last executing test programs: 1m12.126319665s ago: executing program 4 (id=441): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8", 0xdb}, {&(0x7f0000000180)="224a1f4b1161baddab286f59366916998e7ac05aef", 0x15}], 0x2, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000006880)=""/121, 0x79}, {&(0x7f0000000340)=""/132, 0x84}], 0x2}, 0x401}], 0x1, 0x63, 0x0) 1m9.733167387s ago: executing program 4 (id=446): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000140)) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m8.332098454s ago: executing program 4 (id=449): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x80) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) readv(r6, &(0x7f0000002540), 0x0) close(0x3) 1m5.789251605s ago: executing program 4 (id=453): r0 = open(&(0x7f0000000080)='./file2\x00', 0x4e482, 0x154) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x4, @auto="b9713c7966b69a69"}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1m3.663614849s ago: executing program 4 (id=457): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, &(0x7f00000001c0)) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x228, &(0x7f0000000300)="$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") 1m1.624547397s ago: executing program 4 (id=459): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) 46.383068853s ago: executing program 32 (id=459): r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b22, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) 16.303381216s ago: executing program 1 (id=530): socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) getpgid(0x0) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000c40)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000012eb00002abd7000fddbdf25ac1414bb000000000000000000000000000004d30200330056cc5689f7e6aad6883b72e787bea343712ed8fe397342ccc7c3c6903b545cb10bcfc506f7b0bdf3296324b0fb4c90e5348472a8e069e1fc0fd23fb665ebf72c223735a91437ce8e01b2f44003f3097bfbeea672a2273ee9bf5450ddec8293fd21e86b4ad3bce8d7e96eea22583ff0c239222ea8798912f37a6b5f2e6b44e5d0abe4f0579f976d974f57bb336ae11f33782c976530ed83347fd12eb4a5b8f7c1cd638d7c2396f7d46f24cb"], 0x28}, 0x1, 0x0, 0x0, 0x2004c800}, 0xc044) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}}, 0x40080c0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x9, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x1}, 0x60) 15.680524835s ago: executing program 2 (id=532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000200)='~', 0x1) 14.581597835s ago: executing program 2 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r4}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x5, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r5, &(0x7f0000000080), &(0x7f0000001500)=@udp6=r4}, 0x20) 13.496154779s ago: executing program 2 (id=534): syz_mount_image$hfs(&(0x7f00000001c0), &(0x7f0000000000)='./file2\x00', 0x40, &(0x7f0000000280)=ANY=[], 0x11, 0x2ff, &(0x7f0000000680)="$eJzs3U9rE0EYx/HfbNImtbGmf0TwWC3oRbRexEtE8hYE8SDaNkIxVNQK6sVUPIno3btvwRfhRfEN6MmD+ALa08rM/kk22c2msUka/H5A3Wzm2Xkmm919JiAjAP+tm/Ufn67+sn+MVFBBentd8iSVpaKk0zpTfrazu73bbGz1O1DBRejAl1EQaXrabO403L97yd02zkWEqvZVUZXOfRgN3/dv/Oza99ubUDKYGHf1p/CkUnh1uvfLY8+sv70h41pHnMe0Mfva13MtTDoPAMCkBI99+/zfCwp/u6MS1u+eJ62Fj/1j+fwf1v6kExg5v++7Hc9/N8vyjT2/p9xb7fmem8LZ971oljhIzzNdr2cVFJKJAtPkzSpdLt7cg+1m49Lmo+aWp9eqhTqarcQ9hOw3NCfb1ZS5aR8DjN2kVpRBWt6MHcN6Rv7LQ/bYR8/0LXFCzBfzzdw1VX3UVlz/FX1js3UJV7vOVJD/5ez+5l2UbaXwtlGr1Tx3oMii6+Rs8kzljLKcPiNR9MEuKvkDQTUvTxe11BUVjO5KakApjlpOjVqPXmX0tZKIsqOJv83ZWY6aeW9um1X90WfVO+p/z+a35hp4WVdm+6oxa8GF5j7xYDyz6d0V3TGrPU+Olu5UknviT7GUlfpB/3saBhCdw3fa0DUtPH3x8mGh2Ww8sRv3UzYeV+I9M2+k1Db/vmGK0tDharX3lOQ7PY2je+AIks/cuHikB7T3j9zG9iobywBH9U1wG/LGeZoOv1H/Oqovkl86DgM8OcEbFMapfdKHCu8u9TF9bN1lgvmfq+TDet8VCvavW6XsOj0qyNJKNle9h0f0bY0dz4DKifglt3UiWUbnzA3mwzomZR7X0mBzrnMXpPOD91gN85wO/qucBqau77rH7/8AAAAAAAAAAAAAAAAAAADT5vD/Q2Du0FGTHiMAAAAAAAAAAAAAAAAAAAAAANMuXv9X0fq/Gmz93+6lWML1f8vKWf93ozeHnvV/P+zItCTW/wVG628AAAD//+RRfuQ=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) dup2(r1, r1) ptrace$ARCH_MAP_VDSO_32(0x1e, 0x0, 0x8, 0x2002) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40801}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x1018000, 0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000005c0), 0x0, 0x4fed0) 13.469589868s ago: executing program 3 (id=535): r0 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) unshare(0x4a000200) 13.308041234s ago: executing program 2 (id=536): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) close(0x3) 10.37945916s ago: executing program 0 (id=538): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x18, 0x140c, 0x100, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048005}, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r4 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r4, 0x2007ffc) sendfile(r4, r4, 0x0, 0x800000009) 9.39121841s ago: executing program 0 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0x8000}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff) 8.497552544s ago: executing program 1 (id=540): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 8.363941884s ago: executing program 0 (id=541): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000480)=@req={0x28, &(0x7f0000000440)={'dummy0\x00', @ifru_data=&(0x7f0000000400)="6e39fe67d4312da6a40fe921945955abc3e21c7361a4f98e984858d3c4059409"}}) 8.216811296s ago: executing program 2 (id=542): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7.289404899s ago: executing program 1 (id=543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x3233c3, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x200, 0x0, 0x3, 0xb, 0x13ec, 0x1}, 0x20) 7.130039637s ago: executing program 0 (id=544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="030000000400000004eca6141f198e9dd6000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000020000"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r4, @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800060000000000080005"], 0xac}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) 7.129037255s ago: executing program 2 (id=546): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000080000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) munmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 6.047171644s ago: executing program 1 (id=547): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0xffffff7f, 0x0) io_submit(0x0, 0x0, 0x0) keyctl$clear(0x7, 0x0) dup3(0xffffffffffffffff, r2, 0x80000) syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000140)='./file1\x00', 0x42, &(0x7f00000003c0)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64, @ANYRES32, @ANYRES64, @ANYRES8, @ANYRES32], 0xd, 0x1a4, &(0x7f0000000640)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$xfs(&(0x7f0000000380), &(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x22a1c08, &(0x7f0000000040)={[{@lazytime}, {@uqnoenforce}, {}, {@prjquota}, {@grpquota}, {@gquota}, {@nogrpid}]}, 0xb, 0x96e3, &(0x7f0000009640)="$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") sync_file_range(r3, 0x6, 0x0, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) 6.007476078s ago: executing program 0 (id=548): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() tkill(r3, 0x3f) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1c}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x0, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) 5.840081385s ago: executing program 3 (id=549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r4}, 0x38) 4.385138004s ago: executing program 0 (id=550): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000103}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) gettid() socket$kcm(0x11, 0xa, 0x300) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.158165676s ago: executing program 3 (id=551): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.816802682s ago: executing program 1 (id=552): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) stat(0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x40000000, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 2.200221926s ago: executing program 3 (id=553): r0 = socket$netlink(0x10, 0x3, 0x15) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d40)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x0) 2.082112428s ago: executing program 1 (id=554): open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x48) r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 1.118286556s ago: executing program 3 (id=555): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x30, 