last executing test programs: 2m47.402136749s ago: executing program 3 (id=36): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) setuid(0x0) r1 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x962c, 0x0, 0x40003, 0x2b2}, 0x0, &(0x7f0000000640)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000080)={0x0, 0x8000}, 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000080)="d3d0666d223e4686", 0x8) getrlimit(0xf, &(0x7f0000000280)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x4}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000002640)=""/21, 0x15}], 0x1, 0x53b0, 0x2000002) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000019300)=""/230, &(0x7f0000000000)=0xe6) 2m46.596962854s ago: executing program 3 (id=38): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4a, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000180), &(0x7f00000001c0)=0x4) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = socket$tipc(0x1e, 0x2, 0x0) getpeername$tipc(r6, &(0x7f00000000c0)=@name, &(0x7f0000000280)=0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000540)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0xee00, 0x0) 2m45.097630085s ago: executing program 3 (id=40): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$ITER_CREATE(0x1d, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd290747bcbfe915cef1698d0d2c909ab1ad34e193a81d3e2cb6314ddd679f6e3b23ea7f34661692a7b17326e768c94703de7a95b670d9bf2686"], &(0x7f0000000000)='GPL\x00'}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) unshare(0x3c000280) writev(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) syz_genetlink_get_family_id$nl80211(0x0, r3) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 2m36.631125703s ago: executing program 3 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x10, 0x701, 0x0, 0xffffffff, {0xa}}, 0x14}}, 0x20008080) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xcd9}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x108, 0x0, 0x0, &(0x7f0000000200), 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_devices(r5, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) pwritev(r5, &(0x7f0000000400)=[{&(0x7f0000000040)='9G', 0x2}, {0x0}], 0x2, 0xffffff01, 0xa) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x100019b, &(0x7f0000000100), 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") 2m33.936907586s ago: executing program 3 (id=59): socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m29.921846546s ago: executing program 3 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) shutdown(r4, 0x1) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000000000)='./file0/file0\x00', 0x5000, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$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") 2m13.808122529s ago: executing program 32 (id=65): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = getpid() ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x6}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x7, @empty}}, 0x0, 0x7fc, 0x0, 0x0, 0x8a, 0x0, 0x3}, 0x9c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) shutdown(r4, 0x1) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000000000)='./file0/file0\x00', 0x5000, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$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") 37.611827441s ago: executing program 0 (id=250): set_mempolicy(0x4005, &(0x7f0000000000)=0x11, 0x4) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x442, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r3, 0x0, 0x8804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa04, 0x163c, 0xf4240, 0x2, 0xd59f83, 0x19f2, 0x3f, 0x19ef, 0x3, 0x7f, 0x2800, 0x2801, 0x80200002, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xd1, 0x9}}) 36.371612449s ago: executing program 0 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) setfsuid(0xee00) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000600)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) fstat(r2, &(0x7f0000000340)) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000000)={0x80000000, 0x100, "9a9c01d78e8a02e5ebf73d3a7cf26c7ed280337eedc1e26eff5b96f8a8a5db4d", 0xffff, 0x8, 0xfffffffffffff840, 0x0, 0x4, 0x8, 0xa6, 0x7ff, [0xd2e4, 0x1, 0x4, 0x4]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)=0x4, 0x12) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3d8, 0x1e8, 0x98, 0x0, 0x1e8, 0x150, 0x340, 0x340, 0x340, 0x340, 0x340, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x69}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xd14bdc4, {0x8}}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x0, 0x0, 0x70}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xff, 0x0, 'syzkaller0\x00', 'geneve1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x438) ioctl$SIOCSIFHWADDR(r1, 0x8947, &(0x7f00000002c0)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 34.094919409s ago: executing program 0 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") read(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setgroups(0x0, 0x0) 33.062787131s ago: executing program 0 (id=258): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{0x0}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x4, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 32.204363722s ago: executing program 0 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$eJzsmD9P+kAYx7/X8if88ktw1UUTScDB0hY1MjgwO2ii0bhJpBK0iIEOwGZ8Ec6+AmfiwvvQQZ0cxM3Joebawx4oYuI/jM9neO57dw/Hc0+Tb5OCIIg/y831w9VZMhHj+j8SiIr1WzXIUaT8Vvxx5qK0cn6i31+22svZ/vMYANd9//+HALRzKhwxd93eXyfEuA6lq8Py/iYYNKG3oWBDaAsMW0LvSbrC8zVtt2Rb2k7FLnCh82DwYPKQ6a+vc8RQkOpj0n6t0dzP27ZV/UIxrH+dnIIlqT75eXV7owf9gwEFhtAZMKwJvYhotzd+S6T7T4SC89Vvvv/vFuPxITlhjEqpJD5BMHBxFwNGo56fEoE/uacMScmfQpJ/pJ3yYbrWaM6WyvmiVbQOTDOzoM/p+ryZ9ozIj2/4X8zzp3/S+eEBuREWQT3vOFXDj89zsx6FUzVfc9yI538KUtN+1UysyXjvgzE2xYeUChwPrJYgCIIgCIIgCIIgCIIgCOIjTIJ5X0F7yL5YMle97KcAAAD//5Z1cak=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 14.82632249s ago: executing program 33 (id=264): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80800) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x40084504, &(0x7f0000ffcffc)) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2a}, 0x1, 0x0, 0x0, 0x840}, 0x2600d0d5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) 14.728691077s ago: executing program 4 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) getresuid(&(0x7f0000000180), 0x0, 0x0) fstat(r2, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x89, 0x0, &(0x7f0000000080)) 12.463333251s ago: executing program 4 (id=300): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}]}, 0x58}}, 0x4000010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0xe}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x5, 0x5e6, @ipv4={'\x00', '\xff\xff', @remote}, 0xf39f}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) writev(r5, 0x0, 0x0) close_range(r4, r5, 0x0) 10.701510424s ago: executing program 4 (id=303): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x77f, &(0x7f0000000600)="$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") r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x8b6f3000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@bh}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() pidfd_send_signal(0xffffffffffffffff, 0x7, 0x0, 0x3) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000807119b600000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) setsockopt$inet6_opts(r3, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\n'], 0x58) sendmmsg$inet6(r3, &(0x7f0000004240)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x1c, 0x0}}], 0x1, 0x4) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 9.837488502s ago: executing program 2 (id=304): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000300)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x3459, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x100}, {0xa, 0x4e26, 0x10007, @loopback, 0x1}, r6, 0x8}}, 0x48) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x50, 0x1, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x27a99fdd470f5961}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000001, 0x2172, 0xffffffffffffffff, 0x0) futex(&(0x7f0000004000)=0x2, 0x8d, 0x2, 0x0, 0x0, 0x82) write(r0, &(0x7f0000000040), 0x0) 9.105598733s ago: executing program 5 (id=305): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @default, @bpq0, 0x25, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) socketpair(0x6, 0xa, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) syz_emit_ethernet(0x17c, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x16e, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x15a, 0x0, @opaque="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"}}}}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x54, 0x3, 0x9}) close(r2) 8.92106765s ago: executing program 1 (id=306): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x3d13, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x8000, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000000)={0xfffffffffffffe67, 0x5, 0x0, {0x0, 0x6, 0x7, 0xe42}}, 0x30) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010160, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$getregs(0xe, r2, 0x9, &(0x7f0000000080)=""/63) r5 = socket$alg(0x26, 0x5, 0x0) setfsuid(0xffffffffffffffff) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200), 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000180)='jfs\x00', 0x400080, &(0x7f00000001c0)='discard') 8.162305721s ago: executing program 2 (id=307): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0d000000010001", 0x7) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r2, &(0x7f0000000b80), 0x0, 0x2f8, 0xfffffffd) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x8, 0x1, 0x2, {0x6, @pix_mp={0xa6, 0x1, 0x30364d54, 0x4, 0x5, [{0xc, 0x10001}, {0x100, 0x7}, {0x6, 0x2}, {0xdff, 0x4601}, {0x401, 0x2c}, {0x2, 0xdf}, {0xd, 0x3}, {0x800, 0x2}], 0x44, 0x2, 0x0, 0x2, 0x5}}, 0x80000000}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000400)={0x2, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x1d, 0x9, 0x5c}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000190001002dbd7000fbdbdf25022080030304fe0b00010000060015000400000008000f000400000008000200ac1414ffff000f001d00000008001e00ff01000008000200ac1414aa080007000000000008001e000200000006001c004e23000008000100e0000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) 7.150971138s ago: executing program 1 (id=308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d1e0be39af9faf44ad59cb6ad1c94490d970e811439edddc71c9b18946b559ce53bee0a1abe562fc3f3898e5826eda1962cf6e3c4c0ade52151923a70b46eacfc1aaaebcf156e549e884bcabc1333f344f31cd30cd93cb2814e0dbc24a7a107e295e86e09283c825fe177c89c6385f68f2c843cffffffff15539bab6142ceed9265ba989d1a283fc4ffc83f3a7a6c746823e656ad78f3b5a336cdbd83dad59e0debb36b4ea5e658e253f01637cc03f704a08019f95b92fffffffff8dd21552d6967ab1b01e5d52a5793eb179deee4572770a5197127b090287bca2a4eaa1705b42c16968d0201d3ba3cc8000000657ea095f152b1b6a1e6ad8d24ad17f649ccc23d4ecbcdb5620cc48f95f563c2230f859d196e6c4f00b8e3a7b01fcb1d79dcc09b7a854ec8c31dd27ff9b4a2864e1dcaf719d20b56769d51228ecc1915fb8c8b598c11b3c296b05f9c5355fc6f19a7b28f5ae9a0d0804ccc5716cfac0246ddffa2f12077a02a959aa1b74373c38b2bcc90743b80666eae25dea73e127263b8fdbc64fe862b994ca8473d0000000000000000", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 6.003116957s ago: executing program 2 (id=309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0d000000010001", 0x7) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f0000000040)="964a62aa320761923e3162153e3ab851227e8ae9cf32e0de3125dad2335c9e45e2b4c189706895847b2036", 0x2b}, {&(0x7f0000000740)="68c3c0f0b1f3d0e38e89e7cf6fe77dfd4ca5711389d8857ec13a1943f392ffd08bcc3340ede8e3426c4c6b5d0435033551a70ad9986044dcd56e4530658db43afe571046444d00553f3dab49a874e26ecb1fa265e9146feca0c43124e5b304c62daf55915fb4ec7ace98d45a535cb769f6c037d2e95959b3ee526f4a628cc4f21473992f273725b2ac", 