last executing test programs: 7m4.715441821s ago: executing program 1 (id=2): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"5c4f53f8c3a7ba34fb2819cf6a209a50", 0x0, 0x0, {0x6, 0x80000000}, {0x3, 0x1}, 0xb1d, [0x7, 0x8, 0x1, 0x800, 0x3, 0x8, 0x5, 0x5, 0x6, 0x9, 0x4, 0xa, 0x6, 0x8, 0x101, 0x6]}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000180)={[{@grpid}, {@mblk_io_submit}, {@nodioread_nolock}, {@test_dummy_encryption}, {@inode_readahead_blks}, {@nodelalloc}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x4, 0xbaf, &(0x7f00000017c0)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget(0x2, 0x1c0) msgsnd(r3, &(0x7f0000000140)={0x3, "db495b3abbc71e5c7e1ed8c4d8fde7cf9a155325ed658caccb3db5cf8519d3e93a79601a377ea202f59bc341ce"}, 0x35, 0x800) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x159) sendfile(r5, r6, 0x0, 0x20fffe82) 7m1.715206029s ago: executing program 1 (id=9): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) socket$nl_sock_diag(0x10, 0x3, 0x4) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 6m59.084119069s ago: executing program 1 (id=14): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) writev(r0, &(0x7f0000001580), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) syz_extract_tcp_res(0x0, 0x80000000, 0xd) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) recvmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=""/169, 0xa9}, 0x41d8546d}, {{&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/69, 0x45}], 0x1, &(0x7f0000000980)=""/252, 0xfc}, 0x9}], 0x2, 0x43, &(0x7f0000000b00)) sendto$packet(r3, 0x0, 0x0, 0xdc1227e323c3a629, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2, 0x8000}}) 6m42.736312232s ago: executing program 32 (id=14): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) writev(r0, &(0x7f0000001580), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000880)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x5, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) syz_extract_tcp_res(0x0, 0x80000000, 0xd) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) recvmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=""/169, 0xa9}, 0x41d8546d}, {{&(0x7f0000000680)=@nfc_llcp, 0x80, &(0x7f0000000940)=[{&(0x7f0000000800)=""/69, 0x45}], 0x1, &(0x7f0000000980)=""/252, 0xfc}, 0x9}], 0x2, 0x43, &(0x7f0000000b00)) sendto$packet(r3, 0x0, 0x0, 0xdc1227e323c3a629, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_open_dev$sg(0x0, 0x0, 0x8002) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x2, 0x8000}}) 20.188164643s ago: executing program 3 (id=525): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000004c0), 0xfa, 0x269, &(0x7f0000000680)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) fchdir(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0x24048850) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@ifindex=r3, 0x1e, 0x1, 0x80000001, &(0x7f00000000c0), 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0, 0x0]}, 0x40) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{}]}, 0x103) close(0xffffffffffffffff) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100200000000000000000000030005000000000002000000ffffffff00000000000000000800120000000100000000"], 0x80}}, 0x0) 16.152490105s ago: executing program 3 (id=533): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4) socket$inet_sctp(0x2, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x2571, 0x4) recvmmsg(r4, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000002400)=[{0x0}], 0x1}, 0x5}], 0x1, 0x40002120, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r5, 0xc034564b, &(0x7f00000000c0)={0x0, 0x42474752, 0x280, 0x1e0, 0x3, @discrete={0x1}}) 14.689050808s ago: executing program 2 (id=535): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x3, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r8, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 14.57084715s ago: executing program 0 (id=536): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 10.685567438s ago: executing program 2 (id=537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r5, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000004e40), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) 10.685291719s ago: executing program 3 (id=538): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_bcm(0x1d, 0x2, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @loopback}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x21, 0x0}}, {0x2, 0x4e23, @local}, 0x1f7, 0x0, 0x0, 0x0, 0xfff9, 0x0, 0x4, 0x2, 0x7ff}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 10.683389629s ago: executing program 4 (id=545): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000008100), 0x4) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x7) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x3110d1, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, 0x0, 0x0) 10.541321832s ago: executing program 0 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getpid() r5 = syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lseek(r5, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001042bbd70020000000002000000", @ANYRES32=r6, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 9.664925061s ago: executing program 3 (id=540): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9.123468914s ago: executing program 4 (id=541): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = shmget$private(0x0, 0x4000, 0x842, &(0x7f0000a4f000/0x4000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f00000001c0)=""/253) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x5, 0x7, 0x0, &(0x7f0000000140)="259a00f271a76d", 0x0, 0xd0d, 0x2a0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 9.086881014s ago: executing program 3 (id=542): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x6, 0x24, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_LE_HOST_SUPPORTED={{0x1}}}}, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x28, 0x801, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f000000b000/0x3000)=nil, 0x3000, 0x7, 0x28011, r5, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x600, 0x80600}) 7.07448765s ago: executing program 4 (id=543): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) rt_sigprocmask(0x0, &(0x7f0000000380)={[0xfffff7feffff7fff]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x12) syz_io_uring_setup(0xec4, &(0x7f00000003c0)={0x0, 0xffffff7c, 0x2, 0x3, 0x34b}, &(0x7f0000000500), &(0x7f0000000600), &(0x7f0000000000)) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 7.07409983s ago: executing program 2 (id=544): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000940)={0x0, 0xffffffffffffff67, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r3, 0x1ff, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r4, r5, 0x0, r5], [0x2b8], [0x0, 0x1]}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r7, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r7, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r7, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg(r7, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000bc0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xc0, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r7, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) bind$alg(r6, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) bind$alg(r6, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x1, 0x70bd28, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0xd, 0x3}}]}]}, @IFLA_MASTER={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x40) 7.07269094s ago: executing program 0 (id=552): r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280), 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x6}, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010102, 0x4e1f, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcf, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000862000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x134, 0x17, 0x505, 0x70bd26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@multicast2, @in=@loopback, 0x4e21, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x6c}, {{@in=@loopback, @in6=@remote, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x20, 0x3a}, {0xffffffff, 0x4, 0x0, 0x2, 0x8004, 0x9, 0x7, 0xc6}, {0x6, 0x5, 0xa}, 0x0, 0x0, 0x1, 0x1, 0x3, 0x2}, 0x0, 0x9, 0x8000, 0x70bd2b}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xd1}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4090}, 0x4004) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4000000003, 0x0, 0x2, 0xa}}, 0x20) pipe(&(0x7f0000000240)) 5.956360665s ago: executing program 0 (id=546): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) r7 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_setup_queues(r7, r6, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)=0x0) nanosleep(&(0x7f0000001a00)={0x5}, &(0x7f0000001a40)) r9 = getpid() syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5, 0xffff, 0x0, 0x0, r9}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) r10 = syz_open_dev$ublk_bdev(&(0x7f0000003000), r5, 0x0) pread64$ublk_bdev(r10, &(0x7f0000005000)=""/4096, 0x1000, 0x0) syz_ublk_process_io(r8, 0x0, 0x1, &(0x7f0000000e00), 0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001000)=@ublk_del_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r5}}) io_uring_enter(r1, 0x0, 0x1, 0x1, 0x0, 0x0) syz_io_uring_complete(r2, r3) 5.7890606s ago: executing program 3 (id=547): syz_open_dev$vcsu(&(0x7f00000003c0), 0x7, 0x200000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(0x0, 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c000780180001"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) 5.618521013s ago: executing program 4 (id=548): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX]) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x1) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001340), 0x0, 0xc040) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, 0x0, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2d706864ae6f"], 0x6) 5.585535064s ago: executing program 2 (id=549): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getpid() r5 = syz_open_procfs(r0, &(0x7f0000000180)='smaps\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) lseek(r5, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100001042bbd70020000000002000000", @ANYRES32=r6, @ANYBLOB="00240000000000001800128008000100677470000c0002800500050000000000"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) 4.135401277s ago: executing program 2 (id=550): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580), 0x0) r0 = open(&(0x7f00000000c0)='./file2\x00', 0x24842, 0x80) recvmsg$unix(r0, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000001800)=""/184, 0xb8}, {0x0}, {&(0x7f00000019c0)=""/237, 0xed}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {0x0}], 0x5, &(0x7f0000002d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r4, 0x0, 0x13, &(0x7f0000000040)=0x200, 0x4) msgrcv(0x0, 0x0, 0x0, 0x0, 0x4800) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e22, @private=0xa010100}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file2\x00', &(0x7f0000000200), 0x810000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4824}, 0x0) 3.916189062s ago: executing program 0 (id=551): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.465130542s ago: executing program 2 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000005140)=@newtfilter={0x30, 0x2c, 0xd27, 0x11, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0xc004) syz_open_dev$vcsn(&(0x7f0000000040), 0xd0f, 0x103000) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = getpgid(r0) rt_tgsigqueueinfo(r0, r6, 0x33, &(0x7f0000000240)={0x15, 0x3, 0x1}) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.432206083s ago: executing program 4 (id=554): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_complete(0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x388, 0x41d9fda7) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000100"}) 3.316697745s ago: executing program 0 (id=555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=@can_delroute={0x34, 0x19, 0x1, 0x70bd2a, 0x25dfdbff, {0x1d, 0x1, 0x3}, [@CGW_MOD_OR={0x15, 0x2, {{{0x0, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "c18ab2c782fa073d"}, 0x6}}, @CGW_CS_XOR={0x8, 0x5, {0x6, 0x5, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom1\x00', 0xc04, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xf51, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000180), &(0x7f0000000000)) r3 = socket(0x10, 0x803, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x4}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 0s ago: executing program 4 (id=556): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000900000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 76.835936][ T5760] cgroup: Unknown subsys name 'net' [ 76.980544][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.787511][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.405871][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.413868][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.425253][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.443174][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.463413][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.471413][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.479039][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.480369][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.494222][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.509557][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.512563][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.518745][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.532010][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.533532][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.539429][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.565959][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.565997][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.580277][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.584930][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.595209][ T5787] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.595499][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.610039][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.610044][ T5787] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.626009][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.029276][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 81.045059][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.223476][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.231445][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.238965][ T5772] bridge_slave_0: entered allmulticast mode [ 81.246730][ T5772] bridge_slave_0: entered promiscuous mode [ 81.291755][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.302585][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.310274][ T5774] bridge_slave_0: entered allmulticast mode [ 81.321881][ T5774] bridge_slave_0: entered promiscuous mode [ 81.330186][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.337482][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.345867][ T5772] bridge_slave_1: entered allmulticast mode [ 81.353493][ T5772] bridge_slave_1: entered promiscuous mode [ 81.360467][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.377614][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.386131][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.393397][ T5774] bridge_slave_1: entered allmulticast mode [ 81.400233][ T5774] bridge_slave_1: entered promiscuous mode [ 81.456677][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.470042][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.483181][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.504237][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.516736][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.594899][ T5774] team0: Port device team_slave_0 added [ 81.614205][ T5772] team0: Port device team_slave_0 added [ 81.622187][ T5774] team0: Port device team_slave_1 added [ 81.643487][ T5772] team0: Port device team_slave_1 added [ 81.719679][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.726782][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.753264][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.765837][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.775535][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.802213][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.813753][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.820940][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.831391][ T5773] bridge_slave_0: entered allmulticast mode [ 81.838515][ T5773] bridge_slave_0: entered promiscuous mode [ 81.856119][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.863329][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.889665][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.909612][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.917143][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.943575][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.970808][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.978243][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.985905][ T5773] bridge_slave_1: entered allmulticast mode [ 81.993583][ T5773] bridge_slave_1: entered promiscuous mode [ 82.012016][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.019218][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.026806][ T5775] bridge_slave_0: entered allmulticast mode [ 82.034349][ T5775] bridge_slave_0: entered promiscuous mode [ 82.059244][ T5774] hsr_slave_0: entered promiscuous mode [ 82.066538][ T5774] hsr_slave_1: entered promiscuous mode [ 82.097648][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.107527][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.115092][ T5775] bridge_slave_1: entered allmulticast mode [ 82.121953][ T5775] bridge_slave_1: entered promiscuous mode [ 82.167046][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.189167][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.203842][ T5772] hsr_slave_0: entered promiscuous mode [ 82.210927][ T5772] hsr_slave_1: entered promiscuous mode [ 82.217563][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.226404][ T5772] Cannot create hsr debugfs directory [ 82.234475][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.248068][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.317092][ T5773] team0: Port device team_slave_0 added [ 82.327429][ T5773] team0: Port device team_slave_1 added [ 82.356680][ T5775] team0: Port device team_slave_0 added [ 82.366442][ T5775] team0: Port device team_slave_1 added [ 82.413834][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.420833][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.447162][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.499863][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.509876][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.536213][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.548130][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.557644][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.584486][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.626531][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.634120][ T5084] Bluetooth: hci1: command tx timeout [ 82.639917][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.666675][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.702726][ T5790] Bluetooth: hci0: command tx timeout [ 82.702746][ T5789] Bluetooth: hci3: command tx timeout [ 82.714198][ T5084] Bluetooth: hci2: command tx timeout [ 82.791226][ T5773] hsr_slave_0: entered promiscuous mode [ 82.797928][ T5773] hsr_slave_1: entered promiscuous mode [ 82.805783][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.813479][ T5773] Cannot create hsr debugfs directory [ 82.834000][ T5775] hsr_slave_0: entered promiscuous mode [ 82.840425][ T5775] hsr_slave_1: entered promiscuous mode [ 82.846861][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.854590][ T5775] Cannot create hsr debugfs directory [ 83.067700][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.080649][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.115832][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.125600][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.255423][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.271352][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.281889][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.303532][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.388317][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.399559][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.419080][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.447178][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.530164][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.551553][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.561801][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.571785][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.673393][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.705864][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.727183][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.764656][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.772002][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.783640][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.790790][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.834305][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.861669][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.891177][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.898393][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.934498][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.941830][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.954700][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.968882][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.976111][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.994942][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.030853][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.038046][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.085813][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.150508][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.245586][ T1085] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.252914][ T1085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.271554][ T1085] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.278836][ T1085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.468703][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.631504][ T5774] veth0_vlan: entered promiscuous mode [ 84.685105][ T5774] veth1_vlan: entered promiscuous mode [ 84.703666][ T5084] Bluetooth: hci1: command tx timeout [ 84.764237][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.782690][ T5084] Bluetooth: hci3: command tx timeout [ 84.788342][ T5084] Bluetooth: hci2: command tx timeout [ 84.794412][ T5790] Bluetooth: hci0: command tx timeout [ 84.858886][ T5774] veth0_macvtap: entered promiscuous mode [ 84.880161][ T5774] veth1_macvtap: entered promiscuous mode [ 84.923672][ T5772] veth0_vlan: entered promiscuous mode [ 84.936759][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.951982][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.967123][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.979695][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.988841][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.998153][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.007038][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.027876][ T5772] veth1_vlan: entered promiscuous mode [ 85.057534][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.135337][ T5775] veth0_vlan: entered promiscuous mode [ 85.147887][ T5772] veth0_macvtap: entered promiscuous mode [ 85.192174][ T5772] veth1_macvtap: entered promiscuous mode [ 85.216583][ T5775] veth1_vlan: entered promiscuous mode [ 85.275789][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.286970][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.299507][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.310719][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.322814][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.334350][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.337534][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.347009][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.385105][ T5773] veth0_vlan: entered promiscuous mode [ 85.427844][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.436881][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.446503][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.455371][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.481631][ T5773] veth1_vlan: entered