0x840}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000400)=r5, 0x4) 0s ago: executing program 3 (id=556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r1, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x40000020) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x1b10, 0x0, 0x1, 0x2}, 0x2f, [0x2, 0x5, 0x704d, 0x1, 0x3, 0x1, 0x2, 0x7d7, 0x4, 0xfffffc01, 0xfffffffb, 0x8, 0x200001, 0x100, 0xfe, 0x4a, 0x7, 0x5, 0x2ca, 0x8, 0x76, 0x8, 0x16, 0x200, 0x40, 0x19b2, 0x8000, 0x7, 0xc1, 0x4000000, 0x7, 0x103, 0xe, 0x7, 0x1, 0x1, 0x5, 0xf, 0x7, 0x10001, 0x9, 0x7f, 0x8, 0x6, 0xb, 0x4, 0x6, 0x40, 0x7f, 0x9, 0x1, 0x6, 0x4, 0x2284919, 0x4, 0x5643fa73, 0xfffeffff, 0x7, 0x800, 0x2, 0x8a, 0x6, 0x1, 0x6], [0xfffffed2, 0x7fffffff, 0xffff, 0x7, 0xe62, 0x3, 0x0, 0x9, 0xc33, 0xf, 0x7, 0x800, 0x6c368000, 0x4, 0x1000007, 0x0, 0x12, 0x5, 0xc, 0x8001, 0x3, 0x7fff, 0x9, 0x0, 0x5, 0x4, 0x4, 0x8, 0x40, 0xc14, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x9, 0x8, 0x5, 0x4, 0x9, 0x5, 0x3, 0x2, 0x4, 0x0, 0xfff, 0xa6, 0x4, 0x5, 0xd69, 0x9, 0x2f404, 0xf1, 0x3, 0x3, 0x1, 0x6, 0x0, 0x0, 0x6, 0x8, 0x9, 0x4, 0x1000068], [0x1, 0x1, 0x4, 0xfffffffc, 0x0, 0x7fff, 0x405, 0x9, 0x2, 0xffc, 0x7, 0x2, 0xc, 0x7, 0xa, 0xa, 0x6, 0x4, 0x5, 0x5, 0x2, 0x30000000, 0x644, 0xffffffff, 0xfffffffd, 0x7, 0x10000, 0x7f, 0x7ff, 0xd, 0x400, 0x0, 0x41, 0x81, 0xc99, 0x25a, 0x2, 0xfffffffc, 0x2, 0x5d9fff6, 0x3ff, 0x10ff, 0x4, 0x8, 0x10000, 0xe7, 0x1fd, 0x7af5, 0x0, 0x9, 0x0, 0xffff, 0x7, 0x6, 0x0, 0x81, 0x9, 0x2000002, 0x3, 0x100, 0x5, 0x0, 0x6, 0x10], [0xffefff80, 0xd5800000, 0x0, 0x4, 0x2, 0x62a, 0x6, 0x407, 0xb343, 0x4, 0x1, 0x8, 0x7, 0x8, 0xffffff81, 0x7, 0x5, 0x3, 0x201, 0xfff, 0x3, 0x0, 0x3c65, 0xa, 0x6, 0x80, 0xffffffff, 0x3, 0x2, 0x7, 0x5, 0x7, 0x7, 0x8, 0x1, 0x0, 0x9, 0x17ce, 0x0, 0x3, 0x73ea7d12, 0xe, 0x7, 0x13e, 0x7, 0x8, 0x4, 0x2, 0x117, 0x996, 0x54, 0x8c1, 0x0, 0x5, 0x5, 0xf, 0x100, 0x10000400, 0x49, 0x5, 0x3, 0xfffffffb, 0xc, 0x2]}, 0x45c) syz_io_uring_setup(0xd2, &(0x7f0000000640)={0x0, 0x1fffffe, 0x0, 0xfffffff9, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) close(0x3) unshare(0x22020600) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x22e, &(0x7f0000000000)="$eJzKKC4sZmdgYPj7sSaZgUGAAQRYGEQYLjAwMrAwMDDIM4KFGD4yQeipUPomlGaDyl+B0r5Q8XYo/de8KiKKgYExU+meGdMB8RRFRgEGHpGvpx4wJDPwxzJYzvMGKZxyVejt0v0g9V6hlZsYGNVT+BfN2TDBaSYv2FjGyChkc5gPyMziABnEwMAw+U/EvQcskgwiYLPWXArKnHJVlOOf2KmW5avMOu8zzOiYlsbAaDCLg4GBmYGBYaadAW83E9TM4sqq7MScnNSi4jMMqOZPZtzPpMgIUnfm79XgB4x2DN2xDIwMchv81RZ/+yNVuXFTfeT0qoiaqd1NN5euj2PYpv/3ionU+4kZYf8fHBLUssjL/zBPRun75oY5H2rqnpg4djYqz+Vvvfz33fuY2uIENabH4l2FbPwJblo1n5yd3Cwfz02vbt9SrLggK81l4rGpF/8mHF/LwDD5whNb/Zozh+IVYzil3Crnxtx1ixfkWqZ+vu4NA8PBqM8TGTgZGBiYGBhmhu3cA/UXO8hf5Q3QyAB7WQWsiIUhLTMn1cCDgZGBGcoxZIGqgqlmYuAAS+gl5+ektDMwgpMAWNtyBha4GYaPGVjhHCMYpyEzJ9XYogFqEkM7lFaB0h5QejmUfszAwMaAlLxgyYYFbEI/lKfRAFJWkVhSUmQIUg5hwcWM4GJGAnCbmaC2zmVC9dxxJoZRMApGwSgYBaNgFIyCUTAKRsEoGMkAEAAA//9dNLVw") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 79.922033][ T5854] cgroup: Unknown subsys name 'net' [ 80.031297][ T5854] cgroup: Unknown subsys name 'cpuset' [ 80.040171][ T5854] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.684801][ T5854] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.263013][ T5867] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.280642][ T5867] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.289072][ T5867] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.297985][ T5867] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.305804][ T5867] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.361734][ T5182] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.378299][ T5182] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.387609][ T5182] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.396866][ T5182] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.406214][ T5182] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.423098][ T5182] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.431601][ T5182] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.494915][ T5870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.508379][ T5870] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.516405][ T5870] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.551502][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.553361][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.569632][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.579666][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.586766][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.595964][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.605306][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.613641][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.622182][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.629858][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.082224][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 85.229484][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 85.309336][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 85.536584][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.547646][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.555337][ T5864] bridge_slave_0: entered allmulticast mode [ 85.567751][ T5864] bridge_slave_0: entered promiscuous mode [ 85.627023][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.635708][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.644044][ T5864] bridge_slave_1: entered allmulticast mode [ 85.652930][ T5864] bridge_slave_1: entered promiscuous mode [ 85.673723][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 85.690757][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.698104][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.705372][ T5872] bridge_slave_0: entered allmulticast mode [ 85.713958][ T5872] bridge_slave_0: entered promiscuous mode [ 85.754425][ T5877] chnl_net:caif_netlink_parms(): no params data found [ 85.777033][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.784387][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.792437][ T5872] bridge_slave_1: entered allmulticast mode [ 85.800591][ T5872] bridge_slave_1: entered promiscuous mode [ 85.820611][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.828158][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.835649][ T5869] bridge_slave_0: entered allmulticast mode [ 85.843251][ T5869] bridge_slave_0: entered promiscuous mode [ 85.887985][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.901433][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.911384][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.918922][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.926499][ T5869] bridge_slave_1: entered allmulticast mode [ 85.933964][ T5869] bridge_slave_1: entered promiscuous mode [ 86.022484][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.046725][ T5864] team0: Port device team_slave_0 added [ 86.095513][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.106644][ T5864] team0: Port device team_slave_1 added [ 86.129951][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.189097][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.215380][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.222998][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.230535][ T5878] bridge_slave_0: entered allmulticast mode [ 86.238409][ T5878] bridge_slave_0: entered promiscuous mode [ 86.259701][ T5872] team0: Port device team_slave_0 added [ 86.266731][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.273774][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.301524][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.342078][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.349351][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.356481][ T5878] bridge_slave_1: entered allmulticast mode [ 86.363361][ T5870] Bluetooth: hci0: command tx timeout [ 86.370458][ T5878] bridge_slave_1: entered promiscuous mode [ 86.379701][ T5872] team0: Port device team_slave_1 added [ 86.402359][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.409529][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.436217][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.518824][ T5870] Bluetooth: hci1: command tx timeout [ 86.530547][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.544585][ T5869] team0: Port device team_slave_0 added [ 86.551157][ T5877] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.558731][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.565902][ T5877] bridge_slave_0: entered allmulticast mode [ 86.573252][ T5877] bridge_slave_0: entered promiscuous mode [ 86.580958][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.588321][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.614489][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.621439][ T5870] Bluetooth: hci2: command tx timeout [ 86.627536][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.637715][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.664157][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.677535][ T5870] Bluetooth: hci4: command tx timeout [ 86.677544][ T5875] Bluetooth: hci3: command tx timeout [ 86.696992][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.709036][ T5869] team0: Port device team_slave_1 added [ 86.715229][ T5877] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.722743][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.730676][ T5877] bridge_slave_1: entered allmulticast mode [ 86.738153][ T5877] bridge_slave_1: entered promiscuous mode [ 86.832021][ T5864] hsr_slave_0: entered promiscuous mode [ 86.838816][ T5864] hsr_slave_1: entered promiscuous mode [ 86.878122][ T5877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.892126][ T5878] team0: Port device team_slave_0 added [ 86.899258][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.906313][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.934294][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.960500][ T5877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.000909][ T5878] team0: Port device team_slave_1 added [ 87.024603][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.032144][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.058981][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.186777][ T5872] hsr_slave_0: entered promiscuous mode [ 87.194969][ T5872] hsr_slave_1: entered promiscuous mode [ 87.205585][ T5872] debugfs: 'hsr0' already exists in 'hsr' [ 87.212805][ T5872] Cannot create hsr debugfs directory [ 87.225383][ T5877] team0: Port device team_slave_0 added [ 87.236539][ T5877] team0: Port device team_slave_1 added [ 87.272557][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.280191][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.310929][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.331514][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.338561][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.365374][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.437300][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.444391][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.472978][ T5877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.561418][ T5877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.569639][ T5877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.597160][ T5877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.660570][ T5869] hsr_slave_0: entered promiscuous mode [ 87.667406][ T5869] hsr_slave_1: entered promiscuous mode [ 87.674003][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 87.680182][ T5869] Cannot create hsr debugfs directory [ 87.860244][ T5878] hsr_slave_0: entered promiscuous mode [ 87.866746][ T5878] hsr_slave_1: entered promiscuous mode [ 87.876551][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 87.882779][ T5878] Cannot create hsr debugfs directory [ 87.957842][ T5877] hsr_slave_0: entered promiscuous mode [ 87.965640][ T5877] hsr_slave_1: entered promiscuous mode [ 87.972306][ T5877] debugfs: 'hsr0' already exists in 'hsr' [ 87.978424][ T5877] Cannot create hsr debugfs directory [ 88.240455][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.297009][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.351076][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.414291][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.444560][ T5870] Bluetooth: hci0: command tx timeout [ 88.554591][ T5872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.572422][ T5872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.585559][ T5872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.598483][ T5870] Bluetooth: hci1: command tx timeout [ 88.612482][ T5872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.678228][ T5870] Bluetooth: hci2: command tx timeout [ 88.731715][ T5869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.745293][ T5869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.757486][ T5870] Bluetooth: hci3: command tx timeout [ 88.758018][ T5875] Bluetooth: hci4: command tx timeout [ 88.773736][ T5869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.786390][ T5869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.895235][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.917905][ T5878] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.973160][ T5878] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.988142][ T5878] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.000007][ T5878] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.076826][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.092090][ T5877] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.115542][ T5877] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.126818][ T5877] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.144782][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.152223][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.174567][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.188823][ T5877] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.211615][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.218925][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.271907][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.352545][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.359725][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.433434][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.440819][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.594597][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.682206][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.714994][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.791757][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.802955][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.810213][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.840793][ T5877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.853403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.860712][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.901159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.908710][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.940209][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.947557][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.972152][ T5877] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.989710][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.063200][ T2916] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.070547][ T2916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.115674][ T2916] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.123045][ T2916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.312151][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.374188][ T5864] veth0_vlan: entered promiscuous mode [ 90.446181][ T5864] veth1_vlan: entered promiscuous mode [ 90.519267][ T5875] Bluetooth: hci0: command tx timeout [ 90.600980][ T5864] veth0_macvtap: entered promiscuous mode [ 90.633903][ T5864] veth1_macvtap: entered promiscuous mode [ 90.683075][ T5875] Bluetooth: hci1: command tx timeout [ 90.744827][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.765519][ T5875] Bluetooth: hci2: command tx timeout [ 90.806026][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.818540][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.837690][ T5875] Bluetooth: hci4: command tx timeout [ 90.843156][ T5875] Bluetooth: hci3: command tx timeout [ 90.878537][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.904641][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.930365][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.964721][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.054485][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.083085][ T5877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.172523][ T5869] veth0_vlan: entered promiscuous mode [ 91.248325][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.255611][ T5869] veth1_vlan: entered