0x89}, {&(0x7f0000000980)="513a74ba0136b72278dd35eb0e75b057a1e300b682d39729186c171bfa89618526335d3a867e5d7d0ac18f061899f4bb3daf2aefa483fab1dd0fb86bf81c4129847191684d85cc4502b527da727b1093b1b9888e49cb5f21f3d10570b64c5a7864df5cc738bc603c18b7eaeb033958688be70d798b0d336c346af5722dc1ab32aa10f66b71330b99ebff88f87ff853c2b9e76cdce87c429f22cd74ab50df5e93659e1ea5ec4ed4e19face893862e21c892846313fd3c6d6d2241707a4bcbdf13e6934b570bb615d40660baf5c45960f69ea950c68af2a51aee6c679885", 0xdd}, {&(0x7f0000001180)="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", 0x600}, {&(0x7f00000008c0)="8b9f29984846719fd0bd6cd550ef39745e75f02f76d0d83ab1a503951d9650cf713e472009674ca6c2dd11466501e6acd08d79300e802a89582daaa3daa3158fdfc35de82e48f778fe10ffb2260ab8e6f3efe3cf62a917b6f24b966937266fa3f6", 0x61}, {0x0}], 0x7, 0x2f8, 0xfffffffd) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x8, 0x1, 0x2, {0x6, @pix_mp={0xa6, 0x1, 0x30364d54, 0x4, 0x5, [{0xc, 0x10001}, {0x100, 0x7}, {0x6, 0x2}, {0xdff, 0x4601}, {0x401, 0x2c}, {0x2, 0xdf}, {0xd, 0x3}, {0x800, 0x2}], 0x44, 0x2, 0x0, 0x2, 0x5}}, 0x80000000}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000400)={0x2, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x1d, 0x9, 0x5c}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000190001002dbd7000fbdbdf25022080030304fe0b00010000060015000400000008000f000400000008000200ac1414ffff000f001d00000008001e00ff01000008000200ac1414aa080007000000000008001e000200000006001c004e23000008000100e0000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) 5.991767176s ago: executing program 5 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x4000) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 3.456729787s ago: executing program 5 (id=313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @multicast1}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x807ff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newlink={0x48, 0x10, 0x401, 0x0, 0x4, {0x0, 0x0, 0x0, r6, 0x10886}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r8, 0x10820, 0x343}}}}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x85, 0x0, 0x0) 3.381101131s ago: executing program 1 (id=314): userfaultfd(0x801) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000140)={0x2, 'veth0_to_bond\x00', {0x8}, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1a3842, 0x5) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000140), 0x21041, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xe) ioctl$VT_SETMODE(r1, 0x80047437, 0x0) pipe(0x0) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, 0x0, 0x24040808) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) 3.332030679s ago: executing program 2 (id=315): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0d000000010001", 0x7) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r2, &(0x7f0000000b80), 0x0, 0x2f8, 0xfffffffd) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x8, 0x1, 0x2, {0x6, @pix_mp={0xa6, 0x1, 0x30364d54, 0x4, 0x5, [{0xc, 0x10001}, {0x100, 0x7}, {0x6, 0x2}, {0xdff, 0x4601}, {0x401, 0x2c}, {0x2, 0xdf}, {0xd, 0x3}, {0x800, 0x2}], 0x44, 0x2, 0x0, 0x2, 0x5}}, 0x80000000}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000400)={0x2, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x1d, 0x9, 0x5c}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000190001002dbd7000fbdbdf25022080030304fe0b00010000060015000400000008000f000400000008000200ac1414ffff000f001d00000008001e00ff01000008000200ac1414aa080007000000000008001e000200000006001c004e23000008000100e0000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) 2.086524875s ago: executing program 5 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) connect$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 1.999772884s ago: executing program 4 (id=317): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) setresgid(0xee00, 0xee00, 0x0) r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom$llc(r4, 0x0, 0x0, 0x40000140, 0x0, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x200401) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) 1.394648955s ago: executing program 2 (id=318): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="0d000000010001", 0x7) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x7) r4 = socket$inet_icmp(0x2, 0x2, 0x1) pwritev(r2, &(0x7f0000000b80)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f0000000040)="964a62aa320761923e3162153e3ab851227e8ae9cf32e0de3125dad2335c9e45e2b4c189706895847b2036", 0x2b}, {&(0x7f0000000740)="68c3c0f0b1f3d0e38e89e7cf6fe77dfd4ca5711389d8857ec13a1943f392ffd08bcc3340ede8e3426c4c6b5d0435033551a70ad9986044dcd56e4530658db43afe571046444d00553f3dab49a874e26ecb1fa265e9146feca0c43124e5b304c62daf55915fb4ec7ace98d45a535cb769f6c037d2e95959b3ee526f4a628cc4f21473992f273725b2ac", 0x89}, {&(0x7f0000000980)="513a74ba0136b72278dd35eb0e75b057a1e300b682d39729186c171bfa89618526335d3a867e5d7d0ac18f061899f4bb3daf2aefa483fab1dd0fb86bf81c4129847191684d85cc4502b527da727b1093b1b9888e49cb5f21f3d10570b64c5a7864df5cc738bc603c18b7eaeb033958688be70d798b0d336c346af5722dc1ab32aa10f66b71330b99ebff88f87ff853c2b9e76cdce87c429f22cd74ab50df5e93659e1ea5ec4ed4e19face893862e21c892846313fd3c6d6d2241707a4bcbdf13e6934b570bb615d40660baf5c45960f69ea950c68af2a51aee6c679885", 0xdd}, {&(0x7f0000001180)="00319c5137403821fce2e13e0acf3244b78079f1894f7c60304a020331c3742a46a7bc35c8fea1d0a69fa0752ada5d22fe89dd20a43ad0c6c62a28e8f8e44f3a764a6868a0aaa5e483938040123610f13255ff1a849835d4e98865180e0f7c3f608e29d9b0cf13962d41277181477dd86424029e594cbf6db11326baffb5c547ac0f65deadf59b9310bcf481aeaa23d523b1c23ed55fe8d56fc031267e690c5de8e2575dbd7fdb7d6b3a0720748d7e88225b50b7cd4add40b9da52f6d57a3f7e871ffc3c0d56390ce64ff58bae11309932e864848668bebc308d49ad67e1d9265df5e0ee087fee71e7b9c1ea825ae4aea6c4edab71577259dbcde53add6ca33cf9157fd6b280728970ced469d87c2abdb15fb8b111ae4b9b5d696741713e4a88a799f4049ad6ec6c0f21d01641764623b10135e597578bff1daccb0e6313039b0419ec1c8e506ad493452b26367d5a970795a1ca6f9cccb69265ff0a8fa22c06fbba49ca1cc4922e76515165cc47a3302bb2c89e94b106cbb9a51e5c5d8fbc2e3005070254dc1f5796c9803ed6f93f27ccd342c3183473f9101b7e8387c64417906161ed2e7ae3e2874dcfe99277854d866d54e9c50a04a8c26ef02ffae7088e1cd414d84516163d62adab58668bc79af6ebff590445129a48fe07df76b14a8801becf71fd1175f22864f83f1f94a284580706d65a79b3fa0ad3b84ae20152387160ac5a885ad4b4f8fd9b5ae52e4b02cf5eb39e7c9ecf466b0f7abcfc5faa4c8644e41cc50eebb8087faad8bcbd092a9c8e2c3f5ba68d024116818a0c06d0a61a50aa86ab224931190c1933a6e9468e84193bb1ee3b2efcef9ffde576a5805bc8a4e6d80aa7bdc99974a409d9c2e7e38675acd2199824c279785582284071e9d8e7e7909c3682ac6a591b4937bbb2bbb70d25ab3d24a2e681bfb278222534b571353be36dbe18f68d915b90ba98b8776c907be586634fcd6aec65ddf90eb6e6dbb04605b8d9a031e9e9e0717778c06db21e726e250584c7518868aa0e2cd374a95bc9ad4e9fd923563c80b68a99876d3ac3fda5d0e5e7e5b25a8b76a92bf18b67b065c35635f71f3412f42dd7618a7594c11779a5669a8d8f4bf470d425acd321cc9bc1f4b6abb596609a28cd2df8dd34eac86b8483ca1b46522d11b995e3661f7c7d35bf4a1874bb020004e4f1b5776b08fc1cdd1d7b24feff46f79f4a253fa304f0ed3160c49ecbc308d661a06232bb8155f78756431b3201b51547234a8f7d7b7a46a8060534e3498f97f96e6423eb0ecd7fe82835a05836677f5c3b57b7d4a32ab4fca8f9362bade6e8f57dbc3b4a12ffab7f3a75aa5c8c9ceb33e69eb432b55b97aa1892c51ebc5131249c3fe299a34fdbb7bfa45ad708463d0134a6f072b921c74a455d1a90d1c63ea44d539f47ec1fe2e1c199e93ed4bf077ccfb118ce9cb02b1fb4c86e3282441ded2e7878f8bc992acd5addb98d2542ef14e0efa649a89a5d90bba3fd3b3aa45bfc9cbfa3be21259f060750f3b49d4011da17b6fa9c045cc67df976f3803e924ca65c1a3c6e2553d7ae73442348744de305372926d817628477b1d27422995a2c25eb4cf59e57a26d8b00a730ae467f05350cece976a09d1a06720e4c9bdcd972d3504ee71daabad6ed3608464b65d49b9dc9157e73969478a131594fac72690e68a2c9dbd00f5419ef2ba4e9d529925c8e75d984df30eb0a533d030e1e009575ad1bca2529de887430cfda0c3e733e7a72968618ca8034eb11396b0eb3f2517df9b3ef5dfe98655eebed2bdfda4249e963d802c5d483cf8da1f9b8267b99657aa035461ea94982368f6f81335b985f3d2ca41554283fc152046e8cc6a36d97b967d44ea1c5bb17bf631482f585a4e5b287cf1068ff88ce743fdf2aa7303454caab6185f0be99a92dab64de294e0bb43b7897e782edd3e9a90da69279353da1254490acbde8f09108eb113f61bf160a2f51d1be6ec23a19962337b53d91496f4d322eea20d33f0b229ed18d549ec8ee9308b6b76e649bdf7a2005abc4494b69b98d524080876fb271961d56574ff36908598ee26ddfc1fd867ab4ca70acdefff3fdf0a79505352872619658360fd416dc99f8aa48a1a425317b3503be55cd0a37e9d6b9712697001c1347dac4441b71adb9506ac3", 0x600}, {&(0x7f00000008c0)="8b9f29984846719fd0bd6cd550ef39745e75f02f76d0d83ab1a503951d9650cf713e472009674ca6c2dd11466501e6acd08d79300e802a89582daaa3daa3158fdfc35de82e48f778fe10ffb2260ab8e6f3efe3cf62a917b6f24b966937266fa3f6", 0x61}], 0x6, 0x2f8, 0xfffffffd) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000280)={0x8, 0x1, 0x2, {0x6, @pix_mp={0xa6, 0x1, 0x30364d54, 0x4, 0x5, [{0xc, 0x10001}, {0x100, 0x7}, {0x6, 0x2}, {0xdff, 0x4601}, {0x401, 0x2c}, {0x2, 0xdf}, {0xd, 0x3}, {0x800, 0x2}], 0x44, 0x2, 0x0, 0x2, 0x5}}, 0x80000000}) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000400)={0x2, @private=0xa010101, 0x4e20, 0x2, 'wlc\x00', 0x1d, 0x9, 0x5c}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6c000000190001002dbd7000fbdbdf25022080030304fe0b00010000060015000400000008000f000400000008000200ac1414ffff000f001d00000008001e00ff01000008000200ac1414aa080007000000000008001e000200000006001c004e23000008000100e0000001"], 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r6}, 0xc) 1.064958172s ago: executing program 5 (id=319): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x70, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @local}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x37}}]}, 0x70}}, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000000080), 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 955.484447ms ago: executing program 1 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f0000001cc0), 0x0, 0x8000, 0x0, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x194, &(0x7f0000000640)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r4, 0x0, 0x0) read$FUSE(r4, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 50.12164ms ago: executing program 1 (id=321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x14) r3 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r4, 0x0, 0x0}, 0x20) chdir(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) connect$bt_rfcomm(r5, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. [ 73.280919][ T5833] cgroup: Unknown subsys name 'net' [ 73.426968][ T5833] cgroup: Unknown subsys name 'cpuset' [ 73.435878][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.914396][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.178020][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.193213][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.203176][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.210558][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.213834][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.223810][ T5860] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.225947][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.237163][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.242463][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.248666][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.260912][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.268886][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.278622][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.285873][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.289091][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.298721][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.305286][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.310957][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.316730][ T5860] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.325057][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.337784][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.346322][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.353588][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.372523][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.392276][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.055599][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 