last executing test programs: 6m20.358710603s ago: executing program 1 (id=607): mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 6m19.346828963s ago: executing program 1 (id=609): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3) 6m17.734493843s ago: executing program 1 (id=614): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x869db000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x142) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) 6m15.871434078s ago: executing program 1 (id=617): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setresuid(0xee01, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000005c0)={[{@shortname_winnt}, {@shortname_winnt}, {@shortname_lower}, {@shortname_winnt}, {@shortname_winnt}, {@fat=@discard}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_winnt}, {@rodir}, {@shortname_win95}, {@fat=@sys_immutable}, {@utf8}]}, 0x0, 0x274, &(0x7f0000000780)="$eJzs3MGLG1UYAPDPbNvdbmmzBxEUxIde9BLa9S8I0oK4oKyNqAdh6mY17JgsmbgSEdubV/+O4tGboP4De/HmXbwsguClBzHSJONm10BbaZzV/H4Q5su8+fLeTGbCNwN5R29/+dHebtHYzQZRW0tRi7gT9yI27kdTT0yXtXF8IWbdiZcu/fbjs2++8+5rza2t69sp3WjefHkzpXTluW8/+eyr578fXHrr6yvfrMbhxntHv27+dPjU4dNHf9wsP703SFm61esNslt5O+10ir1GSm/k7axop063aPdPtO/mvf39Ycq6O5fX9/vtokhZd5j22sM06KVBf5iyD7JONzUajXR5PZbNyiNntO5ub2fNhQyGKlyct7Lfb2Yrcxtbd/+NQQEAZ0tV9f+HnSJ1itR9UP1fC/X/4qj/l8H9+n99ev2epP4HAAAAAAAAAAAAAID/gnujUX00GtXLZflajYi1iCjfVz1OFsP3v9xm/ri3FpF/cdA6aE2Wk/bmbnQij3ZcPR/x+/h8mJrEN17dun41jW3Ed/ntaf7tg9ZKrJb5pY35+dcm+elk/vlYn+1/M+rx5Pz8zbn5F+LFF2byG1GPH96PXuSxMz6vj/M/v5bSK69vncq/ON4OAAAA/g8a6S9/u38ftzdSOW3IqfbJyuPnA1F/wPOBU/fX5+KZc9XtNwAAACyTYvjpXpbn7b7g0QKHbuFBLSIq6v2XiDgbB+GxBj9/PLnqH2bjqn+ZAACAx+246K96JAAAAAAAAAAAAAAAAAAAALC8HnbysHL7fzL32Ex3K9XsJQAAAAAAAAAAAAAAAAAAAAAAAJwNfwYAAP//xsMhSw==") r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffff000000000000210085000000360000009500070000000000b83f3584230b8f5ec8921327291cf4880dd3a91af830f8a476ba1b51d4eb67103b000000000000000000000000000000640f9922d207e93470686f20ad"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) 6m14.69734651s ago: executing program 1 (id=624): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x30, r2, 0x91dabd4b569e2c23, 0x70bd28, 0x25dfdbfc, {{}, {0x0, 0x4108}, {0x14, 0x18, {0x3, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005580)=@newtfilter={0x470, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0xf00, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x440, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_police={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}, @TCA_CGROUP_POLICE={0xfffffffffffffead, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0xffffff81, 0xd, 0x7, 0x3ca0f2a, 0x4, 0x4, 0x7, 0x6, 0x5, 0x6, 0x3, 0x7f, 0x7, 0x3, 0x2, 0x7, 0x6, 0x401, 0x100, 0x4, 0xc7, 0x10001, 0xffff, 0x9, 0x6, 0x7f, 0xfffff990, 0xdf, 0xe, 0x1000, 0x6, 0xff, 0x9, 0x6, 0x6, 0xd50, 0x7, 0x0, 0x28, 0x100, 0x52, 0x8, 0x27fb, 0x5, 0xbe6, 0x9, 0x9, 0xfffffffd, 0x0, 0x6, 0x200, 0x7b7, 0x5, 0x1000, 0xffff, 0x55ed, 0x9, 0x2, 0x6, 0xf, 0x5, 0xff, 0x81, 0x3, 0x8, 0x5, 0xab5, 0x4, 0xc, 0x7, 0x3, 0x9, 0xffffffff, 0xa, 0xee, 0x3, 0x7fff, 0x7ff, 0xffffffff, 0xfffffffd, 0x4, 0x2, 0xfffffffc, 0x9, 0x3, 0xb023, 0x6, 0xd0b, 0x3767, 0x8, 0xfffff800, 0x3, 0x4, 0x13, 0x5, 0xf874, 0x1000, 0x9, 0x8, 0x81, 0x5, 0x7, 0x9, 0x8, 0x57b, 0x8, 0x4, 0x6, 0x3ff, 0xdc19, 0x8, 0xbbd4, 0x9, 0x6, 0x80000001, 0x10001, 0x66dc0, 0x8001, 0x7fffffff, 0x8001, 0xef8, 0x200, 0x7, 0x2, 0x7, 0x40, 0x6, 0x7, 0x2, 0x7, 0xc1, 0x2, 0x4, 0x9, 0x2, 0x3, 0x3, 0x9, 0x3, 0x8, 0x4, 0x3, 0x6, 0x6, 0x3, 0x0, 0x80, 0xff, 0x4, 0x8, 0x7, 0x4, 0x80, 0x7, 0x1, 0xd, 0xfffffffc, 0x3, 0x9, 0x6e3, 0x7, 0x3, 0x5, 0xb74, 0x6, 0x53, 0xf, 0x0, 0x15ec, 0x400, 0xffffffff, 0xfffffff8, 0x243, 0x6, 0x4, 0x7ff, 0xf, 0x2, 0xd, 0x9, 0x2f7e4da3, 0x1, 0x2dfc, 0x8, 0x400, 0xacf, 0xf, 0x6, 0x8, 0xfffffff6, 0x7, 0x0, 0x7b, 0x9, 0x80000001, 0xfffffff8, 0x5ae, 0xc, 0x4, 0x7, 0xab, 0x8, 0x8, 0x4, 0x7fffffff, 0x3, 0x2, 0x0, 0x1, 0x3, 0x1, 0x1, 0x7, 0x0, 0x3, 0x7b2, 0x3, 0x8000, 0x80000000, 0x6, 0x2, 0x0, 0x2dd, 0x2, 0x3ff, 0x3ff, 0xd015, 0xee, 0x8, 0x4, 0x2, 0x0, 0x4, 0x0, 0x2, 0x80000000, 0x7f, 0x1, 0x9, 0x5, 0xfff, 0x7fffffff, 0x0, 0x0, 0x3, 0x4, 0xfffffffe, 0x6, 0x4, 0x1, 0x1, 0x0, 0xfffff0a8, 0x5, 0x1ff]}]}]}}]}, 0x470}, 0x1, 0x0, 0x0, 0x814}, 0x40c4) 6m14.339027937s ago: executing program 1 (id=628): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0xb, 0x3, 0x7) getsockname$packet(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) msgget(0x3, 0x75d17d6620de7627) 6m14.11785509s ago: executing program 32 (id=628): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0xb, 0x3, 0x7) getsockname$packet(r0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2003800, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) msgget(0x3, 0x75d17d6620de7627) 6m4.110918609s ago: executing program 4 (id=650): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)={0x20, r4, 0x1, 0x70bd28, 0x25dfdffb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0x4000000) 6m2.954515581s ago: executing program 4 (id=655): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff9, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xb}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x80}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}, @TCA_FQ_CODEL_FLOWS={0xffffffffffffff71, 0x5, 0x2}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x1000}]}}]}, 0x68}}, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/19, 0x13}, 0x2}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6m1.696956605s ago: executing program 4 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001d00)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x5820a61ca228651, 0x2, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xa, 0xffe0}, {0xffff, 0x5}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) 6m0.140103824s ago: executing program 4 (id=660): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) fsmount(0xffffffffffffffff, 0x0, 0x81) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000480), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044890}, 0x24008000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40000, 0x823}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40440e4}, 0x20040000) 5m58.169626911s ago: executing program 4 (id=664): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x48882, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file1\x00', 0x101200, 0x140) chdir(&(0x7f0000000100)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 5m56.955919144s ago: executing program 4 (id=670): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000140)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864, 0x30, 0x0, [], "a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x80]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2, {0x10000000}}}, {0x8, 0x6558, 0x0, "859d0aee92"}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) read$alg(r1, &(0x7f00000009c0)=""/75, 0x4b) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x68, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x10) connect$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) 5m41.043976872s ago: executing program 33 (id=670): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) syz_emit_ethernet(0x9d, &(0x7f0000000140)={@random="c16d473d990c", @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8864, 0x30, 0x0, [], "a9e30205c05481cd37808b64a6b35486f934a965830cfc16bbed02013b48c8ac3f454dec5278a5ddaff09e9ac607652d"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x80]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x2, {0x10000000}}}, {0x8, 0x6558, 0x0, "859d0aee92"}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) read$alg(r1, &(0x7f00000009c0)=""/75, 0x4b) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x202000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x68, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008804}, 0x10) connect$rxrpc(r1, &(0x7f00000003c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x24) 2m50.876681784s ago: executing program 3 (id=1233): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe3d08660d3cd4684, 0x1}) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2m49.526211819s ago: executing program 3 (id=1237): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0x8c94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m47.153179054s ago: executing program 3 (id=1242): syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = mq_open(&(0x7f0000000000)='batadv_slaveo1\x00', 0x8c2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x25, 0x1, @thr={0x0, 0x0}}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000740)={0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) fcntl$lock(r4, 0x24, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000005c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r5, 0x3, r1, 0x5}) 2m45.282557619s ago: executing program 3 (id=1248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14c}}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000040)={0x7f1, 0x84, 0xefcc, 0x925, 0x5, "f06fca79266e6c5e443b04683cc267a000", 0xe, 0x2}) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000000)) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @loopback, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000600)=""/207) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d) 2m44.507161383s ago: executing program 3 (id=1252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000001c0)="14", 0x1}, {&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x7fffefff}], 0x2}], 0x1, 0x0) 2m42.765721846s ago: executing program 3 (id=1255): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, 0x0, 0x0, 0x10000, &(0x7f0000000100)={0x23, 0x5, 0xe8, 0x23}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009404, &(0x7f0000000140)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) close(r0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sync() sync() 2m27.696678529s ago: executing program 34 (id=1255): r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r2, 0x0, 0x0, 0x10000, &(0x7f0000000100)={0x23, 0x5, 0xe8, 0x23}, 0x10) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x50009404, &(0x7f0000000140)) setsockopt$packet_tx_ring(r0, 0x107, 0x5, 0x0, 0x0) close(r0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, &(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)=[{}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sync() sync() 1m22.533306837s ago: executing program 0 (id=1450): socket$pppoe(0x18, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4", 0xcc}, {&(0x7f0000000c40)="6dd950135126d19aaf46a60e", 0xc}], 0x2}, 0x0) 1m21.30516351s ago: executing program 0 (id=1454): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000800), &(0x7f0000000000), &(0x7f0000000340)=0x0) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000280)={0xa0, 0x24, 0x0, {{0x0, 0x1, 0x5, 0x6, 0xffc, 0x6, {0x1, 0x0, 0x65cd, 0x0, 0xffffffffffff15ef, 0x3ff, 0x7, 0x7fff, 0x7, 0x2000, 0x8, r3, 0x0, 0x2, 0x10000}}, {0x0, 0x1}}}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3]) chdir(&(0x7f0000000100)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0, r4}, 0x18) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000001600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m21.123363423s ago: executing program 0 (id=1456): syz_emit_vhci(0x0, 