last executing test programs: 17.206934122s ago: executing program 1 (id=30): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x3, 0x255, 0x0, r7}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x1000000, 0x10000003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x8000, 0x2, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x683d, 0x2, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0xffffffef}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x20, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e"], 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x3, 0x0) creat(0x0, 0x2d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newnexthop={0x30, 0x68, 0x5fb9a818fb7378e9, 0x70bd2c, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x11}, [@NHA_FDB={0x4}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x4000) 15.49991222s ago: executing program 1 (id=32): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000004400), 0x400000000000203, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100), 0x1, 0x511, &(0x7f00000002c0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x1, 0x2, 0x9295, 0xf86, 0x0, 0x5b9b8ab7, 0xbc95, 0x3, 0x1b9, 0x0, 0x1, 0x3, 0x1741, 0x4, 0x6, 0x7, 0xfffffff5, 0xfffffffe, 0xa236, 0x1, 0x1, 0xfb, 0x5}}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001100), 0x20901, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) read(r3, 0x0, 0x0) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv(r4, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) 14.368662884s ago: executing program 1 (id=36): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x1c}}) 13.930509264s ago: executing program 1 (id=37): r0 = getpgrp(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0xd4}], 0x2}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sched_setaffinity(r0, 0x0, 0x0) prlimit64(r0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 11.979176197s ago: executing program 1 (id=42): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, 0x0, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) set_mempolicy(0x4005, &(0x7f0000000040)=0x13, 0x6) r5 = open(&(0x7f0000000200)='./file2\x00', 0x0, 0x123) copy_file_range(r5, 0x0, 0xffffffffffffffff, 0x0, 0x3df1, 0x0) io_uring_enter(r5, 0x4dd6, 0x22c2, 0xc4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0f0700000000fcffffff0c00000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) 11.596150615s ago: executing program 1 (id=46): sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 10.195163996s ago: executing program 2 (id=47): syz_open_dev$dri(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8400, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) readv(r0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f00000000c0)=0x58, 0xa) 8.431690595s ago: executing program 2 (id=50): unshare(0x22020600) r0 = syz_open_dev$loop(&(0x7f0000004280), 0x6, 0x4000) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 8.076523642s ago: executing program 2 (id=53): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x48014}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 7.839055198s ago: executing program 0 (id=54): socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000008018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000000a0000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.805242049s ago: executing program 2 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) io_uring_setup(0x5c3f, 0x0) close(0x3) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) gettid() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x7, 0x1, 0x3, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x5, 0x4, 0x1a}}}}}]}}]}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 6.81205803s ago: executing program 0 (id=57): socket$inet6_sctp(0xa, 0x5, 0x84) openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x30b}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x8000, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) 5.88807199s ago: executing program 3 (id=58): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@gid_forget}, {@nostrict}, {@anchor={'anchor', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0xd8d8}}, {}, {@noadinicb}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000003a80)="$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") open(0x0, 0x1031c2, 0xb4) 5.494810929s ago: executing program 0 (id=59): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, 0x0, 0xff70) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0x0, 0x5676, 0x1000, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}, 0x0, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x1000, 0x200000}}, 0xe8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000040)={r5, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84) 4.199800397s ago: executing program 0 (id=60): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102384, 0x18ff0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r2 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) readv(r2, &(0x7f0000000480), 0x0) splice(r3, 0x0, r5, 0x0, 0x7151, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, 0x0) 4.008137481s ago: executing program 3 (id=61): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) unshare(0x22020600) lseek(r3, 0x10001, 0x0) 2.816353838s ago: executing program 3 (id=62): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x42}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) unshare(0x22020600) lseek(r5, 0x10001, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, 0x2400}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x4000000) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x0) 2.785631819s ago: executing program 2 (id=63): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x48014}, 0x40004) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) 1.609563044s ago: executing program 0 (id=64): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.511862597s ago: executing program 3 (id=65): r0 = syz_open_procfs$namespace(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x24}}, 0x4000806) fstat(r0, 0x0) 1.270990822s ago: executing program 3 (id=66): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 121.464407ms ago: executing program 2 (id=67): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1c3, &(0x7f0000000800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, 0x0, 0x0) 