last executing test programs: 11.412356177s ago: executing program 1 (id=2): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x400}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000806010200000000000000000100000a05"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) io_uring_enter(r0, 0x5e4c, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.320062147s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) getpid() syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000340)) 11.231615395s ago: executing program 1 (id=5): r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f00008a0000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, &(0x7f00006f1000/0x3000)=nil, &(0x7f00005da000/0x3000)=nil, &(0x7f0000b43000/0x4000)=nil, &(0x7f0000581000/0x2000)=nil, &(0x7f00001d1000/0x4000)=nil, &(0x7f00007e6000/0x3000)=nil, &(0x7f00006a0000/0x4000)=nil, &(0x7f00006bd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r5}, 0x68) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x10) socketpair(0x18, 0xa, 0x2, &(0x7f00000003c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff"], 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) 10.086917316s ago: executing program 2 (id=6): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x9, 0x201, &(0x7f0000000f40)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x8) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@multicast2, @local}) gettid() ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sendmsg$unix(0xffffffffffffffff, 0x0, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x20) vmsplice(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept$unix(r1, &(0x7f0000000200)=@abs, 0x0) connect$unix(r5, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r0, 0x1000) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x2b) 9.253760198s ago: executing program 1 (id=7): fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x34f0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 8.281999673s ago: executing program 1 (id=8): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="1810000000000000000000000000000018070000", @ANYRES32=r3, @ANYBLOB="000000000000abc5262af6926c7200007b8adcbef8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000001440)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffe6eb}, 0x94) r4 = getpid() r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r5, 0x5c332000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001ba00)=""/102400, 0x19000) pipe(0x0) sendfile(r1, r2, 0x0, 0x20000023896) inotify_init() openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8.099138481s ago: executing program 3 (id=4): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.539007313s ago: executing program 3 (id=9): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a9407000000b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6000000000000000000000000eeffffffffffffff00", 0x87}, {&(0x7f0000000780)="029993440c7a1d95d30000000000000002ffa3250ff1fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e430bcb03", 0x3e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 5.425288561s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x80, 0x4) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) 4.51505541s ago: executing program 2 (id=11): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0x0, 0x400}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000806010200000000000000000100000a0500"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4084) io_uring_enter(r0, 0x5e4c, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.346347227s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xb1, 0x2, 0x7ffc1ff8}]}) r5 = io_uring_setup(0xb9b, &(0x7f0000000000)={0x0, 0x2f2a, 0x480, 0x4, 0xc8}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) waitid(0x0, r4, &(0x7f0000000000), 0x8, &(0x7f0000000400)) ioprio_get$pid(0x2, r0) 4.150456386s ago: executing program 3 (id=12): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000340)) 3.234918915s ago: executing program 3 (id=13): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000300)=0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r4, 0x0, &(0x7f0000000340), 0x80000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xcb3e) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x88}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) sendfile(r5, r5, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}]}, 0x1c}}, 0x0) 2.316896675s ago: executing program 0 (id=14): fanotify_mark(0xffffffffffffffff, 0x201, 0x4800003e, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x7, 0x2, 0x20}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x407, 0x34f0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/4095, 0xfff}], 0x1, 0x4f, 0x205) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008894}, 0x4000054) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.291163037s ago: executing program 2 (id=15): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84000) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRESHEX=r2, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0xe, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="1810000000000000000000000000000018070000", @ANYRES32=r3, @ANYBLOB="000000000000abc5262af6926c7200007b8adcbef8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f9ff000085000000020000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x1006, &(0x7f0000001440)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x57, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffe6eb}, 0x94) r4 = getpid() r5 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r5, 0x5c332000) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f000001ba00)=""/102400, 0x19000) pipe(0x0) sendfile(r1, r2, 0x0, 0x20000023896) inotify_init() openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) symlinkat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') fadvise64(r7, 0xe0ffff, 0x9, 0x3) truncate(&(0x7f0000000000)='./file2\x00', 0x9) 0s ago: executing program 2 (id=16): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001822", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 67.199859][ T5780] cgroup: Unknown subsys