last executing test programs: 48.870720054s ago: executing program 1 (id=86): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2e, &(0x7f0000000040)=r4, 0x4) 47.776803572s ago: executing program 1 (id=91): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 47.338275288s ago: executing program 1 (id=95): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 46.361830177s ago: executing program 1 (id=100): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000009c0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@dioread_lock}, {@data_err_ignore}, {@auto_da_alloc}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4011}, 0x810) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) 45.914709593s ago: executing program 1 (id=106): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000001a80)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="c1", 0x1}], 0x1, 0x0, 0x0, 0x2400c095}], 0x1, 0x8000) r2 = dup(r1) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0xb, 0xb, 0x401, 0x70bd2a, 0x25dfdbfc, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10) 44.740968077s ago: executing program 1 (id=109): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 44.447925271s ago: executing program 32 (id=109): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB='\x000\v'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000540)={0x0, 0xb3765c6765b39a42, 0x1, "d0"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.100361388s ago: executing program 4 (id=323): socket$kcm(0xf, 0x3, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 5.546445123s ago: executing program 4 (id=328): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x20000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xf}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() 4.558556662s ago: executing program 4 (id=335): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 4.203696661s ago: executing program 4 (id=338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x5b, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x10}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) 3.865482528s ago: executing program 4 (id=342): r0 = gettid() r1 = socket(0x11, 0x5, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.689162752s ago: executing program 4 (id=345): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2.774228116s ago: executing program 0 (id=347): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 2.501200039s ago: executing program 3 (id=349): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 2.374515969s ago: executing program 0 (id=350): socket$kcm(0xf, 0x3, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 2.309363254s ago: executing program 2 (id=351): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.138713528s ago: executing program 3 (id=352): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0xff, 0x8, r2}}], 0x20, 0x4c004}], 0x1, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={r1, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x9, 0x0, 0x4, 0x10, 0x7, 0x7}, 0x9c) 2.029247127s ago: executing program 2 (id=353): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000001}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000014}) 2.006829338s ago: executing program 3 (id=354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) 1.978343471s ago: executing program 0 (id=355): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019600)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x2}}], 0x28}, 0x0) 1.641318288s ago: executing program 2 (id=356): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xae, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = syz_io_uring_setup(0x70e4, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x20, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2b7, 0x0, 0x0, 0x0, 0x0) 1.640756498s ago: executing program 0 (id=357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000100)='GPL\x00', 0x20000001, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) sched_setscheduler(0x0, 0x1, 0x0) r1 = creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x66, 0x10, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0xf}, {0x18, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x10, 0x2, [@TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x6}}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) gettid() 1.36617456s ago: executing program 2 (id=358): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084", 0x1b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f010000000000000000000000000051ed68f6e8b6d92237c7838a03a25eebb2585ad1449314730ba4f08e91f6a63a1e8d04f9ec4bb0255ab195c244f1ca83c505bb843dea7bfb07b89836b72dab9cbcfa5b73f882f0aacc8fa660f7386624c0180014c5d966", 0xe2}, {&(0x7f0000001a80)="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", 0x31c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="9e816ef4b3bb28f735f8370cb5bbec7b062fdecbd804052ca1dde813e8ca43307d9bbf48ea24c36bb84bf4ec89d234453b01c57c1a3ee05d6b4cefb63c4310c1b6", 0x41}, {&(0x7f0000000040)="72ed92ab5f44202632020f74ecd01c9f82e6c72f719cadde031e0e9e525a", 0x1e}, {&(0x7f00000002c0)="9ba5c1ccf6a36a84fe8c0b9c637799ff8429f7265acc76d15175d1c4168fa969a542536a3ed7f7baf33f7788b5496402365515276bb43a27c51b630d7dbc0a35ef2c1ceb9cac1a858cfb2cd296d3c24d36d1c382f354de074d30a339e701189e475d8a826e2688bbaa872e2d0513cd6dd3fb7aeeda2d20af659b653663cff5a2f4807a43639dbc964e92773025cbd6980dd349ae1592b8b492d1ba1c9afbf034828139c30385793e25a5727507a90183b1345d6b", 0xb4}, {&(0x7f0000000200)="2d7aff6fc77ffbab", 0x8}], 0x4}}], 0x3, 0x0) 689.963505ms ago: executing program 3 (id=359): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 644.614008ms ago: executing program 0 (id=360): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 489.009921ms ago: executing program 2 (id=361): r0 = socket$kcm(0xf, 0x3, 0x2) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000340)=0x2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r2) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, 0x0, 0x0) close(0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="4c5a1d7b44464d14aa8260bca676028f1d71e8ea6927fb0c4949d8cbfdeed9e995e058d6128dd611e93c73f158b8efb03f0b193d5b79b7e52d4d4c9a616888d4767cd5fb3cd13b63734db0810561e22fd069761f1a4cc3fc16ba1601bfb7e9f5112d640b85f7a7f9432da9ca9d95e51e0f00f234bc302dbd060fc324fd5af245411f1df76b19f9b4978f8fc74db99993bc0a886c21be4133d98bf996827bf0e69ae51540e1f53b49e63ea3c1446712d898e00bdf170127a8e0ed1ec17c5a403215f1657a9c9ebdc598bdb4a1ee7bf94d3967b374bfb52f", 0xd7}, {&(0x7f0000000580)="cff1a5110008bb3139cec59f8f99186a49d525d0fba12ccc0abe178b98323ff5256b4e9ff68c29390b1998e4ce07a20ef0b3d32dd68789dac415a63a88203e2c0604b0e91772904b6e16d74d70ed404289206cb99750c501aaa65285a3beff46ce12c53878f6a484e4d1fedbea77daf919c805ff9d2ed1de5739a48e8aa12ee96357a904bceec2c15764939c15e4c3e8e796c53005457df6c57629bd69ef20ab1b261155a340fac24179fbf317071699b75d82fc43edd4f70c33691f263c5b4bd3300d1e7b8b5c547c4b706d331c9aca0b4a5838cffdf5a8f66857d13f", 0xdd}], 0x2) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r8, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r10, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x4004050) pread64(r0, &(0x7f00000000c0)=""/127, 0x7f, 0x5) 305.978476ms ago: executing program 3 (id=362): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x2, 0x1ea, &(0x7f00000003c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a4) fadvise64(r0, 0xe0ffff, 0x9, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 167.555627ms ago: executing program 0 (id=363): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_uring_setup(0x1a8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 124.73279ms ago: executing program 2 (id=364): socket$kcm(0xf, 0x3, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000040)=0xfffffffd) close(r1) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, 0x0, 0x0) close(0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x4000890}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0x2, &(0x7f0000001a00)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000680)=""/4096, 0x41000, 0x14, '\x00', 0x0, @sk_reuseport=0x28, r7, 0x8, &(0x7f0000000500)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x3, 0x9, 0x5, 0x7f}, 0x10, 0x0, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000001700)=[{0x2, 0x4, 0x9, 0xb}, {0x2, 0x1, 0x7, 0x9}, {0x1, 0x5, 0x10, 0x4}, {0x4, 0x5, 0xc, 0x3}, {0x2, 0x5, 0x6, 0x6}, {0x3, 0x4, 0x7, 0x6}, {0x0, 0x4, 0x8, 0x2}, {0x0, 0x1, 0x10, 0xa}], 0x10, 0x2}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4, 0x0, @loopback}}, {0x12, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) 0s ago: executing program 3 (id=365): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.63' (ED25519) to the list of known hosts. [ 58.872115][ T5770] cgroup: Unknown subsys name 'net' [ 59.010421][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.364862][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.363168][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.379722][ T5797] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.388834][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.390931][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.397408][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.406656][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.411607][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.425532][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.425542][ T5790] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.432788][ T5797] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.440503][ T5790] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.448144][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.455588][ T5790] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.461509][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.468554][ T5790] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.474930][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.481805][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.490376][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.497583][ T5790] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.504341][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.516626][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.524117][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.536893][ T5797] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.554697][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.969606][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 63.069191][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 63.106030][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 63.126208][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 63.150383][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.157648][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.165776][ T5779] bridge_slave_0: entered allmulticast mode [ 63.172517][ T5779] bridge_slave_0: entered promiscuous mode [ 63.209669][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.216953][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.224332][ T5779] bridge_slave_1: entered allmulticast mode [ 63.231009][ T5779] bridge_slave_1: entered promiscuous mode [ 63.297548][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.305185][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.312296][ T5784] bridge_slave_0: entered allmulticast mode [ 63.319412][ T5784] bridge_slave_0: entered promiscuous mode [ 63.346200][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.353367][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.360562][ T5784] bridge_slave_1: entered allmulticast mode [ 63.367657][ T5784] bridge_slave_1: entered promiscuous mode [ 63.398788][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.433256][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.441232][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.448759][ T5780] bridge_slave_0: entered allmulticast mode [ 63.456760][ T5780] bridge_slave_0: entered promiscuous mode [ 63.464386][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.471495][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.479211][ T5780] bridge_slave_1: entered allmulticast mode [ 63.486698][ T5780] bridge_slave_1: entered promiscuous mode [ 63.495560][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.528350][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.540963][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.568875][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.576085][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.583279][ T5781] bridge_slave_0: entered allmulticast mode [ 63.590513][ T5781] bridge_slave_0: entered promiscuous mode [ 63.599676][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.607462][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.615023][ T5781] bridge_slave_1: entered allmulticast mode [ 63.621673][ T5781] bridge_slave_1: entered promiscuous mode [ 63.682063][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.695749][ T5779] team0: Port device team_slave_0 added [ 63.712698][ T5784] team0: Port device team_slave_0 added [ 63.720642][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.742222][ T5779] team0: Port device team_slave_1 added [ 63.761452][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.774309][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.785140][ T5784] team0: Port device team_slave_1 added [ 63.832809][ T5780] team0: Port device team_slave_0 added [ 63.839725][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.847461][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.874402][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.907222][ T5780] team0: Port device team_slave_1 added [ 63.913918][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.920867][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.946814][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.966429][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.973810][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.000197][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.014041][ T5781] team0: Port device team_slave_0 added [ 64.028585][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.035667][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.061904][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.080058][ T5781] team0: Port device team_slave_1 added [ 64.114807][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.121790][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.147939][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.184164][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.191142][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.217254][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.248277][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.255575][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.282109][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.298517][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.305797][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.332083][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.346562][ T5779] hsr_slave_0: entered promiscuous mode [ 64.352893][ T5779] hsr_slave_1: entered promiscuous mode [ 64.390185][ T5784] hsr_slave_0: entered promiscuous mode [ 64.396932][ T5784] hsr_slave_1: entered promiscuous mode [ 64.402977][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.411317][ T5784] Cannot create hsr debugfs directory [ 64.528577][ T5780] hsr_slave_0: entered promiscuous mode [ 64.536137][ T5780] hsr_slave_1: entered promiscuous mode [ 64.542272][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.549947][ T5780] Cannot create hsr debugfs directory [ 64.559608][ T5781] hsr_slave_0: entered promiscuous mode [ 64.566441][ T5781] hsr_slave_1: entered promiscuous mode [ 64.572512][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.574451][ T5795] Bluetooth: hci2: command tx timeout [ 64.580341][ T50] Bluetooth: hci1: command tx timeout [ 64.585831][ T5795] Bluetooth: hci0: command tx timeout [ 64.591520][ T5781] Cannot create hsr debugfs directory [ 64.653709][ T5795] Bluetooth: hci3: command tx timeout [ 64.902228][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.914914][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.927870][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.937999][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.018808][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.045760][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.055530][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.076632][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.098632][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.110313][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.121089][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.141620][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.201576][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.238861][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.249412][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.259765][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.405991][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.428911][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.461433][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.475580][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.486830][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.508875][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.516181][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.541278][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.548431][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.561882][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.569019][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.581119][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.593272][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.600441][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.630995][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.638141][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.650025][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.657138][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.684575][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.788357][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.858664][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.865867][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.901382][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.908567][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.195070][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.268049][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.304466][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.325192][ T5779] veth0_vlan: entered promiscuous mode [ 66.356134][ T5779] veth1_vlan: entered promiscuous mode [ 66.389803][ T5784] veth0_vlan: entered promiscuous mode [ 66.423073][ T5784] veth1_vlan: entered promiscuous mode [ 66.451106][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.474302][ T5784] veth0_macvtap: entered promiscuous mode [ 66.491936][ T5780] veth0_vlan: entered promiscuous mode [ 66.501625][ T5784] veth1_macvtap: entered promiscuous mode [ 66.532834][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.548818][ T5779] veth0_macvtap: entered promiscuous mode [ 66.561775][ T5779] veth1_macvtap: entered promiscuous mode [ 66.577467][ T5780] veth1_vlan: entered promiscuous mode [ 66.590093][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.602889][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.612184][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.621894][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.630685][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.653676][ T5795] Bluetooth: hci0: command tx timeout [ 66.654013][ T5790] Bluetooth: hci2: command tx timeout [ 66.663790][ T50] Bluetooth: hci1: command tx timeout [ 66.669836][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.681973][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.695470][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.714733][ T5781] veth0_vlan: entered promiscuous mode [ 66.724832][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.737011][ T50] Bluetooth: hci3: command tx timeout [ 66.740659][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.754787][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.769903][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.778732][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.788651][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.797419][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.825988][ T5781] veth1_vlan: entered promiscuous mode [ 66.858000][ T5780] veth0_macvtap: entered promiscuous mode [ 66.880015][ T5780] veth1_macvtap: entered promiscuous mode [ 66.948147][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.959051][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.969907][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.981000][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.992584][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.022461][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.033114][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.043166][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.055852][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.066733][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.077462][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.086394][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.095330][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.106687][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.125324][ T5781] veth0_macvtap: entered promiscuous mode [ 67.139473][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.157059][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.174229][ T3514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.174586][ T5781] veth1_macvtap: entered promiscuous mode [ 67.182038][ T3514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.249043][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.256410][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.259424][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.271317][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.284773][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.290824][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.293790][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.303858][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.320374][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.330880][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.346878][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.357744][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.368447][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.378724][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.391699][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.401760][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.412406][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.424442][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.466382][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.479599][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.488630][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.497576][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.585180][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.599065][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.711256][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.737050][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.794057][ T5870] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.842585][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.869366][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.969068][ T5879] syz.3.4[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 68.003358][ T5879] loop3: detected capacity change from 0 to 2048 [ 68.059952][ T5879] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.153371][ T5790] Bluetooth: hci4: unexpected event 0x09 length: 0 < 3 [ 68.192151][ T5780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 68.210087][ T5780] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 68.232066][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.640566][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.655326][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.736561][ T5790] Bluetooth: hci1: command tx timeout [ 68.742635][ T5790] Bluetooth: hci0: command tx timeout [ 68.744699][ T5795] Bluetooth: hci2: command tx timeout [ 68.767796][ T5892] loop1: detected capacity change from 0 to 128 [ 68.790006][ T5892] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 68.813590][ T5797] Bluetooth: hci3: command tx timeout [ 68.980485][ T5892] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 68.999842][ T5892] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 69.429453][ T5917] loop6: detected capacity change from 0 to 7 [ 69.439820][ T5782] Dev loop6: unable to read RDB block 7 [ 69.449721][ T5919] loop1: detected capacity change from 0 to 1024 [ 69.451530][ T5782] loop6: unable to read partition table [ 69.462148][ T5782] loop6: partition table beyond EOD, truncated [ 69.464313][ T5919] ======================================================= [ 69.464313][ T5919] WARNING: The mand mount option has been deprecated and [ 69.464313][ T5919] and is ignored by this kernel. Remove the mand [ 69.464313][ T5919] option from the mount to silence this warning. [ 69.464313][ T5919] ======================================================= [ 69.506840][ T5919] EXT4-fs: inline encryption not supported [ 69.515375][ T5919] EXT4-fs: Ignoring removed bh option [ 69.523193][ T5919] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 69.524885][ T5917] Dev loop6: unable to read RDB block 7 [ 69.541705][ T5917] loop6: unable to read partition table [ 69.554647][ T5917] loop6: partition table beyond EOD, truncated [ 69.568119][ T5917] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 69.596850][ T5919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.732919][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.179629][ T5797] Bluetooth: hci4: command 0x1003 tx timeout [ 70.186378][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 70.733002][ T5959] syz.2.24 uses obsolete (PF_INET,SOCK_PACKET) [ 70.814688][ T50] Bluetooth: hci2: command tx timeout [ 70.820717][ T5797] Bluetooth: hci0: command tx timeout [ 70.828095][ T5795] Bluetooth: hci1: command tx timeout [ 70.898748][ T50] Bluetooth: hci3: command tx timeout [ 71.027929][ T5943] loop3: detected capacity change from 0 to 40427 [ 71.099534][ T5943] F2FS-fs (loop3): invalid crc value [ 71.112899][ T5943] F2FS-fs (loop3): Found nat_bits in checkpoint [ 71.138117][ T5968] loop2: detected capacity change from 0 to 1024 [ 71.207359][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.225400][ T5943] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 71.436313][ T5969] f2fs_ckpt-7:3: attempt to access beyond end of device [ 71.436313][ T5969] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 71.494363][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.494419][ T5969] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 71.542919][ T5957] loop0: detected capacity change from 0 to 32768 [ 71.556203][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.556545][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.637342][ T5957] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 71.752321][ T5984] loop2: detected capacity change from 0 to 2048 [ 71.835975][ T5984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 71.881335][ T5957] (syz.0.23,5957,1):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options [ 71.936865][ T5957] syz.0.23 (5957) used greatest stack depth: 18736 bytes left [ 72.014557][ T5784] ocfs2: Unmounting device (7,0) on (node local) [ 72.392044][ T6000] loop0: detected capacity change from 0 to 4096 [ 72.532755][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.35'. [ 72.869267][ T6009] loop2: detected capacity change from 0 to 512 [ 72.896334][ T6009] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 72.962598][ T6009] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.37: invalid indirect mapped block 4294967295 (level 1) [ 72.987231][ T6009] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.37: invalid indirect mapped block 4294967295 (level 1) [ 73.004037][ T6009] EXT4-fs (loop2): 2 truncates cleaned up [ 73.012824][ T6009] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.193944][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.622260][ T6035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'. [ 73.646467][ T6035] tipc: Started in network mode [ 73.651410][ T6035] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 73.663068][ T6035] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 73.677869][ T6035] tipc: Enabled bearer , priority 10 [ 74.300491][ T6051] loop6: detected capacity change from 0 to 7 [ 74.315157][ T5782] Dev loop6: unable to read RDB block 7 [ 74.331009][ T5782] loop6: AHDI p3 p4 [ 74.335596][ T5782] loop6: partition table partially beyond EOD, truncated [ 74.351493][ T5782] loop6: p3 start 5656832 is beyond EOD, truncated [ 74.378211][ T6051] Dev loop6: unable to read RDB block 7 [ 74.393612][ T6051] loop6: AHDI p3 p4 [ 74.402706][ T6051] loop6: partition table partially beyond EOD, truncated [ 74.427532][ T6051] loop6: p3 start 5656832 is beyond EOD, truncated [ 74.469493][ T6037] loop0: detected capacity change from 0 to 32768 [ 74.532145][ T6037] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.44 (6037) [ 74.684596][ T5829] tipc: Node number set to 1 [ 74.710447][ T6037] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 74.723861][ T6037] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 74.733165][ T6037] BTRFS info (device loop0): metadata ratio 2 [ 74.743841][ T6037] BTRFS info (device loop0): allowing degraded mounts [ 74.750930][ T6037] BTRFS info (device loop0): force zlib compression, level 3 [ 74.759139][ T6037] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 74.769828][ T6037] BTRFS info (device loop0): use zstd compression, level 3 [ 74.777127][ T6037] BTRFS info (device loop0): force clearing of disk cache [ 74.784910][ T6037] BTRFS info (device loop0): max_inline at 0 [ 74.790929][ T6037] BTRFS info (device loop0): using free space tree [ 75.012111][ T6037] BTRFS info (device loop0): enabling ssd optimizations [ 75.030586][ T6077] loop1: detected capacity change from 0 to 2048 [ 75.052208][ T6077] EXT4-fs: Ignoring removed bh option [ 75.065352][ T6037] BTRFS info (device loop0): rebuilding free space tree [ 75.124969][ T6077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.179231][ T6077] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.195992][ T28] audit: type=1800 audit(1754962733.113:2): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.52" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 75.263813][ T6077] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 75.319423][ T6077] EXT4-fs (loop1): This should not happen!! Data will be lost [ 75.319423][ T6077] [ 75.407219][ T6077] EXT4-fs (loop1): Total free blocks count 0 [ 75.413251][ T6077] EXT4-fs (loop1): Free/Dirty block details [ 75.420150][ T28] audit: type=1800 audit(1754962733.353:3): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.44" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 75.423516][ T6077] EXT4-fs (loop1): free_blocks=2415919104 [ 75.504935][ T6077] EXT4-fs (loop1): dirty_blocks=16 [ 75.510143][ T6077] EXT4-fs (loop1): Block reservation details [ 75.557119][ T6077] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 75.616719][ T6077] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 75.713206][ T5784] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.100730][ T6104] loop3: detected capacity change from 0 to 512 [ 76.121349][ T6097] tipc: Enabling of bearer rejected, already enabled [ 76.180080][ T6104] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 76.233650][ T6104] System zones: 0-2, 18-18, 34-35 [ 76.250920][ T6104] EXT4-fs error (device loop3): ext4_quota_enable:7129: inode #4: comm syz.3.57: iget: bad i_size value: 5910974510929920 [ 76.330327][ T6104] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.57: Bad quota inode: 4, type: 1 [ 76.378255][ T6104] EXT4-fs warning (device loop3): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 76.407805][ T6104] EXT4-fs (loop3): mount failed [ 76.480384][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.59'. [ 76.504022][ T6109] tipc: Started in network mode [ 76.508921][ T6109] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 76.540496][ T6109] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 76.581975][ T6109] tipc: Enabled bearer , priority 10 [ 76.616270][ T6111] team0: Device gre1 is of different type [ 76.722999][ T6113] loop3: detected capacity change from 0 to 128 [ 76.747140][ T6099] loop2: detected capacity change from 0 to 32768 [ 76.759208][ T6099] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.58 (6099) [ 76.787908][ T6113] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 76.893485][ T6099] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 76.914120][ T6113] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 76.969496][ T6099] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 77.003865][ T6113] syz.3.61 (pid 6113) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 77.014925][ T6099] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 77.054240][ T6099] BTRFS info (device loop2): use zstd compression, level 3 [ 77.095704][ T6099] BTRFS info (device loop2): using free space tree [ 77.185358][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 77.248948][ T6099] BTRFS info (device loop2): enabling ssd optimizations [ 77.303173][ T6099] BTRFS info (device loop2): auto enabling async discard [ 77.330193][ T6120] tipc: Enabling of bearer rejected, already enabled [ 77.394826][ T28] audit: type=1800 audit(1754962735.333:4): pid=6099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.58" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 77.427575][ T6113] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 77.573768][ T5829] tipc: Node number set to 1 [ 77.592853][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.718984][ T5781] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 77.770058][ T6145] loop1: detected capacity change from 0 to 256 [ 77.963102][ T6145] FAT-fs (loop1): IO charset cp86 not found [ 79.094255][ T6160] tipc: Enabling of bearer rejected, already enabled [ 79.504248][ T6169] tipc: Enabling of bearer rejected, already enabled [ 79.539540][ T6171] loop0: detected capacity change from 0 to 8192 [ 79.959212][ T6181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.74'. [ 79.988775][ T6181] tipc: Started in network mode [ 80.023247][ T6181] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 80.062038][ T6181] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 80.070986][ T6181] tipc: Enabled bearer , priority 10 [ 80.915067][ T6187] tipc: Enabling of bearer rejected, already enabled [ 80.981162][ T6192] loop0: detected capacity change from 0 to 256 [ 81.117309][ T6177] loop3: detected capacity change from 0 to 32768 [ 81.126218][ T6177] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.75 (6177) [ 81.164606][ T6177] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 81.178122][ T6196] process 'syz.1.81' launched './file0' with NULL argv: empty string added [ 81.193510][ T55] tipc: Node number set to 1 [ 81.201111][ T6177] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 81.230348][ T6177] BTRFS info (device loop3): enabling disk space caching [ 81.247873][ T6177] BTRFS info (device loop3): doing ref verification [ 81.259022][ T6177] BTRFS info (device loop3): use zlib compression, level 3 [ 81.268580][ T6177] BTRFS info (device loop3): force clearing of disk cache [ 81.277876][ T6177] BTRFS info (device loop3): setting nodatacow, compression disabled [ 81.301749][ T6177] BTRFS info (device loop3): doing ref verification [ 81.393606][ T6177] BTRFS info (device loop3): disk space caching is enabled [ 81.589187][ T6177] BTRFS info (device loop3): enabling ssd optimizations [ 81.596845][ T6177] BTRFS info (device loop3): auto enabling async discard [ 81.614293][ T6177] BTRFS info (device loop3): rebuilding free space tree [ 81.638027][ T6177] BTRFS info (device loop3): disabling free space tree [ 81.649616][ T6177] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 81.663051][ T6177] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 81.759185][ T28] audit: type=1800 audit(1754962739.693:5): pid=6177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.75" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 81.802509][ T9] cfg80211: failed to load regulatory.db [ 81.843724][ T6177] loop3: detected capacity change from 32768 to 0 [ 81.853146][ C0] I/O error, dev loop3, sector 4096 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 81.870678][ T6177] syz.3.75: attempt to access beyond end of device [ 81.870678][ T6177] loop3: rw=2049, sector=10512, nr_sectors = 968 limit=0 [ 81.888708][ T6177] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 81.944925][ T11] kworker/u4:0: attempt to access beyond end of device [ 81.944925][ T11] loop3: rw=6145, sector=10496, nr_sectors = 8 limit=0 [ 81.954487][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 81.963463][ T11] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 81.991347][ T5780] BTRFS error (device loop3: state A): Transaction aborted (error -5) [ 82.002616][ T5780] BTRFS: error (device loop3: state A) in __btrfs_run_delayed_items:1161: errno=-5 IO failure [ 82.022932][ T5780] BTRFS info (device loop3: state EA): forced readonly [ 82.031817][ T5780] BTRFS warning (device loop3: state EA): Skipping commit of aborted transaction. [ 82.063290][ T5780] BTRFS: error (device loop3: state EA) in cleanup_transaction:2004: errno=-5 IO failure [ 82.075610][ T5780] BTRFS info (device loop3: state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 82.215566][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 82.246060][ T27] usb 1-1: config 162 has an invalid interface number: 166 but max is 0 [ 82.267596][ T27] usb 1-1: config 162 has no interface number 0 [ 82.278004][ T27] usb 1-1: config 162 interface 166 has no altsetting 0 [ 82.309250][ T27] usb 1-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea [ 82.335162][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.359466][ T27] usb 1-1: Product: syz [ 82.379405][ T27] usb 1-1: Manufacturer: syz [ 82.389523][ T27] usb 1-1: SerialNumber: syz [ 82.454214][ T6228] tipc: Enabling of bearer rejected, already enabled [ 82.641259][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.85'. [ 82.661310][ T6230] tipc: Started in network mode [ 82.666968][ T27] appledisplay 1-1:162.166: Could not find int-in endpoint [ 82.673231][ T6230] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 82.702405][ T6230] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 82.704819][ T27] usbhid 1-1:162.166: couldn't find an input interrupt endpoint [ 82.726470][ T6230] tipc: Enabled bearer , priority 10 [ 82.772042][ T27] usb 1-1: USB disconnect, device number 2 [ 83.289818][ T6237] tipc: Enabling of bearer rejected, already enabled [ 83.725006][ T55] tipc: Node number set to 1 [ 84.209186][ T6256] netlink: 'syz.3.96': attribute type 1 has an invalid length. [ 84.640121][ T6269] loop1: detected capacity change from 0 to 1024 [ 84.658723][ T6269] EXT4-fs: inline encryption not supported [ 84.677583][ T6269] EXT4-fs: Ignoring removed bh option [ 84.713089][ T6269] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.742508][ T6267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 84.859309][ T6269] EXT4-fs error (device loop1): __ext4_get_inode_loc:4483: comm syz.1.100: Invalid inode table block 0 in block_group 0 [ 84.863579][ T6273] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:478: comm ext4lazyinit: Invalid block bitmap block 0 in block_group 0 [ 84.916590][ T6273] EXT4-fs (loop1): Remounting filesystem read-only [ 84.926711][ T6269] EXT4-fs (loop1): Remounting filesystem read-only [ 85.072425][ T6279] tipc: Enabling of bearer rejected, already enabled [ 85.108647][ T6279] Zero length message leads to an empty skb [ 85.632093][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.148939][ T6311] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.390539][ T6311] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.662770][ T6311] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.826356][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 86.841735][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted 6.6.101-syzkaller #0 [ 86.849864][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 86.859936][ T50] Workqueue: hci1 hci_rx_work [ 86.864668][ T50] Call Trace: [ 86.867955][ T50] [ 86.870902][ T50] dump_stack_lvl+0x16c/0x230 [ 86.875606][ T50] ? show_regs_print_info+0x20/0x20 [ 86.880824][ T50] ? load_image+0x3b0/0x3b0 [ 86.885365][ T50] sysfs_create_dir_ns+0x256/0x280 [ 86.890504][ T50] ? hci_rx_work+0x43a/0xd80 [ 86.895132][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 86.899834][ T50] ? do_raw_spin_unlock+0x121/0x230 [ 86.905061][ T50] kobject_add_internal+0x6b8/0xc70 [ 86.910294][ T50] kobject_add+0x156/0x220 [ 86.914733][ T50] ? __rwlock_init+0x150/0x150 [ 86.919527][ T50] ? kobject_init+0x1e0/0x1e0 [ 86.924227][ T50] ? _raw_spin_unlock+0x28/0x40 [ 86.929103][ T50] ? get_device_parent+0x366/0x390 [ 86.932802][ T6344] loop2: detected capacity change from 0 to 40427 [ 86.934217][ T50] device_add+0x408/0xc20 [ 86.934284][ T50] hci_conn_add_sysfs+0xd5/0x1e0 [ 86.949988][ T50] le_conn_complete_evt+0xc37/0x1220 [ 86.955305][ T50] ? hci_event_packet+0x4a7/0x1210 [ 86.960456][ T50] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 86.966720][ T50] ? __copy_skb_header+0xa7/0x550 [ 86.971870][ T50] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 86.977539][ T50] ? skb_pull_data+0xfb/0x200 [ 86.979999][ T6344] F2FS-fs (loop2): invalid crc value [ 86.982233][ T50] hci_le_conn_complete_evt+0x187/0x440 [ 86.993081][ T50] ? hci_remote_host_features_evt+0x160/0x160 [ 86.999190][ T50] hci_event_packet+0x795/0x1210 [ 87.004184][ T50] ? bis_list+0x290/0x290 [ 87.008555][ T50] ? lockdep_hardirqs_on+0x98/0x150 [ 87.013790][ T50] ? hci_send_to_monitor+0xd7/0x4f0 [ 87.019020][ T50] hci_rx_work+0x43a/0xd80 [ 87.023471][ T50] ? process_scheduled_works+0x957/0x15b0 [ 87.029217][ T50] process_scheduled_works+0xa45/0x15b0 [ 87.034903][ T50] ? assign_work+0x400/0x400 [ 87.039539][ T50] ? assign_work+0x39e/0x400 [ 87.043454][ T6344] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.044138][ T50] worker_thread+0xa55/0xfc0 [ 87.055006][ T50] kthread+0x2fa/0x390 [ 87.059086][ T50] ? pr_cont_work+0x560/0x560 [ 87.063780][ T50] ? kthread_blkcg+0xd0/0xd0 [ 87.068380][ T50] ret_from_fork+0x48/0x80 [ 87.072807][ T50] ? kthread_blkcg+0xd0/0xd0 [ 87.077409][ T50] ret_from_fork_asm+0x11/0x20 [ 87.082217][ T50] [ 87.089233][ T50] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.104657][ T50] Bluetooth: hci1: failed to register connection device [ 87.116663][ T6344] F2FS-fs (loop2): Start checkpoint disabled! [ 87.167215][ T6311] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.209975][ T6344] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 87.431063][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.445419][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.469054][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.483893][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.496910][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.506683][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.638827][ T6346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.738785][ T12] kworker/u4:1: attempt to access beyond end of device [ 87.738785][ T12] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 87.765108][ T12] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 87.873051][ T6311] tipc: Disabling bearer [ 87.895871][ T6311] tipc: Left network mode [ 88.666624][ T6357] chnl_net:caif_netlink_parms(): no params data found [ 89.184202][ T6391] tipc: Enabling of bearer rejected, already enabled [ 89.486434][ T6402] loop3: detected capacity change from 0 to 1024 [ 89.493938][ T6402] EXT4-fs: Ignoring removed orlov option [ 89.499619][ T6402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.557454][ T6402] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.613995][ T50] Bluetooth: hci0: command tx timeout [ 89.672421][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.711917][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.768453][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.771474][ T6409] loop2: detected capacity change from 0 to 512 [ 89.801556][ T6357] bridge_slave_0: entered allmulticast mode [ 89.806496][ T6409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 89.818047][ T6357] bridge_slave_0: entered promiscuous mode [ 89.839396][ T6409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.853098][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.873962][ T6409] EXT4-fs (loop2): 1 truncate cleaned up [ 89.881287][ T6409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.902055][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.912791][ T6409] EXT4-fs (loop2): shut down requested (1) [ 89.920556][ T28] audit: type=1800 audit(1754962747.843:6): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.123" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 89.955130][ T6357] bridge_slave_1: entered allmulticast mode [ 90.004969][ T6357] bridge_slave_1: entered promiscuous mode [ 90.059815][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.158181][ T6357] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.256598][ T6357] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.529988][ T6357] team0: Port device team_slave_0 added [ 90.549577][ T6357] team0: Port device team_slave_1 added [ 90.728196][ T6413] loop3: detected capacity change from 0 to 32768 [ 90.763618][ T6413] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.122 (6413) [ 90.821959][ T6413] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 90.857065][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.864352][ T6413] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 90.884381][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.913648][ T6413] BTRFS info (device loop3): using free space tree [ 90.948617][ T6357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.975325][ T6357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.010239][ T6357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.044044][ T6357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.044081][ T6413] BTRFS info (device loop3): enabling ssd optimizations [ 91.064426][ T6413] BTRFS info (device loop3): auto enabling async discard [ 91.155194][ T6434] tipc: Enabling of bearer rejected, already enabled [ 91.364078][ T6424] loop2: detected capacity change from 0 to 32768 [ 91.375815][ T6424] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.124 (6424) [ 91.399345][ T6424] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 91.403075][ T6357] hsr_slave_0: entered promiscuous mode [ 91.418565][ T6424] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 91.428651][ T6357] hsr_slave_1: entered promiscuous mode [ 91.431005][ T6424] BTRFS info (device loop2): enabling ssd optimizations [ 91.444064][ T6424] BTRFS info (device loop2): using spread ssd allocation scheme [ 91.451766][ T6424] BTRFS info (device loop2): using free space tree [ 91.454246][ T6357] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.481856][ T6357] Cannot create hsr debugfs directory [ 91.566262][ T5780] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 91.569842][ T6424] BTRFS info (device loop2): auto enabling async discard [ 91.646177][ T6311] hsr_slave_0: left promiscuous mode [ 91.669969][ T6311] hsr_slave_1: left promiscuous mode [ 91.693643][ T50] Bluetooth: hci0: command tx timeout [ 91.701867][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.715342][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.735098][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.742759][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.757817][ T6311] bridge_slave_1: left allmulticast mode [ 91.765248][ T6311] bridge_slave_1: left promiscuous mode [ 91.774407][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.814403][ T6311] bridge_slave_0: left allmulticast mode [ 91.820209][ T6311] bridge_slave_0: left promiscuous mode [ 91.956758][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 92.004718][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.311265][ T6311] veth1_macvtap: left promiscuous mode [ 92.417176][ T6311] veth0_macvtap: left promiscuous mode [ 92.513227][ T6311] veth1_vlan: left promiscuous mode [ 92.603921][ T6311] veth0_vlan: left promiscuous mode [ 92.886203][ T6478] loop0: detected capacity change from 0 to 4096 [ 92.940174][ T6480] loop3: detected capacity change from 0 to 128 [ 92.990613][ T6480] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 93.007060][ T6480] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.123647][ T6480] EXT4-fs warning (device loop3): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 9171568090007697024 [ 93.242976][ T5780] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 93.783702][ T50] Bluetooth: hci0: command tx timeout [ 93.822642][ T6311] team0 (unregistering): Port device team_slave_1 removed [ 93.868712][ T6311] team0 (unregistering): Port device team_slave_0 removed [ 93.920757][ T6311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.048825][ T6311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.171723][ T6507] loop2: detected capacity change from 0 to 8192 [ 94.634250][ T6311] bond0 (unregistering): Released all slaves [ 94.755845][ T6504] tipc: Enabling of bearer rejected, already enabled [ 95.338513][ T6357] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.382689][ T6357] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.418286][ T6529] tipc: Enabling of bearer rejected, already enabled [ 95.451129][ T6357] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.483628][ T6357] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.582116][ T6543] loop2: detected capacity change from 0 to 512 [ 95.600919][ T6543] ext4: Bad value for 'init_itable' [ 95.727719][ T6357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.763099][ T6357] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.800677][ T6549] loop3: detected capacity change from 0 to 512 [ 95.843725][ T6549] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 95.860233][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.867493][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.885324][ T50] Bluetooth: hci0: command tx timeout [ 95.920140][ T6549] EXT4-fs (loop3): invalid journal inode [ 95.944863][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.952072][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.971869][ T6549] EXT4-fs (loop3): can't get journal size [ 95.992621][ T6549] EXT4-fs (loop3): 1 truncate cleaned up [ 96.033012][ T6549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.052855][ T6554] loop2: detected capacity change from 0 to 2048 [ 96.086764][ T6554] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 96.129670][ T6554] UDF-fs: Scanning with blocksize 512 failed [ 96.190180][ T6554] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.306856][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.557456][ T6572] netlink: 20 bytes leftover after parsing attributes in process `syz.2.146'. [ 96.607472][ T6357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.969734][ T6578] tipc: Enabling of bearer rejected, already enabled [ 97.327374][ T6571] loop3: detected capacity change from 0 to 40427 [ 97.352932][ T6571] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 97.370755][ T6571] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 97.403270][ T6571] F2FS-fs (loop3): invalid crc value [ 97.421748][ T6357] veth0_vlan: entered promiscuous mode [ 97.446922][ T6571] F2FS-fs (loop3): Found nat_bits in checkpoint [ 97.476722][ T6357] veth1_vlan: entered promiscuous mode [ 97.528924][ T6592] loop0: detected capacity change from 0 to 8192 [ 97.563073][ T6592] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.600115][ T6592] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 97.609736][ T6571] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 97.618264][ T6571] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 97.626180][ T6592] REISERFS (device loop0): using ordered data mode [ 97.626373][ T6357] veth0_macvtap: entered promiscuous mode [ 97.648055][ T6592] reiserfs: using flush barriers [ 97.663268][ T6592] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.681681][ T6602] tipc: Enabling of bearer rejected, already enabled [ 97.685098][ T6592] REISERFS (device loop0): checking transaction log (loop0) [ 97.721983][ T6357] veth1_macvtap: entered promiscuous mode [ 97.870729][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.882581][ T6592] REISERFS (device loop0): Using tea hash to sort names [ 97.895448][ T6592] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 97.904898][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.916917][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.931336][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.943118][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.954438][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.993054][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.022272][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.043782][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.075172][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.106617][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.133478][ T6357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.147941][ T6357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.177226][ T6357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.211786][ T6357] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.236529][ T6357] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.253904][ T6357] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.299581][ T6357] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.510882][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.543613][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.577415][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.604564][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.953910][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 98.976529][ T6632] tipc: Started in network mode [ 98.981456][ T6632] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 99.023986][ T6632] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 99.042403][ T6632] tipc: Enabled bearer , priority 10 [ 99.441829][ T6643] tipc: Enabling of bearer rejected, already enabled [ 99.569224][ T6649] xt_bpf: check failed: parse error [ 99.923821][ T6653] tipc: Enabling of bearer rejected, already enabled [ 100.153594][ T27] tipc: Node number set to 1 [ 100.319893][ T6646] loop4: detected capacity change from 0 to 32768 [ 100.353112][ T6646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.158 (6646) [ 100.421938][ T6646] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.461017][ T6646] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 100.483490][ T6646] BTRFS info (device loop4): setting nodatacow, compression disabled [ 100.496870][ T6646] BTRFS info (device loop4): max_inline at 0 [ 100.505335][ T6646] BTRFS info (device loop4): enabling disk space caching [ 100.517789][ T6646] BTRFS info (device loop4): turning off barriers [ 100.528868][ T6646] BTRFS info (device loop4): turning on flush-on-commit [ 100.536920][ T6646] BTRFS info (device loop4): doing ref verification [ 100.544030][ T6646] BTRFS info (device loop4): force clearing of disk cache [ 100.556011][ T6646] BTRFS info (device loop4): enabling ssd optimizations [ 100.570279][ T6646] BTRFS info (device loop4): max_inline at 4096 [ 100.583950][ T6646] BTRFS info (device loop4): disk space caching is enabled [ 100.733553][ T6646] BTRFS info (device loop4): auto enabling async discard [ 100.787862][ T6646] BTRFS info (device loop4): rebuilding free space tree [ 100.861499][ T6646] BTRFS info (device loop4): disabling free space tree [ 100.889357][ T6646] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.912426][ T6646] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.941324][ T6692] loop3: detected capacity change from 0 to 4096 [ 101.114268][ T6357] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.317069][ T6707] tipc: Enabling of bearer rejected, already enabled [ 101.700174][ T6692] ntfs3: loop3: no free space to extend mft [ 102.015762][ T6716] tipc: Enabling of bearer rejected, already enabled [ 102.101965][ T6719] tipc: Enabling of bearer rejected, already enabled [ 103.043180][ T6742] loop3: detected capacity change from 0 to 4096 [ 103.075337][ T6746] tipc: Enabling of bearer rejected, already enabled [ 103.441881][ T6738] loop4: detected capacity change from 0 to 32768 [ 103.515816][ T6755] tipc: Enabling of bearer rejected, already enabled [ 103.562114][ T6738] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.177 (6738) [ 103.642154][ T6738] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 103.668924][ T6738] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 103.679924][ T6738] BTRFS info (device loop4): setting nodatacow, compression disabled [ 103.698677][ T6738] BTRFS info (device loop4): enabling auto defrag [ 103.715892][ T6738] BTRFS info (device loop4): max_inline at 0 [ 103.722897][ T6738] BTRFS info (device loop4): using free space tree [ 103.771882][ T6738] BTRFS info (device loop4): auto enabling async discard [ 103.916072][ T6760] tipc: Enabling of bearer rejected, already enabled [ 104.047497][ T6357] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 104.103118][ T6778] loop3: detected capacity change from 0 to 8192 [ 104.129109][ T6778] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 104.168652][ T6778] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 104.209626][ T6778] REISERFS (device loop3): using ordered data mode [ 104.238354][ T6778] reiserfs: using flush barriers [ 104.275160][ T6778] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 104.314206][ T6778] REISERFS (device loop3): checking transaction log (loop3) [ 104.379637][ T6778] REISERFS (device loop3): Using r5 hash to sort names [ 104.402937][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 104.412091][ T6778] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 104.458711][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 104.478311][ T6785] loop0: detected capacity change from 0 to 256 [ 104.846233][ T6798] tipc: Enabling of bearer rejected, already enabled [ 105.033633][ T5829] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 105.158407][ T6809] tipc: Enabling of bearer rejected, already enabled [ 105.245880][ T5829] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.259304][ T5829] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 105.269857][ T5829] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 105.279223][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 