last executing test programs: 31.278400196s ago: executing program 2 (id=74): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000440)=""/120, 0x78, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000001c0)=0x1) 30.346669385s ago: executing program 2 (id=80): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 29.483375634s ago: executing program 2 (id=82): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 26.405497231s ago: executing program 2 (id=85): bpf$PROG_LOAD(0x5, 0x0, 0x0) 23.716639443s ago: executing program 2 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) 20.588251276s ago: executing program 2 (id=94): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f00000014c0)=[{0x4, 0x4a00, 0x0, 0x0}, {0x0, 0x1a01, 0x0, 0x0}], 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) lremovexattr(0x0, 0x0) 20.327561914s ago: executing program 0 (id=96): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f00000006c0)=[{&(0x7f00000005c0)="23ccab", 0x3}], 0x1) 19.341876914s ago: executing program 4 (id=98): bpf$PROG_LOAD(0x5, 0x0, 0x0) 12.943836821s ago: executing program 3 (id=100): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = memfd_secret(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r3, 0x4) 12.462392744s ago: executing program 4 (id=101): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040044) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000005400)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) unshare(0x24020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r1, 0xffffffffffffffff, 0x2f, 0x2000, 0x4}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x4008014) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000001c0)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") fdatasync(0xffffffffffffffff) 12.406944296s ago: executing program 0 (id=102): setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xfffffeffffff3fbf, &(0x7f0000000140)={0xa, 0x4e22, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x13}}, 0xfffffffffffffda3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={0x0, 0x6, 0x8004}, 0x8) 11.933503999s ago: executing program 3 (id=104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102400, 0x19000) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000000)=""/142, &(0x7f00000000c0)=0x8e) dup2(r1, r1) 8.382992773s ago: executing program 3 (id=105): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x8a) sendfile(0xffffffffffffffff, r0, 0x0, 0x9) 8.382814739s ago: executing program 0 (id=106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 7.869863088s ago: executing program 4 (id=108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000ead300000000000000000a84000000060a0b04000000000000000002000000580004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000892800018008000100647570001c000280080001400000000c080002400000000208000140000000000900010073797a30000000000900020073797a32"], 0xac}}, 0x0) 7.610637295s ago: executing program 3 (id=109): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x5c3002, 0x184) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, r0, 0x36dee000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') 7.574466005s ago: executing program 0 (id=110): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe08d5718f5164b70}) 7.432781589s ago: executing program 1 (id=111): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x5, @empty, 0x80}}, 0x0, 0x0, 0x13a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc01005ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 7.174301292s ago: executing program 4 (id=112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x0, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.693065908s ago: executing program 0 (id=113): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x60cd894) 6.523188159s ago: executing program 1 (id=114): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048000}, 0x4048010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48890}, 0x0) 2.812782168s ago: executing program 32 (id=94): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f00000014c0)=[{0x4, 0x4a00, 0x0, 0x0}, {0x0, 0x1a01, 0x0, 0x0}], 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) listen(0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x7}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$read(0x0, &(0x7f0000001100)=""/4130, 0x48) socket(0x840000000002, 0x3, 0xff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) lremovexattr(0x0, 0x0) 2.715432158s ago: executing program 0 (id=116): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_clone(0x7821000, 0x0, 0x1d, 0x0, 0x0, 0x0) 2.678396517s ago: executing program 1 (id=117): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 2.634876363s ago: executing program 3 (id=118): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040044) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x8, &(0x7f0000005400)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) unshare(0x24020400) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r1, 0xffffffffffffffff, 0x2f, 0x2000, 0x4}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x4008014) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000001c0)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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") fdatasync(0xffffffffffffffff) 2.605214355s ago: executing program 4 (id=119): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x4c, &(0x7f0000000940)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0x0, &(0x7f0000000380)='net/dev_mcast\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680), 0x1, 0x5c8, &(0x7f00000006c0)="$eJzs3c9rFO8ZAPBndpNNNoW4avxRWzBYKKKo2Y3YFgpNi5QcRIRevIZmNcFNlGQtq4eSFv8Qe0hPHnopQunBg+ce/AcCPRYKPYZe8mVmZzerxphokt18/Xzw3XnffWeeeedx5mVnNrABfLNm78fwWiQxe/VOK21vrE83Ntanlzr1iBiJiEL2L4bS6r8jii8iJqNd4ocRkeThkk/t53Xt1YV3d1uX261CXrL1i7tttzdreYmZfJAzBxjv7VfHS7pHmAa93Qk+CLY+73+HuPviIcZmH5JP/F9UIsYiYjSfBzonbuFoR3fwBuYCBAAAgEN0YjM2oxXj/R4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCf57/8neSl06pORdH7/v5S/F3n9WHvT7wEAAAAAAAAAwAG4uBmb0YrxTnsryb7zv5Q1JrLXH8TTWI16rMT1aMVcNKMZK1GNiEpPoFJrrtlcqe5hy9qOW9aO5ngBAAAAAAAA4HvqzzG7/f0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMgiSi2F5kZaJTr0RhKCJGI6KUrrcW8c9O/Th70+8BAAAAwBE4sRmb0YrxTnsrye75z2b3/aPxNJajGYvRjEbUYz57FtC+6y9srE83Ntanl9Lycdxf/3dfw8giRvvZw857nsrWONPdYjZ+G7+LqzEZ92IlFuMPMRfNqMdk3M5qc5FEJX96UemMc+fxzrzXuve5sZ7PRlKOB7GYje16/D4eRyPmo5AdQ7bO7nv8U5qd5Fe5PeZoPl8mEcmP8iMbDJUsI8PdjEzluU+zcXL3TOzzPPlwT9UodJ9BTRxCzsfyZZrz0YHOea3n7Du7eyYirjX/fnGhsfxo4cHq1cE5pC/0YSamezJx7pvKRCnPRnsW3d9seSnbdjwW4248jvmox8/iVtSyMp0te/N6Zg/XWmF/19pPLueVUxFJub0cEGleT/bktXemq2R9ve9sZ+nUwc9IQxfySjEiGeqOaRB8mIlqTyZO756Jv2ylr6uN5UcrC3NP9ri/n+bLdG4eGai5uZSfvUNZ6/2zI+07vWNfNeub6PYVPuo70+373JVayj/DfRyplvWd27Gvvd35nr6dPuUAMPDGroyVyv8p/6v8svyivFC+M/qbkZ+P/LgUw2+H/lH8W+GvhV8mV+Jl/HH7/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhyq8+eP5prNOorKioqKt1Kv2cmjsKN5tKTG6vPnl9bXJp7WH9YX745Vaveuln9xc0bDxYb9an2a79HyWHZvuj7PRIAAAAAAAAAAAD24yj+nLTfxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDxMXs/htciierU9am0vbE+3UhLp769ZiEihtLl/yOKLyImo12i0hMu+dR+XtdeXXh3t3V5O1ahs35xt+32Zi0vMZMPcuYA47396nhJ9wjToLc7waHfvgsAAP//FQYeZg==") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 1.840522819s ago: executing program 1 (id=120): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 574.914056ms ago: executing program 3 (id=121): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0xda18, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x10, 0x0, 0x0, 0x1000, {[@md5sig={0x13, 0x12, "327ce5c42780ba3f36b456e37840d33b"}]}}}}}}}, 0x0) 555.356088ms ago: executing program 1 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000ead300000000000000000a84000000060a0b04000000000000000002000000580004802c0001800b000100736f636b657400001c000280080002400000000b080001400000000308000300000000892800018008000100647570001c000280080001400000000c080002400000000208000140000000000900010073797a30000000000900020073797a32"], 0xac}}, 0x0) 90.781396ms ago: executing program 4 (id=123): socket$inet(0x2, 0x1, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0x5011, 0x8, 0x8001, 0x40000332}, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 1 (id=124): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e24, 0x5, @empty, 0x80}}, 0x0, 0x0, 0x13a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc01005ace522fa788000000000033035551502f07b4001a00"}, 0xd8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 189.575400][ T5796] cgroup: Unknown subsys name 'net' [ 189.720084][ T5796] cgroup: Unknown subsys name 'cpuset' [ 189.735436][ T5796] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 195.862184][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 200.227512][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.235844][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.244919][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.253188][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.261567][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.270327][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.278871][ T5818] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.313452][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.323064][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 200.330710][ T5818] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.332853][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.341814][ T5818] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.349829][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.358700][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.362730][ T5824] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.371177][ T5818] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 200.386077][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 200.401703][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 200.427768][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 200.440156][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 200.512395][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.522259][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.532259][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.690911][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.721162][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.455264][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 202.290501][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.298079][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.305983][ T5813] bridge_slave_0: entered allmulticast mode [ 202.315761][ T5813] bridge_slave_0: entered promiscuous mode [ 202.450539][ T5818] Bluetooth: hci2: command tx timeout [ 202.456197][ T5818] Bluetooth: hci1: command tx timeout [ 202.464953][ T5820] Bluetooth: hci0: command tx timeout [ 202.519980][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.527494][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.535492][ T5813] bridge_slave_1: entered allmulticast mode [ 202.545025][ T5813] bridge_slave_1: entered promiscuous mode [ 202.545618][ T5818] Bluetooth: hci3: command tx timeout [ 202.705760][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 202.730680][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 202.780518][ T5818] Bluetooth: hci4: command tx timeout [ 202.876795][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.953349][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 202.984964][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.028638][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 203.343163][ T5813] team0: Port device team_slave_0 added [ 203.374162][ T5813] team0: Port device team_slave_1 added [ 203.669672][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.676918][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.703343][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.772795][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.780073][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.806449][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.824532][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.832184][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.839963][ T5816] bridge_slave_0: entered allmulticast mode [ 203.849612][ T5816] bridge_slave_0: entered promiscuous mode [ 203.865374][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.874798][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.882565][ T5816] bridge_slave_1: entered allmulticast mode [ 203.892073][ T5816] bridge_slave_1: entered promiscuous mode [ 204.317266][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.345392][ T5813] hsr_slave_0: entered promiscuous mode [ 204.355471][ T5813] hsr_slave_1: entered promiscuous mode [ 204.405890][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.413814][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.421674][ T5812] bridge_slave_0: entered allmulticast mode [ 204.431530][ T5812] bridge_slave_0: entered promiscuous mode [ 204.461665][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.471534][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.479037][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.488487][ T5812] bridge_slave_1: entered allmulticast mode [ 204.497928][ T5812] bridge_slave_1: entered promiscuous mode [ 204.544417][ T5820] Bluetooth: hci2: command tx timeout [ 204.544553][ T5818] Bluetooth: hci1: command tx timeout [ 204.550395][ T5820] Bluetooth: hci0: command tx timeout [ 204.609824][ T5820] Bluetooth: hci3: command tx timeout [ 204.798287][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.806059][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.813920][ T5829] bridge_slave_0: entered allmulticast mode [ 204.823385][ T5829] bridge_slave_0: entered promiscuous mode [ 204.848614][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.858493][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.866455][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.866845][ T5820] Bluetooth: hci4: command tx timeout [ 204.874136][ T5829] bridge_slave_1: entered allmulticast mode [ 204.888753][ T5829] bridge_slave_1: entered promiscuous mode [ 204.906991][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.981987][ T5816] team0: Port device team_slave_0 added [ 205.031873][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.039737][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.047312][ T5822] bridge_slave_0: entered allmulticast mode [ 205.056935][ T5822] bridge_slave_0: entered promiscuous mode [ 205.142542][ T5816] team0: Port device team_slave_1 added [ 205.205754][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.213485][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.221287][ T5822] bridge_slave_1: entered allmulticast mode [ 205.230668][ T5822] bridge_slave_1: entered promiscuous mode [ 