promiscuous mode [ 91.265554][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.345020][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.362534][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.428769][ T5878] veth0_vlan: entered promiscuous mode [ 91.468689][ T5877] veth0_vlan: entered promiscuous mode [ 91.483487][ T5864] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.495803][ T5878] veth1_vlan: entered promiscuous mode [ 91.515879][ T5872] veth0_vlan: entered promiscuous mode [ 91.570777][ T5869] veth0_macvtap: entered promiscuous mode [ 91.582660][ T5872] veth1_vlan: entered promiscuous mode [ 91.603595][ T5877] veth1_vlan: entered promiscuous mode [ 91.640539][ T5982] loop0: detected capacity change from 0 to 1024 [ 91.656211][ T5869] veth1_macvtap: entered promiscuous mode [ 91.713344][ T5878] veth0_macvtap: entered promiscuous mode [ 91.733638][ T30] audit: type=1800 audit(1756982021.631:2): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 91.772216][ T5878] veth1_macvtap: entered promiscuous mode [ 91.833406][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.844019][ T5872] veth0_macvtap: entered promiscuous mode [ 91.876482][ T5877] veth0_macvtap: entered promiscuous mode [ 91.892850][ T5877] veth1_macvtap: entered promiscuous mode [ 91.904607][ T5872] veth1_macvtap: entered promiscuous mode [ 91.923921][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.945386][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.985965][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.008622][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.021868][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.045474][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.061501][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.074031][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.125314][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.141785][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.198734][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.209359][ T43] cfg80211: failed to load regulatory.db [ 92.222788][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.232147][ T1166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.252353][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.275686][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.299897][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.341806][ T5877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.354012][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.550630][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.560714][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.597647][ T5875] Bluetooth: hci0: command tx timeout [ 92.625144][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.633310][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.647120][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.654777][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.736658][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.752532][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.757718][ T5875] Bluetooth: hci1: command tx timeout [ 92.763405][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.838422][ T5875] Bluetooth: hci2: command tx timeout [ 92.917673][ T5875] Bluetooth: hci3: command tx timeout [ 92.918059][ T5870] Bluetooth: hci4: command tx timeout [ 92.946123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.973378][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.207369][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.215752][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.373892][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.393411][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.401769][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.454568][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.586139][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.586159][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.647089][ T5990] loop0: detected capacity change from 0 to 256 [ 93.826852][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.877492][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.974565][ T5996] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.217857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.975603][ T6026] loop0: detected capacity change from 0 to 256 [ 99.498124][ T6026] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 99.583967][ T30] audit: type=1326 audit(1756982029.481:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6015 comm="syz.3.4" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x0 [ 100.268482][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.129566][ T6048] netlink: 176 bytes leftover after parsing attributes in process `syz.4.12'. [ 103.803111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.467884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.697592][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.706686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.715696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.726275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.735078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.743939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.393560][ T6077] syz.4.20 (6077) used greatest stack depth: 16600 bytes left [ 106.968156][ T6083] netlink: 'syz.0.23': attribute type 23 has an invalid length. [ 108.376034][ T5921] IPVS: starting estimator thread 0... [ 108.432860][ T6102] netlink: 'syz.2.28': attribute type 1 has an invalid length. [ 108.487420][ T6100] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.634420][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.28'. [ 109.081899][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.208308][ T6104] veth3: entered promiscuous mode [ 111.889767][ T6119] kvm: pic: non byte write [ 115.757610][ T6149] netlink: 'syz.0.38': attribute type 39 has an invalid length. [ 115.876224][ T6149] veth0_macvtap: left promiscuous mode [ 118.412261][ T5879] IPVS: starting estimator thread 0... [ 118.549164][ T6183] IPVS: using max 28 ests per chain, 67200 per kthread [ 119.279200][ T6185] loop1: detected capacity change from 0 to 512 [ 119.366143][ T6185] EXT4-fs (loop1): Test dummy encryption mode enabled [ 119.449674][ T6177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.481512][ T6185] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 119.521914][ T6185] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 119.643315][ T6185] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.48: bad orphan inode 131083 [ 119.738583][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.036848][ T6205] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 121.459329][ T30] audit: type=1326 audit(1756982051.291:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 121.611848][ T30] audit: type=1326 audit(1756982051.291:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 121.636463][ T30] audit: type=1326 audit(1756982051.391:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 121.661257][ T30] audit: type=1326 audit(1756982051.391:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 121.687325][ T30] audit: type=1326 audit(1756982051.391:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 121.709799][ T30] audit: type=1326 audit(1756982051.391:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 122.398533][ T30] audit: type=1326 audit(1756982051.391:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 122.447923][ T30] audit: type=1326 audit(1756982051.391:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 122.473304][ T30] audit: type=1326 audit(1756982051.391:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 122.497049][ T30] audit: type=1326 audit(1756982051.391:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6207 comm="syz.0.