78.129632][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.250247][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 78.263711][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 78.288495][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 78.428778][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.436156][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.443649][ T5845] bridge_slave_0: entered allmulticast mode [ 78.451305][ T5845] bridge_slave_0: entered promiscuous mode [ 78.503074][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.510637][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.518262][ T5845] bridge_slave_1: entered allmulticast mode [ 78.525864][ T5845] bridge_slave_1: entered promiscuous mode [ 78.540125][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.547415][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.555154][ T5847] bridge_slave_0: entered allmulticast mode [ 78.562933][ T5847] bridge_slave_0: entered promiscuous mode [ 78.608187][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.615675][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.622840][ T5847] bridge_slave_1: entered allmulticast mode [ 78.631986][ T5847] bridge_slave_1: entered promiscuous mode [ 78.730431][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.756086][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.765456][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.772758][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.780273][ T5849] bridge_slave_0: entered allmulticast mode [ 78.788270][ T5849] bridge_slave_0: entered promiscuous mode [ 78.796334][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.803748][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.810955][ T5846] bridge_slave_0: entered allmulticast mode [ 78.818809][ T5846] bridge_slave_0: entered promiscuous mode [ 78.829841][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.855601][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.865741][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.873061][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.881354][ T5849] bridge_slave_1: entered allmulticast mode [ 78.889337][ T5849] bridge_slave_1: entered promiscuous mode [ 78.896602][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.904155][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.911357][ T5846] bridge_slave_1: entered allmulticast mode [ 78.919299][ T5846] bridge_slave_1: entered promiscuous mode [ 78.939971][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.947297][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.955051][ T5848] bridge_slave_0: entered allmulticast mode [ 78.962804][ T5848] bridge_slave_0: entered promiscuous mode [ 79.038368][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.045702][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.052971][ T5848] bridge_slave_1: entered allmulticast mode [ 79.060917][ T5848] bridge_slave_1: entered promiscuous mode [ 79.071421][ T5847] team0: Port device team_slave_0 added [ 79.107096][ T5845] team0: Port device team_slave_0 added [ 79.129022][ T5847] team0: Port device team_slave_1 added [ 79.139377][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.152979][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.165286][ T5845] team0: Port device team_slave_1 added [ 79.210659][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.222927][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.247074][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.257807][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.264810][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.293494][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.346477][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.357109][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.364374][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.390302][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.427780][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.434957][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.435376][ T5854] Bluetooth: hci3: command tx timeout [ 79.460991][ T5865] Bluetooth: hci1: command tx timeout [ 79.461203][ T5865] Bluetooth: hci2: command tx timeout [ 79.467271][ T5856] Bluetooth: hci0: command tx timeout [ 79.473029][ T5861] Bluetooth: hci4: command tx timeout [ 79.480775][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.522720][ T5849] team0: Port device team_slave_0 added [ 79.532000][ T5846] team0: Port device team_slave_0 added [ 79.539339][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.546848][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.572802][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.601273][ T5848] team0: Port device team_slave_0 added [ 79.610181][ T5849] team0: Port device team_slave_1 added [ 79.618765][ T5846] team0: Port device team_slave_1 added [ 79.636236][ T5848] team0: Port device team_slave_1 added [ 79.716473][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.723641][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.749570][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.761994][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.769290][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.795266][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.842422][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.849444][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.875601][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.895886][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.902821][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.929117][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.946753][ T5847] hsr_slave_0: entered promiscuous mode [ 79.954286][ T5847] hsr_slave_1: entered promiscuous mode [ 79.963080][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.970129][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.996362][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.027466][ T5845] hsr_slave_0: entered promiscuous mode [ 80.034597][ T5845] hsr_slave_1: entered promiscuous mode [ 80.041080][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 80.047135][ T5845] Cannot create hsr debugfs directory [ 80.063542][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.070500][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.097327][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.152288][ T5849] hsr_slave_0: entered promiscuous mode [ 80.163078][ T5849] hsr_slave_1: entered promiscuous mode [ 80.170015][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 80.175796][ T5849] Cannot create hsr debugfs directory [ 80.311365][ T5848] hsr_slave_0: entered promiscuous mode [ 80.318304][ T5848] hsr_slave_1: entered promiscuous mode [ 80.325438][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 80.331331][ T5848] Cannot create hsr debugfs directory [ 80.351149][ T5846] hsr_slave_0: entered promiscuous mode [ 80.357934][ T5846] hsr_slave_1: entered promiscuous mode [ 80.364969][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 80.370741][ T5846] Cannot create hsr debugfs directory [ 80.999669][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.015278][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.025723][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.038112][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.117299][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.132293][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.150991][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.163168][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.281348][ T5845] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.305581][ T5845] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.317892][ T5845] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.329516][ T5845] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.460469][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.482411][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.500531][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.514628][ T5865] Bluetooth: hci0: command tx timeout [ 81.515169][ T5165] Bluetooth: hci2: command tx timeout [ 81.520112][ T5861] Bluetooth: hci3: command tx timeout [ 81.531718][ T5856] Bluetooth: hci4: command tx timeout [ 81.537269][ T5854] Bluetooth: hci1: command tx timeout [ 81.552625][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.565890][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.672417][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.769753][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.777382][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.820709][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.835280][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.864553][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.880295][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.887469][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.905396][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.978566][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.072993][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.092827][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.138160][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.145378][ T3526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.188600][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.195848][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.234752][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.303223][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.310450][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.352560][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.368597][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.375838][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.449376][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.527269][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.581280][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.588445][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.627612][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.634831][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.651194][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.699439][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.840446][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.882995][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.898364][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.905566][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.925952][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.933158][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.269078][ T5849] veth0_vlan: entered promiscuous mode [ 83.291197][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.381710][ T5849] veth1_vlan: entered promiscuous mode [ 83.445315][ T5847] veth0_vlan: entered promiscuous mode [ 83.471227][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.497280][ T5847] veth1_vlan: entered promiscuous mode [ 83.588412][ T5849] veth0_macvtap: entered promiscuous mode [ 83.594968][ T5854] Bluetooth: hci1: command tx timeout [ 83.594989][ T5856] Bluetooth: hci4: command tx timeout [ 83.606588][ T5854] Bluetooth: hci2: command tx timeout [ 83.606615][ T5854] Bluetooth: hci3: command tx timeout [ 83.606636][ T5854] Bluetooth: hci0: command tx timeout [ 83.629918][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.642850][ T5845] veth0_vlan: entered promiscuous mode [ 83.662927][ T5845] veth1_vlan: entered promiscuous mode [ 83.677590][ T5849] veth1_macvtap: entered promiscuous mode [ 83.710202][ T5847] veth0_macvtap: entered promiscuous mode [ 83.738627][ T5847] veth1_macvtap: entered promiscuous mode [ 83.759037][ T5846] veth0_vlan: entered promiscuous mode [ 83.791115][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.822655][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.838156][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.859652][ T5846] veth1_vlan: entered promiscuous mode [ 83.871357][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.897093][ T1118] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.906945][ T1118] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.936986][ T5845] veth0_macvtap: entered promiscuous mode [ 83.946705][ T115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.955767][ T115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.977737][ T3526] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.996524][ T5845] veth1_macvtap: entered promiscuous mode [ 84.004457][ T3526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.014020][ T3526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.052491][ T3526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.089830][ T5848] veth0_vlan: entered promiscuous mode [ 84.182894][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.195916][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.204388][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.207205][ T5846] veth0_macvtap: entered promiscuous mode [ 84.224109][ T5848] veth1_vlan: entered promiscuous mode [ 84.261629][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.313168][ T5846] veth1_macvtap: entered promiscuous mode [ 84.342934][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.354775][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.365988][ T77] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.375250][ T77] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.397378][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.399515][ T77] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.407974][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.424135][ T77] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.497815][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.512979][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.534082][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.547628][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.630986][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.722897][ T5848] veth0_macvtap: entered promiscuous mode [ 85.126329][ T3526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.205276][ T3526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.215570][ T199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.282799][ T5848] veth1_macvtap: entered promiscuous mode [ 85.345804][ T199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.526317][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.673516][ T5165] Bluetooth: hci3: command tx timeout [ 85.679632][ T5165] Bluetooth: hci2: command tx timeout [ 85.685462][ T5165] Bluetooth: hci1: command tx timeout [ 85.691020][ T5856] Bluetooth: hci0: command tx timeout [ 85.697060][ T5165] Bluetooth: hci4: command tx timeout [ 86.120633][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.327327][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.390809][ T5978] loop0: detected capacity change from 0 to 32768 [ 86.403145][ T5978] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.6 (5978) [ 86.440277][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.448947][ T5978] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 86.459337][ T5978] BTRFS info (device loop0): using crc32c checksum algorithm [ 86.466869][ T5978] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 86.478717][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.514479][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.713881][ T24] cfg80211: failed to load regulatory.db [ 86.722016][ T199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.747132][ T199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.392583][ T5978] BTRFS info (device loop0): rebuilding free space tree [ 87.426536][ T5978] BTRFS info (device loop0): disabling free space tree [ 87.433786][ T5978] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 87.443728][ T5978] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 87.469605][ T5978] BTRFS info (device loop0): enabling ssd optimizations [ 87.476687][ T5978] BTRFS info (device loop0): turning on async discard [ 87.483765][ T5978] BTRFS info (device loop0): enabling disk space caching [ 87.490826][ T5978] BTRFS info (device loop0): force clearing of disk cache [ 87.498076][ T5978] BTRFS info (device loop0): use zstd compression, level 3 [ 87.520742][ T199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.547595][ T199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.638877][ T6003] loop4: detected capacity change from 0 to 512 [ 87.722727][ T6003] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.756471][ T6003] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.777809][ T199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.791018][ T199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.954515][ T29] audit: type=1804 audit(1773837528.764:2): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6" name="/newroot/1/file1/bus" dev="loop0" ino=263 res=1 errno=0 [ 88.669485][ T5849] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 88.761439][ T29] audit: type=1800 audit(1773837529.384:3): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 88.878892][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.495690][ T6019] loop4: detected capacity change from 0 to 4096 [ 89.623795][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.771541][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.811785][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.065259][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.126251][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.169221][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.447676][ T6038] loop1: detected capacity change from 0 to 40427 [ 92.486247][ T6038] F2FS-fs (loop1): invalid crc value [ 92.548793][ T6043] capability: warning: `syz.0.13' uses deprecated v2 capabilities in a way that may be insecure [ 92.567590][ T6043] ======================================================= [ 92.567590][ T6043] WARNING: The mand mount option has been deprecated and [ 92.567590][ T6043] and is ignored by this kernel. Remove the mand [ 92.567590][ T6043] option from the mount to silence this warning. [ 92.567590][ T6043] ======================================================= [ 92.603785][ T6043] 9pnet_virtio: no channels available for device 127.0.0.1 [ 92.741390][ T6038] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 92.752899][ T6038] F2FS-fs (loop1): Start checkpoint disabled! [ 92.816560][ T6038] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 92.828890][ T6038] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 93.065441][ T6044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.086663][ T6044] batadv_slave_0: entered promiscuous mode [ 93.573837][ T1622] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 94.756648][ T1622] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 94.790587][ T1622] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 94.973663][ T1622] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.984770][ T1622] usb 3-1: Product: syz [ 95.333395][ T1622] usb 3-1: Manufacturer: syz [ 95.340921][ T1622] usb 3-1: SerialNumber: syz [ 95.403893][ T1622] usb 3-1: config 0 descriptor?? [ 95.444557][ T115] kworker/u8:5: attempt to access beyond end of device [ 95.444557][ T115] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 95.497403][ T1622] usb 3-1: can't set config #0, error -71 [ 95.539566][ T115] CPU: 1 UID: 0 PID: 115 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 95.539593][ T115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 95.539605][ T115] Workqueue: writeback wb_workfn (flush-7:1) [ 95.539644][ T115] Call Trace: [ 95.539655][ T115] [ 95.539664][ T115] dump_stack_lvl+0xe8/0x150 [ 95.539695][ T115] f2fs_handle_critical_error+0x37c/0x540 [ 95.539728][ T115] f2fs_write_end_io+0x1274/0x1740 [ 95.539778][ T115] __submit_merged_bio+0x256/0x700 [ 95.539811][ T115] __submit_merged_write_cond+0x3c9/0x4e0 [ 95.539845][ T115] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 95.539893][ T115] f2fs_write_data_pages+0x287e/0x34f0 [ 95.539920][ T115] ? unwind_next_frame+0xa5/0x23c0 [ 95.539939][ T115] ? lock_release+0x4b/0x3d0 [ 95.540001][ T115] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 95.540044][ T115] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 95.540098][ T115] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 95.540148][ T115] ? __lock_acquire+0x6b5/0x2cf0 [ 95.540194][ T115] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 95.540224][ T115] do_writepages+0x32e/0x550 [ 95.540254][ T115] ? reacquire_held_locks+0x104/0x190 [ 95.540275][ T115] ? writeback_sb_inodes+0x477/0x1a20 [ 95.540306][ T115] __writeback_single_inode+0x133/0x11a0 [ 95.540333][ T115] ? do_raw_spin_unlock+0xf5/0x210 [ 95.540362][ T115] writeback_sb_inodes+0x992/0x1a20 [ 95.540431][ T115] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 95.540453][ T115] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.540527][ T115] ? rcu_is_watching+0x15/0xb0 [ 95.540555][ T115] wb_writeback+0x456/0xb70 [ 95.540597][ T115] ? queue_io+0x211/0x4a0 [ 95.540640][ T115] ? __pfx_wb_writeback+0x10/0x10 [ 95.540660][ T115] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.540696][ T115] wb_workfn+0x414/0xf50 [ 95.540716][ T115] ? look_up_lock_class+0x57/0x110 [ 95.540750][ T115] ? __pfx_wb_workfn+0x10/0x10 [ 95.540771][ T115] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.540794][ T115] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.540835][ T115] ? process_one_work+0x8bb/0x1780 [ 95.540859][ T115] process_one_work+0x9ab/0x1780 [ 95.540904][ T115] ? __pfx_process_one_work+0x10/0x10 [ 95.540928][ T115] ? do_raw_spin_lock+0x12b/0x2f0 [ 95.540965][ T115] worker_thread+0xba8/0x11e0 [ 95.541006][ T115] kthread+0x388/0x470 [ 95.541026][ T115] ? __pfx_worker_thread+0x10/0x10 [ 95.541041][ T115] ? __pfx_kthread+0x10/0x10 [ 95.541062][ T115] ret_from_fork+0x51e/0xb90 [ 95.541090][ T115] ? __pfx_ret_from_fork+0x10/0x10 [ 95.541131][ T115] ? __switch_to+0xc7d/0x1450 [ 95.541159][ T115] ? __pfx_kthread+0x10/0x10 [ 95.541182][ T115] ret_from_fork_asm+0x1a/0x30 [ 95.541216][ T115] [ 95.810744][ T115] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 95.930596][ T6064] program syz.3.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.315648][ T1622] usb 3-1: USB disconnect, device number 2 [ 97.037856][ T6074] loop3: detected capacity change from 0 to 16 [ 97.093726][ T6074] erofs (device loop3): mounted with root inode @ nid 36. [ 97.117153][ T6074] syz.3.19: attempt to access beyond end of device [ 97.117153][ T6074] loop3: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 97.615720][ T29] audit: type=1800 audit(1773837538.394:4): pid=6074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.19" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 97.651969][ T6069] loop4: detected capacity change from 0 to 8 [ 98.201514][ T6071] loop2: detected capacity change from 0 to 2048 [ 98.574004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.045223][ T6071] EXT4-fs: error -4 creating inode table initialization thread [ 100.181949][ T6071] EXT4-fs (loop2): mount failed [ 100.552307][ T6089] warning: `syz.0.