloc_node_range+0x126/0x1330 [ 117.866054][ T6269] ? tomoyo_path_number_perm+0x217/0x620 [ 117.871854][ T6269] ? rcu_is_watching+0x15/0xb0 [ 117.876675][ T6269] ? trace_contention_end+0x39/0xe0 [ 117.881929][ T6269] ? __mutex_lock+0x315/0xcc0 [ 117.886775][ T6269] ? tomoyo_path_number_perm+0x5b4/0x620 [ 117.892467][ T6269] ? dvb_dvr_do_ioctl+0x79/0x220 [ 117.897471][ T6269] ? tomoyo_path_number_perm+0x217/0x620 [ 117.903421][ T6269] ? free_vm_area+0x50/0x50 [ 117.907974][ T6269] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 117.913034][ T6269] vmalloc+0x79/0x90 [ 117.916968][ T6269] ? dvb_dvr_do_ioctl+0x12e/0x220 [ 117.922029][ T6269] dvb_dvr_do_ioctl+0x12e/0x220 [ 117.926919][ T6269] dvb_usercopy+0x195/0x2b0 [ 117.931549][ T6269] ? dvb_dvr_release+0x3e0/0x3e0 [ 117.936636][ T6269] ? dvb_generic_ioctl+0xb0/0xb0 [ 117.941637][ T6269] ? dvb_dvr_poll+0x230/0x230 [ 117.946529][ T6269] dvb_dvr_ioctl+0x29/0x30 [ 117.951116][ T6269] __se_sys_ioctl+0xfd/0x170 [ 117.955764][ T6269] do_syscall_64+0x55/0xb0 [ 117.960233][ T6269] ? clear_bhb_loop+0x40/0x90 [ 117.965081][ T6269] ? clear_bhb_loop+0x40/0x90 [ 117.970172][ T6269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.976352][ T6269] RIP: 0033:0x7f5f7af9ce59 [ 117.980830][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.000839][ T6269] RSP: 002b:00007f5f791f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.009415][ T6269] RAX: ffffffffffffffda RBX: 00007f5f7b215fa0 RCX: 00007f5f7af9ce59 [ 118.017429][ T6269] RDX: 7fffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 118.025464][ T6269] RBP: 00007f5f7b032d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.033667][ T6269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.042032][ T6269] R13: 00007f5f7b216038 R14: 00007f5f7b215fa0 R15: 00007ffcaccb4328 [ 118.050268][ T6269] [ 118.055733][ T6269] Mem-Info: [ 118.058996][ T6269] active_anon:14915 inactive_anon:0 isolated_anon:0 [ 118.058996][ T6269] active_file:9544 inactive_file:39956 isolated_file:0 [ 118.058996][ T6269] unevictable:768 dirty:26 writeback:0 [ 118.058996][ T6269] slab_reclaimable:10162 slab_unreclaimable:91387 [ 118.058996][ T6269] mapped:32728 shmem:10336 pagetables:628 [ 118.058996][ T6269] sec_pagetables:0 bounce:0 [ 118.058996][ T6269] kernel_misc_reclaimable:0 [ 118.058996][ T6269] free:1342524 free_pcp:12879 free_cma:0 [ 118.104868][ T6269] Node 0 active_anon:59660kB inactive_anon:0kB active_file:38176kB inactive_file:159620kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130912kB dirty:104kB writeback:0kB shmem:39808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10644kB pagetables:2512kB sec_pagetables:0kB all_unreclaimable? no [ 118.137533][ T6269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 118.168165][ T6269] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 118.195752][ T6269] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 118.201594][ T6269] Node 0 DMA32 free:1459732kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:59624kB inactive_anon:0kB active_file:38176kB inactive_file:158792kB unevictable:1536kB writepending:104kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:32692kB local_pcp:15520kB free_cma:0kB [ 118.232450][ T6269] lowmem_reserve[]: 0 0 0 0 0 [ 118.237210][ T6269] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 118.264112][ T6269] lowmem_reserve[]: 0 0 0 0 0 [ 118.268933][ T6269] Node 1 Normal free:3895004kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:9888kB free_cma:0kB [ 118.298666][ T6269] lowmem_reserve[]: 0 0 0 0 0 [ 118.303436][ T6269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 118.316374][ T6269] Node 0 DMA32: 5*4kB (ME) 4*8kB (UM) 2*16kB (UM) 6*32kB (UME) 4*64kB (M) 4*128kB (UME) 2*256kB (UM) 2*512kB (UE) 1*1024kB (M) 1*2048kB (E) 355*4096kB (M) = 1459732kB [ 118.333321][ T6269] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 118.345002][ T6269] Node 1 Normal: 253*4kB (UME) 51*8kB (UME) 41*16kB (UME) 62*32kB (UME) 20*64kB (UME) 4*128kB (UM) 2*256kB (ME) 1*512kB (E) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3895004kB [ 118.363178][ T6269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.372775][ T6269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.382255][ T6269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 118.392007][ T6269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 118.401839][ T6269] 59886 total pagecache pages [ 118.406563][ T6269] 0 pages in swap cache [ 118.410874][ T6269] Free swap = 124728kB [ 118.415052][ T6269] Total swap = 124996kB [ 118.419549][ T6269] 2097051 pages RAM [ 118.423432][ T6269] 0 pages HighMem/MovableOnly [ 118.428390][ T6269] 416929 pages reserved [ 118.432606][ T6269] 0 pages cma reserved [ 118.900140][ T6274] kvm: pic: level sensitive irq not supported [ 118.900455][ T6274] kvm: pic: non byte read [ 118.934450][ T6274] kvm: pic: level sensitive irq not supported [ 118.934526][ T6274] kvm: pic: non byte read [ 118.956091][ T6274] kvm: pic: level sensitive irq not supported [ 118.956166][ T6274] kvm: pic: non byte read [ 118.987624][ T6274] kvm: pic: level sensitive irq not supported [ 118.987699][ T6274] kvm: pic: non byte read [ 119.030289][ T6274] kvm: pic: level sensitive irq not supported [ 119.030365][ T6274] kvm: pic: non byte read [ 119.066227][ T6274] kvm: pic: level sensitive irq not supported [ 119.066300][ T6274] kvm: pic: non byte read [ 119.089000][ T6274] kvm: pic: level sensitive irq not supported [ 119.089080][ T6274] kvm: pic: non byte read [ 119.111130][ T6274] kvm: pic: level sensitive irq not supported [ 119.111217][ T6274] kvm: pic: non byte read [ 119.143316][ T6274] kvm: pic: level sensitive irq not supported [ 119.143391][ T6274] kvm: pic: non byte read [ 119.169169][ T6274] kvm: pic: level sensitive irq not supported [ 119.169252][ T6274] kvm: pic: non byte read [ 120.743642][ T6302] loop4: detected capacity change from 0 to 40427 [ 120.795901][ T6302] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 120.881838][ T6302] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 120.888788][ T6302] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 121.508335][ T6309] loop3: detected capacity change from 0 to 40427 [ 121.541940][ T6312] xt_connbytes: Forcing CT accounting to be enabled [ 121.609857][ T6309] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 121.692156][ T6309] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 121.701447][ T6309] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 124.162447][ T6352] process 'syz.4.121' launched './file0' with NULL argv: empty string added [ 125.374524][ T6363] loop3: detected capacity change from 0 to 40427 [ 125.400054][ T6363] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 125.411576][ T6363] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 125.418395][ T6363] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 126.832808][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 127.779714][ T6408] loop1: detected capacity change from 0 to 40427 [ 127.799686][ T6408] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 127.863211][ T6408] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 127.870344][ T6408] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 128.290006][ T6421] loop2: detected capacity change from 0 to 40427 [ 128.538466][ T6421] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 128.592532][ T6413] sctp: failed to load transform for md5: -4 [ 128.677362][ T6421] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 128.684775][ T6421] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 128.778999][ T6410] sctp: failed to load transform for md5: -2 [ 129.054663][ T6436] xt_connbytes: Forcing CT accounting to be enabled [ 130.271023][ T6455] loop2: detected capacity change from 0 to 512 [ 130.306332][ T6450] kvm: apic: phys broadcast and lowest prio [ 130.353118][ T6455] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.379227][ T27] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 130.403053][ T6455] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.629595][ T27] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 130.644377][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.662238][ T27] usb 2-1: config 0 has no interfaces? [ 130.668023][ T27] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 130.679391][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.706371][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.725888][ T27] usb 2-1: config 0 descriptor?? [ 131.080154][ T6465] cgroup: fork rejected by pids controller in /syz3 [ 131.472571][ T6468] loop4: detected capacity change from 0 to 40427 [ 131.540997][ T6468] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 131.614852][ T6468] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 131.622072][ T6468] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 131.666481][ T6470] loop2: detected capacity change from 0 to 40427 [ 131.720928][ T6470] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 131.849805][ T6470] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 131.856740][ T6470] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 133.106365][ T8] usb 2-1: USB disconnect, device number 2 [ 133.201723][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.208531][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.483711][ T6505] capability: warning: `syz.1.153' uses 32-bit capabilities (legacy support in use) [ 134.377935][ T6516] loop2: detected capacity change from 0 to 40427 [ 134.389865][ T6516] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 134.420105][ T6516] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 134.427023][ T6516] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 134.464996][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.700478][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.221344][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.542245][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.146011][ T6541] netlink: 'syz.4.162': attribute type 12 has an invalid length. [ 136.193006][ T6537] loop2: detected capacity change from 0 to 40427 [ 136.263723][ T6537] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 136.348219][ T6537] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 136.355816][ T6537] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 136.665551][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.848018][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.857973][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.875453][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.886107][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.898327][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 137.412360][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 137.616988][ T6549] lo speed is unknown, defaulting to 1000 [ 137.626811][ T6568] overlayfs: upper fs does not support file handles, falling back to index=off. [ 137.659688][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 137.840258][ T6574] loop2: detected capacity change from 0 to 512 [ 137.887614][ T6574] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 137.898197][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 137.932537][ T788] usb 2-1: config 0 has no interfaces? [ 137.938205][ T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.964041][ T6574] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 138.018994][ T6574] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 138.039601][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.093283][ T788] usb 2-1: config 0 descriptor?? [ 138.142975][ T6571] loop4: detected capacity change from 0 to 40427 [ 138.159849][ T6574] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 138.181109][ T6571] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 138.198697][ T6574] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 138.223774][ T6574] EXT4-fs (loop2): orphan cleanup on readonly fs [ 138.281092][ T6571] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 138.288096][ T6571] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 138.314515][ T6574] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.169: bg 0: block 34: padding at end of block bitmap is not set [ 138.416717][ T788] usb 2-1: USB disconnect, device number 3 [ 138.444116][ T6574] Quota error (device loop2): write_blk: dquota write failed [ 138.501471][ T6574] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 138.549825][ T6574] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.169: Failed to acquire dquot type 1 [ 138.599289][ T6574] EXT4-fs (loop2): 1 truncate cleaned up [ 138.623775][ T6574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.098951][ T5776] Bluetooth: hci2: command tx timeout [ 139.208776][ T6574] syz.2.169 (6574) used greatest stack depth: 20816 bytes left [ 139.286708][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.724500][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 139.790866][ T6592] loop4: detected capacity change from 0 to 40427 [ 139.806197][ T6592] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 139.819955][ T6592] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 139.826827][ T6592] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 140.768342][ T6549] chnl_net:caif_netlink_parms(): no params data found [ 141.001500][ T1139] hsr_slave_0: left promiscuous mode [ 141.019260][ T1139] hsr_slave_1: left promiscuous mode [ 141.064897][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.079802][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.088125][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.102694][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.114721][ T1139] bridge_slave_1: left allmulticast mode [ 141.125361][ T1139] bridge_slave_1: left promiscuous mode [ 141.134296][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.179257][ T5777] Bluetooth: hci2: command tx timeout [ 141.195124][ T1139] bridge_slave_0: left allmulticast mode [ 141.217531][ T1139] bridge_slave_0: left promiscuous mode [ 141.240991][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.420815][ T6619] loop4: detected capacity change from 0 to 40427 [ 141.429074][ T1139] veth1_macvtap: left promiscuous mode [ 141.434711][ T1139] veth0_macvtap: left promiscuous mode [ 141.443866][ T6619] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 141.460063][ T1139] veth1_vlan: left promiscuous mode [ 141.487681][ T6619] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 141.494638][ T6619] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 141.507916][ T1139] veth0_vlan: left promiscuous mode [ 142.496237][ T1139] team0 (unregistering): Port device batadv1 removed [ 143.176167][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 143.257496][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 143.259843][ T5777] Bluetooth: hci2: command tx timeout [ 143.346177][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.435002][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.662209][ T6648] loop2: detected capacity change from 0 to 40427 [ 143.679440][ T6648] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 143.706518][ T6648] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 143.713779][ T6648] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 144.577003][ T1139] bond0 (unregistering): Released all slaves [ 144.743570][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.750911][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.758179][ T6549] bridge_slave_0: entered allmulticast mode [ 144.766309][ T6549] bridge_slave_0: entered promiscuous mode [ 144.788468][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.818871][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.832395][ T6549] bridge_slave_1: entered allmulticast mode [ 144.843952][ T6549] bridge_slave_1: entered promiscuous mode [ 144.896400][ T6549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.929461][ T6549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.076016][ T6549] team0: Port device team_slave_0 added [ 145.086899][ T6549] team0: Port device team_slave_1 added [ 145.286477][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.349568][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.396997][ T5777] Bluetooth: hci2: command tx timeout [ 145.422835][ T6658] loop4: detected capacity change from 0 to 40427 [ 145.438084][ T6549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.461509][ T6658] F2FS-fs (loop4): invalid crc_offset: 4177530876 [ 145.467174][ T6549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.476086][ T6549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.518928][ T6658] F2FS-fs (loop4): Wrong journal entry on segno 65538 [ 145.525799][ T6658] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117) [ 145.589227][ T6549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.168674][ T6677] loop2: detected capacity change from 0 to 40427 [ 147.260186][ T6677] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 147.330713][ T6677] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 147.337587][ T6677] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 147.352824][ T6549] hsr_slave_0: entered promiscuous mode [ 147.489178][ T6549] hsr_slave_1: entered promiscuous mode [ 147.596243][ T6549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.627244][ T6549] Cannot create hsr debugfs directory [ 148.378731][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 148.786773][ T6700] loop2: detected capacity change from 0 to 40427 [ 148.866447][ T6700] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 148.925397][ T788] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.944085][ T6700] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 148.951266][ T6700] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 149.005676][ T788] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 149.036536][ T788] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.063605][ T6702] loop1: detected capacity change from 0 to 40427 [ 149.070421][ T788] usb 5-1: Product: syz [ 149.084674][ T6702] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 149.243621][ T788] usb 5-1: Manufacturer: syz [ 149.248418][ T788] usb 5-1: SerialNumber: syz [ 149.285289][ T6702] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 149.292483][ T6702] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 150.427358][ T6695] netlink: 180 bytes leftover after parsing attributes in process `syz.4.185'. [ 151.067140][ T6723] loop1: detected capacity change from 0 to 40427 [ 151.090644][ T6723] F2FS-fs (loop1): invalid crc_offset: 4177530876 [ 151.150298][ T6723] F2FS-fs (loop1): Wrong journal entry on segno 65538 [ 151.157264][ T6723] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-117) [ 151.213416][ T6496] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 152.181274][ T6549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 152.287282][ T6549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 152.363810][ T788] usb 5-1: 1:1: cannot set freq 48000 to ep 0x1 [ 152.436899][ T6549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 152.493268][ T6549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 152.499426][ T788] usb 5-1: USB disconnect, device number 2 [ 152.707925][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.854490][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.939373][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.968407][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.976560][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.025417][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.032702][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.166234][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.230875][ T6757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.773534][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.900922][ T6549] veth0_vlan: entered promiscuous mode [ 153.945066][ T6549] veth1_vlan: entered promiscuous mode [ 154.140998][ T6549] veth0_macvtap: entered promiscuous mode [ 154.204160][ T6549] veth1_macvtap: entered promiscuous mode [ 154.351338][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.423709][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.451620][ T6785] loop2: detected capacity change from 0 to 40427 [ 154.476824][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.487755][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.497733][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.509297][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.524354][ T6785] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 154.544982][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.563637][ T6785] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 154.570675][ T6785] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 154.591822][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.741159][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.793229][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.835176][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.845274][ T6549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.857977][ T6549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.883741][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.263281][ T6549] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.304684][ T6768] loop1: detected capacity change from 0 to 40427 [ 155.334436][ T6549] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.354938][ T6799] fuse: Bad value for 'fd' [ 155.387226][ T6768] F2FS-fs (loop1): invalid crc value [ 155.409312][ T6549] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.473927][ T6549] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.603126][ T6768] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.757843][ T6807] loop2: detected capacity change from 0 to 512 [ 155.876637][ T6768] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 155.915756][ T6813] netlink: 180 bytes leftover after parsing attributes in process `syz.4.204'. [ 155.937597][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.947885][ T6807] EXT4-fs error (device loop2): ext4_iget_extra_inode:4739: inode #15: comm syz.2.203: corrupted in-inode xattr: invalid ea_ino [ 155.990086][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.997980][ T6807] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.203: couldn't read orphan inode 15 (err -117) [ 156.018408][ T6807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.122917][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.154264][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.242736][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.591760][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 156.627485][ T5771] syz-executor: attempt to access beyond end of device [ 156.627485][ T5771] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 156.661946][ T5771] syz-executor: attempt to access beyond end of device [ 156.661946][ T5771] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 156.721044][ T6826] loop3: detected capacity change from 0 to 4096 [ 156.948135][ T34] kworker/u4:2: attempt to access beyond end of device [ 156.948135][ T34] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 156.997458][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 157.029158][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 157.068830][ T34] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 157.340051][ T5771] syz_tun (unregistering): left allmulticast mode [ 158.980537][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.215'. [ 159.132475][ T6866] Zero length message leads to an empty skb [ 159.501179][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 159.518247][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 159.529151][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 159.559714][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 159.567689][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 159.578417][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 159.641519][ T6874] lo speed is unknown, defaulting to 1000 [ 160.118885][ T6874] chnl_net:caif_netlink_parms(): no params data found [ 160.351320][ T6874] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.359065][ T6874] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.366411][ T6874] bridge_slave_0: entered allmulticast mode [ 160.374315][ T6874] bridge_slave_0: entered promiscuous mode [ 160.387614][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.395202][ T6874] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.402710][ T6874] bridge_slave_1: entered allmulticast mode [ 160.410627][ T6874] bridge_slave_1: entered promiscuous mode [ 160.447656][ T6874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.472624][ T6874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.563797][ T6874] team0: Port device team_slave_0 added [ 160.575383][ T6874] team0: Port device team_slave_1 added [ 160.668222][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.680988][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.716843][ T6874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.941850][ T6874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.965541][ T6874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.041596][ T6874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.236198][ T6874] hsr_slave_0: entered promiscuous mode [ 161.255204][ T6874] hsr_slave_1: entered promiscuous mode [ 161.269663][ T6874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.290562][ T6874] Cannot create hsr debugfs directory [ 161.657932][ T6874] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.668731][ T5776] Bluetooth: hci0: command tx timeout [ 161.681484][ T6874] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.692146][ T6874] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.704784][ T6874] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.763136][ T6903] netlink: 180 bytes leftover after parsing attributes in process `syz.4.222'. [ 161.814651][ T6874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.844394][ T6874] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.857958][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.865218][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.885776][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.893019][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.194603][ T6874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.485517][ T6874] veth0_vlan: entered promiscuous mode [ 162.503304][ T6874] veth1_vlan: entered promiscuous mode [ 162.535992][ T6874] veth0_macvtap: entered promiscuous mode [ 162.550706][ T6874] veth1_macvtap: entered promiscuous mode [ 162.569597][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.581788][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.592576][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.603252][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.613195][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.625602][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.636135][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.646717][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.662368][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.679611][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.690409][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.702306][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.716700][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.726803][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.739967][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.750025][ T6874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.760593][ T6874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.772321][ T6874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.796738][ T6874] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.805817][ T6874] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.815848][ T6874] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.824708][ T6874] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.916317][ T2946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.931215][ T2946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.966506][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.976171][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.443649][ T6922] loop5: detected capacity change from 0 to 40427 [ 163.464437][ T6922] F2FS-fs (loop5): invalid crc_offset: 4177530876 [ 163.478174][ T6922] F2FS-fs (loop5): Wrong journal entry on segno 65538 [ 163.485178][ T6922] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-117) [ 163.739105][ T5776] Bluetooth: hci0: command tx timeout [ 163.839154][ T6929] xt_connbytes: Forcing CT accounting to be enabled [ 164.434530][ T6931] loop5: detected capacity change from 0 to 736 [ 164.525947][ T6931] rock: directory entry would overflow storage [ 164.532283][ T6931] rock: sig=0x3b10, size=4, remaining=3 [ 164.560233][ T6933] 0xfffffffffffffffd-0x000000020000 : "" [ 164.565968][ T6933] mtd: partition "" is out of reach -- disabled [ 164.619363][ T6933] ftl_cs: FTL header not found. [ 165.334598][ T6948] loop5: detected capacity change from 0 to 256 [ 165.371299][ T6948] exfat: Unknown parameter 'etro' [ 166.021924][ T6951] loop2: detected capacity change from 0 to 40427 [ 166.031575][ T5776] Bluetooth: hci0: command tx timeout [ 166.046478][ T6951] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 166.094960][ T6951] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 166.102058][ T6951] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 167.248893][ T968] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 167.454956][ T968] usb 6-1: unable to get BOS descriptor or descriptor too short [ 167.484189][ T968] usb 6-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 167.504154][ T968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.527680][ T968] usb 6-1: Product: syz [ 167.551795][ T968] usb 6-1: Manufacturer: syz [ 167.568467][ T968] usb 6-1: SerialNumber: syz [ 167.906333][ T6952] loop3: detected capacity change from 0 to 40427 [ 167.925593][ T6952] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 167.974430][ T6952] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 168.026587][ T6952] F2FS-fs (loop3): Found nat_bits in checkpoint [ 168.058919][ T5777] Bluetooth: hci0: command tx timeout [ 168.148270][ T6952] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 168.157961][ T6952] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 168.166096][ T6962] netlink: 180 bytes leftover after parsing attributes in process `syz.5.237'. [ 168.434799][ T6979] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 169.723502][ T6999] netlink: 'syz.3.242': attribute type 4 has an invalid length. [ 170.013740][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.247'. [ 170.023744][ T968] usb 6-1: 1:1: cannot set freq 48000 to ep 0x1 [ 170.457382][ T7006] overlayfs: failed to clone lowerpath [ 170.488318][ T968] usb 6-1: USB disconnect, device number 2 [ 170.735106][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.093391][ T7016] loop2: detected capacity change from 0 to 4096 [ 173.017728][ T7028] loop3: detected capacity change from 0 to 40427 [ 173.071828][ T7028] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 173.211726][ T7028] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 173.218717][ T7028] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 173.708617][ T7038] xt_connbytes: Forcing CT accounting to be enabled [ 174.450014][ T7047] Bluetooth: MGMT ver 1.22 [ 174.750791][ T7043] loop2: detected capacity change from 0 to 40427 [ 174.808161][ T7043] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 174.834462][ T7049] netlink: 180 bytes leftover after parsing attributes in process `syz.5.256'. [ 174.860218][ T7043] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 174.867111][ T7043] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 175.652123][ T28] audit: type=1326 audit(1779471301.323:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7062 comm="syz.3.262" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x0 [ 177.125232][ T7069] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.169245][ T7069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.213574][ T7069] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.236531][ T7069] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.244752][ T7069] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.281433][ T7069] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.303985][ T7069] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.310519][ T7069] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.327044][ T7069] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.336830][ T7069] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.352448][ T7069] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.373449][ T7069] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.900345][ T7077] loop3: detected capacity change from 0 to 40427 [ 177.910110][ T7077] F2FS-fs (loop3): invalid crc_offset: 4177530876 [ 177.945793][ T7077] F2FS-fs (loop3): Wrong journal entry on segno 65538 [ 177.953002][ T7077] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117) [ 179.017682][ T7096] binder: 7095:7096 ioctl c0306201 200000000080 returned -14 [ 179.030030][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.161623][ T7099] binder: BINDER_SET_CONTEXT_MGR already set [ 179.198579][ T7099] binder: 7095:7099 ioctl 4018620d 200000000040 returned -16 [ 179.265270][ T7096] binder: 7095:7096 ioctl c0306201 2000000003c0 returned -14 [ 179.274169][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.284317][ T5810] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 179.338853][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.345365][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.585571][ T5810] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 179.620293][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.682532][ T5810] usb 3-1: config 0 has no interfaces? [ 179.726283][ T5810] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 179.758625][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.819111][ T5810] usb 3-1: config 0 descriptor?? [ 180.561117][ T5811] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 181.108711][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.315363][ T5811] usb 4-1: unable to get BOS descriptor or descriptor too short [ 181.330311][ T5811] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 181.339927][ T5777] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.350738][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.378808][ T5811] usb 4-1: Product: syz [ 181.383067][ T5811] usb 4-1: Manufacturer: syz [ 181.410685][ T5811] usb 4-1: SerialNumber: syz [ 181.425565][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.425576][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.969396][ T7102] netlink: 180 bytes leftover after parsing attributes in process `syz.3.275'. [ 183.396455][ T5777] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.676728][ T5783] Bluetooth: hci0: command 0x0c1a tx timeout [ 183.683919][ T5776] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.690498][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 184.036879][ T5811] usb 4-1: 1:1: cannot set freq 48000 to ep 0x1 [ 184.110344][ T5811] usb 4-1: USB disconnect, device number 2 [ 184.194156][ T5820] usb 3-1: USB disconnect, device number 2 [ 184.569442][ T7145] xt_hashlimit: size too large, truncated to 1048576 [ 184.746539][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.756615][ T7171] overlayfs: failed to clone upperpath [ 186.981265][ T7173] netlink: 180 bytes leftover after parsing attributes in process `syz.4.293'. [ 187.106376][ T7178] fuse: Bad value for 'fd' [ 189.737624][ T7225] loop2: detected capacity change from 0 to 512 [ 189.756306][ T7225] EXT4-fs: Ignoring removed orlov option [ 189.831584][ T7225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.845592][ T7225] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.861597][ T7220] EXT4-fs error (device loop2): ext4_lookup:1858: inode #12: comm syz.2.307: iget: bad i_size value: 2533274857506816 [ 189.950229][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.088751][ T5777] Bluetooth: hci0: command 0x0c1a tx timeout [ 192.409758][ T7260] netlink: 180 bytes leftover after parsing attributes in process `syz.4.319'. [ 192.987182][ T7275] loop2: detected capacity change from 0 to 40427 [ 193.026147][ T7275] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 193.105141][ T7275] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 193.112814][ T7275] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 194.623512][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.632570][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.800962][ T28] audit: type=1326 audit(1779471320.453:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7288 comm="syz.5.329" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x0 [ 195.104963][ T7290] loop2: detected capacity change from 0 to 40427 [ 195.138222][ T7290] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 195.284600][ T7290] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 195.292467][ T7290] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 196.478797][ T7305] binder: BINDER_SET_CONTEXT_MGR already set [ 196.484886][ T7305] binder: 7304:7305 ioctl 4018620d 200000004a80 returned -16 [ 196.504947][ T7306] fuse: Bad value for 'fd' [ 196.557005][ T7310] fuse: Bad value for 'fd' [ 197.063319][ T7325] netlink: 180 bytes leftover after parsing attributes in process `syz.3.339'. [ 197.592110][ T7329] loop2: detected capacity change from 0 to 40427 [ 197.642825][ T7329] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 197.659196][ T7329] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 197.666070][ T7329] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 198.672145][ T7344] fuse: Bad value for 'fd' [ 201.414531][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.356'. [ 202.004353][ T7406] loop2: detected capacity change from 0 to 64 [ 202.176301][ T7412] netlink: 40 bytes leftover after parsing attributes in process `syz.4.366'. [ 202.225846][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.252818][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.278180][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.308731][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.360325][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.387308][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.424478][ T7417] hfs: request for non-existent node 131072 in B*Tree [ 202.451531][ T7417] hfs: request for non-existent node 131072 in B*Tree [ 202.499871][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.517744][ T7406] hfs: request for non-existent node 131072 in B*Tree [ 202.546960][ T7417] hfs: request for non-existent node 131072 in B*Tree [ 202.563036][ T7417] hfs: request for non-existent node 131072 in B*Tree [ 202.589467][ T7406] hfs: request for non-existent node 12 in B*Tree [ 202.605333][ T7406] hfs: request for non-existent node 12 in B*Tree [ 202.803034][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz.5.372'. [ 203.209584][ T7445] fuse: Bad value for 'fd' [ 203.360619][ T7449] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 203.412532][ T7449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.483326][ T7449] bond1: (slave geneve2): making interface the new active one [ 203.496388][ T7449] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 203.511791][ T7449] syz.4.379 (7449) used greatest stack depth: 20176 bytes left [ 203.548690][ T7446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.695853][ T7458] fuse: Bad value for 'fd' [ 205.477079][ T7485] loop2: detected capacity change from 0 to 40427 [ 205.486473][ T7485] F2FS-fs (loop2): invalid crc_offset: 4177530876 [ 205.521132][ T7485] F2FS-fs (loop2): Wrong journal entry on segno 65538 [ 205.528024][ T7485] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 206.409535][ T7505] fuse: Bad value for 'fd' [ 206.593103][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 207.619990][ T7534] binder: 7533:7534 ioctl c0306201 200000000080 returned -14 [ 207.654930][ T7534] binder: 7533:7534 ioctl c0306201 2000000003c0 returned -14 [ 208.383756][ T7540] X [ 208.829258][ T7553] overlayfs: failed to clone lowerpath [ 208.880842][ T7553] fuse: Bad value for 'fd' [ 209.009755][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 209.228900][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 209.235353][ T7567] fuse: Bad value for 'fd' [ 209.248935][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.273788][ T9] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 209.298837][ T9] usb 3-1: config 8 has 0 interfaces, different from the descriptor's value: 1 [ 209.338505][ T9] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f6.fb [ 209.348487][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.409049][ T9] usb 3-1: Product: syz [ 209.426438][ T9] usb 3-1: Manufacturer: syz [ 209.433997][ T9] usb 3-1: SerialNumber: syz [ 209.676687][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.714930][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.726736][ T7575] lo speed is unknown, defaulting to 1000 [ 209.773178][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.822480][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.879502][ T7551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.919322][ T7551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.121209][ T9] usb 3-1: USB disconnect, device number 3 [ 211.145863][ T7596] fuse: Bad value for 'fd' [ 211.379891][ T7601] fuse: Bad value for 'fd' [ 211.768896][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 211.971534][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.015764][ T23] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 212.030587][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.057226][ T23] usb 3-1: Product: syz [ 212.074946][ T23] usb 3-1: Manufacturer: syz [ 212.166275][ T23] usb 3-1: SerialNumber: syz [ 212.807365][ T7603] netlink: 180 bytes leftover after parsing attributes in process `syz.2.425'. [ 214.422721][ T23] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 214.503863][ T23] usb 3-1: USB disconnect, device number 4 [ 214.645052][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.939098][ T5776] Bluetooth: hci0: command 0x0c1a tx timeout [ 215.340118][ T34] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.544230][ T34] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.870257][ T34] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.061327][ T34] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.136109][ T23] libceph: connect (1)[c::]:6789 error -101 [ 217.149941][ T7663] netlink: 180 bytes leftover after parsing attributes in process `syz.4.445'. [ 217.173637][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 217.228009][ T7662] ceph: No mds server is up or the cluster is laggy [ 217.906055][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 218.053347][ T7692] fuse: Bad value for 'fd' [ 218.161565][ T34] bond1: (slave xfrm1): Releasing backup interface [ 218.177500][ T34] bond1: Destroying bond [ 218.806806][ T34] bond1 (unregistering): Released all slaves [ 219.366561][ T7702] sctp: failed to load transform for md5: -2 [ 220.122752][ T7728] fuse: Bad value for 'fd' [ 220.263115][ T7736] fuse: Bad value for 'fd' [ 221.660538][ T34] hsr_slave_0: left promiscuous mode [ 221.680540][ T34] hsr_slave_1: left promiscuous mode [ 221.709287][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.740513][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.762833][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.786009][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.815823][ T7768] netlink: 180 bytes leftover after parsing attributes in process `syz.5.471'. [ 221.896481][ T34] veth1_macvtap: left promiscuous mode [ 221.906696][ T34] veth0_macvtap: left promiscuous mode [ 221.912988][ T34] veth1_vlan: left promiscuous mode [ 221.920896][ T34] veth0_vlan: left promiscuous mode [ 222.971024][ T7781] fuse: Bad value for 'fd' [ 223.236413][ T7786] fuse: Bad value for 'fd' [ 223.895312][ T34] team0 (unregistering): Port device team_slave_1 removed [ 223.954414][ T34] team0 (unregistering): Port device team_slave_0 removed [ 224.015801][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.082628][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.575940][ T34] bond0 (unregistering): Released all slaves [ 224.608594][ T7763] IPv6: NLM_F_CREATE should be specified when creating new route [ 224.760171][ T27] lo speed is unknown, defaulting to 1000 [ 224.941182][ T7805] overlayfs: failed to clone upperpath [ 225.070887][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.4.481'. [ 