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x7ffc0000 [ 122.587994][ T5869] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.899523][ T5998] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.637301][ T5998] usb 5-1: device not accepting address 2, error -71 [ 128.739764][ T6262] loop0: detected capacity change from 0 to 256 [ 129.429153][ T6262] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.937503][ T6269] loop0: detected capacity change from 0 to 128 [ 131.162878][ T6273] capability: warning: `syz.1.68' uses 32-bit capabilities (legacy support in use) [ 131.438331][ T2916] kworker/u8:7: attempt to access beyond end of device [ 131.438331][ T2916] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 131.462220][ T2916] kworker/u8:7: attempt to access beyond end of device [ 131.462220][ T2916] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 131.479905][ T2916] kworker/u8:7: attempt to access beyond end of device [ 131.479905][ T2916] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 132.012574][ T6269] syz.0.66: attempt to access beyond end of device [ 132.012574][ T6269] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 132.031605][ T2916] kworker/u8:7: attempt to access beyond end of device [ 132.031605][ T2916] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 132.047092][ T2916] kworker/u8:7: attempt to access beyond end of device [ 132.047092][ T2916] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 132.546998][ T2916] kworker/u8:7: attempt to access beyond end of device [ 132.546998][ T2916] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 132.569875][ T2916] kworker/u8:7: attempt to access beyond end of device [ 132.569875][ T2916] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 132.594022][ T2916] kworker/u8:7: attempt to access beyond end of device [ 132.594022][ T2916] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 132.611547][ T2916] kworker/u8:7: attempt to access beyond end of device [ 132.611547][ T2916] loop0: rw=1, sector=313, nr_sectors = 8 limit=128 [ 133.375755][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.383201][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.397419][ T5998] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.657465][ T5998] usb 2-1: Using ep0 maxpacket: 16 [ 140.648110][ T5998] usb 2-1: device descriptor read/all, error -71 [ 140.744283][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 142.410276][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 142.410297][ T30] audit: type=1326 audit(1756982072.301:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6358 comm="syz.3.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x0 [ 156.302037][ T6455] loop0: detected capacity change from 0 to 1024 [ 162.576050][ T755] hfsplus: b-tree write err: -5, ino 4 [ 165.276293][ T30] audit: type=1326 audit(1756982095.175:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6486 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd64ed8ebe9 code=0x0 [ 167.305227][ T6508] process 'syz.1.126' launched './file0' with NULL argv: empty string added [ 169.399590][ T6523] loop4: detected capacity change from 0 to 512 [ 169.410174][ T6526] warning: `syz.3.131' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 169.414991][ T6523] EXT4-fs (loop4): Test dummy encryption mode enabled [ 169.433594][ T6523] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.513913][ T6529] netlink: 'syz.3.131': attribute type 10 has an invalid length. [ 170.662335][ T6523] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.130: bad orphan inode 131083 [ 170.755183][ T6523] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.894458][ T6529] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 173.004000][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.660963][ T6584] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 178.090366][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.609898][ T30] audit: type=1326 audit(1756982108.485:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2a7d8ebe9 code=0x0 [ 179.950523][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.144'. [ 180.719838][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.728474][ T6586] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 180.789627][ T6586] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 181.141912][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'. [ 181.371810][ T6587] veth3: entered promiscuous mode [ 181.395853][ T6587] bond1: (slave veth3): Enslaving as an active interface with a down link [ 181.437408][ T6584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.509720][ T6613] bridge_slave_0: left allmulticast mode [ 182.127301][ T6613] bridge_slave_0: left promiscuous mode [ 182.154595][ T6613] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.345482][ T6613] bridge_slave_1: left allmulticast mode [ 183.184348][ T6613] bridge_slave_1: left promiscuous mode [ 183.291374][ T6613] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.695647][ T6613] bond0: (slave bond_slave_0): Releasing backup interface [ 184.950726][ T6613] bond0: (slave bond_slave_1): Releasing backup interface [ 185.834746][ T6613] team0: Port device team_slave_0 removed [ 185.920042][ T6613] team0: Port device team_slave_1 removed [ 185.943619][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.978680][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.991061][ T6613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.999706][ T6613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.201262][ T30] audit: type=1326 audit(1756982116.625:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6645 comm="syz.4.159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53f478ebe9 code=0x0 [ 187.415943][ T6655] tipc: Started in network mode [ 187.422804][ T6655] tipc: Node identity 465232a72619, cluster identity 4711 [ 187.431217][ T6655] tipc: Enabled bearer , priority 0 [ 188.394431][ T6655] syzkaller0: entered promiscuous mode [ 188.913504][ T5928] tipc: Node number set to 1615540903 [ 189.001224][ T6655] syzkaller0: entered allmulticast mode [ 189.219059][ T6651] tipc: Resetting bearer [ 190.108190][ T6651] tipc: Disabling bearer [ 190.158612][ T6684] loop1: detected capacity change from 0 to 2048 [ 190.192628][ T6684] NILFS (loop1): invalid segment: Magic number mismatch [ 190.200064][ T6684] NILFS (loop1): trying rollback from an earlier position [ 190.221750][ T6684] NILFS (loop1): recovery complete [ 191.059353][ T6688] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 192.262312][ T5970] libceph: connect (1)[c::]:6789 error -101 [ 192.287096][ T5970] libceph: mon0 (1)[c::]:6789 connect error [ 192.865417][ T5970] libceph: connect (1)[c::]:6789 error -101 [ 192.872668][ T5970] libceph: mon0 (1)[c::]:6789 connect error [ 193.160657][ T5998] libceph: connect (1)[c::]:6789 error -101 [ 193.203996][ T5998] libceph: mon0 (1)[c::]:6789 connect error [ 193.547349][ T6694] ceph: No mds server is up or the cluster is laggy [ 194.518081][ T5970] libceph: connect (1)[c::]:6789 error -101 [ 194.524323][ T5970] libceph: mon0 (1)[c::]:6789 connect error [ 194.607961][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614394][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.921452][ T6718] vivid-001: disconnect [ 194.927693][ T6718] vivid-001: reconnect [ 204.408610][ T6782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 204.633436][ T6782] netlink: 'syz.0.192': attribute type 1 has an invalid length. [ 205.523586][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 205.752284][ T6791] tipc: Enabling of bearer rejected, failed to enable media [ 206.899365][ T6797] loop2: detected capacity change from 0 to 131072 [ 206.942898][ T6797] F2FS-fs (loop2): invalid crc value [ 207.063596][ T6797] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 207.090428][ T6797] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 207.158321][ T5875] Bluetooth: hci0: command 0x0406 tx timeout [ 207.165385][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 207.172522][ T5875] Bluetooth: hci4: command 0x0406 tx timeout [ 207.180094][ T5870] Bluetooth: hci2: command 0x0406 tx timeout [ 207.186247][ T5870] Bluetooth: hci3: command 0x0406 tx timeout [ 208.061027][ T6797] F2FS-fs (loop2): f2fs_lookup: inode (ino=4) has zero i_nlink [ 212.218066][ T6840] Zero length message leads to an empty skb [ 216.089078][ T6861] loop4: detected capacity change from 0 to 1024 [ 217.240994][ T6861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.396883][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.638044][ T5182] Bluetooth: hci4: unexpected event for opcode 0x200b [ 227.049660][ T6958] loop4: detected capacity change from 0 to 128 [ 227.339802][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 227.595463][ T6958] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.688735][ T6958] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 228.864181][ T2916] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 230.836717][ T6987] loop4: detected capacity change from 0 to 256 [ 230.884956][ T6987] ======================================================= [ 230.884956][ T6987] WARNING: The mand mount option has been