205.319030][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.387044][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.394286][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.422409][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.482001][ T5812] team0: Port device team_slave_0 added [ 205.499070][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.527830][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.536371][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.563889][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.613831][ T5812] team0: Port device team_slave_1 added [ 205.783440][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.835475][ T5829] team0: Port device team_slave_0 added [ 205.875104][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.939829][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.946947][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.973410][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.994454][ T5829] team0: Port device team_slave_1 added [ 206.125862][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.134853][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.161761][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.268356][ T5816] hsr_slave_0: entered promiscuous mode [ 206.278274][ T5816] hsr_slave_1: entered promiscuous mode [ 206.287025][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 206.293126][ T5816] Cannot create hsr debugfs directory [ 206.308603][ T5822] team0: Port device team_slave_0 added [ 206.392225][ T5822] team0: Port device team_slave_1 added [ 206.447410][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.454950][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.481437][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.610851][ T5820] Bluetooth: hci0: command tx timeout [ 206.611397][ T5818] Bluetooth: hci1: command tx timeout [ 206.616415][ T5820] Bluetooth: hci2: command tx timeout [ 206.678666][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.685991][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.690951][ T5820] Bluetooth: hci3: command tx timeout [ 206.712556][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.748289][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.756545][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.782922][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.844904][ T5812] hsr_slave_0: entered promiscuous mode [ 206.855151][ T5812] hsr_slave_1: entered promiscuous mode [ 206.864070][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 206.870096][ T5812] Cannot create hsr debugfs directory [ 206.929722][ T5820] Bluetooth: hci4: command tx timeout [ 206.991644][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.998786][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.025814][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.324455][ T5829] hsr_slave_0: entered promiscuous mode [ 207.334599][ T5829] hsr_slave_1: entered promiscuous mode [ 207.343340][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 207.349255][ T5829] Cannot create hsr debugfs directory [ 207.543504][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.624157][ T5822] hsr_slave_0: entered promiscuous mode [ 207.634952][ T5822] hsr_slave_1: entered promiscuous mode [ 207.643770][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 207.649832][ T5822] Cannot create hsr debugfs directory [ 207.676343][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.792846][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.822953][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.697817][ T5820] Bluetooth: hci1: command tx timeout [ 208.703771][ T5820] Bluetooth: hci2: command tx timeout [ 208.709340][ T5820] Bluetooth: hci0: command tx timeout [ 208.769769][ T5820] Bluetooth: hci3: command tx timeout [ 208.812989][ T5816] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 208.846291][ T5816] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 208.872814][ T5816] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 208.960219][ T5816] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 209.027472][ T5820] Bluetooth: hci4: command tx timeout [ 209.178443][ T5812] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.220683][ T5812] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.276613][ T5812] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.300847][ T5812] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.508887][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.576860][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.606547][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.637328][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.671481][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.697363][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.722943][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.807450][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.061118][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.251163][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.359102][ T3777] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.366815][ T3777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.416603][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.518747][ T3777] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.526487][ T3777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.663845][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.793909][ T3755] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.801629][ T3755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.898074][ T3755] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.905798][ T3755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.175867][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.235655][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.473605][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.506742][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.562317][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.570050][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.620575][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.733260][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.740929][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.760264][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.767817][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.784517][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.792251][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.893587][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.222738][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.230307][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.255408][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.263201][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.291484][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.739307][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.848475][ T5813] veth0_vlan: entered promiscuous mode [ 214.017416][ T5813] veth1_vlan: entered promiscuous mode [ 214.155317][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.368671][ T5813] veth0_macvtap: entered promiscuous mode [ 214.465443][ T5813] veth1_macvtap: entered promiscuous mode [ 214.663199][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.704807][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.761663][ T5812] veth0_vlan: entered