110.024937ms ago: executing program 0 (id=68): pipe2(&(0x7f0000000100), 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(0x0, 0xc) sendfile(r0, r0, 0x0, 0xe3aa6ea) 0s ago: executing program 3 (id=69): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x200000, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@gid_forget}, {@nostrict}, {@anchor={'anchor', 0x3d, 0x3}}, {@umask={'umask', 0x3d, 0xd8d8}}, {}, {@noadinicb}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@noadinicb}]}, 0x1, 0xc32, &(0x7f0000003a80)="$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") open(0x0, 0x1031c2, 0xb4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 82.714598][ T5761] cgroup: Unknown subsys name 'net' [ 82.879986][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.601567][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.334131][ T5774] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.356998][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.365669][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.373614][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.382479][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.392143][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.400468][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.409633][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.410840][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.424785][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.432740][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.440683][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.441126][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.458349][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.471548][ T5782] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.478904][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.492442][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.492541][ T5787] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.507069][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.552127][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.561725][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.569147][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.592443][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.600235][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.094159][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 87.109292][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 87.228346][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.286589][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 87.334675][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.342603][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.350016][ T5772] bridge_slave_0: entered allmulticast mode [ 87.357927][ T5772] bridge_slave_0: entered promiscuous mode [ 87.367223][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.376092][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.385050][ T5778] bridge_slave_0: entered allmulticast mode [ 87.393810][ T5778] bridge_slave_0: entered promiscuous mode [ 87.412186][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.419363][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.429772][ T5778] bridge_slave_1: entered allmulticast mode [ 87.437033][ T5778] bridge_slave_1: entered promiscuous mode [ 87.467423][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.474705][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.482224][ T5772] bridge_slave_1: entered allmulticast mode [ 87.489693][ T5772] bridge_slave_1: entered promiscuous mode [ 87.583038][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.626491][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.644403][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.662359][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.759723][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.767093][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.774670][ T5773] bridge_slave_0: entered allmulticast mode [ 87.782359][ T5773] bridge_slave_0: entered promiscuous mode [ 87.828129][ T5772] team0: Port device team_slave_0 added [ 87.838382][ T5778] team0: Port device team_slave_0 added [ 87.845186][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.857249][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.865961][ T5773] bridge_slave_1: entered allmulticast mode [ 87.877618][ T5773] bridge_slave_1: entered promiscuous mode [ 87.905934][ T5772] team0: Port device team_slave_1 added [ 87.930344][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.941406][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.948657][ T5779] bridge_slave_0: entered allmulticast mode [ 87.960108][ T5779] bridge_slave_0: entered promiscuous mode [ 87.970801][ T5778] team0: Port device team_slave_1 added [ 88.045785][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.061997][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.069354][ T5779] bridge_slave_1: entered allmulticast mode [ 88.080774][ T5779] bridge_slave_1: entered promiscuous mode [ 88.109821][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.145085][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.166391][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.175227][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.201997][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.216230][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.223750][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.249848][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.310733][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.318036][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.344521][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.357492][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.364679][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.390696][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.418742][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.432268][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.456884][ T5773] team0: Port device team_slave_0 added [ 88.481394][ T5772] hsr_slave_0: entered promiscuous mode [ 88.488109][ T5772] hsr_slave_1: entered promiscuous mode [ 88.518676][ T5773] team0: Port device team_slave_1 added [ 88.579617][ T5782] Bluetooth: hci1: command tx timeout [ 