0x16) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000914) semget$private(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1m15.131807806s ago: executing program 0 (id=1470): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) 1m10.387224945s ago: executing program 0 (id=1481): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000000300"], 0x70}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0) 1m8.752546326s ago: executing program 0 (id=1484): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 52.05868384s ago: executing program 35 (id=1484): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 12.967046846s ago: executing program 6 (id=1591): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x8020) preadv(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x7, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r2, 0x89a0, &(0x7f0000000200)={@multicast2, @remote}) 11.13415678s ago: executing program 6 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x684, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 10.022831121s ago: executing program 6 (id=1597): setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080)=0x10000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x120) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r3, &(0x7f0000003380)={0x2020}, 0x2020) 8.324545673s ago: executing program 6 (id=1600): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f0000000340)=""/125, 0x7d, 0x66fe) 7.021939628s ago: executing program 2 (id=1605): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = fanotify_init(0x4, 0x101801) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xe8e41, 0x0) fcntl$setlease(r0, 0x400, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) 5.486648407s ago: executing program 2 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa1) r3 = fsopen(0x0, 0x0) fsmount(r3, 0x0, 0x82) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 4.970780866s ago: executing program 6 (id=1608): syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0xa) r4 = dup(r3) r5 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r5, 0x200004) sendfile(r4, r5, 0x0, 0x80001d00c0d1) 4.391618127s ago: executing program 5 (id=1609): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x194) chdir(&(0x7f00000000c0)='./file0\x00') rename(0x0, &(0x7f0000000240)='.\x02\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x410801) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 4.289813589s ago: executing program 2 (id=1610): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x20000400) r3 = syz_io_uring_setup(0x95, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x8, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x24102}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r3, 0x47f6, 0xbacc, 0x0, 0x0, 0x0) 3.334726037s ago: executing program 5 (id=1611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x4, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x28) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) renameat2(r3, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000040)='./file1\x00', 0x0) 3.307784728s ago: executing program 2 (id=1612): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8) 3.102355042s ago: executing program 2 (id=1613): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a32000000001400048008000240fffffffe08000140000000040900010073797a300000000014000000110001"], 0x88}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.422671244s ago: executing program 5 (id=1614): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) setsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1.330494635s ago: executing program 6 (id=1615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x900, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56f41, 0x1070b923, 0x80001, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.273680066s ago: executing program 2 (id=1616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4, @local}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1007}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffe, 0x33}, 0xa, @in=@empty, 0x0, 0x1, 0x0, 0xb7, 0xffffffff}}, 0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.205773207s ago: executing program 5 (id=1617): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000000)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fab9b1b4e8a06a6580e88554b974a96a25f159c40ebb373", 0x39}], 0x1}, 0x0) 181.319276ms ago: executing program 5 (id=1618): syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/65, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 0s ago: executing program 5 (id=1619): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='::::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x14 p4 [ 295.764248][ T6976] loop5: p4 size 722688 extends beyond EOD, truncated [ 295.799190][ T26] audit: type=1326 audit(1759432006.128:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 295.871970][ T26] audit: type=1326 audit(1759432006.128:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 295.925244][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.939790][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.970664][ T6731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.983432][ T26] audit: type=1326 audit(1759432006.128:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 296.094209][ T26] audit: type=1326 audit(1759432006.128:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 296.290854][ T26] audit: type=1326 audit(1759432006.128:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 296.338136][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 296.409424][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 297.299956][ T4323] udevd[4323]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 297.368998][ T26] audit: type=1326 audit(1759432006.128:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 297.433024][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 297.528456][ T26] audit: type=1326 audit(1759432006.138:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 297.871437][ T26] audit: type=1326 audit(1759432006.138:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 298.476672][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 299.572997][ T7021] xt_NFQUEUE: number of total queues is 0 [ 300.220914][ T26] audit: type=1326 audit(1759432006.138:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 300.422668][ T26] audit: type=1326 audit(1759432006.138:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 300.470424][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.483335][ T7011] loop5: detected capacity change from 0 to 8192 [ 300.500787][ T404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.540370][ T26] audit: type=1326 audit(1759432006.138:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 300.676034][ T26] audit: type=1326 audit(1759432006.158:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6980 comm="syz.2.750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 300.726628][ T6731] device veth0_vlan entered promiscuous mode [ 300.735970][ T7011] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 300.762692][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.794904][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.812273][ T7011] FAT-fs (loop5): Filesystem has been set read-only [ 300.873423][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.925147][ T7044] tipc: Failed to remove unknown binding: 66,3,3/2:880284257/880284258 [ 300.934888][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.966795][ T6731] device veth1_vlan entered promiscuous mode [ 300.987109][ T7039] netlink: 28 bytes leftover after parsing attributes in process `syz.5.755'. [ 301.024892][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.101389][ T7039] device bridge_slave_1 left promiscuous mode [ 301.121439][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.393164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 301.538827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.026195][ T7070] netlink: 'syz.5.770': attribute type 27 has an invalid length. [ 304.061100][ T7070] netlink: 'syz.5.770': attribute type 1 has an invalid length. [ 304.113214][ T7070] bridge0: port 1(bridge_slave_0) entered learning state [ 304.168642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.190097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.218767][ T6731] device veth0_macvtap entered promiscuous mode [ 304.246166][ T7075] bridge0: port 1(vlan4) entered blocking state [ 304.302672][ T7075] bridge0: port 1(vlan4) entered disabled state [ 304.327900][ T7075] device vlan4 entered promiscuous mode [ 304.371927][ T7075] device bridge_slave_0 entered promiscuous mode [ 304.633918][ T7075] bridge0: mtu less than device minimum [ 304.640349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.700203][ T7084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.773'. [ 304.840109][ T6731] device veth1_macvtap entered promiscuous mode [ 304.981211][ T7080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.774'. [ 305.264783][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.774'. [ 305.505178][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.566873][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.607536][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.671588][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.705656][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 305.742616][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.773047][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.733427][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.824436][ T6731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.860503][ T7118] netlink: 'syz.3.783': attribute type 1 has an invalid length. [ 306.872800][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.884251][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.923401][ T7118] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.783'. [ 306.945546][ T7114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 307.036211][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.077806][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.107052][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.139767][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.169983][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.217942][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.250528][ T6731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.284419][ T6731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.328732][ T6731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.458060][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.553470][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.596809][ T6731] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.678633][ T6731] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.708254][ T6731] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.955297][ T6731] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.909964][ T7150] netlink: 'syz.5.788': attribute type 27 has an invalid length. [ 308.972019][ T7152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.787'. [ 309.387563][ T7153] binder: 7149:7153 ioctl c0306201 0 returned -14 [ 312.003107][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.304279][ T26] audit: type=1326 audit(1759432025.638:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.380737][ T26] audit: type=1326 audit(1759432025.658:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.465452][ T26] audit: type=1326 audit(1759432025.658:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.538888][ T26] audit: type=1326 audit(1759432025.658:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.609168][ T26] audit: type=1326 audit(1759432025.658:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.702696][ T26] audit: type=1326 audit(1759432025.658:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.752801][ T26] audit: type=1326 audit(1759432025.658:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.822650][ T26] audit: type=1326 audit(1759432025.658:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.874320][ T26] audit: type=1326 audit(1759432025.658:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 315.932834][ T26] audit: type=1326 audit(1759432025.658:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7185 comm="syz.2.