last executing test programs: 27.391205757s ago: executing program 2 (id=300): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000000380)={[{@block_validity}, {@errors_continue}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x1be}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) readv(r5, &(0x7f0000000680), 0x0) r6 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, 0xffffffffffffffff, 0x0) pread64(r6, &(0x7f0000001600)=""/4072, 0xfe8, 0x3) setsockopt$inet_buf(r3, 0x0, 0x29, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r7 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x1, 0x0) fallocate(r0, 0x10, 0x800, 0x8000) 22.869856027s ago: executing program 2 (id=307): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1}, 0x20000000) writev(r0, &(0x7f00000003c0), 0x100000000000022d) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) r3 = gettid() prlimit64(r3, 0x6, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) read(r4, &(0x7f0000000940)=""/1040, 0x410) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) pipe(&(0x7f0000000000)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f0000000140)) 21.911868978s ago: executing program 3 (id=310): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x20980) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, 0x0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 19.680337326s ago: executing program 3 (id=311): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0x7) sched_setaffinity(0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(r1, &(0x7f0000000040)='./file1\x00', 0x3) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040881) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x40286608, 0x0) 16.553176743s ago: executing program 2 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x7, 0x8, 0x8, 0x45}, 0x50) openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x8, 0x2}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x700, @loopback=0x7f000000}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x43f, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 15.211446665s ago: executing program 2 (id=315): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000"], 0x50) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee00, 0x0, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, 0x0, 0x80442, 0x67) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x323841) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000180)={0x3, 0x7, 0x388, 0x40007, 0x0, "81de852dab1f00"}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, 0x0, 0x0) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, 0x0, 0x0) write$FUSE_STATFS(r5, 0x0, 0x0) close(r6) 11.886867743s ago: executing program 1 (id=317): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000d000000aa0000006900000018000000000000001001000001"], 0x30}, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, &(0x7f0000000040)=0x2, 0x4) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) 11.360722754s ago: executing program 0 (id=318): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000100000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014006a00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0xf2a9a9ee94caf607, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x6}, 0x50) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r3, 0x4) write(r1, &(0x7f0000000100)="060000000300010000", 0x9) write(r1, &(0x7f0000000300), 0x0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x1, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 11.194993749s ago: executing program 0 (id=319): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fspick(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) r3 = socket(0x28, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) pselect6(0x40, &(0x7f0000000180)={0x1de80000000000, 0x1, 0x5c, 0x40, 0x4, 0x1000, 0xffffffffffffff47, 0x7}, &(0x7f00000001c0)={0x1, 0x8000, 0x6, 0x0, 0x800000000, 0x5f, 0x8000000000000000, 0x11}, &(0x7f0000000280)={0x7, 0x0, 0xc5d2, 0xa35a, 0x1, 0x800, 0x10, 0x7fffffffffffffff}, &(0x7f0000000340)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x7]}, 0x8}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', 0x0}) 10.801368221s ago: executing program 3 (id=320): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677eef7536f8115edae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x20}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) lseek(r3, 0xfffffffffffffff5, 0x1) inotify_init() syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c90010000c00050019030800bdff46c219e6401107ff8e000500"], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmmsg$unix(r5, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.721645198s ago: executing program 1 (id=321): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580), 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="5a000000020000", 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$PTP_ENABLE_PPS(r2, 0x40043d04, 0x0) r3 = gettid() r4 = socket$tipc(0x1e, 0x2, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x80042, 0x1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, 0x0, &(0x7f00000000c0), 0x0) tkill(r3, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 10.143085249s ago: executing program 0 (id=322): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 8.586915166s ago: executing program 1 (id=323): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r1, 0xffffffffffffffff, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r4, 0x0}]) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r6, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002000010003000000fbdbdf25020117800c00050008ac0f000000000014"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="34052bbd7000ffdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x4050) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x208, 0xb8, 0xa, 0x1000000, 0xb8, 0x0, 0x170, 0x230, 0x230, 0x170, 0x223, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x268) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 7.973900725s ago: executing program 3 (id=324): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000c, 0x1e1000) mknod$loop(0x0, 0x8, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) io_cancel(0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000002c0), 0x2, 0x281403) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000380)={'\x00', 0x8, 0x100004, 0x7, 0x7fff, 0x4000f5b}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) semtimedop(0x0, &(0x7f0000000180)=[{0x3, 0x100}, {0x4, 0x3, 0x1800}, {0x1, 0x80, 0x800}, {0x0, 0x8}, {0x2, 0x8, 0x800}, {0x3, 0xff7f}], 0x6, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040)=0xffffffc0, 0x4) bind$inet6(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r7, 0x0, 0x10}, 0xc) 6.905431269s ago: executing program 0 (id=325): gettid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) write(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000000300)="0400000000000000000000003801000038010000000000000000000000000000000000000000000000000000000000006364") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x10, 0x4, 0x3c8, 0x110, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@private, @rand_addr, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_bridge\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x4, {@empty, @mac=@dev, @dev, @broadcast}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@arp={@empty, @empty, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'tunl0\x00', {}, {}, 0x0, 0xff03}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) mmap$IORING_OFF_SQ_RING(0x110c230020, 0x8000002, 0x3, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x1, 0x5003) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0xf0, 0x10, 0x405, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x2b}, @in=@loopback, {}, {0x0, 0x0, 0x100000}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) 5.863305968s ago: executing program 3 (id=326): creat(&(0x7f0000000000)='./file0\x00', 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) pipe2(&(0x7f00000000c0), 0x80000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f00000001c0), 0xff, 0x2100) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x80000) socket(0x10, 0x80002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) userfaultfd(0x1) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 5.063748526s ago: executing program 0 (id=327): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0], 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x1a}, 0x28) open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0xc0, r2, 0x301, 0x70bd2a, 0x25dfdbff, {0x5}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@pci={{0x8}, {0x11}}]}, 0xc0}}, 0x4044000) socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r4, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)) 4.928834445s ago: executing program 1 (id=328): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[], 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) rt_sigpending(&(0x7f0000000040), 0xfffffefb) write(r3, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) msgctl$MSG_INFO(0x0, 0xc, &(0x7f00000004c0)=""/141) msgctl$IPC_STAT(0x0, 0x2, 0x0) getuid() getgroups(0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00]) lstat(&(0x7f0000000180)='./cgroup/file0\x00', &(0x7f0000000400)) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)=ANY=[@ANYBLOB='\x00j', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f0000004400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, r5, {0x7, 0x29, 0x0, 0xffffffff91012010, 0xfe, 0x200, 0x81, 0x0, 0x0, 0x0, 0x2}}, 0x50) 2.877370135s ago: executing program 2 (id=329): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x8d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000900)=ANY=[], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x147}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendmmsg(r5, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893aeefbf94850960c84825a918b0", 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{&(0x7f0000002240)="321f349be984b668f593bf16c2f60e4b01783ed59dcd6a4105711458d2cf86696caad21a4387232f7ae8dbda478307058ab2ffec546f49907b7d4c54fe1fa76d99f5c80956c6769c810b895a00ab69f114794c1e3ee671204a47d3153305395d1e523e504927505590c078bc1a7d6e82b332bf141f662f26ad9ba4c11b87d5abbc3340ef989b3a8e666f8f82ca82aab6d33c953938b30b61c91cbc926b2a58d67d8198e458ed8f10ad8975356af9dab25f718147ae2a3e81187adaa46d247e3a8c437053bb01b855c6fb0ee0e7024fa61bd2af5aa1d918fcc93b3ffadf3a982efefa3b47727caafee6246ee147d676a5e2879e351f5ac51e6b62aaedb5cd03d16cb4f8bfaac498397b3dc22c063fbd87b2912647948430488fb45ca42096e08a6760c831b06d4582b7440f9123f3711a87b71a4a3a4614b2bf8dcdb84d985777893889120fb820ffe525acbf530869895f2caf84922e5a8aee6a0f887145b0d961bfa9c8f71788ccb8d2ee73676c2f68427b776f537afb9a8c97e055e35204ec09fd3f2c9a0b9f8b33ef0343ef22c99a7fe463550d074b626c1173f34fc49f1431460881ccd35b679f186dd10ac84e2f9aa370443a75938812c1b1888e57b0a79001965832e7cd8c85865081a16938fc81e72c26e686078692dad56ca4a2371a6b370268da843aa7ba9e498a7ae8a6317907b2d5114acf3d35522e4c8cb4e014c7d3f5f60c57b1293ec9956bed6abb25b5e2f90cf3eba7adc060b00dcb50480282b649e9c601bf0a400290a337e46af9be19d489e8693750a0be63313307b51db7726d4c6643f6f8ab22ce41310043728ffd414567f6e514c5e88b5614195b9ba893c8980949974f1eae80d27f7f90b251a094469561598e3dcd2bc143edd69b131595bbf776aa7583687228d8ea578f9f08ea949be49c1b087f430262968f639047eeb91c84a4cc6df66c749fb9b5b38e7e6546683df3a6ae722ea0d644256d82d8f3ba6b8bca23498a7dcc06fcda64d94f15b6bf620e7b272a476b097715f430c1d7c4c221156df5225c9fee4e580a5600713a1ce6e503c37730b5b4d3be23b212eb0ac2a05a7dc6aa88984566664086491ba3214bd9c9a4196d028f6ba448682536b40eab416ea8cf4098101af663d53110ebc2dffd88457ffd70decf1269f3fa61460593671d750ea0ab08aaac98a555a78da62b62625b550f840f34d1b02788bceb09002f615187159295d1a10e2dcfda5c1d399226047a53a1695f0af8121ad144b4dbe411d34d5e4eb4b4075e522d60d0020b2969025021bfc03062e0c8281bfa4cbce38241b53e970acc20ee903fcc81e8770f93367d7eddb95093177337475d5ef009ab799de6950d06ad68e8f9474634672657ba29df601e0be9e362197bafc25fee416a2b6d378dd31294d99317e5cc0d83827f6916ac648d638a515f823d0d784d841c31483b7d030258c62256268055286d3e773316f0f50df6411da24d8aeed75f50f49b0f6cc8672630954c1c3a1632d3497e3be53a4734619bd79aea6ffd87b8278f09775884018c70a6cf7290d5d09c6fa35a2c5fe9be746c9a4cb3e45855a12bf0c0fdeecb5a86922094b0d7b1adf0c10295e0e2ded424c476b8a15ddc44d229951e8a86d359c911e6a4baaeeb2c84cf367e92566ad2bed0c079c614f903d48cd19252c004a2f1de096d83f032d1a86bcd0b53b16668c88258d7d5ca7fc72d41b74ffe5c4a02e5b7077eddbeb77e4678a45e2983e4a1c07e7eb53ebddedca9bf2c52b84b759a88ec4cad17935e7af6c1ae2dd0ce1d37a2dcc74c336a71daf179ebddb5651a41f209b6a5ea7a001efbf74bd21f7fa3708430baddc2b24a7871f7bb443913ca59e64556d361af986aff89975fa48682bd97e707590f3d508427f6a61e293393518b620c12b6d055014a2f5744be4a16a8b39e5cb19112eb529646f83ca092c52945bd873e6dffbd22f9ba99f350689313c2acc9d4a35c182056bf029aa5fbd942a955d5627b815b658a522605fc5a993c4cc3722da94d1509a1926fe2873c02027714784d20f2765c5f299c56a18791b4ca799bf477832093222f805fa125527495975cb5f50f5ca6cba89459b85d674214ff894c33b8a2c85193d7f312de8a42f4eede4fb84ae648dffae1ec13e8ad5663b10847f9d476e1bcacff45389dee0cc7e1a84834ab7904116ef8c89705f931b42a501303da83ac9799dde0df252d0b597e78001229d9a2339bd71c6244fdaebcffc10595c09ddad42bf7cfed789817962bffec261cc1d203910c5282b7971da3eae449202e1eda1d7c7793c2c24d6e6fd6f58331e63a59900e7a0e2c959fbc6b625fd4c95cd61d72ed56a96018d0b94358f9e50fb98eec69d4fae7d5ec303bde80f0bfd17908138c1a5c9e5d805c25adf392e5be7e1eb17945ed9b4171fb776e11602c32784718884fea99446ce11847ea0e4bcb2931105425c5614280f977380c50fe12d1542fcf61c61fdf8cb63054fba443fa1ee52798881269497db04912b467a563b24dbad4b08d34ac178b9e356c1e8b372ba51f4c8ab753f69e05b78e20b97e13b472a745c9bdf625e208dee9bca82ed2bb59c9253cf70764c3c7ed8ad833b7be", 0x744}], 0x1}}], 0x2, 0x0) 2.789099914s ago: executing program 1 (id=330): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) pipe2(&(0x7f0000000040), 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r1, 0x3b89, &(0x7f0000001000)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r4, 0xb11, 0x70bd28, 0x25dfd3ff}, 0x14}, 0x1, 0x0, 0x0, 0x4000044}, 0x24040880) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x82db) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r7 = syz_open_dev$vbi(&(0x7f0000000340), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f00000000c0)=0x3) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x5) madvise(&(0x7f00005fb000/0x1000)=nil, 0x1000, 0x17) syz_clone(0x84008200, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xfd8, 0x2, 0x401d031, 0xffffffffffffffff, 0x0) 1.816366908s ago: executing program 2 (id=331): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f00000001c0), 0x42, 0x0, 0x0}) dup3(r1, r0, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x20000044) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f00000014c0)={0xc, {"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", 0x1000}}, 0x1006) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000b00)="13000000010203", 0x7}, {&(0x7f0000000140)="44338ec9bdf8bc", 0x7}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x101) write$uinput_user_dev(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840cc7d6e67db7700000003090220000100000000090400000eef01"], 0x0) ioctl$EVIOCGUNIQ(r5, 0x80404508, &(0x7f0000000280)=""/91) signalfd4(0xffffffffffffffff, &(0x7f0000000380)={[0x3ff]}, 0x8, 0x80800) statx(0xffffffffffffffff, 0x0, 0x6000, 0x800, &(0x7f00000003c0)) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r6, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) accept(r7, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 148.053269ms ago: executing program 1 (id=332): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16, @ANYBLOB="027238416ef57ecf3441910e652542ce7f79983ac74d8d2dcf2414ae5162cbf9aa986a87318d570b6b4374ea780a355539344b8cd27ccf0aba2d7044638d59f9d392a967751ccec949b77f5afe6edfe3d58300d71effdd4c9e49bc0d4e46dd"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x500800, 0x94) mkdirat(r0, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x90) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r3, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sched_setaffinity(r3, 0x8, &(0x7f0000000180)=0xfffffffffffffffc) getsockopt$inet_opts(r5, 0x84, 0x8, 0xfffffffffffffffe, &(0x7f0000000280)=0x4b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r7, &(0x7f0000000250)='/dev/zram0,6', 0xc) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0xa, 0x3, 0x3a) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r14, 0x1, 0x3, 0x0, {@ip4=@empty, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x7, 0x8000, 0x46d23e93, 0xfffffffb, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x65, 0x0, 0xff, 0x2f, 0x0, @broadcast, @rand_addr=0x64010101}}}}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000100001042abd7000feffffff00000000", @ANYRES32=r6, @ANYBLOB="02010000ca0107001c0037800b00010067656e65766500000c000280080002000a010100050027000800000004001400110024001ebe7032478eccb383f0aa902600008008001f00050e0000"], 0x64}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) write(r1, &(0x7f0000000000)='3', 0x4e) unshare(0x4a000200) 22.240825ms ago: executing program 0 (id=333): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={@remote, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000001900110100000000000000000a"], 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x0) 0s ago: executing program 3 (id=334): keyctl$clear(0x3, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) sched_setattr(0x0, 0x0, 0x0) timer_create(0x6, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) add_key$fscrypt_provisioning(&(0x7f0000000280), 0x0, &(0x7f0000000640)={0x3, 0x0, @b}, 0x48, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f00006eb000/0x2000)=nil, 0x2000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xb4b3a5b6a6f81e73, 0x204031, 0xffffffffffffffff, 0xc9751000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x400) readv(r3, &(0x7f0000001c80)=[{&(0x7f0000000740)=""/200, 0xc8}], 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r5, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r6, 0x40045108, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.211' (ED25519) to the list of known hosts. [ 65.801084][ T5757] cgroup: Unknown subsys name 'net' [ 65.935786][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.327405][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.780194][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.787282][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.795950][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.803597][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.807011][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.811498][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.826016][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.826196][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.841149][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.848320][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.849831][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.855980][ T5778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.863246][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.870192][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.877076][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.883845][ T5778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.892256][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.897939][ T5778] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.915442][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.915746][ T5778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.930103][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.940466][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.948365][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.961811][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.301658][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 69.424876][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.432492][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.439744][ T5770] bridge_slave_0: entered allmulticast mode [ 69.447154][ T5770] bridge_slave_0: entered promiscuous mode [ 69.461457][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 69.472885][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.480965][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.488078][ T5770] bridge_slave_1: entered allmulticast mode [ 69.494866][ T5770] bridge_slave_1: entered promiscuous mode [ 69.539476][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 69.550366][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 69.564109][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.603902][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.657630][ T5770] team0: Port device team_slave_0 added [ 69.693205][ T5770] team0: Port device team_slave_1 added [ 69.745547][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.752907][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.760295][ T5769] bridge_slave_0: entered allmulticast mode [ 69.766889][ T5769] bridge_slave_0: entered promiscuous mode [ 69.782646][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.792146][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.799374][ T5771] bridge_slave_0: entered allmulticast mode [ 69.806245][ T5771] bridge_slave_0: entered promiscuous mode [ 69.826895][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.836939][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.844139][ T5769] bridge_slave_1: entered allmulticast mode [ 69.851696][ T5769] bridge_slave_1: entered promiscuous mode [ 69.858778][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.865980][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.892179][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.903639][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.911066][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.918318][ T5771] bridge_slave_1: entered allmulticast mode [ 69.925040][ T5771] bridge_slave_1: entered promiscuous mode [ 69.956929][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.978340][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.985470][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.994925][ T5768] bridge_slave_0: entered allmulticast mode [ 70.001733][ T5768] bridge_slave_0: entered promiscuous mode [ 70.009160][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.016671][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.042696][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.062271][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.085452][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.094866][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.102266][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.109364][ T5768] bridge_slave_1: entered allmulticast mode [ 70.116156][ T5768] bridge_slave_1: entered promiscuous mode [ 70.145013][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.193808][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.215583][ T5771] team0: Port device team_slave_0 added [ 70.224428][ T5771] team0: Port device team_slave_1 added [ 70.239435][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.252803][ T5770] hsr_slave_0: entered promiscuous mode [ 70.259350][ T5770] hsr_slave_1: entered promiscuous mode [ 70.275630][ T5769] team0: Port device team_slave_0 added [ 70.283976][ T5769] team0: Port device team_slave_1 added [ 70.326584][ T5768] team0: Port device team_slave_0 added [ 70.359302][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.366366][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.392439][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.404982][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.412580][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.438950][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.452635][ T5768] team0: Port device team_slave_1 added [ 70.458912][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.466107][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.492686][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.535169][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.542241][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.568338][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.615554][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.623490][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.649650][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.675995][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.683151][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.709987][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.761725][ T5771] hsr_slave_0: entered promiscuous mode [ 70.768297][ T5771] hsr_slave_1: entered promiscuous mode [ 70.774609][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.782842][ T5771] Cannot create hsr debugfs directory [ 70.813204][ T5769] hsr_slave_0: entered promiscuous mode [ 70.819332][ T5769] hsr_slave_1: entered promiscuous mode [ 70.825851][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.833542][ T5769] Cannot create hsr debugfs directory [ 70.844819][ T5768] hsr_slave_0: entered promiscuous mode [ 70.850990][ T5768] hsr_slave_1: entered promiscuous mode [ 70.856945][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.864632][ T5768] Cannot create hsr debugfs directory [ 70.970577][ T5777] Bluetooth: hci0: command tx timeout [ 70.976149][ T5777] Bluetooth: hci3: command tx timeout [ 71.049931][ T5773] Bluetooth: hci2: command tx timeout [ 71.055694][ T5777] Bluetooth: hci1: command tx timeout [ 71.194992][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.214305][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.224998][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.234223][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.304272][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.318411][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.329927][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.339160][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.431049][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.441550][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.469491][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.470809][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.482859][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.486271][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.556320][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.565591][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.583782][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.591195][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.600833][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.645594][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.678068][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.685327][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.697450][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.704622][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.798776][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.839073][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.869037][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.876183][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.908988][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.916131][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.958130][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.998747][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.024246][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.047309][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.073444][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.093791][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.100958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.142971][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.150152][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.215460][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.222611][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.237976][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.245083][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.284893][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.415455][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.465112][ T5770] veth0_vlan: entered promiscuous mode [ 72.524529][ T5770] veth1_vlan: entered promiscuous mode [ 72.576227][ T5771] veth0_vlan: entered promiscuous mode [ 72.615719][ T5771] veth1_vlan: entered promiscuous mode [ 72.642483][ T5770] veth0_macvtap: entered promiscuous mode [ 72.669546][ T5770] veth1_macvtap: entered promiscuous mode [ 72.692227][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.734575][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.755150][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.765703][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.776532][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.785855][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.795285][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.807300][ T5771] veth0_macvtap: entered promiscuous mode [ 72.836823][ T5771] veth1_macvtap: entered promiscuous mode [ 72.885137][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.904607][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.916845][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.935766][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.957048][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.967923][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.979073][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.994224][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.003568][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.012453][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.021317][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.050643][ T5777] Bluetooth: hci3: command tx timeout [ 73.051016][ T5773] Bluetooth: hci0: command tx timeout [ 73.071722][ T2957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.081450][ T2957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.086648][ T5768] veth0_vlan: entered promiscuous mode [ 73.131510][ T5773] Bluetooth: hci1: command tx timeout [ 73.131529][ T5777] Bluetooth: hci2: command tx timeout [ 73.156717][ T5768] veth1_vlan: entered promiscuous mode [ 73.164685][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.173267][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.245469][ T5769] veth0_vlan: entered promiscuous mode [ 73.285914][ T5769] veth1_vlan: entered promiscuous mode [ 73.296351][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.296863][ T5768] veth0_macvtap: entered promiscuous mode [ 73.314932][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.346443][ T5768] veth1_macvtap: entered promiscuous mode [ 73.377103][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.394894][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.409272][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.425956][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.436293][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.448312][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.452534][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.484000][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.499097][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.513845][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.524330][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.543966][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.556562][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.576806][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.593768][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.604182][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.618867][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.650800][ T5769] veth0_macvtap: entered promiscuous mode [ 73.685244][ T5769] veth1_macvtap: entered promiscuous mode [ 73.717987][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.729239][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.746440][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.759660][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.773996][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.793516][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.265210][ T5777] Bluetooth: hci0: command tx timeout [ 75.265285][ T5781] Bluetooth: hci1: command tx timeout [ 75.270888][ T5777] Bluetooth: hci2: command tx timeout [ 75.276357][ T5773] Bluetooth: hci3: command tx timeout [ 75.292250][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.360781][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.374180][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.384660][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.395376][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.409870][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.430099][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.451873][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.513023][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.526493][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.535262][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.544258][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.579662][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.597369][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.677116][ T2957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.717957][ T2957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.800455][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.808305][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.028093][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.060163][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.486824][ T5773] Bluetooth: hci3: command tx timeout [ 77.498848][ T5773] Bluetooth: hci1: command tx timeout [ 77.505048][ T5773] Bluetooth: hci0: command tx timeout [ 77.515158][ T5773] Bluetooth: hci2: command tx timeout [ 77.895650][ T5850] tipc: Started in network mode [ 77.900666][ T5850] tipc: Node identity 4, cluster identity 4711 [ 77.906841][ T5850] tipc: Node number set to 4 [ 79.310111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.260520][ T5858] syz.3.5[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 80.464086][ T5858] loop3: detected capacity change from 0 to 164 [ 81.870166][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.051198][ T5890] md: loop0 has zero or unknown size, marking faulty! [ 84.058303][ T5890] md: error, md_import_device() returned -22 [ 85.759785][ C0] sched: RT throttling activated [ 87.397328][ T5913] fuse: Bad value for 'fd' [ 87.528002][ T788] cfg80211: failed to load regulatory.db [ 87.542688][ T28] audit: type=1800 audit(1790982565.140:2): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.20" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 89.761161][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.055383][ T28] audit: type=1800 audit(1790982568.130:3): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 92.062251][ T788] usb 3-1: device descriptor read/all, error -71 [ 92.484259][ T28] audit: type=1800 audit(1790982570.740:4): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.31" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 96.040326][ T28] audit: type=1800 audit(1790982574.320:5): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.37" name="protocol" dev="configfs" ino=7130 res=0 errno=0 [ 98.341899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.828928][ T5978] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 98.828928][ T5978] [ 98.842909][ T5978] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 98.856654][ T5978] CIFS: Attempting to mount //127.0.0.1/share [ 99.360273][ T5978] CIFS: VFS: cifs_mount failed w/return code = -512 [ 99.408368][ T5969] kvm: kvm [5968]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x80000000139b [ 99.468832][ T5969] kvm: kvm [5968]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 99.988281][ T5987] loop1: detected capacity change from 0 to 16 [ 100.001639][ T5987] erofs: (device loop1): mounted with root inode @ nid 36. [ 100.128686][ T5991] syzkaller0: entered promiscuous mode [ 100.150635][ T5781] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 100.150850][ T5991] syzkaller0: entered allmulticast mode [ 100.195186][ T5987] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 100.228565][ T28] audit: type=1800 audit(1790982578.480:6): pid=5987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.42" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 100.248947][ T5987] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 100.262943][ T5987] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 100.276224][ T5987] syz.1.42 (5987) used greatest stack depth: 20208 bytes left [ 104.100716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.134403][ T6023] syzkaller0: entered promiscuous mode [ 108.150061][ T6023] syzkaller0: entered allmulticast mode [ 109.240649][ T6025] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 109.248992][ T6025] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 109.267680][ T6025] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 109.312646][ T6023] tipc: Enabled bearer , priority 0 [ 109.354616][ T6022] tipc: Resetting bearer [ 109.462435][ T6022] tipc: Disabling bearer [ 109.513494][ T6031] syzkaller0: entered promiscuous mode [ 109.526911][ T6031] syzkaller0: entered allmulticast mode [ 109.557412][ T6031] tipc: Started in network mode [ 109.569845][ T6031] tipc: Node identity f23bfd69bc2c, cluster identity 4711 [ 109.587966][ T6031] tipc: Enabled bearer , priority 0 [ 109.627909][ T6031] tipc: Resetting bearer [ 109.723345][ T6030] tipc: Resetting bearer [ 109.776862][ T6030] tipc: Disabling bearer [ 109.926914][ T6035] syzkaller0: entered promiscuous mode [ 109.948631][ T6035] syzkaller0: entered allmulticast mode [ 110.003664][ T6035] tipc: Enabled bearer , priority 0 [ 110.052192][ T6035] tipc: Resetting bearer [ 110.068020][ T6034] tipc: Resetting bearer [ 110.144247][ T6034] tipc: Disabling bearer [ 110.415186][ T6049] loop6: detected capacity change from 0 to 6 [ 110.444041][ T6049] Dev loop6: unable to read RDB block 6 [ 110.449986][ T6049] loop6: unable to read partition table [ 110.456706][ T6049] loop6: partition table beyond EOD, truncated [ 110.472169][ T6049] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 111.120194][ T6043] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 111.460202][ T6060] loop2: detected capacity change from 0 to 32768 [ 111.502353][ T6060] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.61 (6060) [ 111.571829][ T6060] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.582552][ T6060] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 111.591313][ T6060] BTRFS info (device loop2): use zlib compression, level 3 [ 111.598535][ T6060] BTRFS info (device loop2): turning on sync discard [ 111.606393][ T6060] BTRFS info (device loop2): using free space tree [ 111.777521][ T6060] BTRFS info (device loop2): enabling ssd optimizations [ 112.451994][ T28] audit: type=1800 audit(1790982590.530:7): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.61" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 113.122459][ T5770] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 115.150420][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 115.560017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 116.812220][ T6113] tc action pedit 'at' offset 525311 out of bounds [ 118.081456][ T6124] loop1: detected capacity change from 0 to 4096 [ 118.098913][ T6124] ntfs3: Bad value for 'fmask' [ 118.372030][ T6128] loop3: detected capacity change from 0 to 512 [ 119.081022][ T6128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 119.089130][ T6128] System zones: 1-12 [ 119.201613][ T6128] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.69: missing EA_INODE flag [ 119.350219][ T6128] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.69: error while reading EA inode 12 err=-117 [ 119.763353][ T6128] EXT4-fs (loop3): 1 orphan inode deleted [ 120.071549][ T6128] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.615913][ T6153] overlayfs: upper fs does not support tmpfile. [ 120.680225][ T6149] syz.1.73 uses obsolete (PF_INET,SOCK_PACKET) [ 121.196589][ T6149] netlink: 'syz.1.73': attribute type 12 has an invalid length. [ 121.212640][ T6154] netlink: 48 bytes leftover after parsing attributes in process `syz.0.74'. [ 121.340747][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.352800][ T6154] netlink: 'syz.0.74': attribute type 11 has an invalid length. [ 121.862206][ T6165] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 122.160554][ T6173] syzkaller0: entered promiscuous mode [ 122.166082][ T6173] syzkaller0: entered allmulticast mode [ 122.220327][ T6173] tipc: Started in network mode [ 122.232016][ T6173] tipc: Node identity 1e8c104ae4d, cluster identity 4711 [ 122.253663][ T6173] tipc: Enabled bearer , priority 0 [ 122.292345][ T6181] tipc: Resetting bearer [ 122.344119][ T6172] tipc: Resetting bearer [ 122.416725][ T6172] tipc: Disabling bearer [ 122.820295][ T6194] xt_policy: output policy not valid in PREROUTING and INPUT [ 122.940342][ T28] audit: type=1326 audit(1790982601.200:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 123.270826][ T28] audit: type=1326 audit(1790982601.310:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 123.389332][ T28] audit: type=1326 audit(1790982601.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 123.703989][ T28] audit: type=1326 audit(1790982601.570:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 123.875735][ T28] audit: type=1326 audit(1790982601.570:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 123.927771][ T28] audit: type=1326 audit(1790982601.570:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 123.953509][ T28] audit: type=1326 audit(1790982601.570:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 124.252646][ T28] audit: type=1326 audit(1790982601.630:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 124.584411][ T6210] NILFS (nullb0): couldn't find nilfs on the device [ 125.129993][ T970] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 125.319868][ T28] audit: type=1326 audit(1790982601.630:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 125.387582][ T28] audit: type=1326 audit(1790982601.630:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6189 comm="syz.3.81" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12d579e159 code=0x7ffc0000 [ 125.465759][ T970] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 125.501925][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.529977][ T970] usb 4-1: Product: syz [ 125.579279][ T970] usb 4-1: Manufacturer: syz [ 125.584247][ T970] usb 4-1: SerialNumber: syz [ 125.623644][ T970] usb 4-1: USB2VGA dongle found at address 2 [ 126.438107][ T970] usb 4-1: Allocated 8 output buffers [ 126.492596][ T970] usb 4-1: Failed to early initialize device [ 126.681194][ T970] usb 4-1: USB disconnect, device number 2 [ 127.012740][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.019830][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.026597][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.033419][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.040216][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.046984][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.053787][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.060576][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.067365][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.074162][ T6222] tc action pedit offset must be on 32 bit boundaries [ 127.080962][ T6222] 0: reclassify loop, rule prio 0, protocol 800 [ 127.515972][ T6219] process 'syz.1.87' launched './file0' with NULL argv: empty string added [ 129.267018][ T6237] loop1: detected capacity change from 0 to 164 [ 130.509981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.895925][ T6254] sctp: failed to load transform for md5: -2 [ 132.903782][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910163][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.692243][ T5781] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 135.701349][ T5781] Bluetooth: hci1: Injecting HCI hardware error event [ 135.712133][ T5773] Bluetooth: hci1: hardware error 0x00 [ 136.085202][ T6280] block nbd3: shutting down sockets [ 136.499243][ T6286] SET target dimension over the limit! [ 136.516066][ T6286] sctp: [Deprecated]: syz.1.96 (pid 6286) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.516066][ T6286] Use struct sctp_sack_info instead [ 137.849959][ T5773] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 138.868965][ T6302] Console: switching to colour VGA+ 80x25 [ 139.062286][ T6302] Console: switching to colour frame buffer device 128x48 [ 139.437080][ T6304] loop2: detected capacity change from 0 to 2048 [ 139.460646][ T6304] UDF-fs: bad mount option "subj_role=" or missing value [ 139.711327][ T6314] tipc: Enabled bearer , priority 0 [ 139.881429][ T6318] kAFS: bad VL server IP address [ 140.560131][ T6304] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.613390][ T6304] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.643999][ T6305] tipc: Disabling bearer [ 141.173246][ T6304] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 141.196532][ T6304] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.204974][ T6304] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.246529][ T6304] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 141.274968][ T6304] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.321311][ T6304] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.370855][ T6304] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 141.689901][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.209877][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.289930][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.278510][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.799906][ T970] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.083446][ T970] usb 3-1: device descriptor read/64, error -71 [ 145.300088][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.369951][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.430060][ T970] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.692760][ T970] usb 3-1: device descriptor read/64, error -71 [ 145.926323][ T970] usb usb3-port1: attempt power cycle [ 146.330421][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.450158][ T970] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.450040][ T5773] Bluetooth: hci3: command 0x0c1a tx timeout [ 147.458025][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 147.903580][ T970] usb 3-1: device descriptor read/8, error -71 [ 148.285421][ T6429] input: syz0 as /devices/virtual/input/input5 [ 149.454558][ T6437] loop2: detected capacity change from 0 to 164 [ 149.565579][ T6433] Could not find key with description: [syz] [ 149.572158][ T6433] process_request_key_err: No key [ 149.577169][ T6433] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 149.587480][ T6433] One or more global auth toks could not properly register; rc = [-2] [ 149.595742][ T6433] Error parsing options; rc = [-2] [ 151.629102][ T6452] md: array md0 already initialised! [ 151.671627][ T6457] loop1: detected capacity change from 0 to 16 [ 151.697869][ T6457] ======================================================= [ 151.697869][ T6457] WARNING: The mand mount option has been deprecated and [ 151.697869][ T6457] and is ignored by this kernel. Remove the mand [ 151.697869][ T6457] option from the mount to silence this warning. [ 151.697869][ T6457] ======================================================= [ 151.732700][ C0] vkms_vblank_simulate: vblank timer overrun [ 151.747229][ T6457] erofs: (device loop1): mounted with root inode @ nid 36. [ 152.048217][ T6461] capability: warning: `syz.1.130' uses deprecated v2 capabilities in a way that may be insecure [ 153.044396][ T6471] fuse: Unknown parameter '017777777777777777777770x0000000000000000' [ 153.068015][ T6471] ip_tables: iptables: counters copy