88.580281][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.592542][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.618629][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.635124][ T5779] team0: Port device team_slave_0 added [ 88.651607][ T5782] Bluetooth: hci2: command tx timeout [ 88.651661][ T5774] Bluetooth: hci0: command tx timeout [ 88.657314][ T5782] Bluetooth: hci3: command tx timeout [ 88.678865][ T5778] hsr_slave_0: entered promiscuous mode [ 88.686096][ T5778] hsr_slave_1: entered promiscuous mode [ 88.693111][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.701133][ T5778] Cannot create hsr debugfs directory [ 88.708893][ T5779] team0: Port device team_slave_1 added [ 88.716300][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.723696][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.750120][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.812759][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.819803][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.846965][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.860747][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.868121][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.894364][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.006356][ T5773] hsr_slave_0: entered promiscuous mode [ 89.013794][ T5773] hsr_slave_1: entered promiscuous mode [ 89.020072][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.028650][ T5773] Cannot create hsr debugfs directory [ 89.093806][ T5779] hsr_slave_0: entered promiscuous mode [ 89.100589][ T5779] hsr_slave_1: entered promiscuous mode [ 89.107415][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.115249][ T5779] Cannot create hsr debugfs directory [ 89.519921][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.532511][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.543243][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.559521][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.626883][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.642451][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.656977][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.668645][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.764146][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.786440][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.798116][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.809885][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.928941][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.940309][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.954221][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.968103][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.012841][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.075546][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.089112][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.116067][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.123531][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.170969][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.195038][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.202255][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.218225][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.225506][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.275401][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.282727][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.341199][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.447443][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.507866][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.515147][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.570111][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.577325][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.623930][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.653029][ T5782] Bluetooth: hci1: command tx timeout [ 90.695389][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.713184][ T5779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.731853][ T5782] Bluetooth: hci0: command tx timeout [ 90.731873][ T5774] Bluetooth: hci2: command tx timeout [ 90.737305][ T5782] Bluetooth: hci3: command tx timeout [ 90.762308][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.805008][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.812285][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.830004][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.837232][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.907159][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.062994][ T5772] veth0_vlan: entered promiscuous mode [ 91.105328][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.137460][ T5772] veth1_vlan: entered promiscuous mode [ 91.278538][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.288214][ T5772] veth0_macvtap: entered promiscuous mode [ 91.309893][ T5778] veth0_vlan: entered promiscuous mode [ 91.331168][ T5778] veth1_vlan: entered promiscuous mode [ 91.354515][ T5772] veth1_macvtap: entered promiscuous mode [ 91.448992][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.483673][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.513856][ T5778] veth0_macvtap: entered promiscuous mode [ 91.529457][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.539207][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549473][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.558276][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.588768][ T5779] veth0_vlan: entered promiscuous mode [ 91.606776][ T5778] veth1_macvtap: entered promiscuous mode [ 91.625436][ T5779] veth1_vlan: entered promiscuous mode [ 91.647951][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.693550][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.704347][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.716744][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.752221][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.767402][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.783703][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.796485][ T5779] veth0_macvtap: entered promiscuous mode [ 91.813636][ T5779] veth1_macvtap: entered promiscuous mode [ 