promiscuous mode [ 214.800593][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.867726][ T3755] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.936787][ T3755] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.959773][ T5812] veth1_vlan: entered promiscuous mode [ 214.988743][ T3755] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.032119][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.088076][ T3755] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.297297][ T5829] veth0_vlan: entered promiscuous mode [ 215.383334][ T5812] veth0_macvtap: entered promiscuous mode [ 215.472877][ T5829] veth1_vlan: entered promiscuous mode [ 215.495933][ T5812] veth1_macvtap: entered promiscuous mode [ 215.679143][ T5822] veth0_vlan: entered promiscuous mode [ 215.726837][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.817966][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.911466][ T5822] veth1_vlan: entered promiscuous mode [ 215.958278][ T5829] veth0_macvtap: entered promiscuous mode [ 215.996777][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.044673][ T3623] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.073842][ T3623] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.122527][ T3623] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.173593][ T5829] veth1_macvtap: entered promiscuous mode [ 216.292600][ T5822] veth0_macvtap: entered promiscuous mode [ 216.372034][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.389393][ T5822] veth1_macvtap: entered promiscuous mode [ 216.499331][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.645867][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.653970][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.706780][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.776915][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.797153][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.856665][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.947670][ T5816] veth0_vlan: entered promiscuous mode [ 217.013198][ T3913] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.067599][ T3913] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.112092][ T4015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.147622][ T5816] veth1_vlan: entered promiscuous mode [ 217.170579][ T4015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.556789][ T5816] veth0_macvtap: entered promiscuous mode [ 217.647781][ T5816] veth1_macvtap: entered promiscuous mode [ 217.893042][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.978128][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.101618][ T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.152454][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.198561][ T3913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.261143][ T3913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.194452][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.203584][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.428642][ T3913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.437941][ T3913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.878645][ T5813] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 223.478922][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.487198][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.532884][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.542422][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.553154][ T5996] bridge0: entered allmulticast mode [ 223.691707][ T4015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.700051][ T4015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.702676][ T5996] bridge_slave_1: left allmulticast mode [ 223.713437][ T5996] bridge_slave_1: left promiscuous mode [ 223.720211][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.750022][ T5996] bridge_slave_0: left allmulticast mode [ 223.755998][ T5996] bridge_slave_0: left promiscuous mode [ 223.762915][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.180752][ T4015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.192247][ T4015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.390620][ T3623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.398667][ T3623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.502847][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.511577][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.704172][ T4015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.712419][ T4015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.576632][ T6008] loop0: detected capacity change from 0 to 16 [ 226.618728][ T6008] erofs (device loop0): mounted with root inode @ nid 36. [ 226.639061][ T6008] erofs (device loop0): readahead error at folio 87 @ nid 36 [ 226.651833][ T6008] erofs (device loop0): readahead error at folio 86 @ nid 36 [ 226.661766][ T6008] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36 [ 226.670495][ T6008] erofs (device loop0): readahead error at folio 83 @ nid 36 [ 226.678085][ T6008] erofs (device loop0): bogus lookback distance 363 @ lcn 82 of nid 36 [ 226.687661][ T6008] erofs (device loop0): readahead error at folio 82 @ nid 36 [ 226.695744][ T6008] erofs (device loop0): readahead error at folio 79 @ nid 36 [ 226.703515][ T6008] erofs (device loop0): readahead error at folio 78 @ nid 36 [ 226.711379][ T6008] erofs (device loop0): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 226.720051][ T6008] erofs (device loop0): readahead error at folio 76 @ nid 36 [ 226.727613][ T6008] erofs (device loop0): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 226.736238][ T6008] erofs (device loop0): readahead error at folio 75 @ nid 36 [ 226.750192][ T6008] erofs (device loop0): readahead error at folio 74 @ nid 36 [ 226.757986][ T6008] erofs (device loop0): readahead error at folio 72 @ nid 36 [ 226.767504][ T6008] erofs (device loop0): readahead error at folio 71 @ nid 36 [ 226.775427][ T6008] erofs (device loop0): readahead error at folio 70 @ nid 36 [ 226.784189][ T6008] erofs (device loop0): readahead error at folio 63 @ nid 36 [ 226.792004][ T6008] erofs (device loop0): readahead error at folio 61 @ nid 36 [ 226.799767][ T6008] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 226.808294][ T6008] erofs (device loop0): readahead error at folio 59 @ nid 36 [ 226.816000][ T6008] erofs (device loop0): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 226.824653][ T6008] erofs (device loop0): readahead error at folio 58 @ nid 36 [ 226.832547][ T6008] erofs (device loop0): readahead error at folio 56 @ nid 36 [ 226.840851][ T6008] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 226.854713][ T6008] erofs (device loop0): readahead error at folio 47 @ nid 36 [ 226.864422][ T6008] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 226.873113][ T6008] erofs (device loop0): readahead error at folio 46 @ nid 36 [ 226.880884][ T6008] erofs (device loop0): readahead error at folio 45 @ nid 36 [ 226.888570][ T6008] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 226.897346][ T6008] erofs (device loop0): readahead error at folio 43 @ nid 36 [ 226.905068][ T6008] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 226.913755][ T6008] erofs (device loop0): readahead error at folio 42 @ nid 36 [ 226.921511][ T6008] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 226.930123][ T6008] erofs (device loop0): readahead error at folio 41 @ nid 36 [ 