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.543334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 101.848618][ T6096] No such timeout policy "syz1" [ 103.694536][ T6109] hub 2-0:1.0: USB hub found [ 103.730657][ T6109] hub 2-0:1.0: 1 port detected [ 107.040650][ T6126] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 107.278120][ T6130] loop1: detected capacity change from 0 to 512 [ 107.670138][ T6131] loop0: detected capacity change from 0 to 16 [ 107.753896][ T6130] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 107.771893][ T6130] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 107.778596][ T6131] erofs (device loop0): mounted with root inode @ nid 36. [ 107.795453][ T6131] syz.0.31: attempt to access beyond end of device [ 107.795453][ T6131] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 107.869401][ T6131] syz.0.31: attempt to access beyond end of device [ 107.869401][ T6131] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 107.894783][ T6131] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 107.906312][ T6131] erofs (device loop0): read error -117 @ 1 of nid 89 [ 107.924636][ T29] audit: type=1800 audit(1773837548.764:5): pid=6131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.31" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 108.027499][ T6131] syz.0.31 (6131) used greatest stack depth: 18472 bytes left [ 108.277065][ T6130] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.291025][ T6130] EXT4-fs (loop1): 1 truncate cleaned up [ 108.298530][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.295737][ T6139] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.446161][ T6144] loop3: detected capacity change from 0 to 1024 [ 109.463134][ T6144] hfsplus: Unknown parameter 'Œ' [ 109.501836][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.256690][ T6165] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 112.285351][ T6167] loop2: detected capacity change from 0 to 64 [ 112.440511][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 113.759395][ T6178] tipc: Started in network mode [ 113.766550][ T6178] tipc: Node identity defae4c915d6, cluster identity 4711 [ 113.779074][ T6181] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 113.783964][ T6178] tipc: Enabled bearer , priority 0 [ 113.971165][ T6178] syzkaller0: entered promiscuous mode [ 114.078648][ T6178] syzkaller0: entered allmulticast mode [ 115.209673][ T6185] tipc: Resetting bearer [ 115.246214][ T6192] tipc: Resetting bearer [ 115.382041][ T6194] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 115.388810][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.397211][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 115.416129][ T6198] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15) [ 115.422770][ T6198] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.450380][ T6198] vhci_hcd vhci_hcd.0: Device attached [ 115.450974][ T6192] tipc: Disabling bearer [ 115.456463][ T6194] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(14) [ 115.468516][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 115.487656][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 115.502565][ T6194] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(17) [ 115.509186][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.518924][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 115.546813][ T6194] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 115.553447][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 115.562637][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 115.572211][ T24] tipc: Node number set to 3408717001 [ 115.590521][ T6194] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(22) [ 115.597147][ T6194] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 115.607993][ T6194] vhci_hcd vhci_hcd.0: Device attached [ 115.676024][ T6198] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.726891][ T808] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 115.776967][ T6214] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 115.852065][ T6213] loop4: detected capacity change from 0 to 2048 [ 115.924176][ T6213] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 116.313928][ T6216] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.908116][ T6222] process 'syz.2.49' launched './file0' with NULL argv: empty string added [ 117.313875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.621458][ T6209] vhci_hcd: connection closed [ 117.629094][ T6211] vhci_hcd: connection closed [ 117.634161][ T6205] vhci_hcd: connection closed [ 117.651979][ T6195] vhci_hcd: connection reset by peer [ 117.671238][ T6200] vhci_hcd: connection closed [ 117.671854][ T6202] vhci_hcd: connection closed [ 117.698695][ T199] vhci_hcd vhci_hcd.1: stop threads [ 117.720118][ T29] audit: type=1800 audit(1773837558.454:6): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.48" name="file0" dev="tmpfs" ino=66 res=0 errno=0 [ 117.862503][ T199] vhci_hcd vhci_hcd.1: release socket [ 117.956355][ T199] vhci_hcd vhci_hcd.1: disconnect device [ 118.042802][ T6194] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.071584][ T199] vhci_hcd vhci_hcd.1: stop threads [ 118.097121][ T199] vhci_hcd vhci_hcd.1: release socket [ 118.129789][ T199] vhci_hcd vhci_hcd.1: disconnect device [ 118.328961][ T199] vhci_hcd vhci_hcd.1: stop threads [ 119.041322][ T6231] random: crng reseeded on system resumption [ 119.152079][ T199] vhci_hcd vhci_hcd.1: release socket [ 119.218513][ T199] vhci_hcd vhci_hcd.1: disconnect device [ 119.435238][ T199] vhci_hcd vhci_hcd.1: stop threads [ 119.623108][ T199] vhci_hcd vhci_hcd.1: release socket [ 119.789426][ T199] vhci_hcd vhci_hcd.1: disconnect device [ 119.837272][ T199] vhci_hcd vhci_hcd.1: stop threads [ 119.843662][ T199] vhci_hcd vhci_hcd.1: release socket [ 120.478103][ T199] vhci_hcd vhci_hcd.1: disconnect device [ 120.532838][ T199] vhci_hcd vhci_hcd.1: stop threads [ 120.538165][ T199] vhci_hcd vhci_hcd.1: release socket [ 120.906615][ T199] vhci_hcd vhci_hcd.1: disconnect device [ 121.653768][ T6252] kernel profiling enabled (shift: 9) [ 121.754864][ T6252] loop3: detected capacity change from 0 to 512 [ 122.451350][ T6252] EXT4-fs (loop3): orphan cleanup on readonly fs [ 122.885726][ T6252] EXT4-fs warning (device loop3): ext4_enable_quotas:7236: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 122.950462][ T6252] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 122.957952][ T6252] EXT4-fs error (device loop3): ext4_ext_check_inode:521: inode #13: comm syz.3.55: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 122.963020][ T6248] loop2: detected capacity change from 0 to 512 [ 122.985118][ T6252] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 122.993337][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 123.009655][ C1] EXT4-fs (loop3): last error at time 1773837563: ext4_ext_check_inode:521: inode 13 [ 123.019501][ T6252] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.55: couldn't read orphan inode 13 (err -117) [ 123.031978][ T6252] loop3: lost filesystem error report for type 5 error -117 [ 123.065123][ T6252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 123.181065][ T6248] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 123.300918][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.514965][ T5989] IPVS: starting estimator thread 0... [ 123.614550][ T6260] IPVS: using max 27 ests per chain, 64800 per kthread [ 123.825072][ T24] usb usb36-port1: attempt power cycle [ 124.805659][ T6267] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 126.008778][ T6275] ip6erspan0: entered promiscuous mode [ 126.042871][ T24] usb usb36-port1: unable to enumerate USB device [ 126.465012][ T6283] misc userio: Invalid payload size [ 126.503675][ T6283] misc userio: Invalid payload size [ 126.811547][ T6284] Cannot find del_set index 2 as target [ 127.105366][ T6284] Zero length message leads to an empty skb [ 127.195282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.072704][ T6300] syz.2.67 (6300): /proc/6297/oom_adj is deprecated, please use /proc/6297/oom_score_adj instead. [ 129.199930][ T29] audit: type=1326 audit(1773837569.874:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 129.804819][ T29] audit: type=1326 audit(1773837569.874:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 129.902170][ T29] audit: type=1326 audit(1773837569.884:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ee155cfce code=0x7ffc0000 [ 131.072032][ T29] audit: type=1326 audit(1773837569.884:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.315041][ T29] audit: type=1326 audit(1773837569.894:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.353649][ T29] audit: type=1326 audit(1773837569.914:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.378449][ T29] audit: type=1326 audit(1773837569.934:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.400901][ T29] audit: type=1326 audit(1773837569.934:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.427883][ T29] audit: type=1326 audit(1773837569.944:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.453161][ T29] audit: type=1326 audit(1773837569.954:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6297 comm="syz.2.67" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ee159c799 code=0x7ffc0000 [ 131.531479][ T6311] loop2: detected capacity change from 0 to 1024 [ 132.721506][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.730741][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.440666][ T6319] loop1: detected capacity change from 0 to 2048 [ 133.689980][ T6319] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.316300][ T6332] syz.1.72 uses obsolete (PF_INET,SOCK_PACKET) [ 134.624710][ T6338] loop2: detected capacity change from 0 to 16 [ 134.649408][ T6338] erofs (device loop2): mounted with root inode @ nid 36. [ 136.788174][ T5989] IPVS: starting estimator thread 0... [ 136.831466][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.895098][ T6351] IPVS: using max 39 ests per chain, 93600 per kthread [ 137.560168][ T6357] loop4: detected capacity change from 0 to 16 [ 137.570600][ T6357] erofs (device loop4): mounted with root inode @ nid 36. [ 137.584213][ T6356] syz.4.78: attempt to access beyond end of device [ 137.584213][ T6356] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 137.602111][ T6356] syz.4.78: attempt to access beyond end of device [ 137.602111][ T6356] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 137.615727][ T6356] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 137.626963][ T6356] erofs (device loop4): read error -117 @ 1 of nid 89 [ 137.634549][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 137.634561][ T29] audit: type=1800 audit(1773837578.484:31): pid=6356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.78" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 137.660458][ T6356] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 137.671849][ T6356] erofs (device loop4): read error -117 @ 1 of nid 89 [ 138.625560][ T6370] loop4: detected capacity change from 0 to 16 [ 139.224433][ T6370] erofs (device loop4): mounted with root inode @ nid 36. [ 139.385203][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 139.964829][ T6377] loop2: detected capacity change from 0 to 1024 [ 140.789724][ T6384] loop0: detected capacity change from 0 to 16 [ 141.433681][ T6384] erofs (device loop0): mounted with root inode @ nid 36. [ 141.445626][ T6383] syz.0.87: attempt to access beyond end of device [ 141.445626][ T6383] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 141.461686][ T6383] syz.0.87: attempt to access beyond end of device [ 141.461686][ T6383] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 141.475231][ T6383] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 141.486971][ T6383] erofs (device loop0): read error -117 @ 1 of nid 89 [ 141.503114][ T29] audit: type=1800 audit(1773837582.344:32): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.87" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 141.866072][ T13] hfsplus: b-tree write err: -5, ino 25 [ 141.909512][ T13] hfsplus: b-tree write err: -5, ino 4 [ 142.043851][ T13] hfsplus: b-tree write err: -5, ino 2 [ 142.400848][ T6394] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 142.892681][ T6399] ufs: You didn't specify the type of your ufs filesystem [ 142.892681][ T6399] [ 142.892681][ T6399] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 142.892681][ T6399] [ 142.892681][ T6399] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 142.924422][ T6399] ufs: ufstype=old is supported read-only [ 142.935027][ T6399] ufs: ufs_fill_super(): bad magic number [ 143.585708][ T1622] IPVS: starting estimator thread 0... [ 143.763650][ T6406] IPVS: using max 31 ests per chain, 74400 per kthread [ 144.417773][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.430828][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.439752][ T5854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.450245][ T5854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.461402][ T5854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.001916][ T6411] chnl_net:caif_netlink_parms(): no params data found [ 145.105799][ T6408] loop0: detected capacity change from 0 to 131072 [ 145.162653][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.807900][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.818899][ T6411] bridge_slave_0: entered allmulticast mode [ 145.854277][ T6411] bridge_slave_0: entered promiscuous mode [ 145.875460][ T6408] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 146.362915][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.406223][ T6408] XFS (loop0): Starting recovery (logdev: internal) [ 146.410961][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.447556][ T6411] bridge_slave_1: entered allmulticast mode [ 146.471852][ T6408] XFS (loop0): Ending recovery (logdev: internal) [ 146.495063][ T6411] bridge_slave_1: entered promiscuous mode [ 146.676475][ T6440] loop2: detected capacity change from 0 to 16 [ 146.686036][ T5854] Bluetooth: hci5: command tx timeout [ 147.274412][ T6440] erofs (device loop2): mounted with root inode @ nid 36. [ 147.854603][ T5849] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 148.167815][ T6450] loop2: detected capacity change from 0 to 16 [ 148.203109][ T6450] erofs (device loop2): mounted with root inode @ nid 36. [ 148.613410][ T6448] syz.2.99: attempt to access beyond end of device [ 148.613410][ T6448] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 148.647446][ T6448] syz.2.99: attempt to access beyond end of device [ 148.647446][ T6448] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 148.661264][ T6448] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 148.673426][ T6448] erofs (device loop2): read error -117 @ 1 of nid 89 [ 148.685819][ T29] audit: type=1800 audit(1773837589.524:33): pid=6448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.99" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 148.823910][ T6411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.873462][ T5854] Bluetooth: hci5: command tx timeout [ 148.897418][ T6411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.427465][ T6458] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 149.494468][ T6411] team0: Port device team_slave_0 added [ 149.515686][ T6411] team0: Port device team_slave_1 added [ 149.991491][ T6468] Bluetooth: MGMT ver 1.23 [ 150.765245][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.883520][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 150.912944][ T6411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.951997][ T6411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.963341][ T5854] Bluetooth: hci5: command tx timeout [ 150.982052][ T6411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 151.177015][ T6411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.144236][ T6411] hsr_slave_0: entered promiscuous mode [ 152.151673][ T6411] hsr_slave_1: entered promiscuous mode [ 152.159079][ T6411] debugfs: 'hsr0' already exists in 'hsr' [ 153.062900][ T6411] Cannot create hsr debugfs directory [ 153.071853][ T5854] Bluetooth: hci5: command tx timeout [ 156.877054][ T6507] loop0: detected capacity change from 0 to 16 [ 157.503430][ T6507] erofs (device loop0): mounted with root inode @ nid 36. [ 157.521560][ T6506] syz.0.114: attempt to access beyond end of device [ 157.521560][ T6506] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 157.540541][ T6506] syz.0.114: attempt to access beyond end of device [ 157.540541][ T6506] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 157.554337][ T6506] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 157.566155][ T6506] erofs (device loop0): read error -117 @ 1 of nid 89 [ 157.575970][ T29] audit: type=1800 audit(1773837598.414:34): pid=6506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.114" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 157.765646][ T6512] mmap: syz.1.115 (6512) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 158.128949][ T6411] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.207213][ T6514] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 158.560592][ T6411] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.657553][ T6523] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 159.169962][ T6411] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.213606][ T6411] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.472902][ T6543] loop0: detected capacity change from 0 to 16 [ 159.531151][ T6543] erofs (device loop0): mounted with root inode @ nid 36. [ 159.547246][ T6543] syz.0.121: attempt to access beyond end of device [ 159.547246][ T6543] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 159.597251][ T6543] syz.0.121: attempt to access beyond end of device [ 159.597251][ T6543] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 159.628200][ T6543] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 159.639681][ T6543] erofs (device loop0): read error -117 @ 1 of nid 89 [ 159.657666][ T6543] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 159.669104][ T6543] erofs (device loop0): read error -117 @ 1 of nid 89 [ 159.687078][ T29] audit: type=1800 audit(1773837600.494:35): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.121" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 160.965037][ T5989] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 161.425662][ T5989] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.072077][ T5989] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.129728][ T5989] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 162.140420][ T6411] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.157350][ T5989] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.171541][ T5989] usb 3-1: Product: syz [ 162.179740][ T5989] usb 3-1: Manufacturer: syz [ 162.184944][ T5989] usb 3-1: SerialNumber: syz [ 162.232413][ T5989] usb 3-1: config 0 descriptor?? [ 162.383479][ T6562] loop1: detected capacity change from 0 to 16 [ 162.834473][ T6562] erofs (device loop1): mounted with root inode @ nid 36. [ 162.852418][ T6561] syz.1.127: attempt to access beyond end of device [ 162.852418][ T6561] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 162.870284][ T6561] syz.1.127: attempt to access beyond end of device [ 162.870284][ T6561] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 162.884647][ T6561] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 162.895952][ T6561] erofs (device loop1): read error -117 @ 1 of nid 89 [ 162.904766][ T29] audit: type=1800 audit(1773837603.744:36): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.127" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 162.929802][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.984400][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.991598][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.009579][ T5989] usb 3-1: can't set config #0, error -71 [ 163.036658][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.043870][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.065290][ T5989] usb 3-1: USB disconnect, device number 3 [ 163.302035][ T6570] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 166.108387][ T6576] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 166.206978][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.290889][ T6598] loop2: detected capacity change from 0 to 16 [ 168.510424][ T6598] erofs (device loop2): mounted with root inode @ nid 36. [ 168.522570][ T6598] syz.2.134: attempt to access beyond end of device [ 168.522570][ T6598] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 168.550324][ T6598] syz.2.134: attempt to access beyond end of device [ 168.550324][ T6598] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 168.564476][ T6598] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 168.576693][ T6598] erofs (device loop2): read error -117 @ 1 of nid 89 [ 168.583755][ T29] audit: type=1800 audit(1773837609.434:37): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.134" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 170.158923][ T6623] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 170.247501][ T6411] veth0_vlan: entered promiscuous mode [ 170.300795][ T6411] veth1_vlan: entered promiscuous mode [ 170.431837][ T6411] veth0_macvtap: entered promiscuous mode [ 170.445353][ T6411] veth1_macvtap: entered promiscuous mode [ 170.487710][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.678509][ T6628] loop2: detected capacity change from 0 to 16 [ 170.708918][ T6628] erofs (device loop2): mounted with root inode @ nid 36. [ 170.860948][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.131060][ T6627] syz.2.142: attempt to access beyond end of device [ 171.131060][ T6627] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 171.151973][ T6627] syz.2.142: attempt to access beyond end of device [ 171.151973][ T6627] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 171.166216][ T6627] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 171.178173][ T6627] erofs (device loop2): read error -117 @ 1 of nid 89 [ 171.186438][ T29] audit: type=1800 audit(1773837612.034:38): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.142" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 171.311865][ T49] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.367783][ T49] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.378456][ T49] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.499069][ T49] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.832958][ T6639] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 171.916723][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'. [ 172.881121][ T3526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.896327][ T3526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.036782][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.077089][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.326774][ T6656] loop1: detected capacity change from 0 to 16 [ 174.399085][ T6656] erofs (device loop1): mounted with root inode @ nid 36. [ 174.412637][ T6656] syz.1.147: attempt to access beyond end of device [ 174.412637][ T6656] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 174.435208][ T6656] syz.1.147: attempt to access beyond end of device [ 174.435208][ T6656] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 174.449067][ T6656] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 174.461801][ T6656] erofs (device loop1): read error -117 @ 1 of nid 89 [ 174.470347][ T6656] erofs (device loop1): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 174.482505][ T6656] erofs (device loop1): read error -117 @ 1 of nid 89 [ 174.503699][ T29] audit: type=1800 audit(1773837615.314:39): pid=6656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.147" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 178.266656][ T6683] loop5: detected capacity change from 0 to 16 [ 179.770713][ T6683] erofs (device loop5): mounted with root inode @ nid 36. [ 179.858699][ T6682] syz.5.92: attempt to access beyond end of device [ 179.858699][ T6682] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 179.874570][ T6682] syz.5.92: attempt to access beyond end of device [ 179.874570][ T6682] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 179.889336][ T6682] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 179.900646][ T6682] erofs (device loop5): read error -117 @ 1 of nid 89 [ 179.908265][ T29] audit: type=1800 audit(1773837620.754:40): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.92" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 180.071571][ T6693] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 181.852946][ T6712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.370216][ T6721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 183.397126][ T6721] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 185.353529][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 185.773360][ T10] usb 2-1: device descriptor read/64, error -71 [ 186.578153][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 