promiscuous mode [ 85.495263][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.517616][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.529170][ T5775] veth0_macvtap: entered promiscuous mode [ 85.547805][ T5775] veth1_macvtap: entered promiscuous mode [ 85.589350][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.605694][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.619832][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.632091][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.648081][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.690334][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.703963][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.714946][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.725886][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.737498][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.767831][ T5773] veth0_macvtap: entered promiscuous mode [ 85.783377][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.792160][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.802463][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.811215][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.828850][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.838980][ T5773] veth1_macvtap: entered promiscuous mode [ 85.868964][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.991880][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.995936][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.008359][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.019268][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.030569][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.042203][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.052273][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.063211][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.074340][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.091077][ T5841] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.104725][ T5816] IPVS: starting estimator thread 0... [ 86.194440][ T5842] IPVS: using max 17 ests per chain, 40800 per kthread [ 86.200606][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.221259][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.232252][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.243252][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.253641][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.264953][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.285954][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.302836][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.324559][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.354436][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.381287][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.402571][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.411339][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.463872][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 86.942885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 88.202897][ T5084] Bluetooth: hci1: command tx timeout [ 88.208372][ T5084] Bluetooth: hci2: command tx timeout [ 88.214614][ T5084] Bluetooth: hci0: command tx timeout [ 88.220034][ T5084] Bluetooth: hci3: command tx timeout [ 88.443436][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.451462][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.663379][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.671296][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.775014][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.817533][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.033022][ T5854] syz.1.2[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.742841][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 89.851307][ T5854] loop1: detected capacity change from 0 to 4096 [ 90.164736][ T5854] EXT4-fs: Ignoring removed mblk_io_submit option [ 90.195621][ T970] cfg80211: failed to load regulatory.db [ 90.232522][ T5084] Bluetooth: hci0: command tx timeout [ 90.232544][ T5789] Bluetooth: hci2: command tx timeout [ 90.237987][ T5084] Bluetooth: hci1: command tx timeout [ 90.303375][ T5084] Bluetooth: hci3: command tx timeout [ 90.576828][ T5854] EXT4-fs (loop1): Test dummy encryption mode enabled [ 90.650439][ T5854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.950543][ T5871] pim6reg: entered allmulticast mode [ 91.853717][ T5872] team0: entered allmulticast mode [ 91.861393][ T5872] team_slave_0: entered allmulticast mode [ 91.868368][ T5872] team_slave_1: entered allmulticast mode [ 91.872502][ T28] audit: type=1800 audit(1783750519.441:2): pid=5876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 91.904366][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.981959][ T28] audit: type=1800 audit(1783750519.441:3): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 93.347574][ T5885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.179387][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.228564][ T5885] bond0 (unregistering): Released all slaves [ 98.072995][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 101.737276][ T2965] Bluetooth: Error in BCSP hdr checksum [ 101.880562][ T5917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 103.048039][ T5924] xt_HMARK: spi-set and port-set can't be combined [ 103.422706][ T5084] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 105.200509][ T5933] loop2: detected capacity change from 0 to 764 [ 105.244696][ T5933] rock: directory entry would overflow storage [ 105.251285][ T5933] rock: sig=0x4654, size=5, remaining=4 [ 108.378460][ T5956] loop2: detected capacity change from 0 to 32768 [ 108.458819][ T5956] (syz.2.27,5956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.474759][ T5956] (syz.2.27,5956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.500738][ T5956] (syz.2.27,5956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 108.514668][ T5956] (syz.2.27,5956,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 108.529274][ T5956] JBD2: Ignoring recovery information on journal [ 109.026975][ T5956] (syz.2.27,5956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 109.042665][ T5956] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.054409][ T5956] (syz.2.27,5956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 109.110858][ T5956] (syz.2.27,5956,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 109.239009][ T5953] (syz.2.27,5953,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC. [ 109.262188][ T5953] (syz.2.27,5953,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x2c7b5077, computed 0x4d558a87. Applying ECC. [ 109.276479][ T5953] (syz.2.27,5953,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x2c7b5077, computed 0x5d2751af [ 109.289016][ T5953] (syz.2.27,5953,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 109.297624][ T5953] (syz.2.27,5953,0):ocfs2_quota_read:201 ERROR: status = -5 [ 109.305091][ T5953] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 5 [ 109.314300][ T5953] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 109.323761][ T5953] (syz.2.27,5953,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 109.332741][ T5953] (syz.2.27,5953,0):ocfs2_mknod:314 ERROR: status = -5 [ 109.339721][ T5953] (syz.2.27,5953,0):ocfs2_mknod:502 ERROR: status = -5 [ 109.347018][ T5953] (syz.2.27,5953,0):ocfs2_create:676 ERROR: status = -5 [ 109.487214][ T5953] syz.2.27 (5953) used greatest stack depth: 18888 bytes left [ 110.977619][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 114.346936][ T5990] trusted_key: encrypted_key: insufficient parameters specified [ 114.794606][ T5992] loop3: detected capacity change from 0 to 512 [ 115.345009][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.831995][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 117.652926][ T6011] random: crng reseeded on system resumption [ 118.544881][ T6017] capability: warning: `syz.0.41' uses 32-bit capabilities (legacy support in use) [ 118.589795][ T6014] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 118.643474][ T5992] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 118.652866][ T5992] FAT-fs (loop3): Filesystem has been set read-only [ 118.953585][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.964050][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.972820][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.981699][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.990354][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.999128][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.065356][ T6024] Zero length message leads to an empty skb [ 119.229139][ T1076] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.338818][ T6029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.261142][ T1076] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.433269][ T1076] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.637113][ T6032] netlink: 'syz.0.44': attribute type 3 has an invalid length. [ 120.646143][ T6032] netlink: 'syz.0.44': attribute type 3 has an invalid length. [ 121.033385][ T5789] Bluetooth: hci3: command tx timeout [ 121.313304][ T1076] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.709730][ T6044] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 123.682562][ T5789] Bluetooth: hci3: command tx timeout [ 123.737607][ T6015] chnl_net:caif_netlink_parms(): no params data found [ 125.400799][ T6073] syzkaller0: entered promiscuous mode [ 125.423260][ T6073] syzkaller0: entered allmulticast mode [ 126.217167][ T5084] Bluetooth: hci3: command tx timeout [ 126.462309][ C0] sched: RT throttling activated [ 126.762108][ T6098] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 126.772197][ T6098] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 126.783594][ T6098] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 126.802358][ T28] audit: type=1800 audit(1783750554.591:4): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.53" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 127.042647][ T6015] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.062530][ T6015] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.069825][ T6015] bridge_slave_0: entered allmulticast mode [ 127.106063][ T6015] bridge_slave_0: entered promiscuous mode [ 127.143996][ T6015] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.151256][ T6015] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.171421][ T6015] bridge_slave_1: entered allmulticast mode [ 127.188445][ T6015] bridge_slave_1: entered promiscuous mode [ 127.197034][ T6111] loop2: detected capacity change from 0 to 1024 [ 127.220954][ T6111] ext4: Unknown parameter 'nouser_xattr' [ 127.268648][ T5782] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.338983][ T6015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.512044][ T6015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.608106][ T6114] loop2: detected capacity change from 0 to 2048 [ 127.648054][ T6114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.661452][ T6114] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.062641][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.068988][ T6015] team0: Port device team_slave_0 added [ 128.226190][ T6015] team0: Port device team_slave_1 added [ 128.402799][ T5084] Bluetooth: hci4: command 0x1003 tx timeout [ 128.410324][ T5084] Bluetooth: hci3: command tx timeout [ 128.432987][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 128.938220][ T6123] loop3: detected capacity change from 0 to 64 [ 128.995361][ T6123] hfs: unable to parse mount options [ 129.583681][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.590712][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.618237][ T6015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.832451][ T6015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.016440][ T6135] loop3: detected capacity change from 0 to 32768 [ 130.033215][ T6138] loop2: detected capacity change from 0 to 16 [ 130.111628][ T6138] erofs: (device loop2): mounted with root inode @ nid 36. [ 130.200448][ T6138] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.224968][ T6138] overlayfs: failed to resolve './bus': -2 [ 130.338848][ T6015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.959610][ T6135] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 131.016835][ T6015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.165202][ T6135] XFS (loop3): Ending clean mount [ 131.185287][ T6135] XFS (loop3): Quotacheck needed: Please