226.163077][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028554c00: rx timeout, send abort [ 226.663194][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028556000: rx timeout, send abort [ 226.673249][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028554c00: abort rx timeout. Force session deactivation [ 226.882111][ T7852] overlayfs: failed to clone upperpath [ 227.171942][ T7871] fuse: Bad value for 'fd' [ 227.172848][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028556000: abort rx timeout. Force session deactivation [ 228.016990][ T7903] geneve2: entered promiscuous mode [ 230.870197][ T5776] Bluetooth: hci1: unexpected event for opcode 0x203d [ 231.919114][ T7972] Bluetooth: hci0: unsupported parameter 255 [ 231.928635][ T7972] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 233.729341][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.527'. [ 233.789605][ T7994] syz_tun: entered promiscuous mode [ 233.808019][ T9] libceph: connect (1)[c::]:6789 error -101 [ 233.838914][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 233.855788][ T7994] macvtap1: entered promiscuous mode [ 233.868929][ T7994] macvtap1: entered allmulticast mode [ 233.886538][ T7996] ceph: No mds server is up or the cluster is laggy [ 233.912150][ T7994] syz_tun: entered allmulticast mode [ 234.026982][ T8000] syz_tun: left allmulticast mode [ 234.045662][ T8000] syz_tun: left promiscuous mode [ 234.079937][ T8000] macvtap1: left promiscuous mode [ 234.085372][ T8000] macvtap1: left allmulticast mode [ 234.501855][ T8019] fuse: Bad value for 'fd' [ 234.943061][ T28] audit: type=1804 audit(1779471488.628:4): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.533" name="bus" dev="ramfs" ino=15011 res=1 errno=0 [ 234.977634][ T5776] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 234.989251][ T5776] Bluetooth: hci1: Injecting HCI hardware error event [ 235.000076][ T5776] Bluetooth: hci1: hardware error 0x00 [ 235.053281][ T28] audit: type=1804 audit(1779471488.658:5): pid=8031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.533" name="bus" dev="ramfs" ino=15011 res=1 errno=0 [ 235.354767][ T8042] fuse: Bad value for 'fd' [ 235.400982][ T5777] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 235.749254][ T7995] trusted_key: syz.4.525 sent an empty control message without MSG_MORE. [ 237.026450][ T5776] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 238.583042][ T8085] fuse: Bad value for 'fd' [ 239.420317][ T5776] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 239.625665][ T5776] Bluetooth: hci2: Injecting HCI hardware error event [ 239.640831][ T5777] Bluetooth: hci2: hardware error 0x00 [ 241.661430][ T5777] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 243.888538][ C1] sched: RT throttling activated [ 244.371944][ T8156] netlink: 'syz.3.561': attribute type 4 has an invalid length. [ 244.401751][ T8156] netlink: 'syz.3.561': attribute type 4 has an invalid length. [ 245.324036][ T8173] xt_CT: No such helper "pptp" [ 247.462692][ T8210] fuse: Bad value for 'fd' [ 248.139636][ T8233] fuse: Bad value for 'fd' [ 251.117155][ T8280] netlink: 180 bytes leftover after parsing attributes in process `syz.5.590'. [ 254.495317][ T8357] netlink: 180 bytes leftover after parsing attributes in process `syz.3.614'. [ 255.645717][ T8368] tipc: Failed to remove unknown binding: 66,0,0/0:2199939447/2199939449 [ 255.654928][ T8368] tipc: Failed to remove unknown binding: 66,0,0/0:2199939447/2199939448 [ 255.734358][ T5777] Bluetooth: hci0: unexpected event for opcode 0x1804 [ 256.079920][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.110394][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.574682][ T8380] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.618'. [ 256.677732][ T8382] netlink: 'syz.5.619': attribute type 27 has an invalid length. [ 256.793401][ T8382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.779015][ T8401] tipc: Failed to remove unknown binding: 66,0,0/0:2045559819/2045559821 [ 257.780522][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.624'. [ 257.801624][ T8401] tipc: Failed to remove unknown binding: 66,0,0/0:2045559819/2045559820 [ 257.856541][ T8401] tipc: Failed to remove unknown binding: 66,0,0/0:2045559819/2045559821 [ 257.867212][ T8401] tipc: Failed to remove unknown binding: 66,0,0/0:2045559819/2045559820 [ 259.590244][ T8446] fuse: Bad value for 'fd' [ 260.454274][ T8418] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.463271][ T8418] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.111942][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.190956][ T8418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.883698][ T8418] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.893040][ T8418] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.908858][ T8418] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.917951][ T8418] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.202545][ T8470] netlink: 14 bytes leftover after parsing attributes in process `syz.3.642'. [ 266.107700][ T8546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.657'. [ 266.566361][ T8555] tipc: Enabling of bearer rejected, failed to enable media [ 268.927964][ T8583] overlayfs: statfs failed on './file0' [ 269.010445][ T8583] overlayfs: statfs failed on './file0' [ 271.082406][ T8621] netlink: 180 bytes leftover after parsing attributes in process `syz.4.671'. [ 273.305332][ T8656] fuse: Bad value for 'fd' [ 274.147227][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.687'. [ 275.676707][ T8673] team0: Port device team_slave_0 removed [ 276.106419][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 276.345224][ T8694] team0: Port device team_slave_1 removed [ 276.878729][ T8714] netlink: 180 bytes leftover after parsing attributes in process `syz.5.694'. [ 276.923320][ T5777] Bluetooth: hci3: unexpected event for opcode 0x202a [ 278.872925][ T8743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.155688][ T8764] fuse: Bad value for 'fd' [ 281.764620][ T8781] warning: `syz.3.720' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.804827][ T8781] fuse: Bad value for 'fd' [ 285.221316][ T8829] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 288.038972][ T8857] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.575419][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.748'. [ 291.775623][ T8872] team0: Port device team_slave_0 removed [ 297.464017][ T28] audit: type=1326 audit(1779471551.148:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7af9ce59 code=0x7ffc0000 [ 297.489159][ T28] audit: type=1326 audit(1779471551.168:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7af9ce59 code=0x7ffc0000 [ 297.561768][ T8959] xt_CT: You must specify a L4 protocol and not use inversions on it [ 298.401850][ T28] audit: type=1326 audit(1779471551.168:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7af9ce59 code=0x7ffc0000 [ 299.852768][ T28] audit: type=1326 audit(1779471551.168:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5f7af9ce59 code=0x7ffc0000 [ 299.907170][ T28] audit: type=1326 audit(1779471551.238:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 299.994834][ T28] audit: type=1326 audit(1779471551.238:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 300.078766][ T28] audit: type=1326 audit(1779471551.238:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 300.321949][ T28] audit: type=1326 audit(1779471551.338:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 300.398731][ T28] audit: type=1326 audit(1779471551.348:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 300.461335][ T28] audit: type=1326 audit(1779471551.358:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8946 comm="syz.4.768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 305.112699][ T8999] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6549] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8999] [ 305.817943][ T9006] fuse: Bad value for 'fd' [ 315.405087][ T9079] mmap: syz.3.804 (9079) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 316.426353][ T9097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.810'. [ 316.691373][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 316.691388][ T28] audit: type=1326 audit(1779471570.378:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.3.811" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x0 [ 317.811554][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.818044][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.155664][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'. [ 319.519130][ T9130] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.528850][ T9130] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.537787][ T9130] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.546884][ T9130] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.598280][ T9130] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 319.619655][ T9132] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 319.669511][ T9132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.677828][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.819'. [ 319.737844][ T9133] bond2: entered promiscuous mode [ 319.758728][ T9133] bond2: entered allmulticast mode [ 321.255789][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 322.470206][ T9164] batman_adv: batadv0: Adding interface: dummy0 [ 322.484250][ T9164] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.512318][ T9164] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 325.313429][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 328.632917][ T9231] fuse: Bad value for 'fd' [ 329.433536][ T28] audit: type=1326 audit(1779471583.108:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 329.562933][ T28] audit: type=1326 audit(1779471583.108:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 329.668590][ T28] audit: type=1326 audit(1779471583.108:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 329.718186][ T28] audit: type=1326 audit(1779471583.118:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 329.782602][ T28] audit: type=1326 audit(1779471583.118:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 329.848596][ T28] audit: type=1326 audit(1779471583.118:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 329.930507][ T28] audit: type=1326 audit(1779471583.118:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 330.015676][ T28] audit: type=1326 audit(1779471583.118:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 330.081949][ T28] audit: type=1326 audit(1779471583.118:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 330.138840][ T28] audit: type=1326 audit(1779471583.148:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9236 comm="syz.2.849" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff98a59ce59 code=0x7ffc0000 [ 337.279209][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 337.279224][ T28] audit: type=1326 audit(1779471590.968:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 337.394912][ T28] audit: type=1326 audit(1779471590.998:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 337.561105][ T28] audit: type=1326 audit(1779471590.998:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 337.607670][ T9408] batman_adv: batadv0: Adding interface: dummy0 [ 337.638712][ T9408] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.695114][ T28] audit: type=1326 audit(1779471590.998:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 337.723452][ T9408] batman_adv: batadv0: Interface activated: dummy0 [ 337.743478][ T9408] batadv0: mtu less than device minimum [ 337.765855][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.779191][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.791850][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.804470][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.817071][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.819190][ T28] audit: type=1326 audit(1779471590.998:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 337.832903][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.864243][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.876312][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.888376][ T9408] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 337.922432][ T28] audit: type=1326 audit(1779471591.008:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 337.955911][ T28] audit: type=1326 audit(1779471591.048:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 338.041481][ T28] audit: type=1326 audit(1779471591.048:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 338.225121][ T28] audit: type=1326 audit(1779471591.048:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 338.253734][ T28] audit: type=1326 audit(1779471591.048:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9403 comm="syz.3.886" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7691d9ce59 code=0x7ffc0000 [ 338.465759][ T9427] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 338.572966][ T9427] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.294397][ T28] kauditd_printk_skb: 100 callbacks suppressed [ 342.294412][ T28] audit: type=1326 audit(1779471595.978:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 342.409132][ T28] audit: type=1326 audit(1779471595.978:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 342.616524][ T28] audit: type=1326 audit(1779471596.008:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 342.703779][ T28] audit: type=1326 audit(1779471596.028:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 342.867370][ T28] audit: type=1326 audit(1779471596.028:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 342.998583][ T28] audit: type=1326 audit(1779471596.058:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 343.053964][ T28] audit: type=1326 audit(1779471596.058:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 343.078894][ T28] audit: type=1326 audit(1779471596.058:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 343.106003][ T28] audit: type=1326 audit(1779471596.058:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 343.131211][ T28] audit: type=1326 audit(1779471596.068:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9466 comm="syz.4.899" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5f7af5d68e code=0x7ffc0000 [ 343.155601][ T9484] syz.2.902 uses obsolete (PF_INET,SOCK_PACKET) [ 343.313165][ T9497] tipc: Enabling of bearer rejected, failed to enable media [ 344.586438][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 345.617489][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.909'. [ 345.637210][ T9519] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.645122][ T9519] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.028801][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 349.153172][ T9547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.957610][ T9552] Bluetooth: hci0: unsupported parameter 255 [ 349.968224][ T9552] Bluetooth: hci0: unsupported parameter 255 [ 352.714780][ T9591] tipc: Enabling of bearer rejected, failed to enable media [ 356.408970][ T9621] netem: change failed [ 360.516523][ T9647] tipc: Enabling of bearer rejected, failed to enable media [ 363.696601][ T9684] fuse: Bad value for 'fd' [ 369.471306][ T9739] 9pnet_fd: Insufficient options for proto=fd [ 372.691979][ T9759] fuse: Bad value for 'fd' [ 375.692349][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.986'. [ 377.154749][ T9806] netlink: 180 bytes leftover after parsing attributes in process `syz.4.987'. [ 378.718891][ T9825] fuse: Bad value for 'fd' [ 378.943141][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.949898][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.106887][ T9819] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.481956][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.567158][ T9819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.970434][ T9819] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.979532][ T9819] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.988652][ T9819] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.997583][ T9819] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.664994][ T9865] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1003'. [ 385.240292][ T9887] fuse: Bad value for 'fd' [ 388.081142][ T9906] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1014'. [ 388.090596][ T9906] netlink: 'syz.5.1014': attribute type 1 has an invalid length. [ 390.598897][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.630236][ T9900] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.778656][ T9900] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.787622][ T9900] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.800246][ T9900] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.814857][ T9900] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.095562][ T9932] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 391.265971][ T9932] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1019'. [ 391.936924][ T9946] raw_sendmsg: syz.2.1021 forgot to set AF_INET. Fix it! [ 394.545986][ T9980] syz_tun: entered allmulticast mode [ 394.568971][ T9980] dvmrp6: entered allmulticast mode [ 395.466300][ T9977] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 399.831370][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1043'. [ 399.873459][T10017] bridge0: entered promiscuous mode [ 399.904923][T10017] macvtap1: entered promiscuous mode [ 399.916327][T10017] macvtap1: entered allmulticast mode [ 399.930049][T10017] bridge0: entered allmulticast mode [ 399.952827][T10018] bridge0: left allmulticast mode [ 399.958166][T10018] bridge0: left promiscuous mode [ 399.993878][T10018] macvtap1: left promiscuous mode [ 399.999105][T10018] macvtap1: left allmulticast mode [ 403.916510][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 403.916525][ T28] audit: type=1326 audit(1779471657.598:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.018679][ T28] audit: type=1326 audit(1779471657.598:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.086611][ T28] audit: type=1326 audit(1779471657.598:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.151470][ T28] audit: type=1326 audit(1779471657.628:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.232366][ T28] audit: type=1326 audit(1779471657.628:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.352113][ T28] audit: type=1326 audit(1779471657.628:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.523482][ T28] audit: type=1326 audit(1779471657.698:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.596735][ T28] audit: type=1326 audit(1779471657.698:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.809347][ T28] audit: type=1326 audit(1779471657.698:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 404.835658][ T28] audit: type=1326 audit(1779471657.748:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1053" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8b219ce59 code=0x7ffc0000 [ 407.078822][ T5820] IPVS: starting estimator thread 0... [ 407.431664][T10096] IPVS: using max 16 ests per chain, 38400 per kthread [ 408.566270][T10104] dns_resolver: Unsupported server list version (6) [ 410.299080][T10119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 413.346827][T10150] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 413.416720][T10146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1078'. [ 413.570139][T10146] syz_tun (unregistering): left allmulticast mode [ 423.647769][T10221] xt_policy: neither incoming nor outgoing policy selected [ 431.335014][T10271] Bluetooth: hci0: unsupported parameter 255 [ 431.358642][T10271] Bluetooth: hci0: unsupported parameter 255 [ 434.925103][T10300] tipc: Enabling of bearer rejected, failed to enable media [ 435.959635][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1122'. [ 440.629019][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.635494][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.791163][T10351] fuse: Bad value for 'fd' [ 442.678798][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.688180][T10367] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.862666][T10367] geneve2: left promiscuous mode [ 450.881452][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 450.888627][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 450.907924][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.000723][T10433] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 451.150325][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.165632][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.353609][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 451.361777][T10433] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.951161][T10457] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1161'. [ 459.964267][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.989912][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.008684][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.040470][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.048337][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 460.057437][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.178111][T10472] virt_wifi0 speed is unknown, defaulting to 1000 [ 463.095738][ T5777] Bluetooth: hci4: command tx timeout [ 463.490605][T10472] chnl_net:caif_netlink_parms(): no params data found [ 463.783546][T10472] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.831630][T10472] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.855681][T10472] bridge_slave_0: entered allmulticast mode [ 463.906800][T10472] bridge_slave_0: entered promiscuous mode [ 464.654860][T10472] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.677882][T10472] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.705943][T10472] bridge_slave_1: entered allmulticast mode [ 464.768852][T10472] bridge_slave_1: entered promiscuous mode [ 464.853625][T10472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.874647][T10472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.189882][ T5777] Bluetooth: hci4: command tx timeout [ 467.451532][ T5777] Bluetooth: hci4: command tx timeout [ 467.526904][T10472] team0: Port device team_slave_0 added [ 467.672922][T10472] team0: Port device team_slave_1 added [ 