91.833109][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.849166][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.861419][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.870159][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.955767][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.968012][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.981495][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.997303][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.007518][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.020848][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.038300][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.077563][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.093628][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.103800][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.114494][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.128044][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.141394][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.150170][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.159440][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.168847][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.218609][ T5773] veth0_vlan: entered promiscuous mode [ 92.238335][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.251562][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.314141][ T5773] veth1_vlan: entered promiscuous mode [ 92.351536][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.359540][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.446036][ T5773] veth0_macvtap: entered promiscuous mode [ 92.491485][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.504223][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.524090][ T5773] veth1_macvtap: entered promiscuous mode [ 92.574682][ T995] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.588240][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.608632][ T995] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.621379][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.650348][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.663539][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.679098][ T8] cfg80211: failed to load regulatory.db [ 92.686572][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.698243][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.727380][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.741875][ T5782] Bluetooth: hci1: command tx timeout [ 92.812060][ T5782] Bluetooth: hci2: command tx timeout [ 92.813390][ T5774] Bluetooth: hci0: command tx timeout [ 92.823234][ T5774] Bluetooth: hci3: command tx timeout [ 92.899660][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.999193][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.020404][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.152422][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.331539][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.383708][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.429936][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.507546][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.515738][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.683433][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.708247][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.719178][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.730860][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.654457][ T5848] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.811580][ T5774] Bluetooth: hci1: command tx timeout [ 94.891376][ T5774] Bluetooth: hci3: command tx timeout [ 94.892126][ T5782] Bluetooth: hci0: command tx timeout [ 94.896825][ T5788] Bluetooth: hci2: command tx timeout [ 94.968063][ T5852] syz.1.5[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.066532][ T5852] loop1: detected capacity change from 0 to 1024 [ 95.091397][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.130279][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.615148][ T5862] loop2: detected capacity change from 0 to 512 [ 95.706424][ T5862] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.850278][ T5862] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 95.866986][ T5862] Quota error (device loop2): write_blk: dquota write failed [ 95.874970][ T5862] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 95.884880][ T5862] Quota error (device loop2): write_blk: dquota write failed [ 95.893093][ T5862] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 95.903261][ T5862] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.6: Failed to acquire dquot type 1 [ 95.943278][ T5862] EXT4-fs (loop2): 1 truncate cleaned up [ 95.958728][ T5862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.124405][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.166891][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.280543][ T5852] 9pnet_fd: Insufficient options for proto=fd [ 96.411639][ T5778] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.758126][ T5872] loop2: detected capacity change from 0 to 2048 [ 96.842353][ T5872] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.997123][ T5876] process 'syz.3.4' launched '/dev/fd/5' with NULL argv: empty string added [ 97.042125][ T5870] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 98.006017][ T5887] netlink: 'syz.1.12': attribute type 7 has an invalid length. [ 98.092585][ T5887] netlink: 'syz.1.12': attribute type 8 has an invalid length. [ 98.155971][ T5885] netlink: 'syz.1.12': attribute type 7 has an invalid length. [ 98.243290][ T5885] netlink: 'syz.1.12': attribute type 8 has an invalid length. [ 98.400384][ T5894] loop3: detected capacity change from 0 to 128 [ 98.479540][ T5894] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 99.003774][ T5899] netlink: 'syz.1.14': attribute type 4 has an invalid length. [ 99.051536][ T5774] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.552141][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 101.151053][ T5892] loop0: detected capacity change from 0 to 32768 [ 101.167614][ T5892] xfs: Unknown parameter 'biosize' [ 101.264328][ T5909] loop2: detected capacity change from 0 to 8192 [ 102.244041][ T5916] loop0: detected capacity change from 0 to 64 [ 102.582106][ T28] audit: type=1800 audit(1783109558.654:2): pid=5916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19" name="file1" dev="loop0" ino=22 res=0 errno=0 [ 102.739113][ T5921] loop3: detected