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 316.050823][ T7196] loop7: detected capacity change from 0 to 7 [ 316.077799][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.089041][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.132736][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.143801][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.152117][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.163055][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.181464][ T7197] syz.2.800 sent an empty control message without MSG_MORE. [ 316.212794][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.223742][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.272736][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.283691][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.292010][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.302969][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.354124][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.365136][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.380494][ T7196] ldm_validate_partition_table(): Disk read failed. [ 316.395727][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.406674][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.445498][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.456453][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.490133][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.502774][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 316.513709][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 316.563378][ T7196] Dev loop7: unable to read RDB block 0 [ 316.585329][ T7150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.604651][ T7196] loop7: unable to read partition table [ 316.623037][ T7196] loop7: partition table beyond EOD, truncated [ 316.656268][ T7196] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 317.037442][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.043802][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.773010][ T7150] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.781960][ T7150] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.812752][ T7150] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.822080][ T7150] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.189617][ T3096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.214712][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.795'. [ 318.245410][ T3096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.302702][ T7179] sch_tbf: burst 274 is lower than device lo mtu (65550) ! [ 318.363447][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 318.490802][ T3096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.525397][ T3096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.635065][ T7220] syz.0.807[7220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.635183][ T7220] syz.0.807[7220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 318.686801][ T7216] netlink: 'syz.5.806': attribute type 11 has an invalid length. [ 318.771429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 318.879956][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 320.877424][ T7262] loop6: detected capacity change from 0 to 2048 [ 321.033589][ T7262] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 321.227124][ T7256] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.255258][ T7256] team0: Failed to send options change via netlink (err -105) [ 321.275140][ T7256] team0: Port device bond1 added [ 321.986617][ T7284] Cannot find map_set index 0 as target [ 322.559047][ T7290] loop6: detected capacity change from 0 to 2048 [ 322.760886][ T7290] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 323.579461][ T7318] loop6: detected capacity change from 0 to 1024 [ 323.595675][ T4293] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 323.670388][ T7318] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 323.729352][ T4293] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 323.741061][ T7313] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 323.755307][ T7318] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 323.767213][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.825'. [ 323.789245][ T7318] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 323.819542][ T7322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.825'. [ 323.927062][ T7318] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,nolazytime,abort,errors=continue,dioread_nolock,jqfmt=vfsv0,nomblk_io_submit,nobarrier,,errors=continue. Quota mode: writeback. [ 325.570118][ T7343] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 325.616211][ T7345] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 325.851798][ T5355] lo speed is unknown, defaulting to 1000 [ 328.314813][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 328.851374][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 328.955556][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 329.817148][ T7388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 329.934957][ T7388] device bridge_slave_0 left promiscuous mode [ 329.992191][ T7388] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.246064][ T7388] device bridge_slave_1 left promiscuous mode [ 330.252369][ T7388] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.232779][ T7388] bond0: (slave bond_slave_0): Releasing backup interface [ 331.322722][ T7388] bond0: (slave bond_slave_1): Releasing backup interface [ 331.361415][ T7416] IPVS: length: 139 != 8 [ 331.491362][ T7388] team0: Port device team_slave_0 removed [ 331.574673][ T7388] team0: Port device team_slave_1 removed [ 331.622280][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.652123][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.694256][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.716018][ T7388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.795123][ T7393] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.918850][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.6.844'. [ 332.012786][ T7428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.852'. [ 332.461419][ T7438] fuse: Bad value for 'fd' [ 332.940376][ T150] block nbd6: Attempted send on invalid socket [ 332.947166][ T150] print_req_error: 10 callbacks suppressed [ 332.947184][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.511652][ T7489] netlink: 788 bytes leftover after parsing attributes in process `syz.6.864'. [ 335.601590][ T7485] 8021q: VLANs not supported on vcan0 [ 335.612480][ T7481] netlink: 'syz.3.865': attribute type 10 has an invalid length. [ 337.822373][ T7499] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 338.397968][ T7499] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 338.533165][ T7500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.867'. [ 339.593208][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 340.180994][ T7537] netlink: 'syz.0.883': attribute type 10 has an invalid length. [ 340.670975][ T7537] team0: Port device dummy0 added [ 343.088000][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 343.088026][ T26] audit: type=1326 audit(1759432053.418:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 343.216492][ T26] audit: type=1326 audit(1759432053.458:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 343.399203][ T26] audit: type=1326 audit(1759432053.458:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 343.472162][ T26] audit: type=1326 audit(1759432053.458:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 343.552133][ T26] audit: type=1326 audit(1759432053.458:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 344.058649][ T26] audit: type=1326 audit(1759432053.458:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 344.425835][ T7587] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.454123][ T7587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.462623][ T26] audit: type=1326 audit(1759432053.468:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 344.498518][ T7587] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.555200][ T26] audit: type=1326 audit(1759432053.468:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 344.595033][ T7587] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.643106][ T26] audit: type=1326 audit(1759432053.468:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7572 comm="syz.2.884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4e364b1ec9 code=0x7ffc0000 [ 344.662981][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.5.888'. [ 345.312273][ T7613] input: syz0 as /devices/virtual/input/input5 [ 349.203592][ T7657] netlink: 'syz.6.905': attribute type 27 has an invalid length. [ 349.385379][ T7661] binder: 7655:7661 ioctl c0306201 0 returned -14 [ 354.628914][ T7657] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.642617][ T7657] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.661832][ T7657] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.680887][ T7657] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.016099][ T7665] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 355.044973][ T7665] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.072696][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 355.310216][ T7710] syz.6.917[7710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.310321][ T7710] syz.6.917[7710] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 355.440098][ T7709] xt_l2tp: missing protocol rule (udp|l2tpip) [ 355.739658][ T7721] Can't find a SQUASHFS superblock on loop5 [ 358.319593][ T7761] loop6: detected capacity change from 0 to 2048 [ 358.538358][ T7761] loop6: p1 < > p4 [ 358.552261][ T7761] loop6: p4 size 722688 extends beyond EOD, truncated [ 360.931101][ T7706] udevd[7706]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 360.945117][ T7712] udevd[7712]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 361.185281][ T7815] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 364.294228][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz.6.947'. [ 365.254893][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.954'. [ 365.469863][ T7885] loop5: detected capacity change from 0 to 1024 [ 367.164000][ T7903] UBIFS error (pid: 7903): cannot open "ubifs", error -22 [ 370.944991][ T7923] loop6: detected capacity