name 'net' [ 67.341958][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.013756][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.970896][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.980219][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.988778][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.999313][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.008402][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.016806][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.053444][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.063557][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.077971][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.125070][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.153069][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.168716][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.185095][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.187802][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.193415][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.202375][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.210290][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.219698][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.249955][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.261564][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.275146][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.287211][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.296393][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.306412][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.679797][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.687333][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.726574][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 71.869880][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.878321][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.886586][ T5790] bridge_slave_0: entered allmulticast mode [ 71.893989][ T5790] bridge_slave_0: entered promiscuous mode [ 71.909645][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.919344][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.927408][ T5790] bridge_slave_1: entered allmulticast mode [ 71.937339][ T5790] bridge_slave_1: entered promiscuous mode [ 71.956402][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 71.981620][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 72.066707][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.081830][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.143799][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 72.218159][ T5790] team0: Port device team_slave_0 added [ 72.241146][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.251485][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.262066][ T5795] bridge_slave_0: entered allmulticast mode [ 72.270913][ T5795] bridge_slave_0: entered promiscuous mode [ 72.285207][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.293854][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.307449][ T5795] bridge_slave_1: entered allmulticast mode [ 72.322375][ T5795] bridge_slave_1: entered promiscuous mode [ 72.343170][ T5790] team0: Port device team_slave_1 added [ 72.451164][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.463214][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.472199][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.481533][ T5794] bridge_slave_0: entered allmulticast mode [ 72.489667][ T5794] bridge_slave_0: entered promiscuous mode [ 72.498268][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.506089][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.537040][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.562662][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.601210][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.609742][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.618923][ T5794] bridge_slave_1: entered allmulticast mode [ 72.627982][ T5794] bridge_slave_1: entered promiscuous mode [ 72.638931][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.647794][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.678964][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.745364][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.753717][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.761965][ T5801] bridge_slave_0: entered allmulticast mode [ 72.769863][ T5801] bridge_slave_0: entered promiscuous mode [ 72.781524][ T5795] team0: Port device team_slave_0 added [ 72.805219][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.824605][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.837042][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.849651][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.858529][ T5801] bridge_slave_1: entered allmulticast mode [ 72.873959][ T5801] bridge_slave_1: entered promiscuous mode [ 72.883369][ T5795] team0: Port device team_slave_1 added [ 73.003206][ T5794] team0: Port device team_slave_0 added [ 73.018918][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.030600][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.039397][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.071041][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.085673][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.093551][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.125454][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.140855][ T5106] Bluetooth: hci0: command tx timeout [ 73.152547][ T5790] hsr_slave_0: entered promiscuous mode [ 73.160377][ T5790] hsr_slave_1: entered promiscuous mode [ 73.169881][ T5794] team0: Port device team_slave_1 added [ 73.191040][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.264668][ T5106] Bluetooth: hci1: command tx timeout [ 73.271209][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.271318][ T5106] Bluetooth: hci2: command tx timeout [ 73.282555][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.315047][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.344473][ T5106] Bluetooth: hci3: command tx timeout [ 