capacity change from 0 to 512 [ 102.789271][ T5918] loop1: detected capacity change from 0 to 40427 [ 102.800603][ T5918] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 102.808724][ T5918] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.825818][ T5918] F2FS-fs (loop1): invalid crc value [ 102.844837][ T5918] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.851201][ T5921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.868783][ T5916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.19'. [ 102.918821][ T5921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.951611][ T5918] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.959000][ T5918] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 103.058590][ T5926] loop2: detected capacity change from 0 to 4096 [ 103.139319][ T5921] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 103.261860][ T5921] EXT4-fs (loop3): 1 truncate cleaned up [ 103.335046][ T5926] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 103.361978][ T5921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.425245][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.523374][ T5926] ntfs3: loop2: Failed to load $Extend (-22). [ 103.545637][ T5916] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 103.583073][ T5926] ntfs3: loop2: Failed to initialize $Extend. [ 103.747494][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.803048][ T5779] hfs: node 4:3 still has 1 user(s)! [ 104.913167][ T5939] loop3: detected capacity change from 0 to 512 [ 104.921344][ T5939] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.945997][ T5939] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.23: iget: bad i_size value: 38620345925642 [ 104.961528][ T5939] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.23: couldn't read orphan inode 15 (err -117) [ 104.974818][ T5939] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.404743][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.561857][ T27] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.752540][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 105.766059][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.778096][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.788564][ T27] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.801748][ T5840] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.810392][ T27] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.820452][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.843639][ T27] usb 1-1: config 0 descriptor?? [ 105.958923][ T5953] loop1: detected capacity change from 0 to 512 [ 105.977644][ T5953] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 105.989573][ T5953] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.999908][ T5840] usb 4-1: Using ep0 maxpacket: 32 [ 106.010726][ T5840] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.024781][ T5840] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.051386][ T5953] EXT4-fs (loop1): 1 truncate cleaned up [ 106.076536][ T5953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.083858][ T5840] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 106.099316][ T5840] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 106.107999][ T5840] usb 4-1: Product: syz [ 106.113982][ T5840] usb 4-1: Manufacturer: syz [ 106.144689][ T5840] hub 4-1:4.0: USB hub found [ 106.323817][ T27] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 106.346618][ T27] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 106.366192][ T5956] loop2: detected capacity change from 0 to 4096 [ 106.385382][ T27] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 106.393658][ T5956] ======================================================= [ 106.393658][ T5956] WARNING: The mand mount option has been deprecated and [ 106.393658][ T5956] and is ignored by this kernel. Remove the mand [ 106.393658][ T5956] option from the mount to silence this warning. [ 106.393658][ T5956] ======================================================= [ 106.448877][ T27] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 106.580556][ T27] microsoft 0003:045E:07DA.0001: no inputs found [ 106.614627][ T27] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 106.793887][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.917242][ T5958] loop3: detected capacity change from 0 to 128 [ 106.938363][ T5956] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 107.772627][ T5946] loop0: detected capacity change from 0 to 40427 [ 107.819693][ T5946] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 107.827712][ T5946] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.840664][ T5946] F2FS-fs (loop0): invalid crc value [ 107.922751][ T5840] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 107.935974][ T5946] F2FS-fs (loop0): Found nat_bits in checkpoint [ 107.997032][ T5946] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.004260][ T5946] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 108.055734][ T28] audit: type=1800 audit(1783109564.144:3): pid=5946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.26" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 108.090848][ T5840] usb 4-1: USB disconnect, device number 2 [ 108.106252][ T8] usb 1-1: USB disconnect, device number 2 [ 108.401061][ T5973] loop1: detected capacity change from 0 to 512 [ 108.465121][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.496769][ T5973] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.544834][ T5976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 108.592689][ T5973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm syz.1.32: bg 0: block 217: padding at end of block bitmap is not set [ 108.729495][ T5973] Quota error (device loop1): write_blk: dquota write failed [ 108.779595][ T5973] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 108.796180][ T5973] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.32: Failed to acquire dquot type 1 [ 109.434725][ T5984] loop3: detected capacity change from 0 to 512 [ 109.447094][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.478186][ T5984] EXT4-fs: Ignoring removed oldalloc option [ 109.532698][ T5984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.588955][ T5984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.624904][ T5984] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.764103][ T28] audit: type=1800 