deprecated and [ 230.884956][ T6987] and is ignored by this kernel. Remove the mand [ 230.884956][ T6987] option from the mount to silence this warning. [ 230.884956][ T6987] ======================================================= [ 231.009749][ T6987] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.022961][ T6987] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 231.211088][ T6987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 236.934115][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.245'. [ 246.263282][ T7075] netlink: 48 bytes leftover after parsing attributes in process `syz.4.258'. [ 250.604287][ T7118] loop4: detected capacity change from 0 to 47 [ 250.830445][ T7111] loop0: detected capacity change from 0 to 4096 [ 251.660702][ T7111] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.724011][ T7129] MINIX-fs: deleted inode referenced: 9 [ 251.755942][ T7129] MINIX-fs: deleted inode referenced: 9 [ 253.006131][ T5864] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.498967][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.505485][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.558442][ T7179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 258.775980][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.704698][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.289'. [ 264.100279][ T7223] loop4: detected capacity change from 0 to 512 [ 264.114603][ T7223] EXT4-fs: Ignoring removed nobh option [ 264.162770][ T7223] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.291: iget: bad i_size value: 38620345925642 [ 264.272299][ T7223] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.291: couldn't read orphan inode 15 (err -117) [ 264.328482][ T7223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.749485][ T7232] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.291: bg 0: block 5: invalid block bitmap [ 265.032808][ T7232] overlayfs: failed to verify upper root origin [ 265.359964][ T5872] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.004080][ T7257] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.300'. [ 268.013938][ T7257] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.300'. [ 269.328117][ T7250] wireguard0: entered promiscuous mode [ 269.333782][ T7250] wireguard0: entered allmulticast mode [ 269.639795][ T7265] syzkaller0: entered promiscuous mode [ 269.678224][ T7265] syzkaller0: entered allmulticast mode [ 269.714353][ T7263] tipc: Started in network mode [ 270.509095][ T7263] tipc: Node identity 1a4b4fc0686a, cluster identity 4711 [ 270.571536][ T7263] tipc: Enabled bearer , priority 0 [ 270.588052][ T7274] netlink: 'syz.2.304': attribute type 4 has an invalid length. [ 271.247795][ T7261] tipc: Resetting bearer [ 271.318297][ T7261] tipc: Disabling bearer [ 271.711427][ T6483] tipc: Node number set to 1914785728 [ 272.688956][ T7287] netlink: 'syz.4.307': attribute type 10 has an invalid length. [ 273.157471][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.615160][ T7287] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 277.412765][ T7350] loop1: detected capacity change from 0 to 32768 [ 277.490801][ T7350] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 277.812744][ T7350] XFS (loop1): Ending clean mount [ 277.827398][ T7350] XFS (loop1): Quotacheck needed: Please wait. [ 278.606372][ T7350] XFS (loop1): Quotacheck: Done. [ 281.110983][ T5869] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 281.123731][ T7376] GUP no longer grows the stack in syz.4.321 (7376): 200000005000-200000008000 (200000004000) [ 281.147350][ T7376] CPU: 1 UID: 0 PID: 7376 Comm: syz.4.321 Not tainted syzkaller #0 PREEMPT(full) [ 281.147380][ T7376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.147390][ T7376] Call Trace: [ 281.147407][ T7376] [ 281.147416][ T7376] dump_stack_lvl+0x189/0x250 [ 281.147451][ T7376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.147475][ T7376] ? __pfx__printk+0x10/0x10 [ 281.147498][ T7376] ? find_vma+0xe7/0x160 [ 281.147542][ T7376] __get_user_pages+0x24d0/0x2ce0 [ 281.147563][ T7376] ? __lock_acquire+0xab9/0xd20 [ 281.147621][ T7376] ? __gup_longterm_locked+0xc68/0x1660 [ 281.147654][ T7376] __gup_longterm_locked+0xde9/0x1660 [ 281.147702][ T7376] ? gup_fast_fallback+0x1b15/0x2240 [ 281.147730][ T7376] gup_fast_fallback+0x1cef/0x2240 [ 281.147798][ T7376] ? __pfx_gup_fast_fallback+0x10/0x10 [ 281.147818][ T7376] ? futex_unqueue+0x22/0x240 [ 281.147847][ T7376] ? futex_unqueue+0x22/0x240 [ 281.147866][ T7376] ? is_valid_gup_args+0x11f/0x200 [ 281.147892][ T7376] ? get_user_pages_fast+0x4d/0xb0 [ 281.147919][ T7376] get_futex_key+0x938/0x1660 [ 281.147953][ T7376] ? __pfx_get_futex_key+0x10/0x10 [ 281.147973][ T7376] ? __pfx_futex_wake_mark+0x10/0x10 [ 281.148012][ T7376] futex_wake_op+0x132/0xd80 [ 281.148054][ T7376] ? __pfx_futex_wake_op+0x10/0x10 [ 281.148085][ T7376] ? __lock_acquire+0xab9/0xd20 [ 281.148125][ T7376] ? __might_fault+0xb0/0x130 [ 281.148152][ T7376] do_futex+0x3bd/0x420 [ 281.148183][ T7376] ? __pfx_do_futex+0x10/0x10 [ 281.148206][ T7376] ? rcu_is_watching+0x15/0xb0 [ 281.148232][ T7376] __se_sys_futex+0x36f/0x400 [ 281.148264][ T7376] ? __pfx___se_sys_futex+0x10/0x10 [ 281.148296][ T7376] ? __x64_sys_futex+0x21/0xf0 [ 281.148323][ T7376] do_syscall_64+0xfa/0xfa0 [ 281.148345][ T7376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.148362][ T7376] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 281.148381][ T7376] ? clear_bhb_loop+0x60/0xb0 [ 281.148412][ T7376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.148430][ T7376] RIP: 0033:0x7f53f478ebe9 [ 281.148449][ T7376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.148464][ T7376] RSP: 002b:00007f53f5542038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 281.148486][ T7376] RAX: ffffffffffffffda RBX: 00007f53f49c6090 RCX: 00007f53f478ebe9 [ 281.148500][ T7376] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000200000004000 [ 281.148512][ T7376] RBP: 00007f53f4811e19 R08: 0000200000004000 R09: 00000000a3020000 [ 281.148525][ T7376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.148536][ T7376] R13: 00007f53f49c6128 R14: 00007f53f49c6090 R15: 00007ffd2068ff28 [ 281.148574][ T7376] [ 281.927407][ T7388] loop4: detected capacity change from 0 to 64 [ 288.738474][ T30] audit: type=1107 audit(1756982217.455:32): pid=7430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 294.189232][ T7464] loop4: detected capacity change from 0 to 2048 [ 294.423924][ T7464] EXT4-fs (loop4): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.526338][ T7475] tipc: Enabled bearer , priority 0 [ 294.533965][ T7475] syzkaller0: entered promiscuous mode [ 294.539930][ T7475] syzkaller0: entered allmulticast mode [ 295.088006][ T7477] tipc: Resetting bearer [ 295.851505][ T7474] tipc: Resetting bearer [ 295.886276][ T5872] EXT4-fs (loop4): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 296.092039][ T7474] tipc: Disabling bearer [ 296.116653][ T30] audit: type=1326 audit(1756982226.015:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7482 comm="syz.1.345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ec018ebe9 code=0x0 [ 302.790714][ T7524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.351'. [ 302.801197][ T7524] unsupported nlmsg_type 40 [ 303.412972][ T7526] tipc: Started in network mode [ 303.418365][ T7526] tipc: Node identity cad3c8e9192c, cluster identity 4711 [ 303.430415][ T7526] tipc: Enabled bearer , priority 0 [ 303.623007][ T7526] syzkaller0: entered promiscuous mode [ 303.673069][ T7526] syzkaller0: entered allmulticast mode [ 303.723743][ T7526] tipc: Resetting bearer [ 304.439274][ T5865] tipc: Node number set to 3556755689 [ 304.576494][ T7525] tipc: Resetting bearer [ 304.669921][ T7525] tipc: Disabling bearer [ 309.827254][ T7572] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 317.757769][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.765305][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.266452][ T30] audit: type=1326 audit(1756982248.155:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x7ffc0000 [ 318.342234][ T30] audit: type=1326 audit(1756982248.195:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f996698ebe9 code=0x7ffc0000 [ 318.501419][ T30] audit: type=1326 audit(1756982248.195:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x7ffc0000 [ 318.794316][ T30] audit: type=1326 audit(1756982248.195:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x7ffc0000 [ 318.921840][ T30] audit: type=1326 audit(1756982248.205:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f996698d550 code=0x7ffc0000 [ 319.134003][ T30] audit: type=1326 audit(1756982248.205:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x7ffc0000 [ 319.175748][ T30] audit: type=1326 audit(1756982248.205:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f996698ebe9 code=0x7ffc0000 [ 319.207666][ T30] audit: type=1326 audit(1756982248.205:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9966990b07 code=0x7ffc0000 [ 319.824822][ T30] audit: type=1326 audit(1756982248.215:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9966990a7c code=0x7ffc0000 [ 319.847309][ T30] audit: type=1326 audit(1756982248.215:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.3.