73.366431][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.374639][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.410926][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.429381][ T5801] team0: Port device team_slave_0 added [ 73.439726][ T5801] team0: Port device team_slave_1 added [ 73.467096][ T5795] hsr_slave_0: entered promiscuous mode [ 73.475165][ T5795] hsr_slave_1: entered promiscuous mode [ 73.486920][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.497307][ T5795] Cannot create hsr debugfs directory [ 73.535151][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.543890][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.577345][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.592494][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.601867][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.634447][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.782150][ T5801] hsr_slave_0: entered promiscuous mode [ 73.790344][ T5801] hsr_slave_1: entered promiscuous mode [ 73.797644][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.807161][ T5801] Cannot create hsr debugfs directory [ 73.820205][ T5794] hsr_slave_0: entered promiscuous mode [ 73.829348][ T5794] hsr_slave_1: entered promiscuous mode [ 73.837039][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.846184][ T5794] Cannot create hsr debugfs directory [ 74.186567][ T5790] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.225924][ T5790] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.238096][ T5790] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.249013][ T5790] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.337484][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.363743][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.375677][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.392170][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.476121][ T5794] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.492014][ T5794] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.503619][ T5794] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.533199][ T5794] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.611341][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.634239][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.647040][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.660440][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.708498][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.780034][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.822445][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.831030][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.889196][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.897967][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.970773][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.031461][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.064300][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.102016][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.157976][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.193773][ T5106] Bluetooth: hci0: command tx timeout [ 75.203371][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.214614][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.230086][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.241351][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.258136][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.270251][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.283449][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.296778][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.323798][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.344731][ T50] Bluetooth: hci1: command tx timeout [ 75.356074][ T5106] Bluetooth: hci2: command tx timeout [ 75.400973][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.409584][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.425211][ T5106] Bluetooth: hci3: command tx timeout [ 75.464093][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.473178][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.749477][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.901756][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.090814][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.141245][ T5790] veth0_vlan: entered promiscuous mode [ 76.200220][ T5790] veth1_vlan: entered promiscuous mode [ 76.299965][ T5795] veth0_vlan: entered promiscuous mode [ 76.352413][ T5795] veth1_vlan: entered promiscuous mode [ 76.373782][ T5790] veth0_macvtap: entered promiscuous mode [ 76.402197][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.416051][ T5790] veth1_macvtap: entered promiscuous mode [ 76.483022][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.501193][ T5795] veth0_macvtap: entered promiscuous mode [ 76.520901][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.544247][ T5795] veth1_macvtap: entered promiscuous mode [ 76.563110][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.588444][ T5790] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.599205][ T5790] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.610363][ T5790] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.621177][ T5790] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.658740][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.671266][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.686920][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.722980][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.737084][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.750131][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.762871][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.773988][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.784127][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.794622][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.823608][ T5794] veth0_vlan: entered promiscuous mode [ 76.893152][ T5794] veth1_vlan: entered promiscuous mode [ 76.953855][ T5801] veth0_vlan: entered promiscuous mode [ 77.053603][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.067758][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.093981][ T5801] veth1_vlan: entered promiscuous mode [ 77.151459][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.172797][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.215834][ T5794] veth0_macvtap: entered promiscuous mode [ 77.260862][ T5794] veth1_macvtap: entered promiscuous mode [ 77.265054][ T5106] Bluetooth: hci0: command tx timeout [ 77.328528][ T3489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.343646][ T3489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.356603][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.372539][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.396459][ T5801] veth0_macvtap: entered promiscuous mode [ 77.406644][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.432385][ T5106] Bluetooth: hci2: command tx timeout [ 77.433042][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.438876][ T5106] Bluetooth: hci1: command tx timeout [ 77.491649][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.504555][ T50] Bluetooth: hci3: command tx timeout [ 77.508331][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.562961][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.635616][ T5801] veth1_macvtap: entered promiscuous mode [ 77.649995][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.662072][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.672775][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.685692][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.698436][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.723625][ T5794] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.739413][ T5794] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.763453][ T5794] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.775249][ T5794] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.839263][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.863386][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.879758][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.892371][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.919801][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.939385][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.970224][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.004931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.015011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 78.254544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.664687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 79.071662][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.095144][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.106663][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.119127][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.129720][ T5801] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.141060][ T5801] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.221241][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.344745][ T50] Bluetooth: hci0: command tx timeout [ 79.505508][ T5106] Bluetooth: hci2: command tx timeout [ 79.512658][ T50] Bluetooth: hci1: command tx timeout [ 79.585446][ T50] Bluetooth: hci3: command tx timeout [ 79.828806][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.866760][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.889716][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.943650][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.646163][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.683185][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.782864][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.826363][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.858051][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.889839][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.002554][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.054554][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.271336][ T5898] syz.2.6[5898]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.531889][ T786] cfg80211: failed to load regulatory.db [ 82.975230][ T5900] loop1: detected capacity change from 0 to 16 [ 83.168263][ T5900] erofs: (device loop1): mounted with root inode @ nid 36. [ 83.242781][ T5895] syz.1.8: attempt to access beyond end of device [ 83.242781][ T5895] loop1: rw=0, sector=8, nr_sectors = 16 limit=16 [ 83.266401][ T5898] loop2: detected capacity change from 0 to 8 [ 83.774934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.794698][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.874933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.525175][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.760357][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 85.836161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.024732][ T28] audit: type=1326 audit(1760014370.066:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 86.292534][ T28] audit: type=1326 audit(1760014370.066:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 86.692814][ T28] audit: type=1326 audit(1760014370.066:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 86.814534][ T28] audit: type=1326 audit(1760014370.076:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 86.924711][ T28] audit: type=1326 audit(1760014370.076:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 87.008302][ T28] audit: type=1326 audit(1760014370.076:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 87.079098][ T28] audit: type=1326 audit(1760014370.076:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 87.163085][ T28] audit: type=1326 audit(1760014370.076:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 87.269276][ T28] audit: type=1326 audit(1760014370.076:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 87.448267][ T5928] loop2: detected capacity change from 0 to 16 [ 87.473824][ T5928] erofs: (device loop2): mounted with root inode @ nid 36. [ 87.498391][ T5928] syz.2.15: attempt to access beyond end of device [ 87.498391][ T5928] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 87.526531][ T5928] syz.2.15: attempt to access beyond end of device [ 87.526531][ T5928] loop2: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 