226.937688][ T6008] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36 [ 226.948030][ T6008] erofs (device loop0): readahead error at folio 40 @ nid 36 [ 226.961368][ T6008] erofs (device loop0): readahead error at folio 39 @ nid 36 [ 226.969078][ T6008] erofs (device loop0): readahead error at folio 38 @ nid 36 [ 226.978944][ T6008] erofs (device loop0): readahead error at folio 36 @ nid 36 [ 226.988323][ T6008] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 226.997066][ T6008] erofs (device loop0): readahead error at folio 31 @ nid 36 [ 227.006052][ T6008] erofs (device loop0): readahead error at folio 25 @ nid 36 [ 227.013928][ T6008] erofs (device loop0): readahead error at folio 24 @ nid 36 [ 227.022090][ T6008] erofs (device loop0): readahead error at folio 19 @ nid 36 [ 227.031093][ T6008] syz.0.1: attempt to access beyond end of device [ 227.031093][ T6008] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 227.045338][ T6008] syz.0.1: attempt to access beyond end of device [ 227.045338][ T6008] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 227.067209][ T6008] syz.0.1: attempt to access beyond end of device [ 227.067209][ T6008] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 227.084235][ T6008] syz.0.1: attempt to access beyond end of device [ 227.084235][ T6008] loop0: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 227.110431][ T6008] syz.0.1: attempt to access beyond end of device [ 227.110431][ T6008] loop0: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 227.132635][ T6008] syz.0.1: attempt to access beyond end of device [ 227.132635][ T6008] loop0: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 228.235638][ T3755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.244040][ T3755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.412665][ T4084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.421298][ T4084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.989929][ T6024] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10'. [ 229.049869][ T6023] kernel read not supported for file /!sel (pid: 6023 comm: syz.1.11) [ 230.017939][ T30] audit: type=1800 audit(1759018744.468:2): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.11" name="!sel" dev="mqueue" ino=8570 res=0 errno=0 [ 230.059290][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 230.066488][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 230.135176][ T6025] loop2: detected capacity change from 0 to 40427 [ 230.354636][ T6025] F2FS-fs (loop2): invalid crc value [ 230.358938][ T6027] 9pnet_fd: Insufficient options for proto=fd [ 230.830444][ T6025] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 230.854879][ T6025] F2FS-fs (loop2): Start checkpoint disabled! [ 230.890802][ T6025] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 232.014643][ T4084] kworker/u8:22: attempt to access beyond end of device [ 232.014643][ T4084] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 232.029987][ T4084] CPU: 0 UID: 0 PID: 4084 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(none) [ 232.030132][ T4084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 232.030260][ T4084] Workqueue: writeback wb_workfn (flush-7:2) [ 232.030554][ T4084] Call Trace: [ 232.030618][ T4084] [ 232.030672][ T4084] __dump_stack+0x26/0x30 [ 232.030862][ T4084] dump_stack_lvl+0x1df/0x270 [ 232.031066][ T4084] dump_stack+0x1e/0x25 [ 232.031259][ T4084] f2fs_handle_critical_error+0xa6f/0xc20 [ 232.031506][ T4084] f2fs_stop_checkpoint+0x65/0x80 [ 232.031721][ T4084] f2fs_write_end_io+0x101c/0x1bc0 [ 232.031926][ T4084] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 232.032075][ T4084] bio_endio+0xeb1/0x1010 [ 232.032256][ T4084] submit_bio_noacct+0x211/0x2760 [ 232.032489][ T4084] submit_bio+0x57c/0x630 [ 232.032671][ T4084] f2fs_submit_write_bio+0x92/0x250 [ 232.032873][ T4084] __submit_merged_bio+0x16f/0x6a0 [ 232.033068][ T4084] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 232.033261][ T4084] __submit_merged_write_cond+0x458/0x9a0 [ 232.033481][ T4084] f2fs_write_data_pages+0x4bb2/0x5480 [ 232.033820][ T4084] ? module_trace_bprintk_format_notify+0x460/0xc30 [ 232.034017][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.034180][ T4084] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 232.034354][ T4084] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 232.034550][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.034708][ T4084] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 232.034901][ T4084] ? __rb_insert_augmented+0x80/0x11b0 [ 232.035115][ T4084] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 232.035276][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.035442][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.035609][ T4084] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 232.035784][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.035953][ T4084] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 232.036134][ T4084] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 232.036345][ T4084] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 232.036554][ T4084] do_writepages+0x3f2/0x860 [ 232.036728][ T4084] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 232.036908][ T4084] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 232.037103][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.037326][ T4084] __writeback_single_inode+0x101/0x1190 [ 232.037512][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.037708][ T4084] writeback_sb_inodes+0xac1/0x1cb0 [ 232.037972][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.038235][ T4084] wb_writeback+0x4ce/0xc00 [ 232.038425][ T4084] ? queue_io+0x461/0x790 [ 232.038603][ T4084] wb_workfn+0x397/0x1910 [ 232.038822][ T4084] ? kmsan_get_metadata+0xfb/0x160 [ 232.039037][ T4084] ? __pfx_wb_workfn+0x10/0x10 [ 232.039276][ T4084] process_scheduled_works+0xb91/0x1d80 [ 232.039553][ T4084] worker_thread+0xedf/0x1590 [ 232.039789][ T4084] kthread+0xd5c/0xf00 [ 232.039935][ T4084] ? __pfx_worker_thread+0x10/0x10 [ 232.040166][ T4084] ? __pfx_kthread+0x10/0x10 [ 232.040316][ T4084] ret_from_fork+0x233/0x380 [ 232.040464][ T4084] ? __pfx_kthread+0x10/0x10 [ 232.040651][ T4084] ret_from_fork_asm+0x1a/0x30 [ 232.040871][ T4084] [ 232.360419][ T4084] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 236.223927][ T6054] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.637980][ T6063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19'. [ 238.127952][ T6061] loop3: detected capacity change from 0 to 16 [ 238.223271][ T6061] ======================================================= [ 238.223271][ T6061] WARNING: The mand mount option has been deprecated and [ 238.223271][ T6061] and is ignored by this kernel. Remove the mand [ 238.223271][ T6061] option from the mount to silence this warning. [ 238.223271][ T6061] ======================================================= [ 238.461541][ T6068] loop2: detected capacity change from 0 to 136 [ 238.572700][ T6061] erofs (device loop3): mounted with root inode @ nid 36. [ 238.765280][ T30] audit: type=1800 audit(1759018754.148:3): pid=6061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file1" dev="loop3" ino=86 res=0 errno=0 [ 240.255307][ T6073] loop1: detected capacity change from 0 to 2048 [ 240.761064][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.780136][ T6073] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.049167][ T6077] loop2: detected capacity change from 0 to 32768 [ 241.138375][ T6077] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 241.246276][ T6083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 241.477332][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 241.516302][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 241.538309][ T6077] XFS (loop2): Ending clean mount [ 241.596060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 241.800718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 241.815488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!! [ 241.830195][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.843440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 242.160678][ T5822] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 242.248166][ T6091] loop3: detected capacity change from 0 to 4096 [ 242.580642][ T6102] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 242.896382][ T5169] udevd[5169]: worker [5995] terminated by signal 33 (Unknown signal 33) [ 242.933663][ T6104] loop1: detected capacity change from 0 to 512 [ 242.966678][ T5169] udevd[5169]: worker [5995] failed while handling '/devices/virtual/block/loop1' [ 243.254305][ T6104] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.33: casefold flag without casefold feature [ 243.339177][ T6104] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.33: couldn't read orphan inode 15 (err -117) [ 243.482297][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.123900][ T6111] loop4: detected capacity change from 0 to 256 [ 244.672063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 244.771141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 244.873709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 245.016342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 246.502667][ T5812] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.867311][ T6111] FAT-fs (loop4): Directory bread(block 64) failed [ 246.874461][ T6111] FAT-fs (loop4): Directory bread(block 65) failed [ 246.883163][ T6111] FAT-fs (loop4): Directory bread(block 66) failed [ 246.890074][ T6111] FAT-fs (loop4): Directory bread(block 67) failed [ 246.896824][ T6111] FAT-fs (loop4): Directory bread(block 68) failed [ 246.903621][ T6111] FAT-fs (loop4): Directory bread(block 69) failed [ 246.912161][ T6111] FAT-fs (loop4): Directory bread(block 70) failed [ 246.922911][ T6111] FAT-fs (loop4): Directory bread(block 71) failed [ 246.937560][ T6111] FAT-fs (loop4): Directory bread(block 72) failed [ 246.949597][ T6111] FAT-fs (loop4): Directory bread(block 73) failed [ 248.013838][ T6126] loop4: detected capacity change from 0 to 164 [ 248.292978][ T6126] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 248.758565][ T6131] loop2: detected capacity change from 0 to 16 [ 248.798905][ T6131] erofs (device loop2): mounted with root inode @ nid 36. [ 248.816352][ T6131] erofs (device loop2): readahead error at folio 87 @ nid 36 [ 248.826687][ T6131] erofs (device loop2): readahead error at folio 86 @ nid 36 [ 248.834796][ T6131] erofs (device loop2): bogus lookback distance 363 @ lcn 82 of nid 36 [ 248.843407][ T6131] erofs (device loop2): readahead error at folio 83 @ nid 36 [ 248.857667][ T6131] erofs (device loop2): bogus lookback distance 363 @ lcn 82 of nid 36 [ 248.870331][ T6131] erofs (device loop2): readahead error at folio 82 @ nid 36 [ 248.878362][ T6131] erofs (device loop2): readahead error at folio 79 @ nid 36 [ 248.889825][ T6131] erofs (device loop2): readahead error at folio 78 @ nid 36 [ 248.897553][ T6131] erofs (device loop2): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 248.906226][ T6131] erofs (device loop2): readahead error at folio 76 @ nid 36 [ 248.915589][ T6131] erofs (device loop2): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 248.924149][ T6131] erofs (device loop2): readahead error at folio 75 @ nid 36 [ 248.931849][ T6131] erofs (device loop2): readahead error at folio 74 @ nid 36 [ 248.941649][ T6131] erofs (device loop2): readahead error at folio 72 @ nid 36 [ 248.949219][ T6131] erofs (device loop2): readahead error at folio 71 @ nid 36 [ 248.958209][ T6131] erofs (device loop2): readahead error at folio 70 @ nid 36 [ 248.971492][ T6131] erofs (device loop2): readahead error at folio 63 @ nid 36 [ 248.979219][ T6131] erofs (device loop2): readahead error at folio 61 @ nid 36 [ 248.988715][ T6131] erofs (device loop2): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 248.997297][ T6131] erofs (device loop2): readahead error at folio 59 @ nid 36 [ 249.004898][ T6131] erofs (device loop2): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 249.015605][ T6131] erofs (device loop2): readahead error at folio 58 @ nid 36 [ 249.023284][ T6131] erofs (device loop2): readahead error at folio 56 @ nid 36 [ 249.031299][ T6131] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 249.041691][ T6131] erofs (device loop2): readahead error at folio 47 @ nid 36 [ 249.049200][ T6131] erofs (device loop2): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 249.057804][ T6131] erofs (device loop2): readahead error at folio 46 @ nid 36 [ 249.065444][ T6131] erofs (device loop2): readahead error at folio 45 @ nid 36 [ 249.078138][ T6131] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 249.086717][ T6131] erofs (device loop2): readahead error at folio 43 @ nid 36 [ 249.094313][ T6131] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 249.104547][ T6131] erofs (device loop2): readahead error at folio 42 @ nid 36 [ 249.112162][ T6131] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 249.120594][ T6131] erofs (device loop2): readahead error at folio 41 @ nid 36 [ 249.128102][ T6131] erofs (device loop2): bogus lookback distance 774 @ lcn 40 of nid 36 [ 249.138137][ T6131] erofs (device loop2): readahead error at folio 40 @ nid 36 [ 249.145764][ T6131] erofs (device loop2): readahead error at folio 39 @ nid 36 [ 249.153362][ T6131] erofs (device loop2): readahead error at folio 38 @ nid 36 [ 249.162888][ T6131] erofs (device loop2): readahead error at folio 36 @ nid 36 [ 249.175402][ T6131] erofs (device loop2): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 249.183964][ T6131] erofs (device loop2): readahead error at folio 31 @ nid 36 [ 249.193672][ T6131] erofs (device loop2): readahead error at folio 25 @ nid 36 [ 249.201324][ T6131] erofs (device loop2): readahead error at folio 24 @ nid 36 [ 249.209133][ T6131] erofs (device loop2): readahead error at folio 19 @ nid 36 [ 249.217470][ T6131] syz.2.34: attempt to access beyond end of device [ 249.217470][ T6131] loop2: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 249.233139][ T6131] syz.2.34: attempt to access beyond end of device [ 249.233139][ T6131] loop2: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 249.247683][ T6131] syz.2.34: attempt to access beyond end of device [ 249.247683][ T6131] loop2: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 249.264493][ T6131] syz.2.34: attempt to access beyond end of device [ 249.264493][ T6131] loop2: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 249.281061][ T6131] syz.2.34: attempt to access beyond end of device [ 249.281061][ T6131] loop2: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 249.297255][ T6131] syz.2.34: attempt to access beyond end of device [ 249.297255][ T6131] loop2: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 249.791106][ T6133] sd 0:0:1:0: device reset [ 254.571823][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 255.181621][ T6147] loop2: detected capacity change from 0 to 256 [ 255.328562][ T5870] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.337660][ T5870] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.348310][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.357723][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 255.369074][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 255.481030][ T6147] exfat: Deprecated parameter 'utf8' [ 255.510658][ T5870] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.525700][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.536771][ T5870] usb 4-1: Product: syz [ 255.541288][ T5870] usb 4-1: Manufacturer: syz [ 255.662261][ T6147] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 255.773680][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 255.779111][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 255.857398][ T5870] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 255.863893][ T5870] cdc_wdm 4-1:1.0: Unknown control protocol [ 256.042413][ T6153] loop0: detected capacity change from 0 to 256 [ 256.564522][ T6153] FAT-fs (loop0): Directory bread(block 64) failed [ 256.578673][ T6153] FAT-fs (loop0): Directory bread(block 65) failed [ 256.586010][ T6153] FAT-fs (loop0): Directory bread(block 66) failed [ 256.592936][ T6153] FAT-fs (loop0): Directory bread(block 67) failed [ 256.600194][ T6153] FAT-fs (loop0): Directory bread(block 68) failed [ 256.606924][ T6153] FAT-fs (loop0): Directory bread(block 69) failed [ 256.614016][ T6153] FAT-fs (loop0): Directory bread(block 70) failed [ 256.620853][ T6153] FAT-fs (loop0): Directory bread(block 71) failed [ 256.627693][ T6153] FAT-fs (loop0): Directory bread(block 72) failed [ 256.634595][ T6153] FAT-fs (loop0): Directory bread(block 73) failed [ 257.956227][ T6168] Zero length message leads to an empty skb [ 258.214333][ T6165] loop4: detected capacity change from 0 to 16 [ 258.233977][ T6165] erofs (device loop4): mounted with root inode @ nid 36. [ 258.255441][ T6165] erofs (device loop4): readahead error at folio 87 @ nid 36 [ 258.265485][ T6165] erofs (device loop4): readahead error at folio 86 @ nid 36 [ 258.273579][ T6165] erofs (device loop4): bogus lookback distance 363 @ lcn 82 of nid 36 [ 258.282228][ T6165] erofs (device loop4): readahead error at folio 83 @ nid 36 [ 258.297274][ T6165] erofs (device loop4): bogus lookback distance 363 @ lcn 82 of nid 36 [ 258.305932][ T6165] erofs (device loop4): readahead error at folio 82 @ nid 36 [ 258.313940][ T6165] erofs (device loop4): readahead error at folio 79 @ nid 36 [ 258.324089][ T6165] erofs (device loop4): readahead error at folio 78 @ nid 36 [ 258.331954][ T6165] erofs (device loop4): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 258.340682][ T6165] erofs (device loop4): readahead error at folio 76 @ nid 36 [ 258.348289][ T6165] erofs (device loop4): bogus lookback distance 1485 @ lcn 75 of nid 36 [ 258.359518][ T6165] erofs (device loop4): readahead error at folio 75 @ nid 36 [ 258.367239][ T6165] erofs (device loop4): readahead error at folio 74 @ nid 36 [ 258.375046][ T6165] erofs (device loop4): readahead error at folio 72 @ nid 36 [ 258.385216][ T6165] erofs (device loop4): readahead error at folio 71 @ nid 36 [ 258.397089][ T6165] erofs (device loop4): readahead error at folio 70 @ nid 36 [ 258.405806][ T6165] erofs (device loop4): readahead error at folio 63 @ nid 36 [ 258.416206][ T6165] erofs (device loop4): readahead error at folio 61 @ nid 36 [ 258.424016][ T6165] erofs (device loop4): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 258.432675][ T6165] erofs (device loop4): readahead error at folio 59 @ nid 36 [ 258.442924][ T6165] erofs (device loop4): bogus lookback distance 1024 @ lcn 58 of nid 36 [ 258.452991][ T6165] erofs (device loop4): readahead error at folio 58 @ nid 36 [ 258.461705][ T6165] erofs (device loop4): readahead error at folio 56 @ nid 36 [ 258.470154][ T6165] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 258.478697][ T6165] erofs (device loop4): readahead error at folio 47 @ nid 36 [ 258.488974][ T6165] erofs (device loop4): bogus lookback distance 1586 @ lcn 46 of nid 36 [ 258.501353][ T6165] erofs (device loop4): readahead error at folio 46 @ nid 36 [ 258.509096][ T6165] erofs (device loop4): readahead error at folio 45 @ nid 36 [ 258.520677][ T6165] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 258.529286][ T6165] erofs (device loop4): readahead error at folio 43 @ nid 36 [ 258.537038][ T6165] erofs (device loop4): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 258.541096][ T5870] usb 4-1: USB disconnect, device number 2 [ 258.548432][ T6165] erofs (device loop4): readahead error at folio 42 @ nid 36 [ 258.559050][ T6165] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 258.567642][ T6165] erofs (device loop4): readahead error at folio 41 @ nid 36 [ 258.577557][ T6165] erofs (device loop4): bogus lookback distance 774 @ lcn 40 of nid 36 [ 258.586112][ T6165] erofs (device loop4): readahead error at folio 40 @ nid 36 [ 258.597030][ T6165] erofs (device loop4): readahead error at folio 39 @ nid 36 [ 258.605803][ T6165] erofs (device loop4): readahead error at folio 38 @ nid 36 [ 258.615966][ T6165] erofs (device loop4): readahead error at folio 36 @ nid 36 [ 258.624126][ T6165] erofs (device loop4): bogus lookback distance 1468 @ lcn 31 of nid 36 [ 258.632759][ T6165] erofs (device loop4): readahead error at folio 31 @ nid 36 [ 258.643494][ T6165] erofs (device loop4): readahead error at folio 25 @ nid 36 [ 258.651299][ T6165] erofs (device loop4): readahead error at folio 24 @ nid 36 [ 258.659666][ T6165] erofs (device loop4): readahead error at folio 19 @ nid 36 [ 258.668246][ T6165] syz.4.56: attempt to access beyond end of device [ 258.668246][ T6165] loop4: rw=524288, sector=784, nr_sectors = 64 limit=16 [ 258.684870][ T6165] syz.4.56: attempt to access beyond end of device [ 258.684870][ T6165] loop4: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 258.703490][ T6165] syz.4.56: attempt to access beyond end of device [ 258.703490][ T6165] loop4: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 258.722050][ T6165] syz.4.56: attempt to access beyond end of device [ 258.722050][ T6165] loop4: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 258.735928][ T6165] syz.4.56: attempt to access beyond end of device [ 258.735928][ T6165] loop4: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 258.752243][ T6165] syz.4.56: attempt to access beyond end of device [ 258.752243][ T6165] loop4: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 259.783205][ T6183] sd 0:0:1:0: device reset [ 264.435451][ T6194] loop2: detected capacity change from 0 to 1024 [ 265.423275][ T6204] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 266.018195][ T6208] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 267.151158][ T5442] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.481324][ T5442] usb 4-1: device descriptor read/64, error -71 [ 267.780643][ T5442] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 267.990689][ T5442] usb 4-1: device descriptor read/64, error -71 [ 268.102759][ T5442] usb usb4-port1: attempt power cycle [ 268.490306][ T5442] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 268.612620][ T5442] usb 4-1: device descriptor