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f99669909b4 code=0x7ffc0000 [ 320.343354][ T7667] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 320.359058][ T7667] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 324.645325][ T7689] loop0: detected capacity change from 0 to 128 [ 324.689923][ T7689] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 324.859703][ T7689] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 332.162760][ T7735] loop4: detected capacity change from 0 to 2048 [ 333.120862][ T7735] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 333.957884][ T7749] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 339.459142][ T7779] loop4: detected capacity change from 0 to 64 [ 341.133245][ T7785] netlink: 16 bytes leftover after parsing attributes in process `syz.3.424'. [ 341.142933][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 341.152505][ T7785] netlink: 72 bytes leftover after parsing attributes in process `syz.3.424'. [ 341.289879][ T5182] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 341.978847][ T5872] hfs: walked past end of dir [ 344.396067][ T7806] loop4: detected capacity change from 0 to 8 [ 348.230595][ T7824] batadv0: entered promiscuous mode [ 348.259543][ T7824] vlan2: entered promiscuous mode [ 348.268563][ T7827] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 348.296000][ T7827] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 349.559953][ T7835] Process accounting resumed [ 351.591932][ T7852] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 353.827823][ T7868] overlayfs: failed to clone upperpath [ 354.575970][ T7877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 356.791980][ T7893] loop0: detected capacity change from 0 to 1764 [ 360.581191][ T7908] loop1: detected capacity change from 0 to 128 [ 360.629651][ T7908] EXT4-fs (loop1): Test dummy encryption mode enabled [ 360.720116][ T7908] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 360.797690][ T7908] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 363.246404][ T7930] trusted_key: syz.0.462 sent an empty control message without MSG_MORE. [ 363.521028][ T5869] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 363.563097][ T7933] loop0: detected capacity change from 0 to 64 [ 365.504155][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 366.932129][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 370.437419][ T10] usb 2-1: device descriptor read/all, error -71 [ 370.789254][ T5864] hfs: request for non-existent node 131072 in B*Tree [ 372.278140][ T7977] tipc: Enabled bearer , priority 10 [ 373.078101][ T7981] overlayfs: failed to clone upperpath [ 373.893598][ T7977] tipc: Enabled bearer , priority 0 [ 373.956846][ T7986] loop1: detected capacity change from 0 to 128 [ 374.015269][ T7986] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 374.517398][ T7986] loop1: detected capacity change from 0 to 40427 [ 374.769454][ T7986] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 374.777781][ T7986] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 374.816682][ T7986] F2FS-fs (loop1): invalid crc value [ 374.973481][ T7986] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 375.012679][ T7986] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 375.019938][ T7986] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 375.774456][ T7999] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'. [ 377.850577][ T8008] netlink: 20 bytes leftover after parsing attributes in process `syz.4.459'. [ 377.987422][ T8008] nbd: device at index 64 is going down [ 378.930256][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.936760][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.181011][ T7963] udevd[7963]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 379.310347][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.487'. [ 379.951262][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 379.976804][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 379.987024][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.696368][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.707036][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 381.721200][ T6906] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.711326][ T8040] chnl_net:caif_netlink_parms(): no params data found [ 382.987361][ T5182] Bluetooth: hci5: command tx timeout [ 383.013362][ T6906] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.935666][ T6906] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.057448][ T5182] Bluetooth: hci5: command tx timeout [ 385.692649][ T6906] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.638880][ T8040] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.717561][ T8040] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.725505][ T8040] bridge_slave_0: entered allmulticast mode [ 386.734437][ T8040] bridge_slave_0: entered promiscuous mode [ 386.761296][ T8040] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.768894][ T8040] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.776879][ T8040] bridge_slave_1: entered allmulticast mode [ 386.786314][ T8040] bridge_slave_1: entered promiscuous mode [ 387.127331][ T5182] Bluetooth: hci5: command tx timeout [ 387.870783][ T8040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.919184][ T8040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.158734][ T5182] Bluetooth: hci5: command tx timeout [ 390.086547][ T8040] team0: Port device team_slave_0 added [ 390.095753][ T8040] team0: Port device team_slave_1 added [ 391.670300][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.678192][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.704551][ T8040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.764332][ T6906] bridge_slave_1: left allmulticast mode [ 391.773790][ T6906] bridge_slave_1: left promiscuous mode [ 391.800692][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.973670][ T8122] loop0: detected capacity change from 0 to 2048 [ 391.981792][ T6906] bridge_slave_0: left allmulticast mode [ 391.997282][ T6906] bridge_slave_0: left promiscuous mode [ 392.004582][ T6906] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.882186][ T8122] NILFS (loop0): invalid segment: Inconsistency found [ 392.921319][ T8128] syz.3.510 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 392.985061][ T8122] NILFS (loop0): trying rollback from an earlier position [ 393.245865][ T8122] NILFS (loop0): recovery complete [ 393.280803][ T8135] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 394.403525][ T8122] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 394.476842][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 399.824331][ T6906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.867615][ T6906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.922722][ T6906] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 399.954388][ T6906] bond0 (unregistering): Released all slaves [ 400.111417][ T8040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.118940][ T8040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.867271][ T8040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.178714][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 403.794939][ T8040] hsr_slave_0: entered promiscuous mode [ 403.840875][ T8040] hsr_slave_1: entered promiscuous mode [ 403.864923][ T8040] debugfs: 'hsr0' already exists in 'hsr' [ 403.873235][ T8040] Cannot create hsr debugfs directory [ 404.458811][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.526'. [ 404.497862][ T2916] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.577489][ T6913] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.598969][ T6913] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 404.745057][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 