change from 0 to 256 [ 371.098837][ T7923] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 371.142320][ T26] audit: type=1326 audit(1759432081.468:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7922 comm="syz.6.966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd520e90ec9 code=0x0 [ 371.421261][ T7937] xt_NFQUEUE: number of total queues is 0 [ 372.502428][ T7941] xt_time: unknown flags 0xc [ 373.106545][ T23] Bluetooth: hci0: command 0x0406 tx timeout [ 373.605977][ T7969] sch_fq: defrate 9 ignored. [ 374.522610][ T5344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 374.762773][ T5344] usb 6-1: Using ep0 maxpacket: 32 [ 374.882936][ T5344] usb 6-1: config index 0 descriptor too short (expected 786, got 18) [ 374.908473][ T5344] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 374.962612][ T5344] usb 6-1: config 0 has no interface number 0 [ 375.682897][ T5344] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 375.710172][ T5344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.762588][ T5344] usb 6-1: Product: syz [ 375.785126][ T5344] usb 6-1: Manufacturer: syz [ 375.809144][ T7992] tipc: Started in network mode [ 375.814527][ T5344] usb 6-1: SerialNumber: syz [ 375.859506][ T7992] tipc: Node identity 8e4c7cf6d77e, cluster identity 4711 [ 375.883415][ T5344] usb 6-1: config 0 descriptor?? [ 375.904115][ T7992] tipc: Enabled bearer , priority 0 [ 375.916181][ T7996] device syzkaller0 entered promiscuous mode [ 375.934725][ T5344] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 375.962392][ T7992] tipc: Resetting bearer [ 376.008261][ T7991] tipc: Resetting bearer [ 376.097445][ T7991] tipc: Disabling bearer [ 376.142912][ T5344] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 376.153072][ T5344] quatech2: probe of 6-1:0.51 failed with error -8 [ 376.986825][ T23] usb 6-1: USB disconnect, device number 2 [ 377.359678][ T8014] mip6: mip6_rthdr_init_state: spi is not 0: 3540254720 [ 378.109183][ T8016] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.118127][ T8016] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.127038][ T8016] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.135880][ T8016] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 378.144970][ T8016] device geneve2 entered promiscuous mode [ 378.241536][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 378.331628][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 378.417488][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 378.477311][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.483801][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.507459][ T8024] bridge0: port 2(veth0_to_bridge) entered blocking state [ 378.513520][ T8006] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 378.568150][ T8024] bridge0: port 2(veth0_to_bridge) entered disabled state [ 378.648787][ T8024] device veth0_to_bridge entered promiscuous mode [ 378.767925][ T8024] bridge0: port 2(veth0_to_bridge) entered blocking state [ 378.775202][ T8024] bridge0: port 2(veth0_to_bridge) entered forwarding state [ 379.173596][ T8038] loop6: detected capacity change from 0 to 512 [ 379.216972][ T8024] bridge0: mtu less than device minimum [ 379.304189][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 379.329319][ T8040] loop5: detected capacity change from 0 to 16 [ 379.367131][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 379.392653][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 379.410978][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 379.420949][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 379.479807][ T8040] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 379.563837][ T8006] wlan0 speed is unknown, defaulting to 1000 [ 380.945507][ T8058] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1004'. [ 380.996556][ T8062] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1004'. [ 381.086100][ T8061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1002'. [ 381.124492][ T8063] tipc: Started in network mode [ 381.187625][ T8067] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1003'. [ 381.235913][ T8063] tipc: Node identity 3a2395c94644, cluster identity 4711 [ 381.639629][ T8063] tipc: Enabled bearer , priority 0 [ 382.111464][ T8068] tipc: Disabling bearer [ 383.639443][ T26] audit: type=1326 audit(1759432093.968:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 384.702785][ T26] audit: type=1326 audit(1759432093.988:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 384.743287][ T8115] loop6: detected capacity change from 0 to 256 [ 384.780401][ T26] audit: type=1326 audit(1759432094.018:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 384.893917][ T26] audit: type=1326 audit(1759432094.018:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 386.312752][ T26] audit: type=1326 audit(1759432094.148:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 390.118643][ T8156] bridge0: port 1(batadv0) entered blocking state [ 390.174556][ T8156] bridge0: port 1(batadv0) entered disabled state [ 390.194811][ T8156] device batadv0 entered promiscuous mode [ 390.213756][ T26] audit: type=1326 audit(1759432094.148:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 390.239816][ T8170] loop5: detected capacity change from 0 to 512 [ 390.322921][ T26] audit: type=1326 audit(1759432094.148:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 390.374162][ T8170] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 390.412728][ T26] audit: type=1326 audit(1759432094.418:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 390.459662][ T8170] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.711195][ T26] audit: type=1326 audit(1759432094.438:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 390.758882][ T8170] EXT4-fs (loop5): re-mounted. Opts: quota,noload,block_validity,. Quota mode: writeback. [ 390.762466][ T9] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 390.778753][ T9] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 390.854613][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1037'. [ 391.621011][ T8190] netlink: 'syz.2.1038': attribute type 16 has an invalid length. [ 391.622850][ T26] audit: type=1326 audit(1759432094.988:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 391.651905][ T8190] netlink: 'syz.2.1038': attribute type 3 has an invalid length. [ 391.722669][ T8190] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1038'. [ 391.902703][ T26] audit: type=1326 audit(1759432094.988:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 392.500437][ T26] audit: type=1326 audit(1759432094.988:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 393.069677][ T26] audit: type=1326 audit(1759432094.988:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 393.262275][ T26] audit: type=1326 audit(1759432094.988:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 393.625676][ T26] audit: type=1326 audit(1759432094.988:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8095 comm="syz.3.1022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0a21c5fec9 code=0x7ffc0000 [ 394.255097][ T8220] device team0 entered promiscuous mode [ 394.260807][ T8220] device team_slave_0 entered promiscuous mode [ 394.373021][ T8220] device team_slave_1 entered promiscuous mode [ 394.399993][ T8220] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.503550][ T8220] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 395.622805][ T8242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 395.927057][ T8229] bridge0: port 2(vlan2) entered blocking state [ 396.085090][ T8229] bridge0: port 2(vlan2) entered disabled state [ 396.345429][ T8229] device vlan2 entered promiscuous mode [ 396.351041][ T8229] device bond0 entered promiscuous mode [ 396.402751][ T8229] device bond_slave_0 entered promiscuous mode [ 396.409130][ T8229] device bond_slave_1 entered promiscuous mode [ 396.425807][ T8229] device macvlan2 entered promiscuous mode [ 396.461958][ T8246] device veth0 entered promiscuous mode [ 396.495439][ T8246] bond2: (slave macvlan2): making interface the new active one [ 396.541491][ T8252] netlink: 'syz.3.1054': attribute type 29 has an invalid length. [ 396.581699][ T8246] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 396.612199][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1055'. [ 396.692396][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 396.724442][ T8252] netlink: 'syz.3.1054': attribute type 29 has an invalid length. [ 399.917070][ T8292] siw: device registration error -23 [ 400.046812][ T8294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.100198][ T8298] lo speed is unknown, defaulting to 1000 [ 400.219992][ T8299] bond1: (slave macvlan3): Enslaving as an active interface with a down link [ 400.252818][ T8298] lo speed is unknown, defaulting to 1000 [ 400.482749][ T8298] lo speed is unknown, defaulting to 1000 [ 400.505665][ T8298] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 401.261182][ T5355] Bluetooth: hci5: command 0x0406 tx timeout [ 401.313515][ T8298] lo speed is unknown, defaulting to 1000 [ 401.343431][ T8298] lo speed is unknown, defaulting to 1000 [ 401.370095][ T8298] lo speed is unknown, defaulting to 1000 [ 401.407933][ T8298] lo speed is unknown, defaulting to 1000 [ 401.444742][ T8298] lo speed is unknown, defaulting to 1000 [ 401.624311][ T8298] lo speed is unknown, defaulting to 1000 [ 401.772787][ T8321] netlink: 'syz.5.1074': attribute type 13 has an invalid length. [ 404.680885][ T8351] netlink: 'syz.0.1084': attribute type 10 has an invalid length. [ 404.702705][ T8351] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1084'. [ 405.595847][ T8351] team0: Port device geneve0 added [ 405.748462][ T8363] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1087'. [ 406.469359][ T8381] netlink: 'syz.2.1090': attribute type 13 has an invalid length. [ 408.665861][ T8396] device team0 entered promiscuous mode [ 408.712733][ T8396] device team_slave_0 entered promiscuous mode [ 408.720492][ T8396] device team_slave_1 entered promiscuous mode [ 408.752774][ T8396] device ip6gretap1 entered promiscuous mode [ 408.772771][ T8396] device bond1 entered promiscuous mode [ 408.796415][ T8396] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 408.852379][ T8396] device team0 left promiscuous mode [ 408.857928][ T8396] device team_slave_0 left promiscuous mode [ 408.882744][ T8396] device team_slave_1 left promiscuous mode [ 408.918800][ T8396] device ip6gretap1 left promiscuous mode [ 408.952818][ T8396] device bond1 left promiscuous mode [ 409.031268][ T8397] bridge0: port 1(vlan3) entered blocking state [ 409.052230][ T8397] bridge0: port 1(vlan3) entered disabled state [ 409.235253][ T8397] device vlan3 entered promiscuous mode [ 409.268271][ T8397] device bond0 entered promiscuous mode [ 409.296675][ T8397] device bond_slave_0 entered promiscuous mode [ 409.323140][ T8397] device bond_slave_1 entered promiscuous mode [ 409.901221][ T8418] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1100'. [ 410.022198][ T2303] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 410.091054][ T2303] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.027260][ T8437] netlink: 'syz.3.1104': attribute type 13 has an invalid length. [ 