87.543062][ T5928] syz.2.15: attempt to access beyond end of device [ 87.543062][ T5928] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 87.576389][ T5928] syz.2.15: attempt to access beyond end of device [ 87.576389][ T5928] loop2: rw=0, sector=8, nr_sectors = 16 limit=16 [ 89.084534][ T28] audit: type=1326 audit(1760014370.076:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5915 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f386ff8eec9 code=0x7ffc0000 [ 89.153165][ T5795] syz-executor: attempt to access beyond end of device [ 89.153165][ T5795] loop2: rw=0, sector=296, nr_sectors = 16 limit=16 [ 89.304629][ T5795] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 89.614014][ T5929] BUG: Bad page state in process syz.2.15 pfn:231a7 [ 89.623172][ T5929] page:ffffea00008c69c0 refcount:0 mapcount:0 mapping:ffff8880613b9278 index:0x2 pfn:0x231a7 [ 89.634663][ T5929] aops:z_erofs_cache_aops ino:0 [ 89.639746][ T5929] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 89.651241][ T5929] page_type: 0xffffffff() [ 89.656549][ T5929] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff8880613b9278 [ 89.666646][ T5929] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 89.677159][ T5929] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 89.685873][ T5929] page_owner tracks the page as allocated [ 89.692410][ T5929] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5928, tgid 5923 (syz.2.15), ts 87497890330, free_ts 87307310255 [ 89.717466][ T5929] post_alloc_hook+0x1cd/0x210 [ 89.722476][ T5929] get_page_from_freelist+0x195c/0x19f0 [ 89.729990][ T5929] __alloc_pages+0x1e3/0x460 [ 89.735404][ T5929] z_erofs_do_read_page+0x20c0/0x3680 [ 89.742473][ T5929] z_erofs_pcluster_readmore+0x2cf/0x450 [ 89.748624][ T5929] z_erofs_read_folio+0x208/0x540 [ 89.753976][ T5929] filemap_read_folio+0x167/0x760 [ 89.759673][ T5929] do_read_cache_folio+0x470/0x7e0 [ 89.765393][ T5929] erofs_bread+0x16f/0x630 [ 89.770487][ T5929] erofs_namei+0x28c/0xf00 [ 89.776722][ T5929] erofs_lookup+0x135/0x310 [ 89.781545][ T5929] lookup_one_qstr_excl+0x112/0x250 [ 89.786923][ T5929] filename_create+0x222/0x460 [ 89.792091][ T5929] do_symlinkat+0xbd/0x3f0 [ 89.797159][ T5929] __x64_sys_symlinkat+0x99/0xb0 [ 89.802610][ T5929] do_syscall_64+0x55/0xb0 [ 89.807527][ T5929] page last free stack trace: [ 89.812716][ T5929] free_unref_page_prepare+0x7ce/0x8e0 [ 89.818743][ T5929] free_unref_page+0x32/0x2e0 [ 89.824506][ T5929] __unfreeze_partials+0x1cf/0x210 [ 89.831983][ T5929] put_cpu_partial+0x17c/0x250 [ 89.837322][ T5929] __slab_free+0x31d/0x410 [ 89.842285][ T5929] qlist_free_all+0x75/0xe0 [ 89.847457][ T5929] kasan_quarantine_reduce+0x143/0x160 [ 89.853715][ T5929] __kasan_slab_alloc+0x22/0x80 [ 89.859339][ T5929] slab_post_alloc_hook+0x6e/0x4d0 [ 89.865403][ T5929] __kmem_cache_alloc_node+0x13e/0x260 [ 89.871568][ T5929] __kmalloc_node+0xa4/0x230 [ 89.876695][ T5929] memcg_alloc_slab_cgroups+0x87/0x130 [ 89.882542][ T5929] slab_post_alloc_hook+0xfc/0x4d0 [ 89.887845][ T5929] kmem_cache_alloc+0x11e/0x2e0 [ 89.893349][ T5929] vm_area_dup+0x27/0x270 [ 89.897981][ T5929] copy_mm+0xc08/0x1c20 [ 89.902711][ T5929] Modules linked in: [ 89.906898][ T5929] CPU: 0 PID: 5929 Comm: syz.2.15 Not tainted syzkaller #0 [ 89.915545][ T5929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 89.927520][ T5929] Call Trace: [ 89.931098][ T5929] [ 89.934426][ T5929] dump_stack_lvl+0x16c/0x230 [ 89.939425][ T5929] ? show_regs_print_info+0x20/0x20 [ 89.944809][ T5929] ? swiotlb_print_info+0x70/0x70 [ 89.950294][ T5929] bad_page+0x14b/0x170 [ 89.954557][ T5929] free_unref_page_prepare+0x887/0x8e0 [ 89.960853][ T5929] free_unref_page+0x32/0x2e0 [ 89.965717][ T5929] ? __folio_put+0xef/0x210 [ 89.970434][ T5929] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 89.977045][ T5929] erofs_shrink_workstation+0x118/0x290 [ 89.982813][ T5929] ? erofs_shrinker_unregister+0x170/0x170 [ 89.989543][ T5929] ? io_schedule+0xd0/0xd0 [ 89.994935][ T5929] ? kobject_put+0x43c/0x470 [ 90.000138][ T5929] erofs_shrinker_unregister+0x5d/0x170 [ 90.005889][ T5929] erofs_put_super+0x4e/0x150 [ 90.010894][ T5929] ? erofs_free_inode+0xb0/0xb0 [ 90.016239][ T5929] generic_shutdown_super+0x134/0x2b0 [ 90.022261][ T5929] kill_block_super+0x44/0x90 [ 90.027941][ T5929] erofs_kill_sb+0x4c/0x140 [ 90.032846][ T5929] deactivate_locked_super+0x97/0x100 [ 90.038850][ T5929] cleanup_mnt+0x429/0x4c0 [ 90.044082][ T5929] task_work_run+0x1ce/0x250 [ 90.048801][ T5929] ? task_work_cancel+0x240/0x240 [ 90.054492][ T5929] ? do_exit+0x906/0x23c0 [ 90.060596][ T5929] ? kmem_cache_free+0xf8/0x280 [ 90.066515][ T5929] do_exit+0x90b/0x23c0 [ 90.070997][ T5929] ? put_task_struct+0xc0/0xc0 [ 90.075891][ T5929] ? lock_chain_count+0x20/0x20 [ 90.081368][ T5929] do_group_exit+0x21b/0x2d0 [ 90.087211][ T5929] ? lockdep_hardirqs_on+0x98/0x150 [ 90.092921][ T5929] get_signal+0x12fc/0x1400 [ 90.098534][ T5929] arch_do_signal_or_restart+0x96/0x780 [ 90.104498][ T5929] ? get_sigframe_size+0x20/0x20 [ 90.110089][ T5929] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 90.116648][ T5929] ? exit_to_user_mode_loop+0x3b/0x110 [ 90.122796][ T5929] exit_to_user_mode_loop+0x70/0x110 [ 90.129152][ T5929] exit_to_user_mode_prepare+0xf6/0x180 [ 90.135592][ T5929] irqentry_exit_to_user_mode+0x9/0x40 [ 90.142654][ T5929] exc_page_fault+0x8f/0x110 [ 90.147616][ T5929] asm_exc_page_fault+0x26/0x30 [ 90.153311][ T5929] RIP: 0033:0x7fa79c78eed1 [ 90.158025][ T5929] Code: Unable to access opcode bytes at 0x7fa79c78eea7. [ 90.165930][ T5929] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 90.172454][ T5929] RAX: 0000000000000000 RBX: 00007fa79c9e6090 RCX: 00007fa79c78eec9 [ 90.181246][ T5929] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000000000600 [ 90.190110][ T5929] RBP: 00007fa79c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 90.199754][ T5929] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 90.208625][ T5929] R13: 00007fa79c9e6128 R14: 00007fa79c9e6090 R15: 00007ffe7663ba88 [ 90.217439][ T5929] [ 90.221257][ C0] sched: RT throttling activated [ 90.222648][ T5929] Disabling lock debugging due to kernel taint