105.292563][ T5829] usb 5-1: SerialNumber: syz [ 105.293026][ T6811] tipc: Enabling of bearer rejected, already enabled [ 105.539043][ T5829] usb 5-1: 0:2 : does not exist [ 105.545897][ T5829] usb 5-1: unit 5 not found! [ 105.576004][ T5829] usb 5-1: USB disconnect, device number 2 [ 105.615026][ T6821] loop2: detected capacity change from 0 to 4096 [ 105.631114][ T6821] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 105.737121][ T6821] ntfs3: loop2: Inode r=1e is not in use! [ 105.745983][ T6821] ntfs3: loop2: Inode r=1e is not in use! [ 105.752158][ T6821] ntfs3: loop2: Inode r=1e is not in use! [ 105.759163][ T6821] ntfs3: loop2: Inode r=1e is not in use! [ 106.126354][ T6833] tipc: Enabling of bearer rejected, already enabled [ 106.316927][ T6848] tipc: Enabling of bearer rejected, already enabled [ 106.349159][ T6849] tipc: Enabling of bearer rejected, already enabled [ 106.602743][ T6857] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 106.624235][ T55] IPVS: starting estimator thread 0... [ 106.756141][ T6863] IPVS: using max 18 ests per chain, 43200 per kthread [ 106.881850][ T6868] ip6tnl1: entered promiscuous mode [ 106.887261][ T6868] ip6tnl1: entered allmulticast mode [ 107.187392][ T6865] loop2: detected capacity change from 0 to 32768 [ 107.200859][ T6865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.214 (6865) [ 107.231987][ T6865] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.243744][ T6877] tipc: Enabling of bearer rejected, already enabled [ 107.252418][ T6865] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 107.271277][ T6865] BTRFS info (device loop2): setting nodatacow, compression disabled [ 107.280325][ T6865] BTRFS info (device loop2): max_inline at 0 [ 107.291123][ T6865] BTRFS info (device loop2): enabling disk space caching [ 107.315293][ T6865] BTRFS info (device loop2): turning off barriers [ 107.321755][ T6865] BTRFS info (device loop2): turning on flush-on-commit [ 107.331209][ T6865] BTRFS info (device loop2): doing ref verification [ 107.340351][ T6865] BTRFS info (device loop2): force clearing of disk cache [ 107.349638][ T6865] BTRFS info (device loop2): enabling ssd optimizations [ 107.356796][ T6865] BTRFS info (device loop2): max_inline at 4096 [ 107.363061][ T6865] BTRFS info (device loop2): disk space caching is enabled [ 107.434062][ T6865] BTRFS info (device loop2): auto enabling async discard [ 107.471449][ T6865] BTRFS info (device loop2): rebuilding free space tree [ 107.519190][ T6865] BTRFS info (device loop2): disabling free space tree [ 107.538478][ T6865] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.567512][ T6865] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.636811][ T6898] tipc: Enabling of bearer rejected, already enabled [ 107.654812][ T28] audit: type=1800 audit(1754962765.593:7): pid=6865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 108.033318][ T6908] tipc: Enabling of bearer rejected, already enabled [ 108.054401][ T6911] loop0: detected capacity change from 0 to 1024 [ 108.124005][ T6911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.365147][ T5781] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 108.392205][ T6295] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 108.437908][ T6900] loop3: detected capacity change from 0 to 65536 [ 108.444895][ T6295] EXT4-fs (loop0): Remounting filesystem read-only [ 108.498924][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.571300][ T6900] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 108.751082][ T6900] XFS (loop3): Ending clean mount [ 108.809879][ T6900] XFS (loop3): Quotacheck needed: Please wait. [ 108.963430][ T6900] XFS (loop3): Quotacheck: Done. [ 109.204907][ T5780] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 109.807571][ T6954] loop3: detected capacity change from 0 to 8192 [ 109.822339][ T6954] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 109.836174][ T6954] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 109.845465][ T6954] REISERFS (device loop3): using ordered data mode [ 109.852114][ T6954] reiserfs: using flush barriers [ 109.869549][ T6954] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 109.886259][ T6954] REISERFS (device loop3): checking transaction log (loop3) [ 110.008549][ T6954] REISERFS (device loop3): Using tea hash to sort names [ 110.016732][ T6954] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 111.151168][ T6958] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 111.174288][ T6959] netlink: 'syz.3.230': attribute type 4 has an invalid length. [ 111.354421][ T6967] loop0: detected capacity change from 0 to 1024 [ 111.366302][ T6967] EXT4-fs: Ignoring removed orlov option [ 111.441332][ T6967] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.521661][ T28] audit: type=1800 audit(1754962769.453:8): pid=6967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.233" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 111.560886][ T6963] tipc: Enabling of bearer rejected, already enabled [ 111.597176][ T6972] tipc: Enabling of bearer rejected, already enabled [ 111.675635][ T5784] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.004895][ T6985] tipc: Enabling of bearer rejected, already enabled [ 112.338650][ T7008] loop3: detected capacity change from 0 to 512 [ 112.544438][ T7008] EXT4-fs (loop3): Test dummy encryption mode enabled [ 112.565089][ T7008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 112.619798][ T7008] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.241: corrupted in-inode xattr: e_name out of bounds [ 112.652127][ T7008] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 112.688908][ T7008] EXT4-fs (loop3): 1 orphan inode deleted [ 112.719706][ T7008] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.858140][ T7023] tipc: Enabling of bearer rejected, already enabled [ 113.013995][ T7008] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 113.055123][ T28] audit: type=1800 audit(1754962770.993:9): pid=7008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.241" name="file2" dev="loop3" ino=15 res=0 errno=0 [ 113.161023][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.245825][ T7014] loop2: detected capacity change from 0 to 32768 [ 113.329891][ T7014] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.368512][ T7044] tipc: Enabling of bearer rejected, already enabled [ 113.566698][ T7014] XFS (loop2): Ending clean mount [ 113.609167][ T7014] XFS (loop2): Quotacheck needed: Please wait. [ 113.749867][ T7014] XFS (loop2): Quotacheck: Done. [ 114.115769][ T7069] loop0: detected capacity change from 0 to 2048 [ 114.159139][ T7069] loop0: p1 < > p4 [ 114.167143][ T7069] loop0: p4 size 8388608 extends beyond EOD, truncated [ 114.262105][ T5781] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.384351][ T7075] tipc: Enabling of bearer rejected, already enabled [ 114.810548][ T7088] loop2: detected capacity change from 0 to 4096 [ 114.819082][ T7096] loop3: detected capacity change from 0 to 47 [ 114.888215][ T7092] tipc: Enabling of bearer rejected, already enabled [ 114.926213][ T7096] syz.3.256: attempt to access beyond end of device [ 114.926213][ T7096] loop3: rw=1, sector=48, nr_sectors = 2 limit=47 [ 114.947639][ T7096] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 114.956391][ T7096] syz.3.256: attempt to access beyond end of device [ 114.956391][ T7096] loop3: rw=1, sector=50, nr_sectors = 2 limit=47 [ 115.004146][ T7096] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 115.210542][ T7111] loop3: detected capacity change from 0 to 256 [ 115.239829][ T7111] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 116.552372][ T7135] tipc: Enabling of bearer rejected, already enabled [ 116.695056][ T7122] loop2: detected capacity change from 0 to 32768 [ 116.706680][ T7122] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.264 (7122) [ 116.731873][ T7122] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.747604][ T7122] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 116.756378][ T7122] BTRFS info (device loop2): enabling disk space caching [ 116.770108][ T7122] BTRFS info (device loop2): doing ref verification [ 116.776868][ T7122] BTRFS info (device loop2): use zlib compression, level 3 [ 116.789719][ T7122] BTRFS info (device loop2): force clearing of disk cache [ 116.798037][ T7122] BTRFS info (device loop2): setting nodatacow, compression disabled [ 116.810602][ T7122] BTRFS info (device loop2): doing ref verification [ 116.817429][ T7122] BTRFS info (device loop2): disk space caching is enabled [ 116.906902][ T7122] BTRFS info (device loop2): enabling ssd optimizations [ 116.914353][ T7122] BTRFS info (device loop2): auto enabling async discard [ 116.925483][ T7122] BTRFS info (device loop2): rebuilding free space tree [ 116.953680][ T7144] tipc: Enabling of bearer rejected, already enabled [ 116.964964][ T7122] BTRFS info (device loop2): disabling free space tree [ 116.972970][ T7122] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 116.984058][ T7122] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 117.024328][ T28] audit: type=1800 audit(1754962774.963:10): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 117.054918][ T28] audit: type=1800 audit(1754962774.983:11): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 117.256409][ T28] audit: type=1800 audit(1754962775.193:12): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.264" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 117.387244][ T7169] tipc: Enabling of bearer rejected, already enabled [ 117.462924][ T7172] tipc: Enabling of bearer rejected, already enabled [ 117.481664][ T5781] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.799470][ T7182] loop4: detected capacity change from 0 to 128 [ 117.821679][ T7182] EXT4-fs: Ignoring removed nobh option [ 117.853880][ T7182] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 117.893564][ T7182] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.991798][ T6357] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.106211][ T7180] loop0: detected capacity change from 0 to 32768 [ 118.213495][ T28] audit: type=1800 audit(1754962776.123:13): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.272" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 118.818406][ T7196] tipc: Enabling of bearer rejected, already enabled [ 119.126451][ T7201] tipc: Enabling of bearer rejected, already enabled [ 119.302404][ T7209] tipc: Enabling of bearer rejected, already enabled [ 119.328051][ T7207] tipc: Enabling of bearer rejected, already enabled [ 119.471094][ T7214] trusted_key: syz.4.283 sent an empty control message without MSG_MORE. [ 119.946021][ T7225] tipc: Enabling of bearer rejected, already enabled [ 120.338312][ T7235] syzkaller1: entered promiscuous mode [ 120.345916][ T7235] syzkaller1: entered allmulticast mode [ 121.237695][ T7246] tipc: Enabling of bearer rejected, already enabled [ 121.318849][ T7245] tipc: Enabling of bearer rejected, already enabled [ 121.405900][ T7248] tipc: Enabling of bearer rejected, already enabled [ 121.690809][ T7256] tipc: Enabling of bearer rejected, already enabled [ 122.850607][ T7280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.873011][ T7280] netlink: 'syz.2.306': attribute type 12 has an invalid length. [ 122.882378][ T7280] netlink: 'syz.2.306': attribute type 29 has an invalid length. [ 122.894992][ T7280] netlink: 148 bytes leftover after parsing attributes in process `syz.2.306'. [ 122.915719][ T7280] netlink: 'syz.2.306': attribute type 2 has an invalid length. [ 122.925807][ T7280] netlink: 43 bytes leftover after parsing attributes in process `syz.2.306'. [ 123.071588][ T7287] tipc: Enabling of bearer rejected, already enabled [ 123.081118][ T7286] tipc: Enabling of bearer rejected, already enabled [ 123.125391][ T7289] tipc: Enabling of bearer rejected, already enabled [ 123.257670][ T7296] tipc: Enabling of bearer rejected, already enabled [ 123.717995][ T7310] loop2: detected capacity change from 0 to 128 [ 124.415704][ T7310] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.447885][ T7310] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 124.501088][ T7316] loop4: detected capacity change from 0 to 4096 [ 124.520084][ T7316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.542057][ T7316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.589678][ T5781] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.700477][ T7323] tipc: Enabling of bearer rejected, already enabled [ 124.803750][ T6357] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.992512][ T7330] tipc: Enabling of bearer rejected, already enabled [ 125.042612][ T7335] tipc: Enabling of bearer rejected, already enabled [ 125.054771][ T7332] tipc: Enabling of bearer rejected, already enabled [ 125.568032][ T7347] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 126.362808][ T7354] loop2: detected capacity change from 0 to 1024 [ 126.370652][ T7354] EXT4-fs: Ignoring removed oldalloc option [ 126.377005][ T7354] EXT4-fs: Ignoring removed orlov option [ 126.407420][ T7354] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 126.470866][ T7354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.509683][ T7354] EXT4-fs: Ignoring removed orlov option [ 126.530939][ T7354] EXT4-fs (loop2): can't enable nombcache during remount [ 126.539029][ T7366] tipc: Enabling of bearer rejected, already enabled [ 126.549756][ T7358] tipc: Enabling of bearer rejected, already enabled [ 126.592798][ T7364] tipc: Enabling of bearer rejected, already enabled [ 126.618808][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.750173][ T7368] tipc: Enabling of bearer rejected, already enabled [ 128.308483][ T7398] tipc: Enabling of bearer rejected, already enabled [ 128.325186][ T7397] tipc: Enabling of bearer rejected, already enabled [ 128.542821][ T7402] tipc: Enabling of bearer rejected, already enabled [ 128.708474][ T7408] tipc: Enabling of bearer rejected, already enabled [ 130.416051][ T7431] tipc: Enabling of bearer rejected, already enabled [ 130.469508][ T7429] tipc: Enabling of bearer rejected, already enabled [ 130.516260][ T7435] tipc: Enabling of bearer rejected, already enabled [ 130.644780][ T7437] loop3: detected capacity change from 0 to 16 [ 130.672286][ T7437] erofs: (device loop3): mounted with root inode @ nid 36. [ 130.699024][ T7437] syz.3.362: attempt to access beyond end of device [ 130.699024][ T7437] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16 [ 130.733921][ T7437] syz.3.362: attempt to access beyond end of device [ 130.733921][ T7437] loop3: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 130.772034][ T7439] syz.3.362: attempt to access beyond end of device [ 130.772034][ T7439] loop3: rw=0, sector=8, nr_sectors = 16 limit=16 [ 130.811775][ T7440] Driver unsupported XDP return value 0 on prog (id 127) dev N/A, expect packet loss! [ 130.852979][ T5780] BUG: Bad page state in process syz-executor pfn:23508 [ 130.860499][ T5780] page:ffffea00008d4200 refcount:0 mapcount:0 mapping:ffff88805f3c07c8 index:0x2 pfn:0x23508 [ 130.870921][ T5780] aops:z_erofs_cache_aops ino:0 [ 130.875852][ T5780] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 130.883703][ T5780] page_type: 0xffffffff() [ 130.888042][ T5780] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f3c07c8 [ 130.897332][ T5780] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 130.906053][ T5780] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 130.913718][ T5780] page_owner tracks the page as allocated [ 130.919976][ T5780] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7437, tgid 7436 (syz.3.362), ts 130698619879, free_ts 130637111836 [ 130.942399][ T5780] post_alloc_hook+0x1cd/0x210 [ 130.947325][ T5780] get_page_from_freelist+0x195c/0x19f0 [ 130.952898][ T5780] __alloc_pages+0x1e3/0x460 [ 130.957567][ T5780] z_erofs_do_read_page+0x20c0/0x3680 [ 130.962956][ T5780] z_erofs_readahead+0x862/0xd50 [ 130.968008][ T5780] read_pages+0x177/0x840 [ 130.972355][ T5780] page_cache_ra_unbounded+0x692/0x770 [ 130.977894][ T5780] force_page_cache_ra+0x2c1/0x320 [ 130.983000][ T5780] generic_fadvise+0x44f/0x730 [ 130.987811][ T5780] __x64_sys_fadvise64+0x140/0x180 [ 130.992932][ T5780] do_syscall_64+0x55/0xb0 [ 130.997414][ T5780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.003354][ T5780] page last free stack trace: [ 131.008102][ T5780] free_unref_page_prepare+0x7ce/0x8e0 [ 131.013674][ T5780] free_unref_page+0x32/0x2e0 [ 131.018375][ T5780] __unfreeze_partials+0x1cf/0x210 [ 131.023546][ T5780] put_cpu_partial+0x17c/0x250 [ 131.028831][ T5780] __slab_free+0x31d/0x410 [ 131.033278][ T5780] qlist_free_all+0x75/0xe0 [ 131.038023][ T5780] kasan_quarantine_reduce+0x143/0x160 [ 131.043599][ T5780] __kasan_slab_alloc+0x22/0x80 [ 131.048465][ T5780] slab_post_alloc_hook+0x6e/0x4d0 [ 131.056186][ T5780] kmem_cache_alloc_node+0x150/0x330 [ 131.061504][ T5780] __alloc_skb+0x108/0x2c0 [ 131.066686][ T5780] inet_netconf_notify_devconf+0x173/0x230 [ 131.072522][ T5780] inetdev_event+0x789/0x15c0 [ 131.077320][ T5780] notifier_call_chain+0x197/0x390 [ 131.082446][ T5780] unregister_netdevice_many_notify+0xf36/0x1810 [ 131.088890][ T5780] unregister_netdevice_queue+0x324/0x360 [ 131.094777][ T5780] Modules linked in: [ 131.098716][ T5780] CPU: 1 PID: 5780 Comm: syz-executor Not tainted 6.6.101-syzkaller #0 [ 131.106961][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.117022][ T5780] Call Trace: [ 131.120298][ T5780] [ 131.123229][ T5780] dump_stack_lvl+0x16c/0x230 [ 131.127907][ T5780] ? show_regs_print_info+0x20/0x20 [ 131.133097][ T5780] ? swiotlb_print_info+0x70/0x70 [ 131.138119][ T5780] bad_page+0x14b/0x170 [ 131.142263][ T5780] free_unref_page_prepare+0x887/0x8e0 [ 131.147718][ T5780] free_unref_page+0x32/0x2e0 [ 131.152384][ T5780] ? __folio_put+0xef/0x210 [ 131.156877][ T5780] erofs_try_to_free_all_cached_pages+0x295/0x600 [ 131.163287][ T5780] erofs_shrink_workstation+0x118/0x290 [ 131.168833][ T5780] ? erofs_shrinker_unregister+0x170/0x170 [ 131.174722][ T5780] ? io_schedule+0xd0/0xd0 [ 131.179129][ T5780] ? kobject_put+0x43c/0x470 [ 131.183712][ T5780] erofs_shrinker_unregister+0x5d/0x170 [ 131.189265][ T5780] erofs_put_super+0x4e/0x150 [ 131.193939][ T5780] ? erofs_free_inode+0xb0/0xb0 [ 131.198782][ T5780] generic_shutdown_super+0x134/0x2b0 [ 131.204149][ T5780] kill_block_super+0x44/0x90 [ 131.208812][ T5780] erofs_kill_sb+0x4c/0x140 [ 131.213308][ T5780] deactivate_locked_super+0x97/0x100 [ 131.218672][ T5780] cleanup_mnt+0x429/0x4c0 [ 131.223080][ T5780] task_work_run+0x1ce/0x250 [ 131.227701][ T5780] ? task_work_cancel+0x240/0x240 [ 131.232720][ T5780] ? exit_to_user_mode_loop+0x3b/0x110 [ 131.238174][ T5780] exit_to_user_mode_loop+0xe6/0x110 [ 131.243456][ T5780] exit_to_user_mode_prepare+0xb1/0x140 [ 131.248993][ T5780] syscall_exit_to_user_mode+0x1a/0x50 [ 131.254450][ T5780] do_syscall_64+0x61/0xb0 [ 131.258853][ T5780] ? clear_bhb_loop+0x40/0x90 [ 131.263514][ T5780] ? clear_bhb_loop+0x40/0x90 [ 131.268183][ T5780] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 131.274078][ T5780] RIP: 0033:0x7f539358ff17 [ 131.278501][ T5780] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 131.298110][ T5780] RSP: 002b:00007ffd418157e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 131.306519][ T5780] RAX: 0000000000000000 RBX: 00007f5393611c05 RCX: 00007f539358ff17 [ 131.314482][ T5780] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd418158a0 [ 131.322443][ T5780] RBP: 00007ffd418158a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.330402][ T5780] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd41816930 [ 131.338365][ T5780] R13: 00007f5393611c05 R14: 000000000001fed9 R15: 00007ffd41816970 [ 131.346342][ T5780] [ 131.351219][ T5780] Disabling lock debugging due to kernel taint [ 132.978217][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.993436][ T1280] ieee802154 phy1 wpan1: encryption failed: -22