411.273133][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.281015][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.288912][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.296890][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.304787][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.468941][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.477042][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.485067][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 411.493088][ T8439] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 412.058315][ T8441] siw: device registration error -23 [ 416.615988][ T8484] validate_nla: 44 callbacks suppressed [ 416.616009][ T8484] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 416.723329][ T5355] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 416.785255][ T8494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1126'. [ 419.202602][ T5355] usb 7-1: Using ep0 maxpacket: 16 [ 419.284968][ T8507] netlink: 'syz.0.1130': attribute type 1 has an invalid length. [ 419.312654][ T5355] usb 7-1: device descriptor read/all, error -71 [ 419.416205][ T8507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.474124][ T8512] device vlan5 entered promiscuous mode [ 419.479727][ T8512] device bond2 entered promiscuous mode [ 419.488492][ T8516] bad cache= option: nonelidity [ 419.488492][ T8516] [ 419.496125][ T8516] CIFS: VFS: bad cache= option: nonelidity [ 419.558975][ T8513] device team0 entered promiscuous mode [ 419.573150][ T8513] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 419.582236][ T8513] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 419.693447][ T8517] bond2: (slave gretap1): making interface the new active one [ 419.732818][ T8517] device gretap1 entered promiscuous mode [ 419.771531][ T8517] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 419.817584][ T8517] syz.0.1130 (8517) used greatest stack depth: 17408 bytes left [ 419.821901][ T8518] bridge0: port 1(vlan2) entered blocking state [ 419.862129][ T8518] bridge0: port 1(vlan2) entered disabled state [ 419.910073][ T8518] device vlan2 entered promiscuous mode [ 420.002774][ T8518] device bond0 entered promiscuous mode [ 420.012871][ T8518] device macvlan2 entered promiscuous mode [ 420.155501][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 420.574829][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan5: link becomes ready [ 421.258785][ T4187] Bluetooth: hci0: hcon ffff88807d100000 sent 1 < count 76 [ 421.267073][ T4187] Bluetooth: hci0: hcon ffff88807d100000 sent 0 < count 3 [ 421.281155][ T4187] Bluetooth: hci0: hcon ffff88807d100000 sent 0 < count 8 [ 421.308408][ T8547] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 423.412261][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 423.412277][ T26] audit: type=1326 audit(1759432133.738:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 423.566157][ T26] audit: type=1326 audit(1759432133.758:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 424.002058][ T26] audit: type=1326 audit(1759432133.758:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 424.401814][ T26] audit: type=1326 audit(1759432133.758:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 424.490312][ T26] audit: type=1326 audit(1759432133.758:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 425.303569][ T26] audit: type=1326 audit(1759432133.758:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 425.448634][ T26] audit: type=1326 audit(1759432133.758:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 426.432639][ T26] audit: type=1326 audit(1759432133.778:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 426.475595][ T8621] ipt_REJECT: ECHOREPLY no longer supported. [ 426.549656][ T26] audit: type=1326 audit(1759432133.848:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff7ca813d5c code=0x7ffc0000 [ 428.757172][ T26] audit: type=1326 audit(1759432133.848:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff7ca813c94 code=0x7ffc0000 [ 429.150102][ T26] audit: type=1326 audit(1759432133.848:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7ff7ca813c94 code=0x7ffc0000 [ 429.217381][ T26] audit: type=1326 audit(1759432133.928:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 429.312690][ T26] audit: type=1326 audit(1759432133.928:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 429.385648][ T26] audit: type=1326 audit(1759432133.948:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 429.618240][ T26] audit: type=1326 audit(1759432133.948:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 429.790138][ T26] audit: type=1326 audit(1759432133.958:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 430.828486][ T26] audit: type=1326 audit(1759432133.958:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 431.787708][ T26] audit: type=1326 audit(1759432133.958:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 432.121853][ T26] audit: type=1326 audit(1759432133.958:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8580 comm="syz.5.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7ca811ec9 code=0x7ffc0000 [ 433.170205][ T4187] Bluetooth: hci3: hcon ffff888019fd8000 sent 1 < count 76 [ 433.178241][ T4187] Bluetooth: hci3: hcon ffff888019fd8000 sent 0 < count 3 [ 433.186983][ T4187] Bluetooth: hci3: hcon ffff888019fd8000 sent 0 < count 8 [ 433.318292][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1186'. [ 433.427595][ T8696] loop6: detected capacity change from 0 to 16 [ 433.520904][ T8696] erofs: (device loop6): mounted with root inode @ nid 36. [ 433.619070][ T8696] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 433.643566][ T8696] erofs: (device loop6): z_erofs_lz4_decompress: failed to decompress -44 in[46, 4050] out[1851] [ 433.657110][ T8696] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 437.598832][ T8745] xt_SECMARK: invalid mode: 2 [ 438.375881][ T8757] MPTCP: addr_signal error, add_addr=1, echo=0 [ 439.183484][ T8767] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 439.294495][ T8767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1207'. [ 439.961905][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.968486][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.009862][ T8765] device syzkaller0 entered promiscuous mode [ 440.076678][ T8767] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 440.122751][ T8767] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1207'. [ 443.166621][ T8806] 9pnet: Insufficient options for proto=fd [ 443.221876][ T8808] tipc: Enabled bearer , priority 10 [ 444.334222][ T5345] tipc: Node number set to 2087163337 [ 445.349170][ T8830] netlink: 'syz.5.1226': attribute type 1 has an invalid length. [ 445.437445][ T8830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.669073][ T8833] bond2: (slave gretap1): making interface the new active one [ 445.730248][ T8833] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 445.790608][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 446.130619][ T8843] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1227'. [ 451.523326][ T8885] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 456.063589][ T8950] capability: warning: `syz.2.1257' uses 32-bit capabilities (legacy support in use) [ 459.131967][ T8980] netlink: 'syz.2.1265': attribute type 4 has an invalid length. [ 459.160468][ T8980] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1265'. [ 459.225716][ T8987] netlink: 'syz.5.1266': attribute type 1 has an invalid length. [ 459.517740][ T8987] 8021q: adding VLAN 0 to HW filter on device bond3 [ 459.988777][ T8990] bond3: (slave ip6gretap1): making interface the new active one [ 460.163432][ T8990] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 460.172544][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 460.185060][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 460.263422][ T9002] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 460.336809][ T9002] kvm: pic: non byte read [ 460.341977][ T9002] kvm: pic: level sensitive irq not supported [ 460.342160][ T9002] kvm: pic: non byte read [ 460.390362][ T9002] kvm: pic: level sensitive irq not supported [ 460.390471][ T9002] kvm: pic: non byte read [ 460.427069][ T9002] kvm: pic: level sensitive irq not supported [ 460.429510][ T9002] kvm: pic: non byte read [ 467.079459][ T9074] siw: device registration error -23 [ 467.584690][ T9091] loop6: detected capacity change from 0 to 512 [ 467.743785][ T9091] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000000,. Quota mode: writeback. [ 467.758255][ T9091] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.498445][ T9109] 9pnet: Insufficient options for proto=fd [ 472.806890][ T9124] mac80211_hwsim hwsim13 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 473.775702][ T9134] lo speed is unknown, defaulting to 1000 [ 473.782634][ T9134] wlan0 speed is unknown, defaulting to 1000 [ 473.790400][ T9134] lo speed is unknown, defaulting to 1000 [ 475.329032][ T9144] lo speed is unknown, defaulting to 1000 [ 475.649658][ T9144] wlan0 speed is unknown, defaulting to 1000 [ 476.012742][ T9144] lo speed is unknown, defaulting to 1000 [ 477.112861][ T5356] Bluetooth: hci6: command 0x0409 tx timeout [ 479.192965][ T23] Bluetooth: hci6: command 0x041b tx timeout [ 479.497466][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 479.497482][ T26] audit: type=1326 audit(1759432190.830:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 479.604607][ T9144] chnl_net:caif_netlink_parms(): no params data found [ 479.892576][ T26] audit: type=1326 audit(1759432190.860:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 481.440155][ T26] audit: type=1326 audit(1759432190.860:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 481.900922][ T26] audit: type=1326 audit(1759432190.860:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 482.204793][ T26] audit: type=1326 audit(1759432190.860:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 482.520388][ T26] audit: type=1326 audit(1759432190.860:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 482.834958][ T26] audit: type=1326 audit(1759432190.860:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 483.100211][ T26] audit: type=1326 audit(1759432190.860:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 484.159601][ T5356] Bluetooth: hci6: command 0x040f tx timeout [ 484.174164][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 484.183228][ T26] audit: type=1326 audit(1759432190.860:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 484.352528][ T26] audit: type=1326 audit(1759432190.870:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9171 comm="syz.0.