467.717014][T10472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.725673][T10472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.768290][T10472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.006734][T10472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.015356][T10472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.045207][T10472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.090208][ T5777] Bluetooth: hci4: command tx timeout [ 470.173240][T10557] overlayfs: failed to clone upperpath [ 470.270746][T10472] hsr_slave_0: entered promiscuous mode [ 470.277799][T10472] hsr_slave_1: entered promiscuous mode [ 470.284737][T10472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.327597][T10472] Cannot create hsr debugfs directory [ 474.306420][T10593] overlayfs: failed to clone lowerpath [ 475.732048][T10472] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 476.387101][T10472] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 476.418367][T10472] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 476.492892][T10472] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 477.846926][ T6673] hsr_slave_0: left promiscuous mode [ 477.869411][ T6673] hsr_slave_1: left promiscuous mode [ 477.893600][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.922682][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.942481][ T6673] bridge_slave_1: left allmulticast mode [ 477.948223][ T6673] bridge_slave_1: left promiscuous mode [ 477.977914][ T6673] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.000696][ T6673] bridge_slave_0: left allmulticast mode [ 478.013365][ T6673] bridge_slave_0: left promiscuous mode [ 478.025381][ T6673] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.073551][ T6673] bond2 (unregistering): Released all slaves [ 481.204201][ T6673] bond1 (unregistering): Released all slaves [ 482.638218][ T6673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.721965][ T6673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.134053][ T6673] bond0 (unregistering): Released all slaves [ 483.277408][T10472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.371131][T10472] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.432259][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.439605][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.526172][ T2946] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.533506][ T2946] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.801975][T10472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.481098][T10472] veth0_vlan: entered promiscuous mode [ 489.628935][T10737] atomic_op ffff888026140198 conn xmit_atomic 0000000000000000 [ 490.899796][T10472] veth1_vlan: entered promiscuous mode [ 491.358883][T10472] veth0_macvtap: entered promiscuous mode [ 491.405899][T10472] veth1_macvtap: entered promiscuous mode [ 491.477691][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.505351][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.546898][T10472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.606205][T10472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.647844][T10472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.703865][T10472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.749523][T10472] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.784815][T10472] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.824909][T10472] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.998675][T10472] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.601396][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.626918][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.910008][ T4543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.921652][ T4543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.931574][T10761] overlayfs: failed to clone upperpath [ 495.330189][T10782] loop6: detected capacity change from 0 to 1024 [ 496.080275][ T9841] IPVS: starting estimator thread 0... [ 496.259010][T10787] IPVS: using max 17 ests per chain, 40800 per kthread [ 497.084002][ T1139] hfsplus: b-tree write err: -5, ino 25 [ 497.111506][ T1139] hfsplus: b-tree write err: -5, ino 4 [ 497.117539][ T1139] hfsplus: b-tree write err: -5, ino 2 [ 498.960628][T10811] netlink: 'syz.4.1217': attribute type 8 has an invalid length. [ 499.482582][T10813] fuse: Bad value for 'fd' [ 501.844556][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.852297][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.303485][T10892] hub 8-0:1.0: USB hub found [ 506.313651][T10892] hub 8-0:1.0: 1 port detected [ 506.414584][T10892] loop6: detected capacity change from 0 to 1024 [ 509.393366][ T9935] IPVS: starting estimator thread 0... [ 509.661602][T10924] IPVS: using max 18 ests per chain, 43200 per kthread [ 510.341752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 528.228766][T11050] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 528.235969][T11050] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 528.246576][T11050] vhci_hcd vhci_hcd.0: Device attached [ 528.348749][T11051] vhci_hcd: connection closed [ 528.356466][ T59] vhci_hcd: stop threads [ 528.373750][ T59] vhci_hcd: release socket [ 528.378317][ T59] vhci_hcd: disconnect device [ 533.150674][T11088] loop6: detected capacity change from 0 to 16 [ 533.270075][T11088] erofs: (device loop6): mounted with root inode @ nid 36. [ 533.362620][T11088] erofs: (device loop6): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 533.402396][T11088] syz.6.1251: attempt to access beyond end of device [ 533.402396][T11088] loop6: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 533.553141][T11088] erofs: (device loop6): z_erofs_readahead: readahead error at folio 4 @ nid 89 [ 533.580479][T11088] syz.6.1251: attempt to access beyond end of device [ 533.580479][T11088] loop6: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 533.605813][T11088] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -23 in[46, 4050] out[4096] [ 533.654608][T11088] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 533.701609][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 533.702879][ T28] audit: type=1800 audit(1779472043.358:235): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1251" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 533.848585][T11088] syz.6.1251 (11088) used greatest stack depth: 19176 bytes left [ 540.882010][T11142] IPVS: Unknown mcast interface: vcan0 [ 542.198443][T11139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.208952][T11139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 542.218871][T11139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 542.229342][T11139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 543.261022][ T28] audit: type=1804 audit(1779472053.113:236): pid=11151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1271" name="bus" dev="ramfs" ino=23073 res=1 errno=0 [ 643.324467][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 643.331512][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11124/1:b..l P10997/1:b..l P6013/1:b..l [ 643.342669][ C1] rcu: (detected by 1, t=10502 jiffies, g=46173, q=307 ncpus=2) [ 643.350435][ C1] task:syz-executor state:R running task stack:21288 pid:6013 ppid:6002 flags:0x00004002 [ 643.362824][ C1] Call Trace: [ 643.366163][ C1] [ 643.369138][ C1] __schedule+0x1553/0x45a0 [ 643.373784][ C1] ? asan.module_dtor+0x20/0x20 [ 643.378700][ C1] ? mark_lock+0x94/0x320 [ 643.383104][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 643.389145][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 643.394488][ C1] preempt_schedule_irq+0xbf/0x150 [ 643.399672][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 643.405454][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 643.411320][ C1] irqentry_exit+0x67/0x70 [ 643.415791][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 643.421825][ C1] RIP: 0010:lock_is_held_type+0x68/0x190 [ 643.427501][ C1] Code: 00 00 00 65 48 8b 1d f7 c7 7c 75 83 bb dc 0a 00 00 00 0f 85 df 00 00 00 41 89 f7 49 89 fe 48 c7 04 24 00 00 00 00 9c 8f 04 24 <4c> 8b 2c 24 fa 48 c7 c7 c0 d8 ca 8a e8 27 13 00 00 65 ff 05 e8 9b [ 643.447171][ C1] RSP: 0018:ffffc9000533f6e0 EFLAGS: 00000246 [ 643.453291][ C1] RAX: 0000000000000000 RBX: ffff888024f63c00 RCX: 0000000000000000 [ 643.461305][ C1] RDX: ffff888024f63c00 RSI: 00000000ffffffff RDI: ffff88805dfc39b0 [ 643.469345][ C1] RBP: 00000000ffffffff R08: ffff888024f63c00 R09: 0000000000000002 [ 643.477358][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: 1ffff92000a67f06 [ 643.485367][ C1] R13: ffff88805d9175d8 R14: ffff88805dfc39b0 R15: 00000000ffffffff [ 643.493403][ C1] xas_find+0x57b/0xab0 [ 643.497628][ C1] find_lock_entries+0x1e9/0xfe0 [ 643.502609][ C1] ? find_lock_entries+0x126/0xfe0 [ 643.507768][ C1] ? find_get_entries+0x8f0/0x8f0 [ 643.512871][ C1] shmem_undo_range+0x2b3/0x1b20 [ 643.517872][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 643.523135][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 643.528903][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 643.533988][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 643.539079][ C1] shmem_evict_inode+0x245/0x9e0 [ 643.544076][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 643.549840][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 643.555431][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 643.561209][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 643.566284][ C1] ? bit_waitqueue+0x30/0x30 [ 643.570926][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 643.576177][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 643.581780][ C1] evict+0x4ca/0x8d0 [ 643.585734][ C1] ? proc_nr_inodes+0x230/0x230 [ 643.590639][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 643.595892][ C1] ? _raw_spin_unlock+0x28/0x40 [ 643.600800][ C1] ? iput+0x706/0x920 [ 643.604825][ C1] do_unlinkat+0x38c/0x590 [ 643.609302][ C1] ? fsnotify_link_count+0xf0/0xf0 [ 643.614457][ C1] ? getname_flags+0x20a/0x500 [ 643.619280][ C1] __x64_sys_unlink+0x49/0x50 [ 643.624005][ C1] do_syscall_64+0x55/0xb0 [ 643.628459][ C1] ? clear_bhb_loop+0x40/0x90 [ 643.633180][ C1] ? clear_bhb_loop+0x40/0x90 [ 643.637897][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 643.643833][ C1] RIP: 0033:0x7f5f7af9bf47 [ 643.648287][ C1] RSP: 002b:00007ffcaccb3598 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 643.656739][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5f7af9bf47 [ 643.664753][ C1] RDX: 00007ffcaccb35c0 RSI: 00007ffcaccb3650 RDI: 00007ffcaccb3650 [ 643.672763][ C1] RBP: 00007ffcaccb3650 R08: 00007ffcaccb4650 R09: 00000000ffffffff [ 643.680776][ C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcaccb46e0 [ 643.688793][ C1] R13: 00007f5f7b0321ca R14: 000000000008458b R15: 00007ffcaccb4720 [ 643.696821][ C1] [ 643.699868][ C1] task:syz.6.1246 state:R running task stack:22728 pid:10997 ppid:10472 flags:0x00004002 [ 643.710691][ C1] Call Trace: [ 643.714004][ C1] [ 643.716975][ C1] __schedule+0x1553/0x45a0 [ 643.721554][ C1] ? asan.module_dtor+0x20/0x20 [ 643.726453][ C1] ? is_bpf_text_address+0x28f/0x2a0 [ 643.731793][ C1] ? lock_chain_count+0x20/0x20 [ 643.736687][ C1] ? preempt_schedule+0xc0/0xd0 [ 643.741581][ C1] preempt_schedule_common+0x82/0xc0 [ 643.746903][ C1] preempt_schedule+0xc0/0xd0 [ 643.751639][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 643.757311][ C1] ? task_work_run+0x1d3/0x260 [ 643.762142][ C1] ? task_work_run+0x8/0x260 [ 643.766781][ C1] preempt_schedule_thunk+0x1a/0x30 [ 643.772039][ C1] ? unwind_next_frame+0x200a/0x2970 [ 643.777371][ C1] unwind_next_frame+0x200f/0x2970 [ 643.782540][ C1] ? task_work_run+0x1d4/0x260 [ 643.787358][ C1] ? task_work_run+0x1d4/0x260 [ 643.792163][ C1] ? stack_trace_save+0x100/0x100 [ 643.797230][ C1] arch_stack_walk+0x144/0x190 [ 643.802039][ C1] ? do_exit+0x95a/0x2460 [ 643.806422][ C1] stack_trace_save+0xaa/0x100 [ 643.811231][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 643.816428][ C1] save_stack+0x125/0x230 [ 643.820806][ C1] ? __reset_page_owner+0x190/0x190 [ 643.826035][ C1] ? free_unref_page_prepare+0x7b2/0x8c0 [ 643.831714][ C1] ? free_unref_page_list+0xbe/0x860 [ 643.837063][ C1] ? release_pages+0x1f7a/0x2200 [ 643.842040][ C1] ? __folio_batch_release+0x71/0xe0 [ 643.847362][ C1] ? shmem_undo_range+0x630/0x1b20 [ 643.852528][ C1] ? shmem_evict_inode+0x245/0x9e0 [ 643.857687][ C1] ? evict+0x4ca/0x8d0 [ 643.861810][ C1] ? __dentry_kill+0x431/0x650 [ 643.866624][ C1] ? dentry_kill+0xb8/0x290 [ 643.871175][ C1] ? dput+0xfe/0x1e0 [ 643.875114][ C1] ? __fput+0x5e5/0x970 [ 643.879310][ C1] ? task_work_run+0x1d4/0x260 [ 643.884134][ C1] ? page_ext_get+0x22/0x2b0 [ 643.888768][ C1] ? page_ext_get+0x1e2/0x2b0 [ 643.893499][ C1] __reset_page_owner+0x4e/0x190 [ 643.898476][ C1] ? rcu_is_watching+0x15/0xb0 [ 643.903287][ C1] free_unref_page_prepare+0x7b2/0x8c0 [ 643.908808][ C1] free_unref_page_list+0xbe/0x860 [ 643.913974][ C1] ? __folio_memcg+0x63/0x160 [ 643.918715][ C1] ? folio_memcg+0x127/0x480 [ 643.923358][ C1] release_pages+0x1f7a/0x2200 [ 643.928187][ C1] ? lru_cache_disable+0x30/0x30 [ 643.933175][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 643.938432][ C1] __folio_batch_release+0x71/0xe0 [ 643.943598][ C1] shmem_undo_range+0x630/0x1b20 [ 643.948603][ C1] ? shmem_truncate_range+0xa0/0xa0 [ 643.953879][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 643.959673][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 643.964754][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 643.969834][ C1] shmem_evict_inode+0x245/0x9e0 [ 643.974828][ C1] ? inode_wait_for_writeback+0x1e3/0x230 [ 643.980599][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 643.986198][ C1] ? sb_clear_inode_writeback+0x360/0x360 [ 643.991973][ C1] ? do_raw_spin_lock+0x11f/0x2c0 [ 643.997058][ C1] ? bit_waitqueue+0x30/0x30 [ 644.001716][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 644.006974][ C1] ? shmem_free_in_core_inode+0xb0/0xb0 [ 644.012569][ C1] evict+0x4ca/0x8d0 [ 644.016535][ C1] ? proc_nr_inodes+0x230/0x230 [ 644.021442][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 644.026709][ C1] ? _raw_spin_unlock+0x28/0x40 [ 644.031607][ C1] ? iput+0x706/0x920 [ 644.035645][ C1] __dentry_kill+0x431/0x650 [ 644.040295][ C1] dentry_kill+0xb8/0x290 [ 644.044678][ C1] ? dput+0x3b/0x1e0 [ 644.048634][ C1] dput+0xfe/0x1e0 [ 644.052417][ C1] __fput+0x5e5/0x970 [ 644.056460][ C1] task_work_run+0x1d4/0x260 [ 644.061117][ C1] ? task_work_cancel+0x220/0x220 [ 644.066207][ C1] ? do_exit+0x955/0x2460 [ 644.070592][ C1] ? kmem_cache_free+0xf8/0x270 [ 644.075506][ C1] do_exit+0x95a/0x2460 [ 644.079717][ C1] ? nfs_stat_to_errno+0x1a0/0x1a0 [ 644.084921][ C1] ? put_task_struct+0xc0/0xc0 [ 644.089756][ C1] ? lock_chain_count+0x20/0x20 [ 644.094663][ C1] do_group_exit+0x21b/0x2d0 [ 644.099310][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 644.104562][ C1] get_signal+0x12fc/0x13f0 [ 644.109134][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 644.114739][ C1] ? get_sigframe_size+0x20/0x20 [ 644.119733][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 644.125782][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 644.131307][ C1] exit_to_user_mode_loop+0x70/0x110 [ 644.136647][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 644.142262][ C1] irqentry_exit_to_user_mode+0x9/0x30 [ 644.147770][ C1] exc_page_fault+0x8c/0x100 [ 644.152421][ C1] asm_exc_page_fault+0x26/0x30 [ 644.157337][ C1] RIP: 0033:0x7f09d459ce61 [ 644.161800][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 644.167914][ C1] RAX: 0000000000000000 RBX: 00007f09d4815fa0 RCX: 00007f09d459ce59 [ 644.175930][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 644.183943][ C1] RBP: 00007f09d4632d6f R08: 0000000000000000 R09: 0000000000000000 [ 644.191955][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 644.199969][ C1] R13: 00007f09d4816038 R14: 00007f09d4815fa0 R15: 00007ffffe515158 [ 644.208001][ C1] [ 644.211069][ C1] task:syz.6.1264 state:R running task stack:25864 pid:11124 ppid:10472 flags:0x00004004 [ 644.221904][ C1] Call Trace: [ 644.225225][ C1] [ 644.228201][ C1] __schedule+0x1553/0x45a0 [ 644.232755][ C1] ? verify_lock_unused+0x140/0x140 [ 644.238025][ C1] ? mark_lock+0x94/0x320 [ 644.242410][ C1] ? asan.module_dtor+0x20/0x20 [ 644.247333][ C1] ? preempt_schedule+0xc0/0xd0 [ 644.252232][ C1] preempt_schedule_common+0x82/0xc0 [ 644.257579][ C1] preempt_schedule+0xc0/0xd0 [ 644.262302][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 644.267978][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 644.273060][ C1] preempt_schedule_thunk+0x1a/0x30 [ 644.278328][ C1] _raw_spin_unlock+0x3a/0x40 [ 644.283058][ C1] unmap_page_range+0x25e0/0x3000 [ 644.288172][ C1] ? copy_page_range+0x3670/0x3670 [ 644.293343][ C1] ? unmap_single_vma+0x1b0/0x2a0 [ 644.298441][ C1] unmap_vmas+0x286/0x3f0 [ 644.302835][ C1] ? unmap_page_range+0x3000/0x3000 [ 644.308095][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 644.313191][ C1] exit_mmap+0x238/0xb90 [ 644.317496][ C1] ? exit_mm_release+0x1a/0x30 [ 644.322307][ C1] ? vm_brk+0x30/0x30 [ 644.326334][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 644.332040][ C1] ? uprobe_clear_state+0x278/0x290 [ 644.337293][ C1] ? mm_update_next_owner+0x562/0x6c0 [ 644.342742][ C1] __mmput+0x118/0x3c0 [ 644.346860][ C1] exit_mm+0x24a/0x350 [ 644.350981][ C1] ? do_exit+0x2460/0x2460 [ 644.355460][ C1] ? taskstats_exit+0x3d5/0x9d0 [ 644.360373][ C1] do_exit+0x8dd/0x2460 [ 644.364596][ C1] ? put_task_struct+0xc0/0xc0 [ 644.369419][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 644.375462][ C1] ? get_signal+0x1068/0x13f0 [ 644.380199][ C1] ? lock_chain_count+0x20/0x20 [ 644.385102][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 644.390178][ C1] do_group_exit+0x21b/0x2d0 [ 644.394833][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 644.400083][ C1] get_signal+0x12fc/0x13f0 [ 644.404650][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 644.410255][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 644.416193][ C1] ? get_sigframe_size+0x20/0x20 [ 644.421179][ C1] ? __sys_connect+0x27f/0x470 [ 644.426010][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 644.431523][ C1] exit_to_user_mode_loop+0x70/0x110 [ 644.436876][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 644.442479][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 644.447987][ C1] do_syscall_64+0x61/0xb0 [ 644.452450][ C1] ? clear_bhb_loop+0x40/0x90 [ 644.457176][ C1] ? clear_bhb_loop+0x40/0x90 [ 644.461995][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 644.467940][ C1] RIP: 0033:0x7f09d459ce59 [ 644.472395][ C1] RSP: 002b:00007f09d27f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 644.480880][ C1] RAX: 0000000000000000 RBX: 00007f09d4815fa8 RCX: 00007f09d459ce59 [ 644.488894][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f09d4815fa8 [ 644.496917][ C1] RBP: 00007f09d4815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 644.504928][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 644.512954][ C1] R13: 00007f09d4816038 R14: 00007ffffe515070 R15: 00007ffffe515158 [ 644.520985][ C1] [ 644.524080][ C1] rcu: rcu_preempt kthread starved for 10623 jiffies! g46173 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 644.535323][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 644.545341][ C1] rcu: RCU grace-period kthread stack dump: [ 644.551270][ C1] task:rcu_preempt state:R running task stack:27528 pid:17 ppid:2 flags:0x00004000 [ 644.562123][ C1] Call Trace: [ 644.565450][ C1] [ 644.568422][ C1] __schedule+0x1553/0x45a0 [ 644.573064][ C1] ? _raw_spin_unlock+0x40/0x40 [ 644.577964][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 644.583903][ C1] ? asan.module_dtor+0x20/0x20 [ 644.588795][ C1] ? enqueue_timer+0x23d/0x550 [ 644.593608][ C1] ? __mod_timer+0x984/0xdb0 [ 644.598289][ C1] schedule+0xbd/0x170 [ 644.602403][ C1] schedule_timeout+0x188/0x2d0 [ 644.607309][ C1] ? console_conditional_schedule+0x40/0x40 [ 644.613260][ C1] ? update_process_times+0x1b0/0x1b0 [ 644.618682][ C1] ? prepare_to_swait_event+0x339/0x360 [ 644.624282][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 644.629185][ C1] ? rcu_gp_init+0x1162/0x1560 [ 644.634007][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 644.638905][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 644.644940][ C1] ? rcu_gp_init+0x1560/0x1560 [ 644.649751][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 644.654647][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 644.659978][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 644.665230][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 644.669878][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 644.675058][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 644.680049][ C1] ? __kthread_parkme+0x162/0x1c0 [ 644.685122][ C1] kthread+0x2fa/0x390 [ 644.689237][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 644.694398][ C1] ? kthread_blkcg+0xd0/0xd0 [ 644.699060][ C1] ret_from_fork+0x48/0x80 [ 644.703527][ C1] ? kthread_blkcg+0xd0/0xd0 [ 644.708161][ C1] ret_from_fork_asm+0x11/0x20 [ 644.712996][ C1] [ 644.716061][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 644.722441][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 644.729509][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 644.739607][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 644.745299][ C1] Code: b9 20 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 54 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 644.765039][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 644.771163][ C1] RAX: 846cf937ee807e00 RBX: ffffffff8162aee1 RCX: 846cf937ee807e00 [ 644.779177][ C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9860 [ 644.787215][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 644.795230][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 644.803243][ C1] R13: dffffc0000000000 R14: 1ffff1100384d780 R15: 0000000000000000 [ 644.811258][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 644.820234][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 644.826858][ C1] CR2: 00007ff98a5ea540 CR3: 0000000075af5000 CR4: 00000000003506e0 [ 644.834875][ C1] Call Trace: [ 644.838217][ C1] [ 644.841210][ C1] default_idle+0x13/0x20 [ 644.845594][ C1] default_idle_call+0x6c/0xa0 [ 644.850407][ C1] do_idle+0x221/0x590 [ 644.854545][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 644.859797][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 644.865505][ C1] cpu_startup_entry+0x43/0x60 [ 644.870348][ C1] start_secondary+0xee/0xf0 [ 644.874989][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 644.881127][ C1]