405.277694][ T6913] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 405.424475][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 405.632638][ T10] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 405.708520][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.733960][ T10] usb 1-1: Product: syz [ 405.750726][ T10] usb 1-1: Manufacturer: syz [ 405.755786][ T10] usb 1-1: SerialNumber: syz [ 405.859094][ T10] usb 1-1: config 0 descriptor?? [ 405.919762][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 406.415814][ T6906] hsr_slave_0: left promiscuous mode [ 406.449038][ T6906] hsr_slave_1: left promiscuous mode [ 406.477844][ T6906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.489347][ T6906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.543899][ T6906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.579160][ T6906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.856257][ T10] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 407.629285][ T10] usb 1-1: USB disconnect, device number 2 [ 407.630359][ T6906] veth1_macvtap: left promiscuous mode [ 407.733162][ T6906] veth0_macvtap: left promiscuous mode [ 407.877474][ T6906] veth1_vlan: left promiscuous mode [ 407.883025][ T6906] veth0_vlan: left promiscuous mode [ 410.862318][ T6906] team0 (unregistering): Port device team_slave_1 removed [ 410.946493][ T6906] team0 (unregistering): Port device team_slave_0 removed [ 413.704959][ T8263] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 413.718339][ T8263] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 415.343814][ T8305] netlink: 108 bytes leftover after parsing attributes in process `syz.0.544'. [ 416.411760][ T8040] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.479470][ T8316] loop1: detected capacity change from 0 to 47 [ 417.613639][ T8040] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.867944][ T8040] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 418.769976][ T8040] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 422.201178][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 422.223907][ T8040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.382811][ T8040] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.401522][ T8351] ================================================================== [ 422.410158][ T8351] BUG: KASAN: wild-memory-access in __sha512_update+0x10d/0x1d0 [ 422.418062][ T8351] Read of size 2 at addr 0005088000000000 by task syz.1.554/8351 [ 422.425977][ T8351] [ 422.428310][ T8351] CPU: 1 UID: 0 PID: 8351 Comm: syz.1.554 Not tainted syzkaller #0 PREEMPT(full) [ 422.428330][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.428342][ T8351] Call Trace: [ 422.428350][ T8351] [ 422.428358][ T8351] dump_stack_lvl+0x189/0x250 [ 422.428387][ T8351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.428416][ T8351] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 422.428445][ T8351] ? __virt_addr_valid+0x7c/0x5c0 [ 422.428471][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.428494][ T8351] kasan_report+0x118/0x150 [ 422.428523][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.428547][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.428570][ T8351] kasan_check_range+0x2b0/0x2c0 [ 422.428597][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.428621][ T8351] __asan_memcpy+0x29/0x70 [ 422.428642][ T8351] __sha512_update+0x10d/0x1d0 [ 422.428667][ T8351] crypto_sha512_update+0x27/0x40 [ 422.428688][ T8351] shash_ahash_update+0x213/0x2f0 [ 422.428714][ T8351] hash_sendmsg+0x96b/0x11d0 [ 422.428749][ T8351] ? __pfx_hash_sendmsg+0x10/0x10 [ 422.428773][ T8351] __sock_sendmsg+0x21c/0x270 [ 422.428803][ T8351] ____sys_sendmsg+0x52d/0x830 [ 422.428827][ T8351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.428853][ T8351] ? import_iovec+0x74/0xa0 [ 422.428877][ T8351] ___sys_sendmsg+0x21f/0x2a0 [ 422.428899][ T8351] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.428937][ T8351] ? __fget_files+0x2a/0x420 [ 422.428962][ T8351] ? __fget_files+0x3a0/0x420 [ 422.428992][ T8351] __sys_sendmmsg+0x227/0x430 [ 422.429016][ T8351] ? __pfx___sys_sendmmsg+0x10/0x10 [ 422.429042][ T8351] ? __pfx_do_futex+0x10/0x10 [ 422.429078][ T8351] __x64_sys_sendmmsg+0xa0/0xc0 [ 422.429100][ T8351] do_syscall_64+0xfa/0xfa0 [ 422.429118][ T8351] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.429135][ T8351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.429152][ T8351] ? clear_bhb_loop+0x60/0xb0 [ 422.429172][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.429191][ T8351] RIP: 0033:0x7f9ec018ebe9 [ 422.429209][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.429225][ T8351] RSP: 002b:00007f9ec0ff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 422.429246][ T8351] RAX: ffffffffffffffda RBX: 00007f9ec03c6090 RCX: 00007f9ec018ebe9 [ 422.429260][ T8351] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 422.429273][ T8351] RBP: 00007f9ec0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 422.429284][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.429295][ T8351] R13: 00007f9ec03c6128 R14: 00007f9ec03c6090 R15: 00007ffc2d259dd8 [ 422.429318][ T8351] [ 422.429324][ T8351] ================================================================== [ 422.835575][ T8351] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 422.843279][ T8351] CPU: 0 UID: 0 PID: 8351 Comm: syz.1.554 Not tainted syzkaller #0 PREEMPT(full) [ 422.852748][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.862815][ T8351] Call Trace: [ 422.866095][ T8351] [ 422.869021][ T8351] dump_stack_lvl+0x99/0x250 [ 422.873711][ T8351] ? __asan_memcpy+0x40/0x70 [ 422.878431][ T8351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.883642][ T8351] ? __pfx__printk+0x10/0x10 [ 422.888350][ T8351] vpanic+0x237/0x6d0 [ 422.892467][ T8351] ? __pfx_vpanic+0x10/0x10 [ 422.897119][ T8351] ? preempt_schedule_common+0x83/0xd0 [ 422.902794][ T8351] ? preempt_schedule+0xae/0xc0 [ 422.907789][ T8351] panic+0xb9/0xc0 [ 422.911541][ T8351] ? __pfx_panic+0x10/0x10 [ 422.915997][ T8351] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 422.922444][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.927415][ T8351] check_panic_on_warn+0x89/0xb0 [ 422.932392][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.937455][ T8351] end_report+0x78/0x160 [ 422.941755][ T8351] kasan_report+0x129/0x150 [ 422.946304][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.951280][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.956393][ T8351] kasan_check_range+0x2b0/0x2c0 [ 422.961435][ T8351] ? __sha512_update+0x10d/0x1d0 [ 422.966560][ T8351] __asan_memcpy+0x29/0x70 [ 422.971098][ T8351] __sha512_update+0x10d/0x1d0 [ 422.975926][ T8351] crypto_sha512_update+0x27/0x40 [ 422.980997][ T8351] shash_ahash_update+0x213/0x2f0 [ 422.986124][ T8351] hash_sendmsg+0x96b/0x11d0 [ 422.990829][ T8351] ? __pfx_hash_sendmsg+0x10/0x10 [ 422.995992][ T8351] __sock_sendmsg+0x21c/0x270 [ 423.000703][ T8351] ____sys_sendmsg+0x52d/0x830 [ 423.005505][ T8351] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.010906][ T8351] ? import_iovec+0x74/0xa0 [ 423.015467][ T8351] ___sys_sendmsg+0x21f/0x2a0 [ 423.020260][ T8351] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.025664][ T8351] ? __fget_files+0x2a/0x420 [ 423.030368][ T8351] ? __fget_files+0x3a0/0x420 [ 423.035100][ T8351] __sys_sendmmsg+0x227/0x430 [ 423.039793][ T8351] ? __pfx___sys_sendmmsg+0x10/0x10 [ 423.045590][ T8351] ? __pfx_do_futex+0x10/0x10 [ 423.050299][ T8351] __x64_sys_sendmmsg+0xa0/0xc0 [ 423.055257][ T8351] do_syscall_64+0xfa/0xfa0 [ 423.059895][ T8351] ? lockdep_hardirqs_on+0x9c/0x150 [ 423.065270][ T8351] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.071466][ T8351] ? clear_bhb_loop+0x60/0xb0 [ 423.076161][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.082058][ T8351] RIP: 0033:0x7f9ec018ebe9 [ 423.086516][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.106223][ T8351] RSP: 002b:00007f9ec0ff5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.114859][ T8351] RAX: ffffffffffffffda RBX: 00007f9ec03c6090 RCX: 00007f9ec018ebe9 [ 423.123121][ T8351] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007 [ 423.131197][ T8351] RBP: 00007f9ec0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 423.139212][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.147230][ T8351] R13: 00007f9ec03c6128 R14: 00007f9ec03c6090 R15: 00007ffc2d259dd8 [ 423.155491][ T8351] [ 423.158816][ T8351] Kernel Offset: disabled [ 423.163157][ T8351] Rebooting in 86400 seconds..