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fa865dec9 code=0x7ffc0000 [ 484.414383][ T9203] IPVS: Error connecting to the multicast addr [ 484.426186][ T9144] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.461962][ T9144] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.639408][ T9144] device bridge_slave_0 entered promiscuous mode [ 485.074793][ T9144] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.081893][ T9144] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.189703][ T9144] device bridge_slave_1 entered promiscuous mode [ 486.078654][ T9144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.131851][ T9144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.263410][ T5355] Bluetooth: hci6: command 0x0419 tx timeout [ 486.448501][ T9144] team0: Port device team_slave_0 added [ 486.497143][ T9144] team0: Port device team_slave_1 added [ 487.393685][ T9242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1331'. [ 488.531699][ T9250] device bridge1 entered promiscuous mode [ 488.594276][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.601272][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.051447][ T9144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 491.269714][ T9144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.282516][ T9144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 491.383222][ T9281] fuse: Bad value for 'fd' [ 491.416565][ T9144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 492.623503][ T9301] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1345'. [ 492.804535][ T9144] device hsr_slave_0 entered promiscuous mode [ 493.077745][ T9144] device hsr_slave_1 entered promiscuous mode [ 493.248741][ T9144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.342548][ T9144] Cannot create hsr debugfs directory [ 493.362829][ T9300] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 493.477347][ T9300] device wlan1 entered promiscuous mode [ 495.860920][ T9144] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 496.008529][ T9144] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 497.443788][ T9144] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 498.240618][ T9144] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 499.930797][ T9144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.022706][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 500.035847][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 500.088375][ T9144] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.837643][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 500.856197][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 500.874299][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.881471][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.944153][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 500.979199][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 501.031192][ T9393] binder: BINDER_SET_CONTEXT_MGR already set [ 501.053514][ T9393] binder: 9392:9393 ioctl 4018620d 2000000002c0 returned -16 [ 501.069081][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 501.107316][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.114533][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.364718][ T9400] netlink: 'syz.0.1372': attribute type 2 has an invalid length. [ 501.655670][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.668163][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.013370][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 502.379696][ T9144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 502.507308][ T9144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 503.449288][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.650103][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 504.090286][ T9425] delete_channel: no stack [ 504.303783][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 504.493070][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.623610][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.665849][ T9427] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 504.674850][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.708187][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.747947][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.800879][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.883562][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.891692][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 506.425222][ T9455] loop6: detected capacity change from 0 to 1024 [ 506.742185][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 506.779723][ T1455] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 506.834485][ T9466] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 506.968096][ T9455] netlink: 'syz.6.1389': attribute type 10 has an invalid length. [ 507.534945][ T9455] device wlan1 entered promiscuous mode [ 507.541191][ T9455] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 507.620577][ T9144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.879945][ T3096] hfsplus: b-tree write err: -5, ino 4 [ 509.139589][ T9485] overlayfs: failed to clone upperpath [ 511.094679][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1404'. [ 515.588495][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.639331][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.866567][ T9528] loop6: detected capacity change from 0 to 128 [ 515.935271][ T9528] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 516.710103][ T9528] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 517.029401][ T9536] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 517.865106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.937627][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.952300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.113164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 518.324801][ T9144] device veth0_vlan entered promiscuous mode [ 518.362752][ T9144] device veth1_vlan entered promiscuous mode [ 519.491126][ T9144] device veth0_macvtap entered promiscuous mode [ 520.768689][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 520.798706][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 520.825888][ T9144] device veth1_macvtap entered promiscuous mode [ 520.844575][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.861697][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.977184][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.020735][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.092982][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.143912][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 522.172505][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.194200][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.244535][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.275645][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.338270][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.389578][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.420184][ T9144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.451375][ T9144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.484680][ T9144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.834106][ T9589] netlink: 201392 bytes leftover after parsing attributes in process `syz.5.1426'. [ 524.152568][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 524.209893][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 524.496648][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 524.698331][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 524.888472][ T9144] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.922616][ T9144] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.969202][ T9144] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.999014][ T9144] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.412985][ T3096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.822882][ T3096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.442355][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 529.475099][ T8165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 529.498079][ T8165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.596091][ T3096] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 530.362151][ T9639] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1438'. [ 533.031070][ T9652] loop6: detected capacity change from 0 to 2048 [ 534.755560][ T9652] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 534.998617][ T9666] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 537.259756][ T9697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1455'. [ 537.396409][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.565110][ T9697] netlink: 'syz.6.1455': attribute type 1 has an invalid length. [ 537.591975][ T9697] netlink: 'syz.6.1455': attribute type 2 has an invalid length. [ 537.670971][ T9678] lo speed is unknown, defaulting to 1000 [ 537.721305][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.823458][ T9678] wlan0 speed is unknown, defaulting to 1000 [ 537.830650][ T9678] lo speed is unknown, defaulting to 1000 [ 538.072825][ T4256] Bluetooth: hci6: command 0x0409 tx timeout [ 538.081060][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.156415][ T5356] Bluetooth: hci6: command 0x041b tx timeout [ 541.243001][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.169868][ T5179] Bluetooth: hci6: command 0x040f tx timeout [ 543.293620][ T9741] tipc: Enabling of bearer rejected, failed to enable media [ 543.586297][ T9755] overlayfs: failed to clone upperpath [ 543.732109][ T9678] chnl_net:caif_netlink_parms(): no params data found [ 545.292213][ T4256] Bluetooth: hci6: command 0x0419 tx timeout [ 545.586393][ T9678] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.612530][ T9678] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.623752][ T9678] device bridge_slave_0 entered promiscuous mode [ 545.666048][ T9678] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.705726][ T9678] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.733797][ T9678] device bridge_slave_1 entered promiscuous mode [ 545.964553][ T9678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.016696][ T9678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.327893][ T9678] team0: Port device team_slave_0 added [ 546.614315][ T9678] team0: Port device team_slave_1 added [ 547.310161][ T9797] loop6: detected capacity change from 0 to 4096 [ 547.552841][ T9678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.560013][ T9678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.766422][ T9678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.215360][ T9678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.360415][ T9678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.002485][ T9678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.997391][ T9823] loop6: detected capacity change from 0 to 32768 [ 550.997192][ T9678] device hsr_slave_0 entered promiscuous mode [ 551.022968][ T9678] device hsr_slave_1 entered promiscuous mode [ 551.069995][ T9678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 551.752865][ T9678] Cannot create hsr debugfs directory [ 551.950090][ T9828] lo speed is unknown, defaulting to 1000 [ 552.757811][ T9828] wlan0 speed is unknown, defaulting to 1000 [ 552.767845][ T9828] lo speed is unknown, defaulting to 1000 [ 553.223252][ T9861] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 554.497010][ T9860] tipc: Enabled bearer , priority 0 [ 555.434464][ T9] device hsr_slave_0 left promiscuous mode [ 555.494169][ T5344] tipc: Node number set to 1496481014 [ 555.626462][ T9] device hsr_slave_1 left promiscuous mode [ 555.864540][ T9879] overlayfs: failed to clone upperpath [ 556.679209][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.701840][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.942695][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.971561][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.102238][ T9] device bridge_slave_1 left promiscuous mode [ 557.184632][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.430221][ T9] device bridge_slave_0 left promiscuous mode [ 557.509904][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.761615][ T9] device veth1_macvtap left promiscuous mode [ 558.652683][ T9] device veth0_macvtap left promiscuous mode [ 558.658813][ T9] device veth1_vlan left promiscuous mode [ 558.704365][ T9] device veth0_vlan left promiscuous mode [ 559.547548][ T9] team0 (unregistering): Port device team_slave_1 removed [ 559.614939][ T9] team0 (unregistering): Port device team_slave_0 removed [ 559.652888][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.732936][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.716436][ T9] bond0 (unregistering): Released all slaves [ 562.501954][ T9860] tipc: Disabling bearer [ 562.802960][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.809291][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.012351][ T9950] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 567.165715][ T9963] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 567.576782][ T9966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1516'. [ 568.257211][ T9978] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 570.841406][ T9966] netlink: 'syz.2.1516': attribute type 1 has an invalid length. [ 570.871016][ T9966] netlink: 'syz.2.1516': attribute type 2 has an invalid length. [ 570.972018][ T9986] netlink: 'syz.6.1520': attribute type 6 has an invalid length. [ 573.124854][ T5346] Bluetooth: hci7: command 0x0409 tx timeout [ 575.263597][ T5343] Bluetooth: hci7: command 0x041b tx timeout [ 576.195753][ T9990] lo speed is unknown, defaulting to 1000 [ 577.361617][ T5346] Bluetooth: hci7: command 0x040f tx timeout [ 577.539338][ T9990] wlan0 speed is unknown, defaulting to 1000 [ 577.607226][T10055] delete_channel: no stack [ 577.762533][ T9990] lo speed is unknown, defaulting to 1000 [ 578.065064][T10063] tipc: Enabled bearer , priority 0 [ 578.889990][T10060] device syzkaller0 entered promiscuous mode [ 578.920221][T10066] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 579.438301][ T4195] Bluetooth: hci7: command 0x0419 tx timeout [ 580.116070][T10060] tipc: Resetting bearer [ 581.741126][T10059] tipc: Resetting bearer [ 581.983230][T10059] tipc: Disabling bearer [ 584.257825][T10103] xt_connbytes: Forcing CT accounting to be enabled [ 584.265001][T10103] set match dimension is over the limit! [ 585.814309][ T9678] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 586.669790][T10113] tipc: Enabling of bearer rejected, failed to enable media [ 586.810575][ T9678] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 586.902189][ T9678] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 588.245719][ T9828] bond0: (slave syz_tun): Releasing backup interface [ 588.259091][ T9678] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 588.532314][ T9990] chnl_net:caif_netlink_parms(): no params data found [ 589.023334][ T9990] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.030446][ T9990] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.038001][ T23] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 589.093486][ T9990] device bridge_slave_0 entered promiscuous mode [ 590.096447][ T9678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.122708][ T23] usb 7-1: config 0 has no interfaces? [ 590.128259][ T23] usb 7-1: New USB device found, idVendor=1bd6, idProduct=2344, bcdDevice=f3.8e [ 590.137798][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.156631][ T23] usb 7-1: config 0 descriptor?? [ 590.182099][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.194100][ T9990] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.242864][ T9990] device bridge_slave_1 entered promiscuous mode [ 590.270984][ T9678] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.320220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 590.343516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 591.359554][ T9990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 591.410291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 591.443035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 591.479892][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.487095][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.613141][T10190] tipc: Enabling of bearer rejected, failed to enable media [ 591.625091][ T9990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 591.630849][ T5356] usb 7-1: USB disconnect, device number 4 [ 592.663688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 592.671942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 592.734277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 592.817460][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.824659][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.924488][T10211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1564'. [ 594.947310][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 596.170411][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 599.191015][T10243] overlayfs: failed to clone upperpath [ 599.586959][ T9990] team0: Port device team_slave_0 added [ 599.715539][ T9990] team0: Port device team_slave_1 added [ 599.748571][T10258] tipc: Enabling of bearer rejected, failed to enable media [ 599.935468][T10263] tipc: Failed to remove unknown binding: 66,1,1/1496481014:191616586/191616588 [ 599.945938][T10263] tipc: Failed to remove unknown binding: 66,1,1/1496481014:191616586/191616588 [ 599.955948][T10263] tipc: Failed to remove unknown binding: 66,1,1/1496481014:191616586/191616588 [ 600.117307][T10254] lo speed is unknown, defaulting to 1000 [ 600.634351][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 600.712155][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 600.956520][T10269] o2cb: This node has not been configured. [ 600.972501][ T9990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 600.992764][T10269] o2cb: Cluster check failed. Fix errors before retrying. [ 601.008504][T10269] (syz.6.1577,10269,0):user_dlm_register:675 ERROR: status = -22 [ 601.024152][T10269] (syz.6.1577,10269,0):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "bus" [ 601.027817][T10254] wlan0 speed is unknown, defaulting to 1000 [ 601.072013][ T9990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 601.091775][ T9990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.242153][ T5345] Bluetooth: hci1: command 0x0409 tx timeout [ 602.360149][ T9990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 602.462338][T10254] lo speed is unknown, defaulting to 1000 [ 603.274237][ T9990] device hsr_slave_0 entered promiscuous mode [ 603.324364][ T9990] device hsr_slave_1 entered promiscuous mode [ 603.349698][ T9990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 603.381589][ T9990] Cannot create hsr debugfs directory [ 603.435424][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 603.912717][T10325] binder: 10324:10325 ioctl c0306201 0 returned -14 [ 604.568712][ T5345] Bluetooth: hci1: command 0x041b tx timeout [ 605.971284][T10254] chnl_net:caif_netlink_parms(): no params data found [ 606.859469][ T4195] Bluetooth: hci1: command 0x040f tx timeout [ 607.557740][T10369] tipc: Enabling of bearer rejected, failed to enable media [ 607.584398][ T9990] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 608.877743][ T5346] Bluetooth: hci1: command 0x0419 tx timeout [ 609.293412][T10254] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.300533][T10254] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.090851][T10254] device bridge_slave_0 entered promiscuous mode [ 610.148306][ T9990] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 610.195801][T10254] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.261976][T10254] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.281159][T10254] device bridge_slave_1 entered promiscuous mode [ 611.682921][ T9990] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 612.949068][T10429] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1606'. [ 612.985210][T10254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.208325][T10423] tipc: Enabling of bearer rejected, failed to enable media [ 613.311951][T10434] ipt_REJECT: TCP_RESET invalid for non-tcp [ 614.043252][ T9990] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 615.164081][T10254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.484340][T10459] overlayfs: failed to clone upperpath [ 615.677792][T10254] team0: Port device team_slave_0 added [ 615.997228][T10254] team0: Port device team_slave_1 added [ 616.177981][T10254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.197920][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.313084][T10254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.853757][T10254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.248366][T10254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.332762][T10254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.472775][ T27] INFO: task syz.3.1255:8945 blocked for more than 143 seconds. [ 618.501050][ T27] Not tainted syzkaller #0 [ 618.510236][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 618.539478][ T27] task:syz.3.1255 state:D stack:27680 pid: 8945 ppid: 4192 flags:0x00004004 [ 618.642808][ T27] Call Trace: [ 618.646155][ T27] [ 618.649116][ T27] __schedule+0x11bb/0x4390 [ 618.712517][ T27] ? release_firmware_map_entry+0x190/0x190 [ 618.718721][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 618.769277][ T27] ? lock_chain_count+0x20/0x20 [ 618.792509][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 618.797664][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 618.822507][ T27] schedule+0x11b/0x1e0 [ 618.826739][ T27] schedule_preempt_disabled+0xf/0x20 [ 618.832154][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 618.872516][ T27] ? down_write_killable_nested+0x90/0x90 [ 618.878530][ T27] ? read_lock_is_recursive+0x10/0x10 [ 618.902690][ T27] ? __rwlock_init+0x140/0x140 [ 618.907521][ T27] ? ksys_sync+0x150/0x150 [ 618.911970][ T27] down_read+0x96/0x2e0 [ 618.972454][ T27] ? ksys_sync+0x150/0x150 [ 618.977025][ T27] iterate_supers+0xa4/0x1d0 [ 618.981670][ T27] ksys_sync+0x91/0x150 [ 619.002571][ T27] ? sync_filesystem+0x220/0x220 [ 619.007591][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 619.042446][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 619.047722][ T27] __ia32_sys_sync+0xa/0x10 [ 619.052253][ T27] do_syscall_64+0x4c/0xa0 [ 619.082486][ T27] ? clear_bhb_loop+0x30/0x80 [ 619.087244][ T27] ? clear_bhb_loop+0x30/0x80 [ 619.091974][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.123617][ T27] RIP: 0033:0x7f0a21c5fec9 [ 619.128878][ T27] RSP: 002b:00007f0a1fea6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 619.162449][ T27] RAX: ffffffffffffffda RBX: 00007f0a21eb7090 RCX: 00007f0a21c5fec9 [ 619.170646][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.222554][ T27] RBP: 00007f0a21eb7090 R08: 0000000000000000 R09: 0000000000000000 [ 619.230597][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.272661][ T27] R13: 00007f0a21eb7128 R14: 00007f0a21eb7090 R15: 00007ffec9a3d238 [ 619.280768][ T27] [ 619.302689][ T27] INFO: task syz.3.1255:8949 blocked for more than 144 seconds. [ 619.310443][ T27] Not tainted syzkaller #0 [ 619.322598][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 619.331321][ T27] task:syz.3.1255 state:D stack:29056 pid: 8949 ppid: 4192 