audit(1783109565.854:4): pid=5984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 109.910228][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.615126][ T6006] loop0: detected capacity change from 0 to 8 [ 110.721428][ T6006] SQUASHFS error: Unable to read directory block [631:26] [ 111.366927][ T6008] loop2: detected capacity change from 0 to 4096 [ 111.679547][ T6010] loop0: detected capacity change from 0 to 164 [ 115.624387][ T6049] netlink: 'syz.3.52': attribute type 1 has an invalid length. [ 115.781376][ T6051] Zero length message leads to an empty skb [ 117.238441][ T6059] loop2: detected capacity change from 0 to 40427 [ 117.260357][ T6059] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 117.268252][ T6059] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 117.298871][ T6059] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.423497][ T6059] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 117.431527][ T6059] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 119.171712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 119.425461][ T6074] loop3: detected capacity change from 0 to 2048 [ 119.529002][ T6074] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.311794][ T6096] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 123.723124][ T6108] loop2: detected capacity change from 0 to 16 [ 123.787639][ T6110] loop0: detected capacity change from 0 to 512 [ 123.804184][ T6108] erofs: (device loop2): mounted with root inode @ nid 36. [ 123.843175][ T6110] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.900413][ T6108] syz.2.67: attempt to access beyond end of device [ 123.900413][ T6108] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16 [ 123.955151][ T6108] syz.2.67: attempt to access beyond end of device [ 123.955151][ T6108] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 123.975465][ T28] audit: type=1800 audit(1783109580.064:5): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.68" name="file1" dev="loop0" ino=1048606 res=0 errno=0 [ 123.982386][ T6108] ================================================================== [ 124.004129][ T6108] BUG: KASAN: slab-use-after-free in z_erofs_transform_plain+0x3ab/0x4a0 [ 124.012628][ T6108] Read of size 4096 at addr ffff88802f49c000 by task syz.2.67/6108 [ 124.020573][ T6108] [ 124.022966][ T6108] CPU: 1 PID: 6108 Comm: syz.2.67 Not tainted syzkaller #0 [ 124.030227][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 124.040355][ T6108] Call Trace: [ 124.043663][ T6108] [ 124.046639][ T6108] dump_stack_lvl+0x18c/0x250 [ 124.051387][ T6108] ? __lock_acquire+0x7d80/0x7d80 [ 124.056434][ T6108] ? show_regs_print_info+0x20/0x20 [ 124.061658][ T6108] ? load_image+0x420/0x420 [ 124.066201][ T6108] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 124.071687][ T6108] ? __virt_addr_valid+0x10c/0x380 [ 124.076832][ T6108] ? __virt_addr_valid+0x10c/0x380 [ 124.081960][ T6108] ? __virt_addr_valid+0x10c/0x380 [ 124.087122][ T6108] ? __virt_addr_valid+0x10c/0x380 [ 124.092273][ T6108] print_report+0xa8/0x210 [ 124.096709][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 124.102360][ T6108] kasan_report+0x117/0x150 [ 124.106880][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 124.112546][ T6108] kasan_check_range+0x241/0x290 [ 124.117519][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 124.123178][ T6108] __asan_memcpy+0x29/0x70 [ 124.127616][ T6108] z_erofs_transform_plain+0x3ab/0x4a0 [ 124.133107][ T6108] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 124.138848][ T6108] z_erofs_decompress_queue+0x1705/0x2670 [ 124.144611][ T6108] ? z_erofs_onlinepage_end+0x360/0x360 [ 124.150186][ T6108] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 124.156189][ T6108] ? lock_chain_count+0x20/0x20 [ 124.161068][ T6108] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 124.167350][ T6108] ? erofs_map_blocks+0x17b0/0x17b0 [ 124.172577][ T6108] ? folio_unlock+0x118/0x2f0 [ 124.177344][ T6108] z_erofs_runqueue+0x1993/0x1b20 [ 124.182420][ T6108] ? z_erofs_do_read_page+0x3500/0x3500 [ 124.187996][ T6108] ? __lock_acquire+0x7d80/0x7d80 [ 124.193057][ T6108] ? put_page+0xea/0x260 [ 124.197329][ T6108] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 124.203157][ T6108] z_erofs_read_folio+0x321/0x5c0 [ 124.208291][ T6108] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 124.213687][ T6108] ? up_read+0x20/0x20 [ 124.217766][ T6108] ? __might_sleep+0xe0/0xe0 [ 124.222399][ T6108] ? filemap_add_folio+0x190/0x3d0 [ 124.227520][ T6108] filemap_read_folio+0x16b/0x790 [ 124.232556][ T6108] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 124.237948][ T6108] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 124.243511][ T6108] ? down_read+0x1ac/0x2e0 [ 124.247946][ T6108] filemap_get_pages+0x13ac/0x1f10 [ 124.253088][ T6108] ? filemap_read+0xf20/0xf20 [ 124.257774][ T6108] ? __might_sleep+0xe0/0xe0 [ 124.262380][ T6108] ? folio_mark_accessed+0x203/0x14a0 [ 124.267762][ T6108] ? folio_activate_fn+0x2000/0x2000 [ 124.273070][ T6108] filemap_read+0x409/0xf20 [ 124.277594][ T6108] ? filemap_get_folios_tag+0x840/0x840 [ 124.283156][ T6108] ? generic_file_read_iter+0x9b/0x550 [ 124.288639][ T6108] ? iov_iter_kvec+0xd4/0x1b0 [ 124.293348][ T6108] __kernel_read+0x2e5/0x730 [ 124.298010][ T6108] ? rw_verify_area+0x1b0/0x1b0 [ 124.302902][ T6108] integrity_kernel_read+0x8a/0xd0 [ 124.308037][ T6108] ? integrity_inode_free+0x170/0x170 [ 124.313438][ T6108] ? _sha256_update+0x127/0x1e0 [ 124.318320][ T6108] ? sha256_transform_avx+0xcc0/0xcc0 [ 124.323705][ T6108] ima_calc_file_hash+0xb1f/0x1960 [ 124.328828][ T6108] ? is_bpf_text_address+0x28f/0x2a0 [ 124.334126][ T6108] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.340209][ T6108] ? kernel_text_address+0xa0/0xd0 [ 124.345387][ T6108] ? look_up_lock_class+0x75/0x140 [ 124.350552][ T6108] ? ima_alloc_tfm+0x2f0/0x2f0 [ 124.355509][ T6108] ? register_lock_class+0xc4/0x8a0 [ 124.360766][ T6108] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 124.366422][ T6108] ? generic_fillattr+0x2b5/0x690 [ 124.371549][ T6108] ? __asan_memcpy+0x40/0x70 [ 124.376157][ T6108] ? generic_fillattr+0x451/0x690 [ 124.381200][ T6108] ima_collect_measurement+0x4d4/0xa30 [ 124.386810][ T6108] ? ima_get_action+0xb0/0xb0 [ 124.391507][ T6108] ? erofs_getxattr+0x13f/0x450 [ 124.396409][ T6108] ? rcu_is_watching+0x15/0xb0 [ 124.401301][ T6108] ? ima_get_hash_algo+0x91/0x4a0 [ 124.406356][ T6108] ? ima_get_cache_status+0xd0/0xd0 [ 124.411574][ T6108] process_measurement+0x123a/0x1d50 [ 124.416888][ T6108] ? ima_file_mmap+0x1d0/0x1d0 [ 124.421665][ T6108] ? tomoyo_check_open_permission+0x384/0x460 [ 124.427750][ T6108] ? tomoyo_check_open_permission+0x1cf/0x460 [ 124.433833][ T6108] ? tomoyo_check_path_number_acl+0x280/0x280 [ 124.439922][ T6108] ? get_cached_acl+0x4fb/0x540 [ 124.444835][ T6108] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 124.451021][ T6108] ima_file_check+0xcc/0x110 [ 124.455730][ T6108] ? ima_bprm_check+0x200/0x200 [ 124.460601][ T6108] path_openat+0x2910/0x3270 [ 124.465223][ T6108] ? do_filp_open+0x430/0x430 [ 124.469919][ T6108] do_filp_open+0x1f2/0x430 [ 124.474436][ T6108] ? vfs_tmpfile+0x480/0x480 [ 124.479042][ T6108] ? _raw_spin_unlock+0x28/0x40 [ 124.483913][ T6108] ? alloc_fd+0x590/0x640 [ 124.488261][ T6108] do_sys_openat2+0x134/0x1d0 [ 124.492958][ T6108] ? do_sys_open+0xe0/0xe0 [ 124.497408][ T6108] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 124.503452][ T6108] ? lock_chain_count+0x20/0x20 [ 124.508318][ T6108] __x64_sys_openat+0x139/0x160 [ 124.513189][ T6108] do_syscall_64+0x55/0xb0 [ 124.517626][ T6108] ? clear_bhb_loop+0x40/0x90 [ 124.522333][ T6108] ? clear_bhb_loop+0x40/0x90 [ 124.527124][ T6108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.533047][ T6108] RIP: 0033:0x7fe71119de59 [ 124.537481][ T6108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.557104][ T6108] RSP: 002b:00007fe7120c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.565545][ T6108] RAX: ffffffffffffffda RBX: 00007fe711425fa0 RCX: 00007fe71119de59 [ 124.573562][ T6108] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 124.581552][ T6108] RBP: 00007fe711233e6f R08: 0000000000000000 R09: 0000000000000000 [ 124.589562][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.597633][ T6108] R13: 00007fe711426038 R14: 00007fe711425fa0 R15: 00007fff7cc7cac8 [ 124.605637][ T6108] [ 124.608669][ T6108] [ 124.611000][ T6108] Allocated by task 2120: [ 124.615340][ T6108] kasan_set_track+0x4e/0x70 [ 124.619947][ T6108] __kasan_slab_alloc+0x6c/0x80 [ 124.624811][ T6108] slab_post_alloc_hook+0x6a/0x4d0 [ 124.629953][ T6108] kmem_cache_alloc_node+0x1af/0x310 [ 124.635255][ T6108] __alloc_skb+0x103/0x2c0 [ 124.639688][ T6108] nsim_dev_trap_report_work+0x253/0xa90 [ 124.645342][ T6108] process_scheduled_works+0xa60/0x1600 [ 124.650905][ T6108] worker_thread+0xa5e/0xfe0 [ 124.655513][ T6108] kthread+0x2fa/0x390 [ 124.659609][ T6108] ret_from_fork+0x48/0x80 [ 124.664041][ T6108] ret_from_fork_asm+0x11/0x20 [ 124.668826][ T6108] [ 124.671153][ T6108] Freed by task 2120: [ 124.675160][ T6108] kasan_set_track+0x4e/0x70 [ 124.679783][ T6108] kasan_save_free_info+0x28/0x40 [ 124.684846][ T6108] ____kasan_slab_free+0x126/0x1f0 [ 124.689968][ T6108] slab_free_freelist_hook+0x130/0x1a0 [ 124.695456][ T6108] kmem_cache_free+0xf8/0x290 [ 124.700280][ T6108] nsim_dev_trap_report_work+0x723/0xa90 [ 124.705970][ T6108] process_scheduled_works+0xa60/0x1600 [ 124.711543][ T6108] worker_thread+0xa5e/0xfe0 [ 124.716145][ T6108] kthread+0x2fa/0x390 [ 124.720223][ T6108] ret_from_fork+0x48/0x80 [ 124.724661][ T6108] ret_from_fork_asm+0x11/0x20 [ 124.729445][ T6108] [ 124.731775][ T6108] The buggy address belongs to the object at ffff88802f49c000 [ 124.731775][ T6108] which belongs to the cache skbuff_head_cache of size 240 [ 124.746390][ T6108] The buggy address is located 0 bytes inside of [ 124.746390][ T6108] freed 240-byte region [ffff88802f49c000, ffff88802f49c0f0) [ 124.760023][ T6108] [ 124.762355][ T6108] The buggy address belongs to the physical page: [ 124.768796][ T6108] page:ffffea0000bd2700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f49c [ 124.778983][ T6108] flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 124.786625][ T6108] page_type: 0xffffffff() [ 124.790980][ T6108] raw: 00fff00000000800 ffff88801ea76640 dead000000000122 0000000000000000 [ 124.799585][ T6108] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 124.808232][ T6108] page dumped because: kasan: bad access detected [ 124.814706][ T6108] page_owner tracks the page as allocated [ 124.820434][ T6108] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 2120, tgid 2120 (kworker/u4:9), ts 120196412688, free_ts 101484355429 [ 124.840430][ T6108] post_alloc_hook+0x1c1/0x200 [ 124.845267][ T6108] get_page_from_freelist+0x2181/0x22a0 [ 124.850833][ T6108] __alloc_pages+0x1f0/0x460 [ 124.855452][ T6108] alloc_slab_page+0x5d/0x180 [ 124.860143][ T6108] new_slab+0x87/0x2d0 [ 124.864241][ T6108] ___slab_alloc+0xc5c/0x12f0 [ 124.868942][ T6108] kmem_cache_alloc_node+0x12e/0x310 [ 124.874263][ T6108] __alloc_skb+0x103/0x2c0 [ 124.878705][ T6108] nsim_dev_trap_report_work+0x253/0xa90 [ 124.884452][ T6108] process_scheduled_works+0xa60/0x1600 [ 124.890019][ T6108] worker_thread+0xa5e/0xfe0 [ 124.894636][ T6108] kthread+0x2fa/0x390 [ 124.898721][ T6108] ret_from_fork+0x48/0x80 [ 124.903156][ T6108] ret_from_fork_asm+0x11/0x20 [ 124.907979][ T6108] page last free stack trace: [ 124.912959][ T6108] free_unref_page_prepare+0x7d7/0x8f0 [ 124.918448][ T6108] free_unref_page_list+0xbe/0x860 [ 124.923616][ T6108] release_pages+0x208a/0x2300 [ 124.928417][ T6108] __folio_batch_release+0x71/0xe0 [ 124.933550][ T6108] truncate_inode_pages_range+0x381/0xea0 [ 124.939287][ T6108] blkdev_flush_mapping+0x132/0x290 [ 124.944530][ T6108] blkdev_put+0x49a/0x7a0 [ 124.948887][ T6108] blkdev_release+0x84/0x90 [ 124.953406][ T6108] __fput+0x221/0x930 [ 124.957398][ T6108] task_work_run+0x1d4/0x260 [ 124.962023][ T6108] do_exit+0x986/0x2530 [ 124.966229][ T6108] do_group_exit+0x22d/0x2f0 [ 124.970836][ T6108] __x64_sys_exit_group+0x3f/0x40 [ 124.975890][ T6108] do_syscall_64+0x55/0xb0 [ 124.980338][ T6108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.986254][ T6108] [ 124.988602][ T6108] Memory state around the buggy address: [ 124.994245][ T6108] ffff88802f49bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.002314][ T6108] ffff88802f49bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 125.010392][ T6108] >ffff88802f49c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.018466][ T6108] ^ [ 125.022630][ T6108] ffff88802f49c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 125.030792][ T6108] ffff88802f49c100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 