wait. [ 131.357310][ T6135] XFS (loop3): Quotacheck: Done. [ 132.375184][ T6151] loop2: detected capacity change from 0 to 512 [ 132.395094][ T6151] EXT4-fs: Ignoring removed i_version option [ 132.401165][ T6151] EXT4-fs: Ignoring removed nobh option [ 132.428213][ T6151] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 132.459466][ T6151] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.579720][ T6151] EXT4-fs (loop2): 1 truncate cleaned up [ 132.619634][ T6130] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 132.625074][ T6151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.640507][ T6130] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 132.713488][ T5773] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 132.743826][ T6131] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 132.881588][ T6015] hsr_slave_0: entered promiscuous mode [ 132.918865][ T6015] hsr_slave_1: entered promiscuous mode [ 133.002434][ T6015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.010080][ T6015] Cannot create hsr debugfs directory [ 133.294518][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.301291][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.120871][ T5790] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 134.133787][ T5790] CPU: 1 PID: 5790 Comm: kworker/u5:8 Not tainted syzkaller #0 [ 134.141391][ T5790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 134.151491][ T5790] Workqueue: hci2 hci_rx_work [ 134.156316][ T5790] Call Trace: [ 134.159615][ T5790] [ 134.162590][ T5790] dump_stack_lvl+0x18c/0x250 [ 134.167314][ T5790] ? show_regs_print_info+0x20/0x20 [ 134.172581][ T5790] ? load_image+0x420/0x420 [ 134.177126][ T5790] sysfs_create_dir_ns+0x26e/0x2a0 [ 134.182384][ T5790] ? __lock_acquire+0x7d80/0x7d80 [ 134.187517][ T5790] ? sysfs_warn_dup+0xa0/0xa0 [ 134.192306][ T5790] ? do_raw_spin_unlock+0x121/0x230 [ 134.197552][ T5790] kobject_add_internal+0x617/0xc90 [ 134.202797][ T5790] kobject_add+0x164/0x240 [ 134.207245][ T5790] ? preempt_schedule_thunk+0x1a/0x30 [ 134.212644][ T5790] ? kobject_init+0x1d0/0x1d0 [ 134.217361][ T5790] ? get_device_parent+0x366/0x390 [ 134.222522][ T5790] device_add+0x3fa/0xc40 [ 134.226883][ T5790] hci_conn_add_sysfs+0xd5/0x1e0 [ 134.231854][ T5790] le_conn_complete_evt+0xe9f/0x1480 [ 134.237179][ T5790] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 134.243438][ T5790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 134.249115][ T5790] hci_le_conn_complete_evt+0x187/0x440 [ 134.254792][ T5790] ? hci_remote_host_features_evt+0x150/0x150 [ 134.260881][ T5790] hci_event_packet+0x7b4/0x1280 [ 134.265865][ T5790] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 134.271569][ T5790] ? bis_list+0x290/0x290 [ 134.276003][ T5790] ? kcov_remote_start+0x1b5/0x7e0 [ 134.281135][ T5790] ? hci_send_to_monitor+0xd7/0x4f0 [ 134.286354][ T5790] hci_rx_work+0x43a/0xd60 [ 134.290808][ T5790] ? process_scheduled_works+0x975/0x1600 [ 134.296557][ T5790] process_scheduled_works+0xa60/0x1600 [ 134.302157][ T5790] ? worker_attach_to_pool+0x370/0x370 [ 134.307642][ T5790] ? assign_work+0x3cc/0x5d0 [ 134.312259][ T5790] worker_thread+0xa5e/0xfe0 [ 134.316978][ T5790] ? _raw_spin_unlock+0x40/0x40 [ 134.321863][ T5790] ? __kthread_parkme+0x71/0x1c0 [ 134.326849][ T5790] kthread+0x2fa/0x390 [ 134.330934][ T5790] ? pr_cont_work+0x550/0x550 [ 134.335640][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 134.340251][ T5790] ret_from_fork+0x48/0x80 [ 134.344685][ T5790] ? kthread_blkcg+0xd0/0xd0 [ 134.349291][ T5790] ret_from_fork_asm+0x11/0x20 [ 134.354114][ T5790] [ 134.358928][ T5790] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 134.373637][ T5790] Bluetooth: hci2: failed to register connection device [ 134.542867][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 134.543624][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.798362][ T6174] loop2: detected capacity change from 0 to 128 [ 134.871018][ T6174] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 134.985272][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.62'. [ 134.994341][ T6178] netlink: 'syz.3.62': attribute type 2 has an invalid length. [ 135.003390][ T6178] netlink: 'syz.3.62': attribute type 1 has an invalid length. [ 135.092085][ T6174] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.059191][ T1076] hsr_slave_0: left promiscuous mode [ 136.067457][ T1076] hsr_slave_1: left promiscuous mode [ 136.073930][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.084678][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.101850][ T1076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.148085][ T1076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.281522][ T6185] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 136.530695][ T1076] bridge_slave_1: left allmulticast mode [ 136.542715][ T5789] Bluetooth: hci2: command tx timeout [ 136.558361][ T1076] bridge_slave_1: left promiscuous mode [ 136.593973][ T1076] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.646171][ T1076] bridge_slave_0: left allmulticast mode [ 136.662597][ T1076] bridge_slave_0: left promiscuous mode [ 136.694317][ T1076] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.736830][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.784133][ T1076] veth1_macvtap: left promiscuous mode [ 136.790230][ T1076] veth0_macvtap: left promiscuous mode [ 136.873830][ T1076] veth1_vlan: left promiscuous mode [ 136.879845][ T1076] veth0_vlan: left promiscuous mode [ 136.928418][ T6191] comedi comedi3: aio_iiro_16: I/O port conflict (0x800100,8) [ 139.762431][ T6196] loop2: detected capacity change from 0 to 512 [ 141.161092][ T6196] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 141.170200][ T6196] FAT-fs (loop2): Filesystem has been set read-only [ 141.307116][ T6204] loop3: detected capacity change from 0 to 512 [ 141.332941][ T6204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 141.370388][ T6204] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 141.533427][ T6204] EXT4-fs (loop3): 1 truncate cleaned up [ 141.575732][ T6204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.574942][ T1076] team0 (unregistering): Port device team_slave_1 removed [ 142.575525][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.631754][ T1076] team0 (unregistering): Port device team_slave_0 removed [ 142.719866][ T1076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.801787][ T1076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.931929][ T1076] bond0 (unregistering): Released all slaves [ 144.045057][ T6182] syzkaller0: entered promiscuous mode [ 144.052175][ T6182] syzkaller0: entered allmulticast mode [ 144.070329][ T6190] tipc: Started in network mode [ 144.075395][ T6190] tipc: Node identity a22c51691c6a, cluster identity 4711 [ 144.083626][ T6190] tipc: Enabled bearer , priority 0 [ 144.168126][ T6179] tipc: Resetting bearer [ 144.233526][ T6179] tipc: Disabling bearer [ 144.610171][ T6223] pimreg: entered allmulticast mode [ 146.996075][ T6015] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.091812][ T6015] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.212026][ T6015] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.248572][ T6015] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 148.237431][ T6255] loop0: detected capacity change from 0 to 764 [ 148.336174][ T6255] rock: directory entry would overflow storage [ 148.342618][ T6255] rock: sig=0x4654, size=5, remaining=4 [ 149.381310][ T6015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.412245][ T6268] loop0: detected capacity change from 0 to 128 [ 149.630264][ T6268] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.664341][ T6015] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.720027][ T6268] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.769653][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.776870][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.526317][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.533665][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.571014][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 151.030344][ T6281] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 151.601436][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 153.624283][ T6015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.361543][ T6330] tmpfs: Bad value for 'mpol' [ 158.217458][ T6015] veth0_vlan: entered promiscuous mode [ 158.274463][ T6015] veth1_vlan: entered promiscuous mode [ 158.401988][ T6015] veth0_macvtap: entered promiscuous mode [ 158.424641][ T6015] veth1_macvtap: entered promiscuous mode [ 158.480821][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.500365][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.525916][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.537545][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.553373][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.564747][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.613895][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.658666][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.690528][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.709618][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.726185][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.740097][ T6015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.797181][ T6015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.907068][ T6015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.125152][ T6015] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.224565][ T6015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.316827][ T6015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.408738][ T6015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.197132][ T6362] trusted_key: encrypted_key: insufficient parameters specified [ 161.424704][ T6368] loop0: detected capacity change from 0 to 32768 [ 161.609546][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.644109][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.943787][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.989337][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.082289][ T6368] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.177848][ T6383] syz.2.107 uses obsolete (PF_INET,SOCK_PACKET) [ 162.232235][ T6368] XFS (loop0): Ending clean mount [ 162.259739][ T6368] XFS (loop0): Quotacheck needed: Please wait. [ 162.710861][ T6368] XFS (loop0): Quotacheck: Done. [ 165.478772][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 166.828523][ T6407] xt_TPROXY: Can be used only with -p tcp or -p udp [ 167.510649][ T6411] loop0: detected capacity change from 0 to 1024 [ 167.882405][ T6414] bridge1: entered promiscuous mode [ 168.995685][ T6420] trusted_key: encrypted_key: insufficient parameters specified [ 170.888665][ T6431] pimreg: entered allmulticast mode [ 171.467778][ T6441] loop3: detected capacity change from 0 to 128 [ 172.048286][ T6443] loop2: detected capacity change from 0 to 64 [ 172.192033][ T6441] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.438838][ T6441] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.719908][ T6454] loop0: detected capacity change from 0 to 512 [ 173.134293][ T6462] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 174.018542][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 174.127171][ T6471] loop4: detected capacity change from 0 to 512 [ 174.170974][ T6471] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 175.003221][ T6477] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 175.262165][ T6471] EXT4-fs (loop4): 1 truncate cleaned up [ 175.295668][ T6454] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 175.313287][ T6471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.336696][ T6454] FAT-fs (loop0): Filesystem has been set read-only [ 175.547265][ T6486] tipc: Failed to obtain node identity [ 175.582962][ T6486] tipc: Enabling of bearer rejected, failed to enable media [ 176.046264][ T6489] netlink: 'syz.3.120': attribute type 10 has an invalid length. [ 176.411745][ T6489] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 176.578507][ T6015] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.733793][ T6514] comedi comedi3: aio_iiro_16: I/O port conflict (0x800100,8) [ 180.389308][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 180.443501][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 180.497848][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 180.550487][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 