to user failed while replacing table [ 154.369816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 156.701913][ T6488] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 157.488906][ T6491] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 160.826327][ T6512] Bluetooth: MGMT ver 1.22 [ 162.006127][ T6524] loop3: detected capacity change from 0 to 64 [ 162.650200][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 162.650213][ T28] audit: type=1800 audit(1790982640.910:48): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.150" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 166.759951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 167.156953][ T6565] loop3: detected capacity change from 0 to 1024 [ 167.170679][ T6565] EXT4-fs: Ignoring removed bh option [ 167.496826][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.527778][ T6570] tipc: Started in network mode [ 167.534681][ T6570] tipc: Node identity 4, cluster identity 4711 [ 167.564158][ T6570] tipc: Node number set to 4 [ 167.686591][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.039990][ T28] audit: type=1800 audit(1790982646.300:49): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.161" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 169.321487][ T6587] syz.3.161 (6587) used greatest stack depth: 20008 bytes left [ 169.670501][ T6593] No source specified [ 172.946550][ T6611] loop1: detected capacity change from 0 to 512 [ 172.962171][ T6608] page:ffffea00012e1000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b840 [ 173.009611][ T6608] head:ffffea00012e1000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 173.046957][ T6611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.065508][ T6608] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 173.105191][ T6611] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.998261][ T6608] page_type: 0xffffffff() [ 174.018566][ T6608] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000 [ 174.080402][ T6608] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 174.089024][ T6608] page dumped because: unmovable page [ 174.133793][ T6608] page_owner tracks the page as allocated [ 174.269866][ T6608] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5770, tgid 5770 (syz-executor), ts 152631317613, free_ts 151170661356 [ 174.313143][ T6608] post_alloc_hook+0x1c1/0x200 [ 174.317957][ T6608] get_page_from_freelist+0x2181/0x22a0 [ 174.979926][ T6608] __alloc_pages+0x1f0/0x460 [ 175.004958][ T6608] alloc_slab_page+0x5d/0x180 [ 175.017935][ T6608] new_slab+0x87/0x2d0 [ 175.022307][ T6608] ___slab_alloc+0xc5c/0x12f0 [ 175.027141][ T6608] __kmem_cache_alloc_node+0x11f/0x250 [ 175.037259][ T6608] __kmalloc+0xa7/0x240 [ 175.041801][ T6608] tomoyo_realpath_from_path+0xe6/0x5c0 [ 175.047493][ T6608] tomoyo_path_perm+0x282/0x560 [ 175.065965][ T6608] tomoyo_path_unlink+0xab/0xf0 [ 175.071265][ T6608] security_path_unlink+0xdc/0x130 [ 175.081197][ T6608] do_unlinkat+0x2b3/0x590 [ 175.090078][ T6608] __x64_sys_unlink+0x49/0x50 [ 175.095312][ T6608] do_syscall_64+0x55/0xb0 [ 175.107860][ T6608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.115231][ T6608] page last free stack trace: [ 175.123561][ T6608] free_unref_page_prepare+0x7d7/0x8f0 [ 175.129148][ T6608] free_unref_page+0x32/0x2e0 [ 175.135725][ T6608] __unfreeze_partials+0x1cf/0x210 [ 175.144367][ T6608] put_cpu_partial+0x17c/0x250 [ 175.151119][ T6608] __slab_free+0x319/0x400 [ 175.157432][ T6608] qlist_free_all+0x75/0xd0 [ 175.165700][ T6608] kasan_quarantine_reduce+0x143/0x160 [ 175.171538][ T6608] __kasan_slab_alloc+0x22/0x80 [ 175.177577][ T6608] slab_post_alloc_hook+0x6a/0x4d0 [ 175.187217][ T6608] kmem_cache_alloc_node+0x1af/0x310 [ 175.192849][ T6608] __alloc_skb+0x103/0x2c0 [ 175.207597][ T6608] alloc_skb_with_frags+0xcd/0x7a0 [ 175.217694][ T6608] sock_alloc_send_pskb+0x883/0x9a0 [ 175.228111][ T6608] unix_dgram_sendmsg+0x5a9/0x16e0 [ 175.233581][ T6608] sock_write_iter+0x2dc/0x420 [ 175.239551][ T6608] vfs_write+0x474/0x9a0 [ 178.826690][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.798844][ T28] audit: type=1800 audit(1790982659.060:50): pid=6659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.174" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 184.679960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 184.766817][ T6672] comedi comedi1: board detection failed [ 184.825827][ T6672] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.844887][ T6672] loop1: detected capacity change from 0 to 2048 [ 184.862058][ T6672] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 190.363497][ T6711] md: array md0 already has disks! [ 191.547311][ T6720] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5769] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6720] [ 192.583944][ T6724] loop3: detected capacity change from 0 to 512 [ 192.618310][ T6724] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.193: corrupted in-inode xattr: invalid ea_ino [ 193.017475][ T6724] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.193: couldn't read orphan inode 15 (err -117) [ 193.072014][ T6724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.540149][ T6728] mmap: syz.0.194 (6728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.596958][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606609][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.871891][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.368880][ T5882] smpboot: CPU 1 is now offline [ 195.617897][ T6740] loop3: detected capacity change from 0 to 4096 [ 195.694110][ T6740] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 195.857922][ T6740] EXT4-fs (loop3): Test dummy encryption mode enabled [ 196.116100][ T6740] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c1a8, mo2=0002] [ 196.141205][ T6740] System zones: 0-5 [ 196.272904][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.092273][ T6754] loop2: detected capacity change from 0 to 512 [ 198.358815][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.320326][ T6771] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 200.599886][ T5882] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 202.324371][ T6783] warning: `syz.3.208' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 202.340479][ T5882] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.635909][ T5882] usb 2-1: string descriptor 0 read error: -71 [ 202.662990][ T5882] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 202.692941][ T6788] netlink: 'syz.1.209': attribute type 4 has an invalid length. [ 202.705935][ T5882] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 202.858897][ T5882] usb 2-1: can't set config #4, error -71 [ 202.881583][ T5882] usb 2-1: USB disconnect, device number 2 [ 203.088494][ T6794] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 206.092437][ T6811] loop2: detected capacity change from 0 to 256 [ 206.554703][ T6815] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 206.565029][ T6815] FAT-fs (loop2): Filesystem has been set read-only [ 206.572193][ T6815] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 206.583759][ T6815] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 206.596937][ T6815] netlink: 144 bytes leftover after parsing attributes in process `syz.2.215'. [ 209.114254][ T6839] loop3: detected capacity change from 0 to 512 [ 209.156755][ T6839] EXT4-fs: Invalid want_extra_isize 234 [ 209.988444][ T6844] loop3: detected capacity change from 0 to 1024 [ 210.987578][ T6847] loop1: detected capacity change from 0 to 2048 [ 211.045265][ T6847] EXT4-fs (loop1): failed to initialize system zone (-117) [ 211.077346][ T6847] EXT4-fs (loop1): mount failed [ 211.192435][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.226'. [ 211.218284][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.234955][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.261274][ T6851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.287921][ T6857] loop2: detected capacity change from 0 to 128 [ 211.298061][ T6851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.358198][ T6857] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 211.787845][ T6857] ext4 filesystem being mounted at /52/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 212.975510][ T5781] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.272068][ T6855] fscrypt: Error allocating hmac(sha512): -2 [ 213.603998][ T5770] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.773048][ T6884] misc userio: No port type given on /dev/userio [ 215.030322][ T8] IPVS: starting estimator thread 0... [ 215.836664][ T6896] binder: 6887:6896 ioctl 4018620d 0 returned -22 [ 215.850933][ T6893] IPVS: using max 35 ests per chain, 84000 per kthread [ 219.762490][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.238'. [ 219.771521][ T6912] bridge_slave_1: left allmulticast mode [ 219.777145][ T6912] bridge_slave_1: left promiscuous mode [ 219.783144][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.812675][ T6912] bridge_slave_0: left allmulticast mode [ 219.818330][ T6912] bridge_slave_0: left promiscuous mode [ 219.824003][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.913331][ T6915] Zero length message leads to an empty skb [ 220.089645][ T6922] loop1: detected capacity change from 0 to 512 [ 220.135136][ T6922] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 220.180714][ T6922] System zones: 1-12 [ 220.207902][ T6922] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.242: missing EA_INODE flag [ 220.251283][ T6922] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.242: error while reading EA inode 12 err=-117 [ 220.889110][ T6927] block device autoloading is deprecated and will be removed. [ 