125.038906][ T6108] ================================================================== [ 125.082681][ T6112] loop3: detected capacity change from 0 to 2048 [ 125.094037][ T6108] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.101358][ T6108] CPU: 1 PID: 6108 Comm: syz.2.67 Not tainted syzkaller #0 [ 125.108612][ T6108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.118720][ T6108] Call Trace: [ 125.122046][ T6108] [ 125.125024][ T6108] dump_stack_lvl+0x18c/0x250 [ 125.129764][ T6108] ? show_regs_print_info+0x20/0x20 [ 125.135022][ T6108] ? load_image+0x420/0x420 [ 125.139589][ T6108] panic+0x2ca/0x720 [ 125.143541][ T6108] ? bpf_jit_dump+0xd0/0xd0 [ 125.148105][ T6108] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 125.154152][ T6108] ? _raw_spin_unlock+0x40/0x40 [ 125.159096][ T6108] ? print_memory_metadata+0x314/0x400 [ 125.164625][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 125.170325][ T6108] check_panic_on_warn+0x84/0xa0 [ 125.175333][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 125.181048][ T6108] end_report+0x6f/0x130 [ 125.185403][ T6108] kasan_report+0x128/0x150 [ 125.189976][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 125.195695][ T6108] kasan_check_range+0x241/0x290 [ 125.200708][ T6108] ? z_erofs_transform_plain+0x3ab/0x4a0 [ 125.206422][ T6108] __asan_memcpy+0x29/0x70 [ 125.210943][ T6108] z_erofs_transform_plain+0x3ab/0x4a0 [ 125.216494][ T6108] ? z_erofs_lz4_decompress+0x1800/0x1800 [ 125.222287][ T6108] z_erofs_decompress_queue+0x1705/0x2670 [ 125.228099][ T6108] ? z_erofs_onlinepage_end+0x360/0x360 [ 125.233715][ T6108] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 125.239944][ T6108] ? lock_chain_count+0x20/0x20 [ 125.244862][ T6108] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 125.251045][ T6108] ? erofs_map_blocks+0x17b0/0x17b0 [ 125.256268][ T6108] ? folio_unlock+0x118/0x2f0 [ 125.260955][ T6108] z_erofs_runqueue+0x1993/0x1b20 [ 125.266013][ T6108] ? z_erofs_do_read_page+0x3500/0x3500 [ 125.271603][ T6108] ? __lock_acquire+0x7d80/0x7d80 [ 125.276648][ T6108] ? put_page+0xea/0x260 [ 125.280908][ T6108] ? z_erofs_pcluster_readmore+0x3a7/0x460 [ 125.286735][ T6108] z_erofs_read_folio+0x321/0x5c0 [ 125.291798][ T6108] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 125.297219][ T6108] ? up_read+0x20/0x20 [ 125.301327][ T6108] ? __might_sleep+0xe0/0xe0 [ 125.305981][ T6108] ? filemap_add_folio+0x190/0x3d0 [ 125.311145][ T6108] filemap_read_folio+0x16b/0x790 [ 125.316373][ T6108] ? z_erofs_rcu_callback+0x1b0/0x1b0 [ 125.321823][ T6108] ? maybe_unlock_mmap_for_io+0xf0/0xf0 [ 125.327415][ T6108] ? down_read+0x1ac/0x2e0 [ 125.331846][ T6108] filemap_get_pages+0x13ac/0x1f10 [ 125.337006][ T6108] ? filemap_read+0xf20/0xf20 [ 125.341726][ T6108] ? __might_sleep+0xe0/0xe0 [ 125.346337][ T6108] ? folio_mark_accessed+0x203/0x14a0 [ 125.351737][ T6108] ? folio_activate_fn+0x2000/0x2000 [ 125.357145][ T6108] filemap_read+0x409/0xf20 [ 125.361702][ T6108] ? filemap_get_folios_tag+0x840/0x840 [ 125.367264][ T6108] ? generic_file_read_iter+0x9b/0x550 [ 125.372734][ T6108] ? iov_iter_kvec+0xd4/0x1b0 [ 125.377441][ T6108] __kernel_read+0x2e5/0x730 [ 125.382068][ T6108] ? rw_verify_area+0x1b0/0x1b0 [ 125.386961][ T6108] integrity_kernel_read+0x8a/0xd0 [ 125.392097][ T6108] ? integrity_inode_free+0x170/0x170 [ 125.397488][ T6108] ? _sha256_update+0x127/0x1e0 [ 125.402350][ T6108] ? sha256_transform_avx+0xcc0/0xcc0 [ 125.407738][ T6108] ima_calc_file_hash+0xb1f/0x1960 [ 125.412870][ T6108] ? is_bpf_text_address+0x28f/0x2a0 [ 125.418188][ T6108] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.424322][ T6108] ? kernel_text_address+0xa0/0xd0 [ 125.429458][ T6108] ? look_up_lock_class+0x75/0x140 [ 125.434586][ T6108] ? ima_alloc_tfm+0x2f0/0x2f0 [ 125.439361][ T6108] ? register_lock_class+0xc4/0x8a0 [ 125.444592][ T6108] ? erofs_init_inode_xattrs+0x2eb/0xb50 [ 125.450243][ T6108] ? generic_fillattr+0x2b5/0x690 [ 125.455284][ T6108] ? __asan_memcpy+0x40/0x70 [ 125.459898][ T6108] ? generic_fillattr+0x451/0x690 [ 125.464945][ T6108] ima_collect_measurement+0x4d4/0xa30 [ 125.470419][ T6108] ? ima_get_action+0xb0/0xb0 [ 125.475104][ T6108] ? erofs_getxattr+0x13f/0x450 [ 125.479977][ T6108] ? rcu_is_watching+0x15/0xb0 [ 125.484782][ T6108] ? ima_get_hash_algo+0x91/0x4a0 [ 125.489839][ T6108] ? ima_get_cache_status+0xd0/0xd0 [ 125.495097][ T6108] process_measurement+0x123a/0x1d50 [ 125.500415][ T6108] ? ima_file_mmap+0x1d0/0x1d0 [ 125.505195][ T6108] ? tomoyo_check_open_permission+0x384/0x460 [ 125.511379][ T6108] ? tomoyo_check_open_permission+0x1cf/0x460 [ 125.517466][ T6108] ? tomoyo_check_path_number_acl+0x280/0x280 [ 125.523551][ T6108] ? get_cached_acl+0x4fb/0x540 [ 125.528448][ T6108] ? apparmor_current_getsecid_subj+0xb5/0x120 [ 125.534614][ T6108] ima_file_check+0xcc/0x110 [ 125.539213][ T6108] ? ima_bprm_check+0x200/0x200 [ 125.544077][ T6108] path_openat+0x2910/0x3270 [ 125.548686][ T6108] ? do_filp_open+0x430/0x430 [ 125.553406][ T6108] do_filp_open+0x1f2/0x430 [ 125.558028][ T6108] ? vfs_tmpfile+0x480/0x480 [ 125.562671][ T6108] ? _raw_spin_unlock+0x28/0x40 [ 125.567537][ T6108] ? alloc_fd+0x590/0x640 [ 125.571910][ T6108] do_sys_openat2+0x134/0x1d0 [ 125.576629][ T6108] ? do_sys_open+0xe0/0xe0 [ 125.581054][ T6108] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 125.587049][ T6108] ? lock_chain_count+0x20/0x20 [ 125.591913][ T6108] __x64_sys_openat+0x139/0x160 [ 125.596787][ T6108] do_syscall_64+0x55/0xb0 [ 125.601266][ T6108] ? clear_bhb_loop+0x40/0x90 [ 125.605972][ T6108] ? clear_bhb_loop+0x40/0x90 [ 125.610662][ T6108] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.616584][ T6108] RIP: 0033:0x7fe71119de59 [ 125.621038][ T6108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.640665][ T6108] RSP: 002b:00007fe7120c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 125.649106][ T6108] RAX: ffffffffffffffda RBX: 00007fe711425fa0 RCX: 00007fe71119de59 [ 125.657100][ T6108] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 125.665102][ T6108] RBP: 00007fe711233e6f R08: 0000000000000000 R09: 0000000000000000 [ 125.673116][ T6108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.681104][ T6108] R13: 00007fe711426038 R14: 00007fe711425fa0 R15: 00007fff7cc7cac8 [ 125.689218][ T6108] [ 125.692868][ T6108] Kernel Offset: disabled [ 125.697217][ T6108] Rebooting in 86400 seconds..