180.629452][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 180.739657][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 180.830106][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 180.873043][ T5836] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 180.884878][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 180.977217][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 181.685977][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 181.717421][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 181.955146][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 181.998421][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.042748][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.092024][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.166768][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.181430][ T5836] usb 5-1: config 0 has no interfaces? [ 182.188672][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.196129][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.210124][ T5836] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 182.227768][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.242151][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.296180][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.360305][ T5836] usb 5-1: config 0 descriptor?? [ 182.409115][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.512259][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.619070][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.725121][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.890440][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.898441][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.906709][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.920275][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.931141][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 182.950576][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.04 Device [syz1] on syz1 [ 183.109371][ T5836] usb 5-1: can't set config #0, error -71 [ 183.131576][ T6546] loop0: detected capacity change from 0 to 8 [ 183.164330][ T5836] usb 5-1: USB disconnect, device number 2 [ 183.227824][ T5780] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 183.299860][ T6552] netlink: 'syz.3.133': attribute type 1 has an invalid length. [ 183.543953][ T6552] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.133'. [ 183.762550][ T6547] fido_id[6547]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 184.497088][ T6549] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 184.642802][ T6552] loop3: detected capacity change from 0 to 4096 [ 184.650902][ T6549] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 184.742028][ T6553] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 185.480582][ T6571] syzkaller0: entered promiscuous mode [ 185.510084][ T6571] syzkaller0: entered allmulticast mode [ 186.979267][ T6581] loop0: detected capacity change from 0 to 1024 [ 187.016988][ T6571] tipc: Started in network mode [ 187.019743][ T6581] ======================================================= [ 187.019743][ T6581] WARNING: The mand mount option has been deprecated and [ 187.019743][ T6581] and is ignored by this kernel. Remove the mand [ 187.019743][ T6581] option from the mount to silence this warning. [ 187.019743][ T6581] ======================================================= [ 187.047794][ T6571] tipc: Node identity c674de48aca1, cluster identity 4711 [ 187.104850][ T6581] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 187.104850][ T6581] [ 187.118054][ T6571] tipc: Enabled bearer , priority 0 [ 187.182921][ T6570] tipc: Resetting bearer [ 187.224569][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 187.467578][ T6570] tipc: Disabling bearer [ 187.528056][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.138'. [ 188.211405][ T6593] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 189.154963][ T6613] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 189.164416][ T6613] overlayfs: missing 'lowerdir' [ 189.254816][ T6614] mmap: syz.3.143 (6614) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 192.338706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 195.683178][ T5762] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 196.953768][ T6657] netlink: 24 bytes leftover after parsing attributes in process `syz.2.152'. [ 198.555306][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.570909][ T6673] misc userio: Invalid payload size [ 198.583594][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.838686][ T6674] netlink: 120 bytes leftover after parsing attributes in process `syz.4.155'. [ 199.473607][ T6679] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 199.482648][ T6679] overlayfs: missing 'lowerdir' [ 200.817157][ T6689] NILFS (nullb0): couldn't find nilfs on the device [ 202.078147][ T6692] loop4: detected capacity change from 0 to 128 [ 203.260020][ T6700] loop0: detected capacity change from 0 to 32768 [ 203.633767][ T28] audit: type=1326 audit(1783750626.296:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 203.790532][ T6700] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 203.876477][ T28] audit: type=1326 audit(1783750626.296:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 204.268938][ T28] audit: type=1326 audit(1783750626.296:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 204.510156][ T28] audit: type=1326 audit(1783750626.296:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 204.703109][ T6700] XFS (loop0): Ending clean mount [ 204.723003][ T28] audit: type=1326 audit(1783750626.296:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 204.814684][ T6715] netlink: 'syz.4.160': attribute type 24 has an invalid length. [ 204.830637][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 204.839586][ T6715] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 204.850607][ T28] audit: type=1326 audit(1783750626.305:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 204.885321][ T6700] XFS (loop0): Quotacheck needed: Please wait. [ 204.921505][ T28] audit: type=1326 audit(1783750626.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 204.965995][ T28] audit: type=1326 audit(1783750626.305:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 205.011430][ T6700] XFS (loop0): Quotacheck: Done. [ 205.028615][ T28] audit: type=1326 audit(1783750626.305:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 205.249749][ T28] audit: type=1326 audit(1783750626.305:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6691 comm="syz.4.159" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feaf359de59 code=0x7ffc0000 [ 205.684119][ T6721] loop2: detected capacity change from 0 to 128 [ 205.963408][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 206.038674][ T6721] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.092921][ T6721] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.738281][ T5772] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 209.609419][ T6745] misc userio: Invalid payload size [ 209.707845][ T6745] netlink: 120 bytes leftover after parsing attributes in process `syz.3.166'. [ 210.455456][ T6750] process 'syz.2.165' launched '/dev/fd/6' with NULL argv: empty string added [ 211.610337][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 211.617165][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 211.623620][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 212.195965][ T6763] Cannot find add_set index 0 as target [ 214.312286][ T6782] xt_l2tp: unknown flags: 17 [ 216.126299][ T6785] Bluetooth: MGMT ver 1.22 [ 216.135106][ T6785] hsr0: entered promiscuous mode [ 216.177409][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 216.260103][ T6785] hsr_slave_0: left promiscuous mode [ 217.311340][ T6785] hsr_slave_1: left promiscuous mode [ 219.097261][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.188'. [ 219.949907][ T6832] 9pnet_fd: Insufficient options for proto=fd [ 220.099455][ T6832] warning: `syz.0.181' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 220.177535][ T6832] netlink: 'syz.0.181': attribute type 10 has an invalid length. [ 220.547804][ T6832] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 220.781158][ T6832] team0: Port device netdevsim0 added [ 222.576908][ T6848] loop2: detected capacity change from 0 to 4096 [ 222.615949][ T6848] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.683667][ T6848] EXT4-fs (loop2): Test dummy encryption mode enabled [ 222.748970][ T6848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.107677][ T6860] NILFS (nullb0): couldn't find nilfs on the device [ 223.605899][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 223.605919][ T28] audit: type=1800 audit(1783750645.807:29): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.186" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 223.996527][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.807073][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 226.571860][ T6884] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 227.265933][ T6891] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 227.275081][ T6891] overlayfs: missing 'lowerdir' [ 227.805694][ T6890] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 232.384865][ T6915] hsr0: entered promiscuous mode [ 232.392789][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 232.588475][ T6915] hsr_slave_0: left promiscuous mode [ 232.595451][ T6915] hsr_slave_1: left promiscuous mode [ 234.446869][ T6929] loop4: detected capacity change from 0 to 128 [ 234.738013][ T6929] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 235.017418][ T6929] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.547866][ T6015] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.721768][ T6954] loop3: detected capacity change from 0 to 128 [ 238.074419][ T6958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.211'. [ 238.374280][ T28] audit: type=1326 audit(1783750659.589:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 238.809407][ T28] audit: type=1326 audit(1783750659.589:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 238.833560][ T28] audit: type=1326 audit(1783750659.589:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 238.857504][ T28] audit: type=1326 audit(1783750659.589:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 238.881579][ T28] audit: type=1326 audit(1783750659.589:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 238.906161][ T28] audit: type=1326 audit(1783750659.589:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 238.930280][ T28] audit: type=1326 audit(1783750659.589:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 239.019064][ T28] audit: type=1326 audit(1783750659.589:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 239.251797][ T28] audit: type=1326 audit(1783750659.589:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 239.615138][ T28] audit: type=1326 audit(1783750659.598:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6953 comm="syz.3.203" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 242.106449][ T6987] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 242.115611][ T6987] overlayfs: missing 'lowerdir' [ 243.105601][ T6976] netlink: 'syz.3.207': attribute type 10 has an invalid length. [ 243.113545][ T6976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.207'. [ 243.406297][ T6976] team0: Port device geneve0 added [ 243.519398][ T6996] NILFS (nullb0): couldn't find nilfs on the device [ 244.431643][ T7005] loop2: detected capacity change from 0 to 128 [ 244.469373][ T7002] hsr0: entered promiscuous mode [ 244.493958][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.212'. [ 244.595815][ T7002] hsr_slave_0: left promiscuous mode [ 244.603055][ T7002] hsr_slave_1: left promiscuous mode [ 244.959516][ T7016] NILFS (nullb0): couldn't find nilfs on the device [ 245.796628][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 245.796649][ T28] audit: type=1326 audit(1783750666.511:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.106182][ T28] audit: type=1326 audit(1783750666.529:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.590142][ T28] audit: type=1326 audit(1783750666.529:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.614548][ T28] audit: type=1326 audit(1783750666.529:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.640031][ T28] audit: type=1326 audit(1783750666.529:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.667326][ T28] audit: type=1326 audit(1783750666.529:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.692850][ T28] audit: type=1326 audit(1783750666.539:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.717405][ T28] audit: type=1326 audit(1783750666.539:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.743258][ T28] audit: type=1326 audit(1783750666.539:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.786325][ T28] audit: type=1326 audit(1783750666.539:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7004 comm="syz.2.214" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f987359de59 code=0x7ffc0000 [ 246.896449][ T8] IPVS: starting estimator thread 0... [ 247.197233][ T7028] IPVS: using max 17 ests per chain, 40800 per kthread [ 249.051583][ T7050] loop0: detected capacity change from 0 to 128 [ 249.143469][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.218'. [ 250.170881][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 250.311245][ T7050] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 250.369009][ T5084] Bluetooth: hci0: unexpected event for opcode 0x0c7c [ 250.409492][ T7050] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.157677][ T7079] netlink: 'syz.4.223': attribute type 10 has an invalid length. [ 251.167305][ T7079] netlink: 40 bytes leftover after parsing attributes in process `syz.4.223'. [ 251.260342][ T7079] team0: Port device geneve0 added [ 252.502894][ T5774] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.791666][ T7104] NILFS (nullb0): couldn't find nilfs on the device [ 255.220223][ T7106] xt_hashlimit: max too large, truncated to 1048576 [ 255.793730][ T5818] IPVS: starting estimator thread 0... [ 256.041094][ T7108] IPVS: using max 19 ests per chain, 45600 per kthread [ 257.565730][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 260.346612][ T7141] xt_CT: No such helper "pptp" [ 263.491188][ T7164] ubi0: attaching mtd0 [ 263.511443][ T7164] ubi0: scanning is finished [ 263.516265][ T7164] ubi0: empty MTD device detected [ 263.996686][ T7164] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 264.131455][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.138013][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 271.035939][ T7218] Cannot find del_set index 0 as target [ 273.510183][ T7232] loop0: detected capacity change from 0 to 512 [ 273.857301][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 273.857353][ T28] audit: type=1800 audit(1783750692.982:76): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.255" name="file0" dev="overlay" ino=424 res=0 errno=0 [ 274.167095][ T7232] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.250: corrupted inode contents [ 274.219481][ T7232] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 274.238397][ T7232] EXT4-fs error (device loop0): ext4_do_update_inode:5255: inode #15: comm syz.0.250: corrupted inode contents [ 274.256233][ T7232] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.250: mark_inode_dirty error [ 274.273039][ T7232] EXT4-fs (loop0): 1 orphan inode deleted [ 274.284115][ T7232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.309729][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.341059][ T7282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.214732][ T7286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.261'. [ 282.606712][ T7306] Bluetooth: MGMT ver 1.22 [ 282.612470][ T7306] Bluetooth: hci0: unsupported parameter 255 [ 282.618798][ T7306] Bluetooth: hci0: unsupported parameter 255 [ 283.741644][ T7314] syz.2.265 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 285.409172][ T7326] loop2: detected capacity change from 0 to 512 [ 285.410727][ T7326] EXT4-fs: Ignoring removed orlov option [ 286.935341][ T7326] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 287.933931][ T7326] EXT4-fs (loop2): 1 truncate cleaned up [ 287.941646][ T7326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.180298][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.723559][ T28] audit: type=1800 audit(1783750709.539:77): pid=7350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.272" name="file0" dev="overlay" ino=431 res=0 errno=0 [ 296.340722][ T7383] loop0: detected capacity change from 0 to 32768 [ 296.408594][ T7383] JBD2: Ignoring recovery information on journal [ 296.663011][ T7383] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 296.763968][ T5836] IPVS: starting estimator thread 0... [ 297.068824][ T7392] IPVS: using max 19 ests per chain, 45600 per kthread [ 299.650349][ T7401] netlink: 96 bytes leftover after parsing attributes in process `syz.3.282'. [ 300.161633][ T7404] loop3: detected capacity change from 0 to 128 [ 300.201839][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 300.275090][ T7404] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.320670][ T7404] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 301.091927][ T7413] syz.3.283 (pid 7413) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 301.413791][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 303.711139][ T7429] loop3: detected capacity change from 0 to 8192 [ 308.402019][ T7453] IPVS: ip_vs_add_dest(): server weight less than zero [ 311.279446][ T7466] NILFS (nullb0): couldn't find nilfs on the device [ 312.090648][ T51] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 317.055081][ T7503] loop4: detected capacity change from 0 to 16 [ 317.077889][ T7503] erofs: (device loop4): mounted with root inode @ nid 36. [ 319.131504][ T7512] tty tty29: ldisc open failed (-12), clearing slot 28 [ 321.022216][ T7536] loop2: detected capacity change from 0 to 512 [ 321.045187][ T7536] EXT4-fs: Ignoring removed bh option [ 321.253987][ T7536] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 321.672692][ T7536] EXT4-fs (loop2): 1 truncate cleaned up [ 321.779064][ T7536] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.141377][ T7543] NILFS (nullb0): couldn't find nilfs on the device [ 322.940195][ T28] audit: type=1326 audit(1783750738.929:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7540 comm="syz.4.315" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feaf359de59 code=0x0 [ 323.161169][ T7549] IPVS: Error connecting to the multicast addr [ 324.326454][ T5772] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.521081][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.318'. [ 327.603782][ T7565] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.613036][ T7565] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.807887][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 330.213393][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 332.115206][ T7592] qrtr: Invalid version 0 [ 333.013375][ T7588] loop4: detected capacity change from 0 to 1024 [ 333.116318][ T7588] hfsplus: unable to parse mount options [ 335.347933][ T28] audit: type=1326 audit(1783750750.612:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.2.328" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f987359de59 code=0x0 [ 336.335642][ T28] audit: type=1326 audit(1783750751.539:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.338" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3e6b9de59 code=0x0 [ 337.071719][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 337.418434][ T7625] syz.4.339 (7625) used greatest stack depth: 15656 bytes left [ 341.018985][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.137988][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.170276][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.212063][ T7643] loop3: detected capacity change from 0 to 16 [ 341.242852][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.251127][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.273578][ T7643] erofs: (device loop3): mounted with root inode @ nid 36. [ 341.281943][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.293899][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.304936][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.315294][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 341.325026][ T7641] netlink: 'syz.0.332': attribute type 3 has an invalid length. [ 343.038003][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.335'. [ 343.303527][ T7659] loop0: detected capacity change from 0 to 736 [ 343.363167][ T5782] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 343.416582][ T7657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.956898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.108115][ T7700] syz.3.350: attempt to access beyond end of device [ 351.108115][ T7700] loop3: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 351.122168][ T7700] gfs2: error 10 reading superblock [ 356.096022][ T7713] netlink: 36 bytes leftover after parsing attributes in process `syz.2.354'. [ 356.798989][ T7715] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 357.229010][ T7721] loop2: detected capacity change from 0 to 16 [ 358.483739][ T7721] erofs: (device loop2): mounted with root inode @ nid 36. [ 358.499180][ T7721] syz.2.356: attempt to access beyond end of device [ 358.499180][ T7721] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 358.532379][ T7721] syz.2.356: attempt to access beyond end of device [ 358.532379][ T7721] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 358.548574][ T7721] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 358.604376][ T28] audit: type=1800 audit(1783750772.323:81): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.356" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 363.953821][ T7741] xt_TPROXY: Can be used only with -p tcp or -p udp [ 366.006210][ T7761] lo speed is unknown, defaulting to 1000 [ 366.012844][ T7761] lo speed is unknown, defaulting to 1000 [ 366.034313][ T7761] lo speed is unknown, defaulting to 1000 [ 366.065899][ T7761] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 366.113794][ T7761] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 366.263495][ T7761] lo speed is unknown, defaulting to 1000 [ 366.277720][ T7761] lo speed is unknown, defaulting to 1000 [ 367.055504][ T7763] Timeout policy `syz1' can only be used by L3 protocol number 34825 [ 367.849246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 368.135552][ T7761] lo speed is unknown, defaulting to 1000 [ 368.149667][ T7761] lo speed is unknown, defaulting to 1000 [ 369.110638][ T970] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 369.409609][ T970] usb 3-1: Using ep0 maxpacket: 32 [ 369.530696][ T970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.684423][ T970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.956368][ T970] usb 3-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 370.091719][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.239963][ T970] usb 3-1: Product: syz [ 370.304194][ T970] usb 3-1: Manufacturer: syz [ 370.449401][ T970] usb 3-1: SerialNumber: syz [ 370.937081][ T970] usb 3-1: can't set config #1, error -71 [ 371.001636][ T970] usb 3-1: USB disconnect, device number 3 [ 371.011535][ T5782] udevd[5782]: setting owner of /dev/bus/usb/003/003 to uid=0, gid=0 failed: No such file or directory [ 371.067972][ T7778] validate_nla: 44 callbacks suppressed [ 371.068016][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 371.104415][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 371.134203][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 371.161807][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 371.195563][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 371.529215][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 371.795293][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 372.076006][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 372.084276][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 372.092917][ T7778] netlink: 'syz.4.368': attribute type 3 has an invalid length. [ 372.715375][ T7790] syz.2.370: attempt to access beyond end of device [ 372.715375][ T7790] loop2: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 372.728951][ T7790] gfs2: error 10 reading superblock [ 375.221219][ T7800] loop4: detected capacity change from 0 to 512 [ 375.306933][ T7800] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 375.348330][ T7800] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 375.650787][ T7800] EXT4-fs error (device loop4): __ext4_get_inode_loc:4496: comm syz.4.374: Invalid inode table block 1 in block_group 0 [ 376.524897][ T7800] EXT4-fs (loop4): get root inode failed [ 376.532197][ T7800] EXT4-fs (loop4): mount failed [ 