read/8, error -71 [ 269.702830][ T5442] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.833543][ T6237] sd 0:0:1:0: device reset [ 272.689799][ T5442] usb 4-1: device descriptor read/8, error -71 [ 272.813547][ T5442] usb usb4-port1: unable to enumerate USB device [ 274.662388][ T6251] syzkaller0: entered promiscuous mode [ 274.675710][ T6251] syzkaller0: entered allmulticast mode [ 278.450216][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 279.490676][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 280.799325][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 280.816809][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 285.428717][ T5870] usb 3-1: unable to read config index 0 descriptor/start: -110 [ 285.436831][ T5870] usb 3-1: can't read configurations, error -110 [ 285.629794][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 286.245434][ T5870] usb 3-1: device descriptor read/64, error -32 [ 286.631120][ T5870] usb usb3-port1: attempt power cycle [ 288.934480][ T5870] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 289.030272][ T5870] usb 3-1: device descriptor read/8, error -32 [ 289.289891][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 289.390806][ T5870] usb 3-1: device descriptor read/8, error -32 [ 289.501686][ T5870] usb usb3-port1: unable to enumerate USB device [ 290.018569][ T6306] loop3: detected capacity change from 0 to 1024 [ 290.212727][ T6306] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.361450][ T6306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.139556][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.146224][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.102832][ T6340] loop4: detected capacity change from 0 to 1024 [ 295.342175][ T6337] loop3: detected capacity change from 0 to 4096 [ 295.759723][ T6343] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 296.103189][ T5827] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 296.113232][ T5827] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 296.130543][ T5827] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 296.164893][ T5827] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 296.199822][ T5827] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.130195][ T5816] ===================================================== [ 297.137421][ T5816] BUG: KMSAN: uninit-value in hfsplus_delete_cat+0x1195/0x13d0 [ 297.145518][ T5816] hfsplus_delete_cat+0x1195/0x13d0 [ 297.151060][ T5816] hfsplus_rmdir+0x13c/0x310 [ 297.155879][ T5816] vfs_rmdir+0x5b6/0x800 [ 297.160463][ T5816] do_rmdir+0x7d6/0xdc0 [ 297.164812][ T5816] __x64_sys_unlinkat+0x166/0x210 [ 297.170197][ T5816] x64_sys_call+0x3c44/0x3e20 [ 297.175094][ T5816] do_syscall_64+0xd9/0x210 [ 297.179983][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.186376][ T5816] [ 297.188790][ T5816] Uninit was created at: [ 297.193429][ T5816] __alloc_frozen_pages_noprof+0x689/0xf00 [ 297.204883][ T5816] alloc_pages_mpol+0x328/0x860 [ 297.211738][ T5816] alloc_frozen_pages_noprof+0xf7/0x200 [ 297.217513][ T5816] allocate_slab+0x24d/0x1220 [ 297.222542][ T5816] ___slab_alloc+0xff3/0x3470 [ 297.227365][ T5816] kmem_cache_alloc_lru_noprof+0x922/0xed0 [ 297.233863][ T5816] hfsplus_alloc_inode+0x5a/0xd0 [ 297.238966][ T5816] alloc_inode+0x87/0x4a0 [ 297.243620][ T5816] iget_locked+0x239/0x12d0 [ 297.248318][ T5816] hfsplus_iget+0x5c/0xb80 [ 297.253061][ T5816] hfsplus_btree_open+0x128/0x1cf0 [ 297.258378][ T5816] hfsplus_fill_super+0x1161/0x2730 [ 297.264006][ T5816] get_tree_bdev_flags+0x6e6/0x920 [ 297.269330][ T5816] get_tree_bdev+0x38/0x50 [ 297.274071][ T5816] hfsplus_get_tree+0x35/0x40 [ 297.278929][ T5816] vfs_get_tree+0xb3/0x5c0 [ 297.283688][ T5816] do_new_mount+0x733/0x1420 [ 297.288476][ T5816] path_mount+0x6db/0x1e90 [ 297.293253][ T5816] __se_sys_mount+0x6eb/0x7d0 [ 297.304325][ T5816] __x64_sys_mount+0xe4/0x150 [ 297.309254][ T5816] x64_sys_call+0x3604/0x3e20 [ 297.316039][ T5816] do_syscall_64+0xd9/0x210 [ 297.320990][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.328757][ T5816] [ 297.331512][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(none) [ 297.341290][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.351638][ T5816] ===================================================== [ 297.358672][ T5816] Disabling lock debugging due to kernel taint [ 297.365084][ T5816] Kernel panic - not syncing: kmsan.panic set ... SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.371664][ T5816] CPU: 1 UID: 0 PID: 5816 Comm: syz-executor Tainted: G B syzkaller #0 PREEMPT(none) [ 297.382931][ T5816] Tainted: [B]=BAD_PAGE [ 297.387183][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 297.397377][ T5816] Call Trace: [ 297.400776][ T5816] [ 297.403803][ T5816] __dump_stack+0x26/0x30 [ 297.408347][ T5816] dump_stack_lvl+0x53/0x270 [ 297.413154][ T5816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.419198][ T5816] dump_stack+0x1e/0x25 [ 297.423553][ T5816] vpanic+0x361/0xc50 [ 297.427748][ T5816] panic+0x15d/0x160 [ 297.431877][ T5816] kmsan_report+0x31c/0x320 [ 297.436586][ T5816] ? __msan_warning+0x1b/0x30 [ 297.441435][ T5816] ? hfsplus_delete_cat+0x1195/0x13d0 [ 297.446998][ T5816] ? hfsplus_rmdir+0x13c/0x310 [ 297.451942][ T5816] ? vfs_rmdir+0x5b6/0x800 [ 297.456533][ T5816] ? do_rmdir+0x7d6/0xdc0 [ 297.461083][ T5816] ? __x64_sys_unlinkat+0x166/0x210 [ 297.466489][ T5816] ? x64_sys_call+0x3c44/0x3e20 [ 297.471565][ T5816] ? do_syscall_64+0xd9/0x210 [ 297.476418][ T5816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.482677][ T5816] ? kmsan_get_metadata+0xfb/0x160 [ 297.488006][ T5816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.494032][ T5816] ? hfsplus_bnode_dump+0x50a/0x560 [ 297.499539][ T5816] ? kmsan_get_metadata+0xfb/0x160 [ 297.504878][ T5816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.510903][ T5816] ? hfsplus_brec_remove+0x92f/0xa60 [ 297.516436][ T5816] ? kmsan_get_metadata+0xfb/0x160 [ 297.521762][ T5816] __msan_warning+0x1b/0x30 [ 297.526432][ T5816] hfsplus_delete_cat+0x1195/0x13d0 [ 297.531838][ T5816] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 297.537844][ T5816] ? kmsan_get_metadata+0xfb/0x160 [ 297.543159][ T5816] hfsplus_rmdir+0x13c/0x310 [ 297.547934][ T5816] ? __pfx_hfsplus_rmdir+0x10/0x10 [ 297.553243][ T5816] vfs_rmdir+0x5b6/0x800 [ 297.557673][ T5816] do_rmdir+0x7d6/0xdc0 [ 297.562071][ T5816] __x64_sys_unlinkat+0x166/0x210 [ 297.567291][ T5816] x64_sys_call+0x3c44/0x3e20 [ 297.572166][ T5816] do_syscall_64+0xd9/0x210 [ 297.576806][ T5816] ? irqentry_exit+0x16/0x60 [ 297.581575][ T5816] ? clear_bhb_loop+0x40/0x90 [ 297.586432][ T5816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.592499][ T5816] RIP: 0033:0x7f123658e4a7 [ 297.597036][ T5816] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.616812][ T5816] RSP: 002b:00007ffd6bf75888 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 297.625395][ T5816] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f123658e4a7 [ 297.633483][ T5816] RDX: 0000000000000200 RSI: 00007ffd6bf76a30 RDI: 00000000ffffff9c [ 297.641566][ T5816] RBP: 00007f1236611d7d R08: 0000000000000000 R09: 0000000000000000 [ 297.649662][ T5816] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd6bf76a30 [ 297.657748][ T5816] R13: 00007f1236611d7d R14: 00000000000484bb R15: 00007ffd6bf78bf0 [ 297.665879][ T5816] [ 297.669181][ T5816] Kernel Offset: disabled [ 297.673565][ T5816] Rebooting in 86400 seconds..