220.897692][ T6927] syz.2.243: attempt to access beyond end of device [ 220.897692][ T6927] md32: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 220.976109][ T6922] EXT4-fs (loop1): 1 orphan inode deleted [ 220.987801][ T6922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.236583][ T5768] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.255151][ T6954] CacheFiles: Failed to register: -95 [ 231.304472][ T6951] Process accounting resumed [ 231.327692][ T6959] loop3: detected capacity change from 0 to 256 [ 231.402343][ T6959] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 231.461874][ T6964] tipc: Enabled bearer , priority 0 [ 231.948490][ T28] audit: type=1800 audit(1790982710.220:51): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.253" name="file1" dev="loop3" ino=1048599 res=0 errno=0 [ 232.104122][ T6971] autofs4:pid:6971:autofs_fill_super: called with bogus options [ 233.580379][ T28] audit: type=1800 audit(1790982711.850:52): pid=6975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.257" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 236.251870][ T6986] loop3: detected capacity change from 0 to 256 [ 239.779478][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.264'. [ 241.494860][ T7002] zram0: detected capacity change from 0 to 8 [ 242.257363][ T7004] Cannot find add_set index 0 as target [ 242.440152][ T28] audit: type=1326 audit(1790982720.720:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7018 comm="syz.2.269" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b7239e159 code=0x0 [ 243.663210][ T28] audit: type=1800 audit(1790982721.850:54): pid=7020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.268" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 243.821766][ T7023] loop3: detected capacity change from 0 to 512 [ 243.885035][ T7023] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 243.926913][ T7023] System zones: 1-12 [ 243.960039][ T7023] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #12: comm syz.3.271: missing EA_INODE flag [ 244.012580][ T7028] loop2: detected capacity change from 0 to 512 [ 244.019121][ T7023] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.271: error while reading EA inode 12 err=-117 [ 244.071122][ T7023] EXT4-fs (loop3): 1 orphan inode deleted [ 244.078138][ T7023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.273139][ T7028] EXT4-fs (loop2): Test dummy encryption mode enabled [ 244.331938][ T7028] EXT4-fs error (device loop2): ext4_orphan_get:1408: inode #11: comm syz.2.272: casefold flag without casefold feature [ 244.410389][ T7028] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.272: couldn't read orphan inode 11 (err -117) [ 244.471804][ T7028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.822153][ T7034] bond_slave_0: entered promiscuous mode [ 244.828345][ T7034] bond_slave_1: entered promiscuous mode [ 246.540083][ T7039] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 247.430439][ T7034] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 247.469314][ T7034] bond1: (slave macvlan2): making interface the new active one [ 247.485650][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.527160][ T7034] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 248.620933][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.632221][ T7057] netlink: 10 bytes leftover after parsing attributes in process `syz.3.276'. [ 251.937678][ T7063] Bluetooth: ISO socket layer initialized [ 252.000902][ T5781] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 256.439340][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.446734][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.704953][ T7081] loop3: detected capacity change from 0 to 512 [ 257.796712][ T7081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.151609][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.620811][ T7125] loop1: detected capacity change from 0 to 512 [ 265.907340][ T7133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.284'. [ 265.929080][ T5781] Bluetooth: hci3: unknown advertising packet type: 0x05 [ 268.361561][ T7142] FAULT_INJECTION: forcing a failure. [ 268.361561][ T7142] name failslab, interval 1, probability 0, space 0, times 1 [ 268.381631][ T7142] CPU: 0 PID: 7142 Comm: syz.3.296 Not tainted syzkaller #0 [ 268.388898][ T7142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.398940][ T7142] Call Trace: [ 268.402204][ T7142] [ 268.405119][ T7142] dump_stack_lvl+0x18c/0x250 [ 268.409785][ T7142] ? show_regs_print_info+0x20/0x20 [ 268.414969][ T7142] ? load_image+0x420/0x420 [ 268.419455][ T7142] ? __might_sleep+0xe0/0xe0 [ 268.424028][ T7142] ? __lock_acquire+0x7d80/0x7d80 [ 268.429057][ T7142] should_fail_ex+0x394/0x4c0 [ 268.433727][ T7142] should_failslab+0x9/0x20 [ 268.438216][ T7142] slab_pre_alloc_hook+0x59/0x300 [ 268.443225][ T7142] ? configfs_create_file+0x101/0x130 [ 268.448582][ T7142] kmem_cache_alloc+0x5a/0x2c0 [ 268.453329][ T7142] ? configfs_new_dirent+0x58/0x350 [ 268.458514][ T7142] configfs_new_dirent+0x58/0x350 [ 268.463522][ T7142] configfs_make_dirent+0x35/0x160 [ 268.468616][ T7142] configfs_create_file+0xe3/0x130 [ 268.473711][ T7142] configfs_attach_item+0x631/0x980 [ 268.478894][ T7142] configfs_attach_group+0x2a/0x360 [ 268.484074][ T7142] ? do_raw_spin_unlock+0x121/0x230 [ 268.489261][ T7142] configfs_mkdir+0x72e/0x9e0 [ 268.493923][ T7142] vfs_mkdir+0x2a5/0x470 [ 268.498151][ T7142] do_mkdirat+0x1dc/0x450 [ 268.502465][ T7142] ? vfs_mkdir+0x470/0x470 [ 268.506868][ T7142] __x64_sys_mkdirat+0x89/0xa0 [ 268.511613][ T7142] do_syscall_64+0x55/0xb0 [ 268.516013][ T7142] ? clear_bhb_loop+0x40/0x90 [ 268.520673][ T7142] ? clear_bhb_loop+0x40/0x90 [ 268.525333][ T7142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 268.531215][ T7142] RIP: 0033:0x7f12d579e159 [ 268.535613][ T7142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.555218][ T7142] RSP: 002b:00007f12d39f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 268.563878][ T7142] RAX: ffffffffffffffda RBX: 00007f12d5a25fa0 RCX: 00007f12d579e159 [ 268.571833][ T7142] RDX: 00000000000001ff RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 268.579792][ T7142] RBP: 00007f12d583506b R08: 0000000000000000 R09: 0000000000000000 [ 268.587744][ T7142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.595697][ T7142] R13: 00007f12d5a26038 R14: 00007f12d5a25fa0 R15: 00007ffd929ba828 [ 268.603660][ T7142] [ 268.682234][ T28] audit: type=1800 audit(1790982746.960:55): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.298" name="idVendor" dev="configfs" ino=11226 res=0 errno=0 [ 268.718276][ T7149] FAULT_INJECTION: forcing a failure. [ 268.718276][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 268.803900][ T7149] CPU: 0 PID: 7149 Comm: syz.1.297 Not tainted syzkaller #0 [ 268.811211][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.821252][ T7149] Call Trace: [ 268.824523][ T7149] [ 268.827438][ T7149] dump_stack_lvl+0x18c/0x250 [ 268.832109][ T7149] ? show_regs_print_info+0x20/0x20 [ 268.837292][ T7149] ? load_image+0x420/0x420 [ 268.841782][ T7149] ? __might_sleep+0xe0/0xe0 [ 268.846358][ T7149] ? __lock_acquire+0x7d80/0x7d80 [ 268.851366][ T7149] should_fail_ex+0x394/0x4c0 [ 268.856033][ T7149] should_failslab+0x9/0x20 [ 268.860523][ T7149] slab_pre_alloc_hook+0x59/0x300 [ 268.865551][ T7149] kmem_cache_alloc+0x5a/0x2c0 [ 268.870306][ T7149] ? __kernfs_new_node+0xe5/0x7f0 [ 268.875317][ T7149] __kernfs_new_node+0xe5/0x7f0 [ 268.880156][ T7149] ? kernfs_new_node+0x260/0x260 [ 268.885089][ T7149] ? up_write+0x1be/0x410 [ 268.889400][ T7149] kernfs_new_node+0x14c/0x260 [ 268.894148][ T7149] __kernfs_create_file+0x4b/0x2e0 [ 268.899243][ T7149] sysfs_add_file_mode_ns+0x237/0x2f0 [ 268.904616][ T7149] internal_create_group+0x431/0xd10 [ 268.909882][ T7149] ? kernfs_add_one+0x149/0x6b0 [ 268.914722][ T7149] ? sysfs_create_group+0x20/0x20 [ 268.919731][ T7149] ? up_write+0x1be/0x410 [ 268.924046][ T7149] sysfs_create_groups+0x59/0x120 [ 268.929062][ T7149] device_add_attrs+0xdf/0x830 [ 268.933814][ T7149] ? device_add_class_symlinks+0x240/0x240 [ 268.939608][ T7149] ? device_add_class_symlinks+0x21f/0x240 [ 268.945395][ T7149] device_add+0x51a/0xc40 [ 268.949710][ T7149] device_create+0x26a/0x300 [ 268.954288][ T7149] ? root_device_unregister+0x100/0x100 [ 268.959815][ T7149] ? vsnprintf+0x1ac7/0x1ba0 [ 268.964394][ T7149] bdi_register_va+0x97/0x6d0 [ 268.969068][ T7149] super_setup_bdi_name+0xf9/0x200 [ 268.974162][ T7149] ? __rwlock_init+0x150/0x150 [ 268.978915][ T7149] ? vfs_get_tree+0x280/0x280 [ 268.983579][ T7149] ? sget_fc+0x7f5/0x8d0 [ 268.987803][ T7149] afs_get_tree+0x894/0x1090 [ 268.992392][ T7149] ? bpf_lsm_capable+0x9/0x10 [ 268.997051][ T7149] vfs_get_tree+0x8c/0x280 [ 269.001451][ T7149] do_new_mount+0x24a/0xa40 [ 269.005947][ T7149] __se_sys_mount+0x2e7/0x3d0 [ 269.010608][ T7149] ? __x64_sys_mount+0xc0/0xc0 [ 269.015357][ T7149] ? lockdep_hardirqs_on+0x98/0x150 [ 269.020536][ T7149] ? __x64_sys_mount+0x20/0xc0 [ 269.025280][ T7149] do_syscall_64+0x55/0xb0 [ 269.029697][ T7149] ? clear_bhb_loop+0x40/0x90 [ 269.034365][ T7149] ? clear_bhb_loop+0x40/0x90 [ 269.039026][ T7149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.044904][ T7149] RIP: 0033:0x7f89f8f9e159 [ 269.049300][ T7149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.068889][ T7149] RSP: 002b:00007f89f9e30028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.077284][ T7149] RAX: ffffffffffffffda RBX: 00007f89f9225fa0 RCX: 00007f89f8f9e159 [ 269.085237][ T7149] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 269.093188][ T7149] RBP: 00007f89f903506b R08: 0000200000000380 R09: 0000000000000000 [ 269.101146][ T7149] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 269.109097][ T7149] R13: 00007f89f9226038 R14: 00007f89f9225fa0 R15: 00007ffca1f04e98 [ 269.117061][ T7149] [ 269.129942][ T28] audit: type=1800 audit(1790982746.980:56): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.298" name="idProduct" dev="configfs" ino=11227 res=0 errno=0 [ 269.220390][ T28] audit: type=1800 audit(1790982746.980:57): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.298" name="max_speed" dev="configfs" ino=11229 res=0 errno=0 [ 270.981472][ T28] audit: type=1800 audit(1790982746.990:58): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.298" name="c_sync" dev="configfs" ino=11235 res=0 errno=0 [ 271.011386][ T970] libceph: connect (1)[c::]:6789 error -101 [ 271.017820][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 271.100308][ T7157] ceph: No mds server is up or the cluster is laggy [ 271.431118][ T7169] loop2: detected capacity change from 0 to 1024 [ 271.479675][ T7169] EXT4-fs: Ignoring removed bh option [ 271.572886][ T7169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.023011][ T7180] xt_CT: You must specify a L4 protocol and not use inversions on it [ 276.373947][ T7198] xt_hashlimit: size too large, truncated to 1048576 [ 276.380883][ T7198] xt_hashlimit: max too large, truncated to 1048576 [ 276.493391][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.830493][ T970] libceph: connect (1)[c::]:6789 error -101 [ 278.869876][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 279.201885][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 279.207883][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 280.201809][ T7210] ceph: No mds server is up or the cluster is laggy [ 281.913346][ T28] audit: type=1800 audit(1790982760.180:59): pid=7228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.312" name=08 dev="sda1" ino=2043 res=0 errno=0 [ 283.009204][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 283.018086][ T7233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.115423][ T7233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.124684][ T7248] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20004 [ 286.483676][ T7250] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 289.333566][ T7265] loop3: detected capacity change from 0 to 128 [ 289.803543][ T5781] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 298.069876][ T7313] binder: 7311:7313 unknown command 0 [ 298.108942][ T7313] binder: 7311:7313 ioctl c0306201 200000000080 returned -22 [ 298.410329][ T7322] Bluetooth: MGMT ver 1.22 [ 298.488713][ T7325] block2mtd: erasesize must be a divisor of device size [ 298.499970][ T970] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 298.520830][ T7325] ------------[ cut here ]------------ [ 298.526483][ T7325] WARNING: CPU: 0 PID: 7325 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 298.536006][ T7325] Modules linked in: [ 298.540013][ T7325] CPU: 0 PID: 7325 Comm: syz.1.332 Not tainted syzkaller #0 [ 298.547310][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.558119][ T7325] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 298.564162][ T7325] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 298.583835][ T7325] RSP: 0018:ffffc9000b957970 EFLAGS: 00010287 [ 298.589922][ T7325] RAX: ffffffff8414453c RBX: ffff8880200caf00 RCX: 0000000000080000 [ 298.597893][ T7325] RDX: ffffc9000caba000 RSI: 000000000000bfe7 RDI: 000000000000bfe8 [ 298.606024][ T7325] RBP: 0000000000000002 R08: ffff8880200caf3b R09: 1ffff110040195e7 [ 298.614219][ T7325] R10: dffffc0000000000 R11: ffffed10040195e8 R12: dffffc0000000000 [ 298.622289][ T7325] R13: dffffc0000000000 R14: ffff8880200cb034 R15: ffff8880200caf38 [ 298.630278][ T7325] FS: 00007f89f9e306c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 298.639219][ T7325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.645832][ T7325] CR2: 00007f6f5604c008 CR3: 000000002fc4a000 CR4: 00000000003506f0 [ 298.654636][ T7325] Call Trace: [ 298.657905][ T7325] [ 298.660948][ T7325] ? blkdev_put+0x492/0x7a0 [ 298.665460][ T7325] blkdev_put+0x49a/0x7a0 [ 298.669821][ T7325] block2mtd_setup2+0x98f/0xe30 [ 298.674679][ T7325] ? block2mtd_setup+0xd0/0xd0 [ 298.679444][ T7325] ? rcu_is_watching+0x15/0xb0 [ 298.684253][ T7325] ? mutex_lock_nested+0x20/0x20 [ 298.689191][ T7325] ? __virt_addr_valid+0x10c/0x380 [ 298.694450][ T7325] ? kernfs_fop_write_iter+0x1dc/0x520 [ 298.699962][ T7325] block2mtd_setup+0x27/0xd0 [ 298.704580][ T7325] param_attr_store+0x20e/0x300 [ 298.709434][ T7325] ? param_attr_show+0x170/0x170 [ 298.714387][ T7325] ? sysfs_kf_read+0x360/0x360 [ 298.719168][ T7325] module_attr_store+0x5f/0x80 [ 298.723961][ T7325] kernfs_fop_write_iter+0x3a4/0x520 [ 298.729681][ T7325] vfs_write+0x474/0x9a0 [ 298.734000][ T7325] ? file_end_write+0x250/0x250 [ 298.738858][ T7325] ? __fget_files+0x3fc/0x460 [ 298.743567][ T7325] ? __fdget_pos+0x2a3/0x330 [ 298.748157][ T7325] ? ksys_write+0x74/0x260 [ 298.752620][ T7325] ksys_write+0x151/0x260 [ 298.757516][ T7325] ? __ia32_sys_read+0x90/0x90 [ 298.762403][ T7325] ? lockdep_hardirqs_on+0x98/0x150 [ 298.767610][ T7325] do_syscall_64+0x55/0xb0 [ 298.772203][ T7325] ? clear_bhb_loop+0x40/0x90 [ 298.776885][ T7325] ? clear_bhb_loop+0x40/0x90 [ 298.781603][ T7325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 298.787518][ T7325] RIP: 0033:0x7f89f8f9e159 [ 298.791964][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.811657][ T7325] RSP: 002b:00007f89f9e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 298.820100][ T7325] RAX: ffffffffffffffda RBX: 00007f89f9225fa0 RCX: 00007f89f8f9e159 [ 298.828075][ T7325] RDX: 000000000000000c RSI: 0000200000000250 RDI: 0000000000000007 [ 298.836092][ T7325] RBP: 00007f89f903506b R08: 0000000000000000 R09: 0000000000000000 [ 298.844085][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.852219][ T7325] R13: 00007f89f9226038 R14: 00007f89f9225fa0 R15: 00007ffca1f04e98 [ 298.860835][ T7325] [ 298.863843][ T7325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.871102][ T7325] CPU: 0 PID: 7325 Comm: syz.1.332 Not tainted syzkaller #0 [ 298.878369][ T7325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.888401][ T7325] Call Trace: [ 298.891662][ T7325] [ 298.894572][ T7325] dump_stack_lvl+0x18c/0x250 [ 298.899239][ T7325] ? show_regs_print_info+0x20/0x20 [ 298.904419][ T7325] ? load_image+0x420/0x420 [ 298.908910][ T7325] panic+0x2ca/0x720 [ 298.912790][ T7325] ? bpf_jit_dump+0xd0/0xd0 [ 298.917280][ T7325] __warn+0x2e0/0x470 [ 298.921240][ T7325] ? blkdev_flush_mapping+0xac/0x290 [ 298.926508][ T7325] ? blkdev_flush_mapping+0xac/0x290 [ 298.932119][ T7325] report_bug+0x2be/0x4f0 [ 298.936438][ T7325] ? blkdev_flush_mapping+0xac/0x290 [ 298.941703][ T7325] ? blkdev_flush_mapping+0xac/0x290 [ 298.946968][ T7325] ? blkdev_flush_mapping+0xae/0x290 [ 298.952251][ T7325] handle_bug+0xcf/0x120 [ 298.956479][ T7325] exc_invalid_op+0x1a/0x50 [ 298.960963][ T7325] asm_exc_invalid_op+0x1a/0x20 [ 298.965812][ T7325] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 298.971686][ T7325] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 298.991274][ T7325] RSP: 0018:ffffc9000b957970 EFLAGS: 00010287 [ 298.997323][ T7325] RAX: ffffffff8414453c RBX: ffff8880200caf00 RCX: 0000000000080000 [ 299.005280][ T7325] RDX: ffffc9000caba000 RSI: 000000000000bfe7 RDI: 000000000000bfe8 [ 299.013231][ T7325] RBP: 0000000000000002 R08: ffff8880200caf3b R09: 1ffff110040195e7 [ 299.021189][ T7325] R10: dffffc0000000000 R11: ffffed10040195e8 R12: dffffc0000000000 [ 299.029139][ T7325] R13: dffffc0000000000 R14: ffff8880200cb034 R15: ffff8880200caf38 [ 299.037095][ T7325] ? blkdev_flush_mapping+0xac/0x290 [ 299.042368][ T7325] ? blkdev_put+0x492/0x7a0 [ 299.046852][ T7325] blkdev_put+0x49a/0x7a0 [ 299.051163][ T7325] block2mtd_setup2+0x98f/0xe30 [ 299.055997][ T7325] ? block2mtd_setup+0xd0/0xd0 [ 299.060741][ T7325] ? rcu_is_watching+0x15/0xb0 [ 299.065496][ T7325] ? mutex_lock_nested+0x20/0x20 [ 299.070414][ T7325] ? __virt_addr_valid+0x10c/0x380 [ 299.075508][ T7325] ? kernfs_fop_write_iter+0x1dc/0x520 [ 299.080949][ T7325] block2mtd_setup+0x27/0xd0 [ 299.085517][ T7325] param_attr_store+0x20e/0x300 [ 299.090368][ T7325] ? param_attr_show+0x170/0x170 [ 299.095297][ T7325] ? sysfs_kf_read+0x360/0x360 [ 299.100042][ T7325] module_attr_store+0x5f/0x80 [ 299.104783][ T7325] kernfs_fop_write_iter+0x3a4/0x520 [ 299.110050][ T7325] vfs_write+0x474/0x9a0 [ 299.114280][ T7325] ? file_end_write+0x250/0x250 [ 299.119113][ T7325] ? __fget_files+0x3fc/0x460 [ 299.123778][ T7325] ? __fdget_pos+0x2a3/0x330 [ 299.128347][ T7325] ? ksys_write+0x74/0x260 [ 299.132749][ T7325] ksys_write+0x151/0x260 [ 299.137062][ T7325] ? __ia32_sys_read+0x90/0x90 [ 299.141808][ T7325] ? lockdep_hardirqs_on+0x98/0x150 [ 299.147000][ T7325] do_syscall_64+0x55/0xb0 [ 299.151404][ T7325] ? clear_bhb_loop+0x40/0x90 [ 299.156062][ T7325] ? clear_bhb_loop+0x40/0x90 [ 299.160742][ T7325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.166615][ T7325] RIP: 0033:0x7f89f8f9e159 [ 299.171010][ T7325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.190595][ T7325] RSP: 002b:00007f89f9e30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.199003][ T7325] RAX: ffffffffffffffda RBX: 00007f89f9225fa0 RCX: 00007f89f8f9e159 [ 299.206951][ T7325] RDX: 000000000000000c RSI: 0000200000000250 RDI: 0000000000000007 [ 299.214916][ T7325] RBP: 00007f89f903506b R08: 0000000000000000 R09: 0000000000000000 [ 299.222881][ T7325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.230830][ T7325] R13: 00007f89f9226038 R14: 00007f89f9225fa0 R15: 00007ffca1f04e98 [ 299.238805][ T7325] [ 299.241878][ T7325] Kernel Offset: disabled [ 299.246260][ T7325] Rebooting in 86400 seconds..