379.050247][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.835243][ T7828] ubi0: attaching mtd0 [ 379.848997][ T7828] ubi0: scanning is finished [ 380.575197][ T7828] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 381.971940][ T28] audit: type=1326 audit(1783750794.238:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7836 comm="syz.0.380" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00699de59 code=0x0 [ 387.894564][ T7882] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 387.930482][ T7882] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 390.030201][ T7883] input: syz1 as /devices/virtual/input/input10 [ 390.369632][ T7897] loop2: detected capacity change from 0 to 128 [ 390.584303][ T7897] FAT-fs (loop2): Directory bread(block 414) failed [ 390.591923][ T7897] FAT-fs (loop2): Directory bread(block 415) failed [ 390.598800][ T7897] FAT-fs (loop2): Directory bread(block 416) failed [ 390.605834][ T7897] FAT-fs (loop2): Directory bread(block 417) failed [ 390.613175][ T7897] FAT-fs (loop2): Directory bread(block 418) failed [ 390.620304][ T7897] FAT-fs (loop2): Directory bread(block 419) failed [ 390.627359][ T7897] FAT-fs (loop2): Directory bread(block 420) failed [ 390.634414][ T7897] FAT-fs (loop2): Directory bread(block 421) failed [ 391.139957][ T28] audit: type=1326 audit(1783750802.819:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.395" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff3e6b9de59 code=0x0 [ 395.725931][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 395.744596][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.941297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 398.875773][ T7953] xt_TPROXY: Can be used only with -p tcp or -p udp [ 399.419924][ T7962] futex_wake_op: syz.4.409 tries to shift op by 144; fix this program [ 403.456223][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 404.347169][ T7978] ipt_REJECT: ECHOREPLY no longer supported. [ 406.586111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 408.119620][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 408.531317][ T7993] tipc: Can't bind to reserved service type 1 [ 412.027066][ T5084] Bluetooth: Unexpected start frame (len 12) [ 414.515285][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 414.921118][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 415.703796][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 415.723009][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 415.737170][ T5836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1280, setting to 1024 [ 415.749032][ T5836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 415.761031][ T5836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 415.806411][ T5836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 416.151021][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.618543][ T5836] usb 1-1: GET_CAPABILITIES returned 0 [ 416.983701][ T8031] loop4: detected capacity change from 0 to 1024 [ 417.090535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 418.297502][ T5836] usbtmc 1-1:16.0: can't read capabilities [ 418.389626][ T8035] netlink: 'syz.2.432': attribute type 11 has an invalid length. [ 419.801459][ T27] usb 1-1: USB disconnect, device number 2 [ 422.894188][ T8067] binder: 8064:8067 ioctl 4018620d 0 returned -22 [ 422.973541][ T8069] loop4: detected capacity change from 0 to 512 [ 423.008952][ T8069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 424.850896][ T6015] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.441726][ T8083] befs: (nullb0): invalid magic header [ 426.398093][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 426.833426][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.844233][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 426.854118][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.866526][ T23] usb 4-1: config 0 descriptor?? [ 426.878532][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 427.701568][ C1] hrtimer: interrupt took 47932 ns [ 427.713399][ T8081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.723008][ T8081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.913834][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 427.960354][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 428.588532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 428.812932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 429.005273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 430.992438][ T23] pwc: recv_control_msg error -71 req 04 val 1000 [ 431.001637][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 431.021850][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 431.046865][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 431.054654][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 431.099000][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 431.118796][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 431.134312][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 431.151392][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 431.334998][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 431.350985][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 431.351334][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 433.325313][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 433.339101][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 434.975976][ T23] pwc: Registered as video103. [ 435.050970][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 435.408406][ T23] usb 4-1: USB disconnect, device number 2 [ 441.141658][ T8139] loop3: detected capacity change from 0 to 32768 [ 445.831850][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 12 > 11 [ 448.716636][ T8183] validate_nla: 43 callbacks suppressed [ 448.716703][ T8183] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 449.937026][ T8185] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.024961][ T8185] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.080384][ T8185] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 450.227925][ T8185] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 451.000151][ T8199] xt_l2tp: v2 sid > 0xffff: 117440512 [ 451.216661][ T8185] bond1: (slave geneve2): making interface the new active one [ 451.324911][ T8185] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 451.526230][ T8191] netlink: 28 bytes leftover after parsing attributes in process `syz.0.466'. [ 451.682661][ T8191] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.813732][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.828766][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 451.856354][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.942110][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.274670][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.286477][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.366440][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 452.899335][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.948760][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.961471][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.001936][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 453.016856][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.027669][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.058004][ T8183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.068907][ T8183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.715954][ T5836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 454.957803][ T5836] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 455.072143][ T5836] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 455.136102][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 455.998963][ T8235] netlink: 'syz.3.479': attribute type 9 has an invalid length. [ 456.226684][ T5836] usb 5-1: Product: syz [ 456.230947][ T5836] usb 5-1: Manufacturer: syz [ 456.239287][ T5836] usb 5-1: SerialNumber: syz [ 457.552447][ T8243] loop3: detected capacity change from 0 to 64 [ 457.708295][ T28] audit: type=1800 audit(1783750865.096:84): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.481" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 457.744799][ T5836] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 458.073185][ T5836] usb 5-1: USB disconnect, device number 3 [ 459.738451][ T5836] usblp0: removed [ 461.550909][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 461.567815][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 462.462941][ T8260] netlink: 'syz.2.487': attribute type 1 has an invalid length. [ 463.518470][ T8260] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 463.528332][ T8260] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 463.537619][ T8260] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 463.546742][ T8260] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 463.558884][ T8260] bond1: (slave geneve2): making interface the new active one [ 463.572643][ T8260] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 463.591977][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.2.487'. [ 463.625060][ T8265] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.028445][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.042363][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.058102][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.080297][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.105062][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 464.138580][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.707577][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.754407][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.798683][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.828696][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.839133][ T8266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.857157][ T8266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 465.045116][ T8273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.488'. [ 465.065739][ T8275] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 465.075211][ T8275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 465.084944][ T8275] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 467.872458][ T8303] xt_l2tp: v2 sid > 0xffff: 117440512 [ 472.063286][ T5084] Bluetooth: hci1: unexpected event for opcode 0x0c26 [ 477.157043][ T5762] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 477.381788][ T5762] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 477.461979][ T5762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 477.520657][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 477.650387][ T5762] usb 1-1: Product: syz [ 477.674847][ T5762] usb 1-1: Manufacturer: syz [ 477.717836][ T5762] usb 1-1: SerialNumber: syz [ 478.154563][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.259641][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.418014][ T5762] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 479.812378][ T8372] loop2: detected capacity change from 0 to 1024 [ 481.076417][ T23] usb 1-1: USB disconnect, device number 3 [ 481.196614][ T23] usblp0: removed [ 485.259677][ T8388] syz.3.511: attempt to access beyond end of device [ 485.259677][ T8388] loop7: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 485.274192][ T8388] SQUASHFS error: Failed to read block 0x0: -5 [ 489.042112][ T8419] loop3: detected capacity change from 0 to 1024 [ 489.066504][ T28] audit: type=1326 audit(1783750894.453:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 489.095421][ T28] audit: type=1326 audit(1783750894.453:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 489.181017][ T28] audit: type=1326 audit(1783750894.481:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 489.206428][ T28] audit: type=1326 audit(1783750894.481:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 490.033375][ T28] audit: type=1326 audit(1783750894.481:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 490.164340][ T28] audit: type=1326 audit(1783750894.481:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 490.342870][ T28] audit: type=1326 audit(1783750894.481:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 490.351777][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 490.375287][ T28] audit: type=1326 audit(1783750894.490:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 490.429045][ T28] audit: type=1326 audit(1783750894.490:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 490.465289][ T8419] loop3: detected capacity change from 0 