flags:0x00004004 [ 619.362498][ T27] Call Trace: [ 619.365923][ T27] [ 619.368885][ T27] __schedule+0x11bb/0x4390 [ 619.392581][ T27] ? release_firmware_map_entry+0x190/0x190 [ 619.398538][ T27] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 619.438049][ T27] ? lock_chain_count+0x20/0x20 [ 619.443645][ T27] ? _raw_spin_lock_irq+0xab/0xe0 [ 619.448704][ T27] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 619.481483][ T27] schedule+0x11b/0x1e0 [ 619.485923][ T27] schedule_preempt_disabled+0xf/0x20 [ 619.491330][ T27] rwsem_down_read_slowpath+0x528/0x990 [ 619.512553][ T27] ? down_write_killable_nested+0x90/0x90 [ 619.518338][ T27] ? read_lock_is_recursive+0x10/0x10 [ 619.532456][ T27] ? __rwlock_init+0x140/0x140 [ 619.537282][ T27] ? ksys_sync+0x150/0x150 [ 619.541731][ T27] down_read+0x96/0x2e0 [ 619.562472][ T27] ? ksys_sync+0x150/0x150 [ 619.566947][ T27] iterate_supers+0xa4/0x1d0 [ 619.571568][ T27] ksys_sync+0x91/0x150 [ 619.592520][ T27] ? sync_filesystem+0x220/0x220 [ 619.597568][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 619.604161][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 619.609401][ T27] __ia32_sys_sync+0xa/0x10 [ 619.622474][ T27] do_syscall_64+0x4c/0xa0 [ 619.626944][ T27] ? clear_bhb_loop+0x30/0x80 [ 619.662450][ T27] ? clear_bhb_loop+0x30/0x80 [ 619.667200][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 619.692464][ T27] RIP: 0033:0x7f0a21c5fec9 [ 619.697176][ T27] RSP: 002b:00007f0a1fe85038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 619.722463][ T27] RAX: ffffffffffffffda RBX: 00007f0a21eb7180 RCX: 00007f0a21c5fec9 [ 619.730503][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 619.752588][ T27] RBP: 00007f0a21eb7180 R08: 0000000000000000 R09: 0000000000000000 [ 619.760631][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.792501][ T27] R13: 00007f0a21eb7218 R14: 00007f0a21eb7180 R15: 00007ffec9a3d238 [ 619.800892][ T27] [ 619.812526][ T27] [ 619.812526][ T27] Showing all locks held in the system: [ 619.820340][ T27] 4 locks held by kworker/u4:0/9: [ 619.842492][ T27] #0: ffff8880169cd938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 619.882509][ T27] #1: ffffc90000ce7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 619.922532][ T27] #2: ffffffff8d22c690 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 619.932015][ T27] #3: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_delete_nets+0xc8/0x360 [ 619.982650][ T27] 1 lock held by khungtaskd/27: [ 619.987559][ T27] #0: ffffffff8c11c660 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 620.016695][ T27] 1 lock held by dhcpcd/3856: [ 620.021769][ T27] #0: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x258/0x1a70 [ 620.072661][ T27] 2 locks held by getty/3945: [ 620.077389][ T27] #0: ffff88802b7ad098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 620.102732][ T27] #1: ffffc90002cf62e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5ba/0x1a30 [ 620.132485][ T27] 1 lock held by syz-executor/4191: [ 620.137742][ T27] #0: ffff8880230d80e0 (&type->s_umount_key#79){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 620.162485][ T27] 3 locks held by kworker/0:3/4195: [ 620.167858][ T27] #0: ffff88802ac71938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 620.192506][ T27] #1: ffffc90002ebfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 620.222521][ T27] #2: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x1520 [ 620.242456][ T27] 3 locks held by kworker/u4:8/4316: [ 620.247877][ T27] #0: ffff888016879138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 620.272510][ T27] #1: ffffc9000337fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 620.302474][ T27] #2: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 620.311566][ T27] 2 locks held by kworker/1:7/5179: [ 620.332495][ T27] #0: ffff888016872138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 620.352440][ T27] #1: ffffc9000346fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 620.372442][ T27] 2 locks held by kworker/0:10/5343: [ 620.377852][ T27] 3 locks held by kworker/0:13/5346: [ 620.392460][ T27] #0: ffff888016870938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x760/0x1000 [ 620.422444][ T27] #1: ffffc9000347fd00 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 620.432189][ T27] #2: ffffffff8c1210e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 620.472443][ T27] 4 locks held by kworker/1:11/5356: [ 620.477786][ T27] 3 locks held by syz-executor/6731: [ 620.492443][ T27] #0: ffff88801eb94ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 620.502279][ T27] #1: ffff88801eb94078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030 [ 620.532442][ T27] #2: ffffffff8d37e7e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 620.552448][ T27] 5 locks held by kworker/u4:14/8166: [ 620.557859][ T27] #0: ffff8880b913a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 620.582507][ T27] #1: ffffc900036dfd00 ((work_completion)(&(&forw_packet_aggr->delayed_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a3/0x1000 [ 620.612497][ T27] #2: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 620.621909][ T27] #3: ffff88805edcccc8 (&app->lock){+.-.}-{2:2}, at: mrp_join_timer+0xd2/0x180 [ 620.652444][ T27] #4: ffff8880b91280d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x123/0x270 [ 620.661851][ T27] 1 lock held by syz.3.1255/8945: [ 620.682460][ T27] #0: ffff8880230d80e0 (&type->s_umount_key#79){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 620.702437][ T27] 1 lock held by syz.3.1255/8949: [ 620.707495][ T27] #0: ffff8880230d80e0 (&type->s_umount_key#79){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 620.732492][ T27] 1 lock held by syz-executor/9990: [ 620.737751][ T27] #0: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x974/0xe60 [ 620.762597][ T27] 1 lock held by syz.2.1616/10477: [ 620.767780][ T27] #0: ffffffff8c1210e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x320/0x6b0 [ 620.792547][ T27] 1 lock held by syz.6.1615/10476: [ 620.797807][ T27] #0: ffffffff8d238308 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3d/0x1b0 [ 620.822551][ T27] 3 locks held by syz.5.1619/10492: [ 620.827977][ T27] #0: ffff888022cf0ff0 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_do_close+0x5f/0x1030 [ 620.852531][ T27] #1: ffff888022cf0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_do_close+0x3f4/0x1030 [ 620.862130][ T27] #2: ffffffff8d37e7e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa4/0x220 [ 620.892489][ T27] [ 620.894910][ T27] ============================================= [ 620.894910][ T27] [ 620.950158][ T27] NMI backtrace for cpu 1 [ 620.954539][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 620.961764][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 620.971836][ T27] Call Trace: [ 620.975156][ T27] [ 620.978120][ T27] dump_stack_lvl+0x168/0x230 [ 620.982871][ T27] ? show_regs_print_info+0x20/0x20 [ 620.988099][ T27] ? load_image+0x3b0/0x3b0 [ 620.992623][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 620.998019][ T27] ? nmi_cpu_backtrace+0x1b6/0x3d0 [ 621.003143][ T27] nmi_cpu_backtrace+0x397/0x3d0 [ 621.008106][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 621.014265][ T27] ? _printk+0xcc/0x110 [ 621.018427][ T27] ? load_image+0x3b0/0x3b0 [ 621.022936][ T27] ? load_image+0x3b0/0x3b0 [ 621.027451][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 621.033525][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 621.039569][ T27] watchdog+0xe0f/0xe50 [ 621.043750][ T27] kthread+0x436/0x520 [ 621.047829][ T27] ? hungtask_pm_notify+0x40/0x40 [ 621.052858][ T27] ? kthread_blkcg+0xd0/0xd0 [ 621.057538][ T27] ret_from_fork+0x1f/0x30 [ 621.061971][ T27] [ 621.065778][ T27] Sending NMI from CPU 1 to CPUs 0: [ 621.071010][ C0] NMI backtrace for cpu 0 [ 621.071022][ C0] CPU: 0 PID: 1129 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 621.071040][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 621.071051][ C0] Workqueue: bat_events batadv_nc_worker [ 621.071072][ C0] RIP: 0010:check_preemption_disabled+0x26/0x110 [ 621.071095][ C0] Code: 59 8a eb 00 55 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 05 99 d6 58 76 65 8b 0d 02 31 59 76 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 [ 621.071109][ C0] RSP: 0018:ffffc90004bb7a28 EFLAGS: 00000086 [ 621.071123][ C0] RAX: 0000000000000000 RBX: ffffffff814872eb RCX: 0000000080000201 [ 621.071135][ C0] RDX: 0000000000000000 RSI: ffffffff8a0b1840 RDI: ffffffff8a59a4c0 [ 621.071147][ C0] RBP: ffffc90004bb7b38 R08: dffffc0000000000 R09: ffffed100e937071 [ 621.071161][ C0] R10: ffffed100e937071 R11: 1ffff1100e937070 R12: ffffffff897ed5a6 [ 621.071173][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: 1ffff92000976f54 [ 621.071187][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 621.071201][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.071213][ C0] CR2: 0000200000349030 CR3: 000000002a21f000 CR4: 00000000003506f0 [ 621.071229][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 621.071238][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 621.071249][ C0] Call Trace: [ 621.071255][ C0] [ 621.071262][ C0] ? __local_bh_enable_ip+0xcb/0x1b0 [ 621.071288][ C0] lockdep_hardirqs_off+0xa7/0x100 [ 621.071306][ C0] ? __local_bh_enable_ip+0xcb/0x1b0 [ 621.071321][ C0] trace_hardirqs_off+0x14/0x70 [ 621.071340][ C0] __local_bh_enable_ip+0xcb/0x1b0 [ 621.071355][ C0] ? _local_bh_enable+0xa0/0xa0 [ 621.071372][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 621.071389][ C0] ? batadv_nc_purge_paths+0x316/0x3b0 [ 621.071405][ C0] ? batadv_nc_purge_paths+0x3b0/0x3b0 [ 621.071421][ C0] batadv_nc_purge_paths+0x316/0x3b0 [ 621.071443][ C0] batadv_nc_worker+0x2e7/0x5c0 [ 621.071462][ C0] process_one_work+0x863/0x1000 [ 621.071488][ C0] ? worker_detach_from_pool+0x240/0x240 [ 621.071504][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 621.071523][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 621.071538][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 621.071555][ C0] ? wq_worker_running+0x97/0x170 [ 621.071573][ C0] worker_thread+0xaa8/0x12a0 [ 621.071605][ C0] kthread+0x436/0x520 [ 621.071620][ C0] ? rcu_lock_release+0x20/0x20 [ 621.071635][ C0] ? kthread_blkcg+0xd0/0xd0 [ 621.071651][ C0] ret_from_fork+0x1f/0x30 [ 621.071677][ C0] [ 621.312564][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 621.338797][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 621.346014][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 621.356085][ T27] Call Trace: [ 621.359378][ T27] [ 621.362324][ T27] dump_stack_lvl+0x168/0x230 [ 621.367031][ T27] ? show_regs_print_info+0x20/0x20 [ 621.372255][ T27] ? load_image+0x3b0/0x3b0 [ 621.376788][ T27] panic+0x2c9/0x7f0 [ 621.380700][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 621.386356][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 621.390882][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 621.396463][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 621.402650][ T27] watchdog+0xe4e/0xe50 [ 621.406918][ T27] kthread+0x436/0x520 [ 621.411002][ T27] ? hungtask_pm_notify+0x40/0x40 [ 621.416043][ T27] ? kthread_blkcg+0xd0/0xd0 [ 621.420655][ T27] ret_from_fork+0x1f/0x30 [ 621.425112][ T27] [ 621.428408][ T27] Kernel Offset: disabled [ 621.432900][ T27] Rebooting in 86400 seconds..