to 512 [ 492.036149][ T5084] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 492.072889][ T5762] libceph: connect (1)[c::]:6789 error -101 [ 492.079553][ T28] audit: type=1326 audit(1783750894.490:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8418 comm="syz.3.520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7ff3e6b9de59 code=0x7ffc0000 [ 493.022384][ T5762] libceph: mon0 (1)[c::]:6789 connect error [ 493.206486][ T8419] EXT4-fs warning (device loop3): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop3. [ 493.307914][ T23] libceph: connect (1)[c::]:6789 error -101 [ 493.320189][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 493.376903][ T8440] ceph: No mds server is up or the cluster is laggy [ 493.582489][ T8450] binder: 8447:8450 ioctl c0306201 200000000240 returned -14 [ 493.726985][ T8451] loop3: detected capacity change from 0 to 128 [ 493.857941][ T8451] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 493.984982][ T8459] futex_wake_op: syz.2.526 tries to shift op by 144; fix this program [ 495.325954][ T8451] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 497.410612][ T5773] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 502.839449][ T8512] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 502.846024][ T8512] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 502.882328][ T8512] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 502.889389][ T8512] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 502.939220][ T8512] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 502.945740][ T8512] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 506.309702][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 506.314051][ T5084] Bluetooth: hci2: command 0x0c1a tx timeout [ 506.326552][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 506.332776][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 506.341533][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 506.775607][ T8554] bridge_slave_1: left allmulticast mode [ 506.785554][ T8554] bridge_slave_1: left promiscuous mode [ 506.811568][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.661362][ T8554] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 508.587712][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 508.594061][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 514.567208][ T8216] ================================================================== [ 514.575342][ T8216] BUG: KASAN: slab-use-after-free in __io_req_complete_post+0x7a2/0x10b0 [ 514.584000][ T8216] Read of size 8 at addr ffff888022cf42d8 by task kworker/1:4/8216 [ 514.591970][ T8216] [ 514.594357][ T8216] CPU: 1 PID: 8216 Comm: kworker/1:4 Not tainted syzkaller #0 [ 514.601839][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.612006][ T8216] Workqueue: events ublk_stop_work_fn [ 514.617617][ T8216] Call Trace: [ 514.620978][ T8216] [ 514.623999][ T8216] dump_stack_lvl+0x18c/0x250 [ 514.628848][ T8216] ? __lock_acquire+0x7d80/0x7d80 [ 514.633938][ T8216] ? show_regs_print_info+0x20/0x20 [ 514.639188][ T8216] ? load_image+0x420/0x420 [ 514.643761][ T8216] ? __virt_addr_valid+0x10c/0x380 [ 514.648905][ T8216] ? __virt_addr_valid+0x10c/0x380 [ 514.654251][ T8216] ? __virt_addr_valid+0x10c/0x380 [ 514.659414][ T8216] print_report+0xa8/0x210 [ 514.663878][ T8216] ? __io_req_complete_post+0x7a2/0x10b0 [ 514.669550][ T8216] kasan_report+0x117/0x150 [ 514.674143][ T8216] ? __io_req_complete_post+0x7a2/0x10b0 [ 514.679921][ T8216] __io_req_complete_post+0x7a2/0x10b0 [ 514.685599][ T8216] io_uring_cmd_done+0x266/0x390 [ 514.690567][ T8216] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 514.696592][ T8216] ? do_raw_spin_unlock+0x121/0x230 [ 514.701832][ T8216] ublk_cancel_dev+0x1f7/0x3a0 [ 514.706646][ T8216] ublk_stop_dev+0x367/0x410 [ 514.711445][ T8216] ? _raw_spin_unlock_irq+0x23/0x50 [ 514.716955][ T8216] ? process_scheduled_works+0x975/0x1600 [ 514.722719][ T8216] ? process_scheduled_works+0x975/0x1600 [ 514.728513][ T8216] process_scheduled_works+0xa60/0x1600 [ 514.734193][ T8216] ? worker_attach_to_pool+0x370/0x370 [ 514.739689][ T8216] ? assign_work+0x3cc/0x5d0 [ 514.744317][ T8216] worker_thread+0xa5e/0xfe0 [ 514.748943][ T8216] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 514.754882][ T8216] ? _raw_spin_unlock+0x40/0x40 [ 514.759770][ T8216] ? __kthread_parkme+0x71/0x1c0 [ 514.764753][ T8216] kthread+0x2fa/0x390 [ 514.768850][ T8216] ? pr_cont_work+0x550/0x550 [ 514.773564][ T8216] ? kthread_blkcg+0xd0/0xd0 [ 514.778359][ T8216] ret_from_fork+0x48/0x80 [ 514.782812][ T8216] ? kthread_blkcg+0xd0/0xd0 [ 514.787528][ T8216] ret_from_fork_asm+0x11/0x20 [ 514.792371][ T8216] [ 514.795467][ T8216] [ 514.797821][ T8216] Allocated by task 8562: [ 514.802213][ T8216] kasan_set_track+0x4e/0x70 [ 514.806829][ T8216] __kasan_kmalloc+0x8f/0xa0 [ 514.811445][ T8216] io_ring_ctx_alloc+0x54/0xc10 [ 514.816346][ T8216] io_uring_create+0x2df/0x1330 [ 514.821227][ T8216] __se_sys_io_uring_setup+0x29f/0x2b0 [ 514.826807][ T8216] do_syscall_64+0x55/0xb0 [ 514.831341][ T8216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.837351][ T8216] [ 514.839996][ T8216] Freed by task 11: [ 514.843819][ T8216] kasan_set_track+0x4e/0x70 [ 514.848440][ T8216] kasan_save_free_info+0x28/0x40 [ 514.853500][ T8216] ____kasan_slab_free+0x126/0x1f0 [ 514.858729][ T8216] slab_free_freelist_hook+0x130/0x1a0 [ 514.864391][ T8216] __kmem_cache_free+0xba/0x1f0 [ 514.869276][ T8216] io_ring_exit_work+0x7a6/0x830 [ 514.874244][ T8216] process_scheduled_works+0xa60/0x1600 [ 514.879818][ T8216] worker_thread+0xa5e/0xfe0 [ 514.884440][ T8216] kthread+0x2fa/0x390 [ 514.888533][ T8216] ret_from_fork+0x48/0x80 [ 514.892989][ T8216] ret_from_fork_asm+0x11/0x20 [ 514.897788][ T8216] [ 514.900137][ T8216] Last potentially related work creation: [ 514.905908][ T8216] kasan_save_stack+0x3e/0x60 [ 514.910613][ T8216] __kasan_record_aux_stack+0xaf/0xc0 [ 514.916188][ T8216] insert_work+0x3d/0x310 [ 514.920638][ T8216] __queue_work+0xbfd/0xfd0 [ 514.925169][ T8216] queue_work_on+0x128/0x1f0 [ 514.929784][ T8216] io_ring_ctx_wait_and_kill+0x256/0x2b0 [ 514.935452][ T8216] io_uring_release+0x42/0x50 [ 514.940244][ T8216] __fput+0x221/0x940 [ 514.944250][ T8216] task_work_run+0x1d4/0x260 [ 514.948874][ T8216] do_exit+0x986/0x2530 [ 514.953066][ T8216] do_group_exit+0x22d/0x2f0 [ 514.957773][ T8216] __x64_sys_exit_group+0x3f/0x40 [ 514.962831][ T8216] do_syscall_64+0x55/0xb0 [ 514.967281][ T8216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.973333][ T8216] [ 514.975686][ T8216] The buggy address belongs to the object at ffff888022cf4000 [ 514.975686][ T8216] which belongs to the cache kmalloc-4k of size 4096 [ 514.989826][ T8216] The buggy address is located 728 bytes inside of [ 514.989826][ T8216] freed 4096-byte region [ffff888022cf4000, ffff888022cf5000) [ 515.004255][ T8216] [ 515.006603][ T8216] The buggy address belongs to the physical page: [ 515.013082][ T8216] page:ffffea00008b3c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22cf0 [ 515.023259][ T8216] head:ffffea00008b3c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 515.032226][ T8216] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 515.040232][ T8216] page_type: 0xffffffff() [ 515.044592][ T8216] raw: 00fff00000000840 ffff888017c42140 ffffea000090b800 dead000000000002 [ 515.053285][ T8216] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 515.061884][ T8216] page dumped because: kasan: bad access detected [ 515.068312][ T8216] page_owner tracks the page as allocated [ 515.074046][ T8216] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5139, tgid 5139 (udevd), ts 88845771112, free_ts 88333586913 [ 515.095540][ T8216] post_alloc_hook+0x1c1/0x200 [ 515.100486][ T8216] get_page_from_freelist+0x2181/0x22a0 [ 515.106071][ T8216] __alloc_pages+0x1f0/0x460 [ 515.110688][ T8216] alloc_slab_page+0x5d/0x180 [ 515.115395][ T8216] new_slab+0x87/0x2d0 [ 515.119494][ T8216] ___slab_alloc+0xc5c/0x12f0 [ 515.124204][ T8216] __kmem_cache_alloc_node+0x11f/0x250 [ 515.129695][ T8216] __kmalloc+0xa7/0x240 [ 515.133882][ T8216] tomoyo_realpath_from_path+0xe6/0x5c0 [ 515.139511][ T8216] tomoyo_check_open_permission+0x224/0x460 [ 515.145523][ T8216] security_file_open+0x62/0xa0 [ 515.150428][ T8216] do_dentry_open+0x32b/0x14b0 [ 515.155230][ T8216] path_openat+0x284f/0x3270 [ 515.159844][ T8216] do_filp_open+0x1f2/0x430 [ 515.164376][ T8216] do_sys_openat2+0x134/0x1d0 [ 515.169082][ T8216] __x64_sys_openat+0x139/0x160 [ 515.173960][ T8216] page last free stack trace: [ 515.178655][ T8216] free_unref_page_prepare+0x7d7/0x8f0 [ 515.184149][ T8216] free_unref_page+0x32/0x2e0 [ 515.188859][ T8216] __unfreeze_partials+0x1cf/0x210 [ 515.194000][ T8216] put_cpu_partial+0x17c/0x250 [ 515.198788][ T8216] __slab_free+0x319/0x400 [ 515.203227][ T8216] qlist_free_all+0x75/0xd0 [ 515.207766][ T8216] kasan_quarantine_reduce+0x143/0x160 [ 515.213343][ T8216] __kasan_slab_alloc+0x22/0x80 [ 515.218224][ T8216] slab_post_alloc_hook+0x6a/0x4d0 [ 515.223376][ T8216] __kmem_cache_alloc_node+0x194/0x250 [ 515.228872][ T8216] __kmalloc_node_track_caller+0xa4/0x230 [ 515.234718][ T8216] kmalloc_reserve+0x116/0x240 [ 515.239598][ T8216] __alloc_skb+0x138/0x2c0 [ 515.244047][ T8216] mld_newpack+0x14f/0xbf0 [ 515.248565][ T8216] add_grec+0x1409/0x1910 [ 515.252931][ T8216] mld_send_initial_cr+0x22d/0x4c0 [ 515.258075][ T8216] [ 515.260514][ T8216] Memory state around the buggy address: [ 515.266194][ T8216] ffff888022cf4180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.274291][ T8216] ffff888022cf4200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.282462][ T8216] >ffff888022cf4280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.290819][ T8216] ^ [ 515.297949][ T8216] ffff888022cf4300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.306466][ T8216] ffff888022cf4380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 515.314629][ T8216] ================================================================== [ 516.738957][ T8607] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 516.749404][ T8607] VFS: Can't find a romfs filesystem on dev nullb0. [ 516.749404][ T8607] [ 516.911821][ T8216] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 516.919079][ T8216] CPU: 1 PID: 8216 Comm: kworker/1:4 Not tainted syzkaller #0 [ 516.926548][ T8216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.936630][ T8216] Workqueue: events ublk_stop_work_fn [ 516.942039][ T8216] Call Trace: [ 516.945338][ T8216] [ 516.948281][ T8216] dump_stack_lvl+0x18c/0x250 [ 516.952980][ T8216] ? show_regs_print_info+0x20/0x20 [ 516.958281][ T8216] ? load_image+0x420/0x420 [ 516.962829][ T8216] panic+0x2ca/0x720 [ 516.966740][ T8216] ? bpf_jit_dump+0xd0/0xd0 [ 516.971252][ T8216] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 516.977245][ T8216] ? _raw_spin_unlock+0x40/0x40 [ 516.982107][ T8216] ? print_memory_metadata+0x314/0x400 [ 516.987591][ T8216] ? __io_req_complete_post+0x7a2/0x10b0 [ 516.993344][ T8216] check_panic_on_warn+0x84/0xa0 [ 516.998332][ T8216] ? __io_req_complete_post+0x7a2/0x10b0 [ 517.003990][ T8216] end_report+0x6f/0x130 [ 517.008257][ T8216] kasan_report+0x128/0x150 [ 517.012798][ T8216] ? __io_req_complete_post+0x7a2/0x10b0 [ 517.018481][ T8216] __io_req_complete_post+0x7a2/0x10b0 [ 517.023956][ T8216] io_uring_cmd_done+0x266/0x390 [ 517.028910][ T8216] ? io_uring_cmd_do_in_task_lazy+0x70/0x70 [ 517.034811][ T8216] ? do_raw_spin_unlock+0x121/0x230 [ 517.040022][ T8216] ublk_cancel_dev+0x1f7/0x3a0 [ 517.044798][ T8216] ublk_stop_dev+0x367/0x410 [ 517.049397][ T8216] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.054644][ T8216] ? process_scheduled_works+0x975/0x1600 [ 517.060634][ T8216] ? process_scheduled_works+0x975/0x1600 [ 517.066363][ T8216] process_scheduled_works+0xa60/0x1600 [ 517.071931][ T8216] ? worker_attach_to_pool+0x370/0x370 [ 517.077445][ T8216] ? assign_work+0x3cc/0x5d0 [ 517.082064][ T8216] worker_thread+0xa5e/0xfe0 [ 517.086682][ T8216] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 517.092603][ T8216] ? _raw_spin_unlock+0x40/0x40 [ 517.097468][ T8216] ? __kthread_parkme+0x71/0x1c0 [ 517.102416][ T8216] kthread+0x2fa/0x390 [ 517.106501][ T8216] ? pr_cont_work+0x550/0x550 [ 517.111192][ T8216] ? kthread_blkcg+0xd0/0xd0 [ 517.115791][ T8216] ret_from_fork+0x48/0x80 [ 517.120304][ T8216] ? kthread_blkcg+0xd0/0xd0 [ 517.124907][ T8216] ret_from_fork_asm+0x11/0x20 [ 517.129692][ T8216] [ 517.132930][ T8216] Kernel Offset: disabled [ 517.137283][ T8216] Rebooting in 86400 seconds..