186.723394][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.827446][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.862445][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.874827][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.883807][ T24] usb 6-1: Product: syz [ 186.888234][ T24] usb 6-1: Manufacturer: syz [ 186.893103][ T24] usb 6-1: SerialNumber: syz [ 187.505668][ T24] usb 6-1: config 0 descriptor?? [ 188.191197][ T6754] loop0: detected capacity change from 0 to 16 [ 188.777128][ T6754] erofs (device loop0): mounted with root inode @ nid 36. [ 188.792169][ T6753] syz.0.168: attempt to access beyond end of device [ 188.792169][ T6753] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 188.862467][ T6753] syz.0.168: attempt to access beyond end of device [ 188.862467][ T6753] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 188.876428][ T6753] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 188.887738][ T6753] erofs (device loop0): read error -117 @ 1 of nid 89 [ 189.024885][ T29] audit: type=1800 audit(1773837629.744:41): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.168" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 190.077188][ T6756] loop0: detected capacity change from 0 to 2048 [ 190.562424][ T6756] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 190.975756][ T6756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 191.226717][ T6761] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.239477][ T6761] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.954246][ T6088] udevd[6088]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 192.940292][ T24] usb 6-1: can't set config #0, error -110 [ 193.734829][ T6790] vivid-007: ================= START STATUS ================= [ 194.226397][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.685292][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.572357][ T6790] vivid-007: Enable Output Cropping: true [ 195.779285][ T6798] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.786998][ T6798] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.829720][ T5989] usb 6-1: USB disconnect, device number 2 [ 195.847108][ T6798] bridge0: entered allmulticast mode [ 196.514628][ T6790] vivid-007: Enable Output Composing: true [ 196.521029][ T6790] vivid-007: Enable Output Scaler: true [ 196.550556][ T6790] vivid-007: Tx RGB Quantization Range: Automatic [ 196.592607][ T6790] vivid-007: Transmit Mode: [ 196.603574][ T6798] Driver unsupported XDP return value 0 on prog (id 33) dev N/A, expect packet loss! [ 196.627777][ T6790] HDMI [ 196.632339][ T6790] vivid-007: Hotplug Present: 0x00000000 [ 196.640626][ T6799] bridge_slave_1: left allmulticast mode [ 196.655231][ T6790] vivid-007: RxSense Present: 0x00000000 [ 196.664252][ T6799] bridge_slave_1: left promiscuous mode [ 196.671892][ T6799] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.682324][ T6790] vivid-007: EDID Present: 0x00000000 [ 196.705363][ T6790] vivid-007: ================== END STATUS ================== [ 196.895856][ T6799] bridge_slave_0: left allmulticast mode [ 196.949232][ T6799] bridge_slave_0: left promiscuous mode [ 196.969100][ T6799] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.331983][ T6828] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 198.577936][ T6810] syzkaller0: entered promiscuous mode [ 198.584899][ T6810] syzkaller0: entered allmulticast mode [ 198.675692][ T6844] loop0: detected capacity change from 0 to 16 [ 198.753795][ T6844] erofs (device loop0): mounted with root inode @ nid 36. [ 198.768988][ T6844] syz.0.187: attempt to access beyond end of device [ 198.768988][ T6844] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 198.822307][ T6844] syz.0.187: attempt to access beyond end of device [ 198.822307][ T6844] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 198.843114][ T6844] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 198.854864][ T6844] erofs (device loop0): read error -117 @ 1 of nid 89 [ 198.880008][ T29] audit: type=1800 audit(1773837639.714:42): pid=6844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.187" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 200.170705][ T6851] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.198716][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.495438][ T6865] loop2: detected capacity change from 0 to 16 [ 201.429398][ T6865] erofs (device loop2): mounted with root inode @ nid 36. [ 201.464412][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 201.471026][ T5865] Bluetooth: hci0: command 0x0406 tx timeout [ 201.494327][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 201.500526][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 201.565359][ T6861] syz.2.191: attempt to access beyond end of device [ 201.565359][ T6861] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 201.584292][ T6861] syz.2.191: attempt to access beyond end of device [ 201.584292][ T6861] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 201.602067][ T6861] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 201.614576][ T6861] erofs (device loop2): read error -117 @ 1 of nid 89 [ 201.635492][ T29] audit: type=1800 audit(1773837642.464:43): pid=6861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.191" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 202.261106][ T6872] loop4: detected capacity change from 0 to 40427 [ 202.272306][ T6872] F2FS-fs (loop4): invalid crc value [ 202.359738][ T6872] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 202.373914][ T6872] F2FS-fs (loop4): Start checkpoint disabled! [ 202.386933][ T6872] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 202.396870][ T6872] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 202.427256][ T29] audit: type=1800 audit(1773837643.274:44): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.195" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 203.220745][ T6890] loop0: detected capacity change from 0 to 16 [ 203.956209][ T6890] erofs (device loop0): mounted with root inode @ nid 36. [ 203.972842][ T6889] syz.0.197: attempt to access beyond end of device [ 203.972842][ T6889] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 203.988007][ T6889] syz.0.197: attempt to access beyond end of device [ 203.988007][ T6889] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 204.001733][ T6889] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 204.013052][ T6889] erofs (device loop0): read error -117 @ 1 of nid 89 [ 204.021069][ T6889] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 204.032309][ T6889] erofs (device loop0): read error -117 @ 1 of nid 89 [ 204.051846][ T29] audit: type=1800 audit(1773837644.864:45): pid=6889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.197" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 204.507800][ T6900] loop5: detected capacity change from 0 to 512 [ 204.515353][ T6900] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 204.604732][ T6902] overlayfs: failed to resolve './file1': -2 [ 205.530140][ T6900] EXT4-fs error (device loop5): ext4_init_orphan_info:618: comm syz.5.201: orphan file block 0: bad magic [ 205.541634][ T6900] loop5: lost filesystem error report for type 5 error -117 [ 205.543294][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 205.557149][ C0] EXT4-fs (loop5): initial error at time 1773837646: ext4_init_orphan_info:618 [ 205.566144][ C0] EXT4-fs (loop5): last error at time 1773837646: ext4_init_orphan_info:618 [ 206.465160][ T6903] loop0: detected capacity change from 0 to 16 [ 206.507531][ T6900] EXT4-fs (loop5): mount failed [ 206.701173][ T6903] erofs (device loop0): mounted with root inode @ nid 36. [ 206.720144][ T6901] syz.0.200: attempt to access beyond end of device [ 206.720144][ T6901] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 206.735836][ T6901] syz.0.200: attempt to access beyond end of device [ 206.735836][ T6901] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 206.749604][ T6901] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 206.760897][ T6901] erofs (device loop0): read error -117 @ 1 of nid 89 [ 206.767896][ T29] audit: type=1800 audit(1773837647.614:46): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.200" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 206.768761][ T6901] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 206.799300][ T6901] erofs (device loop0): read error -117 @ 1 of nid 89 [ 206.839242][ T6906] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 207.627691][ T6915] loop2: detected capacity change from 0 to 16 [ 207.811579][ T6914] loop5: detected capacity change from 0 to 32768 [ 207.966173][ T6915] erofs (device loop2): mounted with root inode @ nid 36. [ 207.981666][ T6915] syz.2.203: attempt to access beyond end of device [ 207.981666][ T6915] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 208.035410][ T6915] syz.2.203: attempt to access beyond end of device [ 208.035410][ T6915] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 208.050113][ T6915] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 208.061530][ T6915] erofs (device loop2): read error -117 @ 1 of nid 89 [ 208.070070][ T29] audit: type=1800 audit(1773837648.914:47): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.203" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 208.071104][ T6915] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 208.101750][ T6915] erofs (device loop2): read error -117 @ 1 of nid 89 [ 208.156788][ T6914] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 208.489975][ T49] kworker/u8:3: attempt to access beyond end of device [ 208.489975][ T49] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 208.576713][ T6914] XFS (loop5): Metadata corruption detected at xfs_agf_verify+0x1af/0x8f0, xfs_agf block 0x1 [ 208.587115][ T6914] XFS (loop5): Unmount and run xfs_repair [ 208.592875][ T6914] XFS (loop5): First 128 bytes of corrupted metadata buffer: [ 208.600354][ T6914] 00000000: 58 41 47 46 00 00 00 00 00 00 00 00 00 00 20 00 XAGF.......... . [ 208.609315][ T6914] 00000010: 00 00 00 01 00 00 00 02 00 00 00 05 00 00 00 01 ................ [ 208.618244][ T6914] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 208.627186][ T6914] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d b8 00 00 00 00 ................ [ 208.636222][ T6914] 00000040: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 208.645210][ T6914] 00000050: 00 00 00 01 00 00 00 01 00 00 00 06 00 00 00 01 ................ [ 208.656924][ T6914] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 208.665869][ T6914] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 208.674993][ T6914] XFS (loop5): metadata I/O error in "xfs_read_agf+0x289/0x5f0" at daddr 0x1 len 1 error 117 [ 208.685326][ T6914] loop5: lost filesystem error report for type 5 error -117 [ 208.685352][ T6914] XFS (loop5): Error -117 reserving per-AG metadata reserve pool. [ 208.700954][ T6914] XFS (loop5): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1f0/0x240 (fs/xfs/xfs_fsops.c:559). Shutting down filesystem. [ 208.716329][ T6914] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 208.724745][ T6914] loop5: lost filesystem error report for type 5 error -108 [ 208.724772][ T6914] XFS (loop5): Ending clean mount [ 208.737574][ T6914] XFS (loop5): Error -5 reserving per-AG metadata reserve pool. [ 208.767432][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.767458][ T49] Tainted: [L]=SOFTLOCKUP [ 208.767464][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 208.767474][ T49] Workqueue: writeback wb_workfn (flush-7:4) [ 208.767501][ T49] Call Trace: [ 208.767508][ T49] [ 208.767516][ T49] dump_stack_lvl+0xe8/0x150 [ 208.767545][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 208.767574][ T49] f2fs_write_end_io+0x1274/0x1740 [ 208.767621][ T49] __submit_merged_bio+0x256/0x700 [ 208.767649][ T49] __submit_merged_write_cond+0x3c9/0x4e0 [ 208.767679][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 208.767722][ T49] f2fs_write_data_pages+0x287e/0x34f0 [ 208.767780][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.767819][ T49] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 208.767866][ T49] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 208.767908][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 208.767948][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 208.767974][ T49] do_writepages+0x32e/0x550 [ 208.768018][ T49] ? reacquire_held_locks+0x104/0x190 [ 208.768038][ T49] ? writeback_sb_inodes+0x477/0x1a20 [ 208.768067][ T49] __writeback_single_inode+0x133/0x11a0 [ 208.768103][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 208.768129][ T49] writeback_sb_inodes+0x992/0x1a20 [ 208.768158][ T49] ? trace_hrtimer_start+0x82/0x230 [ 208.768195][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 208.768215][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 208.768280][ T49] ? rcu_is_watching+0x15/0xb0 [ 208.768307][ T49] wb_writeback+0x456/0xb70 [ 208.768332][ T49] ? queue_io+0x211/0x4a0 [ 208.768362][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 208.768382][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 208.768418][ T49] wb_workfn+0x414/0xf50 [ 208.768438][ T49] ? look_up_lock_class+0x57/0x110 [ 208.768472][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 208.768493][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 208.768517][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 208.768559][ T49] ? process_one_work+0x8bb/0x1780 [ 208.768584][ T49] process_one_work+0x9ab/0x1780 [ 208.768631][ T49] ? __pfx_process_one_work+0x10/0x10 [ 208.768654][ T49] ? move_linked_works+0x238/0x250 [ 208.768695][ T49] worker_thread+0xba8/0x11e0 [ 208.768737][ T49] kthread+0x388/0x470 [ 208.768758][ T49] ? __pfx_worker_thread+0x10/0x10 [ 208.768773][ T49] ? __pfx_kthread+0x10/0x10 [ 208.768795][ T49] ret_from_fork+0x51e/0xb90 [ 208.768827][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 208.768850][ T49] ? __switch_to+0xc7d/0x1450 [ 208.768876][ T49] ? __pfx_kthread+0x10/0x10 [ 208.768897][ T49] ret_from_fork_asm+0x1a/0x30 [ 208.768948][ T49] [ 208.769211][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 209.195559][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.195621][ T49] Tainted: [L]=SOFTLOCKUP [ 209.195627][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 209.195636][ T49] Workqueue: writeback wb_workfn (flush-7:4) [ 209.195662][ T49] Call Trace: [ 209.195668][ T49] [ 209.195675][ T49] dump_stack_lvl+0xe8/0x150 [ 209.195703][ T49] f2fs_handle_critical_error+0x37c/0x540 [ 209.195750][ T49] f2fs_write_end_io+0x1274/0x1740 [ 209.195796][ T49] __submit_merged_bio+0x256/0x700 [ 209.195826][ T49] __submit_merged_write_cond+0x3c9/0x4e0 [ 209.195856][ T49] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 209.195901][ T49] f2fs_write_data_pages+0x287e/0x34f0 [ 209.195966][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 209.196005][ T49] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 209.196056][ T49] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 209.196102][ T49] ? __lock_acquire+0x6b5/0x2cf0 [ 209.196149][ T49] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 209.196182][ T49] do_writepages+0x32e/0x550 [ 209.196221][ T49] ? reacquire_held_locks+0x104/0x190 [ 209.196239][ T49] ? writeback_sb_inodes+0x477/0x1a20 [ 209.196267][ T49] __writeback_single_inode+0x133/0x11a0 [ 209.196291][ T49] ? do_raw_spin_unlock+0xf5/0x210 [ 209.196316][ T49] writeback_sb_inodes+0x992/0x1a20 [ 209.196345][ T49] ? trace_hrtimer_start+0x82/0x230 [ 209.196386][ T49] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 209.196406][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 209.196465][ T49] ? rcu_is_watching+0x15/0xb0 [ 209.196490][ T49] wb_writeback+0x456/0xb70 [ 209.196519][ T49] ? queue_io+0x211/0x4a0 [ 209.196567][ T49] ? __pfx_wb_writeback+0x10/0x10 [ 209.196589][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 209.196633][ T49] wb_workfn+0x414/0xf50 [ 209.196657][ T49] ? look_up_lock_class+0x57/0x110 [ 209.196697][ T49] ? __pfx_wb_workfn+0x10/0x10 [ 209.196725][ T49] ? do_raw_spin_lock+0x12b/0x2f0 [ 209.196753][ T49] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 209.196805][ T49] ? process_one_work+0x8bb/0x1780 [ 209.196834][ T49] process_one_work+0x9ab/0x1780 [ 209.196891][ T49] ? __pfx_process_one_work+0x10/0x10 [ 209.196918][ T49] ? move_linked_works+0x238/0x250 [ 209.196968][ T49] worker_thread+0xba8/0x11e0 [ 209.197030][ T49] kthread+0x388/0x470 [ 209.197053][ T49] ? __pfx_worker_thread+0x10/0x10 [ 209.197069][ T49] ? __pfx_kthread+0x10/0x10 [ 209.197093][ T49] ret_from_fork+0x51e/0xb90 [ 209.197124][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 209.197149][ T49] ? __switch_to+0xc7d/0x1450 [ 209.197178][ T49] ? __pfx_kthread+0x10/0x10 [ 209.197212][ T49] ret_from_fork_asm+0x1a/0x30 [ 209.197250][ T49] [ 209.197388][ T49] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 209.866862][ T6934] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 210.442243][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.457234][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.618986][ T6936] loop0: detected capacity change from 0 to 16 [ 210.628417][ T6936] erofs (device loop0): mounted with root inode @ nid 36. [ 210.644088][ T6935] syz.0.207: attempt to access beyond end of device [ 210.644088][ T6935] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 210.663216][ T6935] syz.0.207: attempt to access beyond end of device [ 210.663216][ T6935] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 210.679301][ T6935] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 210.690762][ T6935] erofs (device loop0): read error -117 @ 1 of nid 89 [ 210.707838][ T6935] erofs (device loop0): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 210.719326][ T6935] erofs (device loop0): read error -117 @ 1 of nid 89 [ 210.736864][ T29] audit: type=1800 audit(1773837651.554:48): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.207" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 210.878566][ T6945] loop5: detected capacity change from 0 to 16 [ 211.437802][ T6945] erofs (device loop5): mounted with root inode @ nid 36. [ 211.453109][ T6944] syz.5.210: attempt to access beyond end of device [ 211.453109][ T6944] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 211.468725][ T6944] syz.5.210: attempt to access beyond end of device [ 211.468725][ T6944] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 211.482860][ T6944] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 211.494192][ T6944] erofs (device loop5): read error -117 @ 1 of nid 89 [ 211.501444][ T29] audit: type=1800 audit(1773837652.344:49): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.210" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 211.523167][ T6944] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 211.534499][ T6944] erofs (device loop5): read error -117 @ 1 of nid 89 [ 212.041781][ T6956] loop2: detected capacity change from 0 to 16 [ 212.174807][ T6956] erofs (device loop2): mounted with root inode @ nid 36. [ 212.191044][ T6956] syz.2.214: attempt to access beyond end of device [ 212.191044][ T6956] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 212.237951][ T6956] syz.2.214: attempt to access beyond end of device [ 212.237951][ T6956] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 212.253217][ T6956] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 212.264666][ T6956] erofs (device loop2): read error -117 @ 1 of nid 89 [ 212.277499][ T6956] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 212.288793][ T6956] erofs (device loop2): read error -117 @ 1 of nid 89 [ 212.327621][ T29] audit: type=1800 audit(1773837653.114:50): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.214" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 212.964450][ T6959] loop4: detected capacity change from 0 to 256 [ 212.971412][ T6959] vfat: Bad value for 'dmask' [ 217.524246][ T6986] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 217.655871][ T6984] batadv_slave_0: left promiscuous mode [ 218.191266][ T6993] loop2: detected capacity change from 0 to 16 [ 218.211453][ T6993] erofs (device loop2): mounted with root inode @ nid 36. [ 218.709024][ T6992] syz.2.222: attempt to access beyond end of device [ 218.709024][ T6992] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 218.727825][ T6992] syz.2.222: attempt to access beyond end of device [ 218.727825][ T6992] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 218.741585][ T6992] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 218.752894][ T6992] erofs (device loop2): read error -117 @ 1 of nid 89 [ 218.769182][ T29] audit: type=1800 audit(1773837659.604:51): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.222" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 219.107647][ T6997] loop5: detected capacity change from 0 to 16 [ 219.615801][ T6997] erofs (device loop5): mounted with root inode @ nid 36. [ 219.631805][ T6996] syz.5.223: attempt to access beyond end of device [ 219.631805][ T6996] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 219.650979][ T6996] syz.5.223: attempt to access beyond end of device [ 219.650979][ T6996] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 219.664720][ T6996] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 219.676017][ T6996] erofs (device loop5): read error -117 @ 1 of nid 89 [ 219.683090][ T29] audit: type=1800 audit(1773837660.524:52): pid=6996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.223" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 219.702617][ T6996] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 219.714717][ T6996] erofs (device loop5): read error -117 @ 1 of nid 89 [ 221.864060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 222.244096][ T29] audit: type=1800 audit(1773837662.594:53): pid=7000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.224" name="bus" dev="overlay" ino=305 res=0 errno=0 [ 223.543674][ T7019] syz.4.227 uses old SIOCAX25GETINFO [ 223.950787][ T7017] loop5: detected capacity change from 0 to 16 [ 224.223665][ T7017] erofs (device loop5): mounted with root inode @ nid 36. [ 224.235712][ T7017] syz.5.226: attempt to access beyond end of device [ 224.235712][ T7017] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 224.305742][ T7017] syz.5.226: attempt to access beyond end of device [ 224.305742][ T7017] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 224.319404][ T7017] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 224.331364][ T7017] erofs (device loop5): read error -117 @ 1 of nid 89 [ 224.361113][ T29] audit: type=1800 audit(1773837665.184:54): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.226" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 224.426895][ T7021] Device name cannot be null; rc = [-22] [ 229.953584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 230.003708][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 230.739513][ T7055] loop5: detected capacity change from 0 to 16 [ 232.346957][ T7055] erofs (device loop5): mounted with root inode @ nid 36. [ 232.362594][ T7053] syz.5.238: attempt to access beyond end of device [ 232.362594][ T7053] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 232.388520][ T7053] syz.5.238: attempt to access beyond end of device [ 232.388520][ T7053] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 232.404093][ T7053] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 232.417960][ T7053] erofs (device loop5): read error -117 @ 1 of nid 89 [ 232.426504][ T29] audit: type=1800 audit(1773837673.274:55): pid=7053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.238" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 233.249542][ T7060] ubi31: attaching mtd0 [ 233.271557][ T7060] ubi31: scanning is finished [ 233.276682][ T7060] ubi31: empty MTD device detected [ 234.198545][ T7060] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 235.660047][ T7073] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 237.774652][ T7078] loop0: detected capacity change from 0 to 16 [ 237.783632][ T7079] loop4: detected capacity change from 0 to 16 [ 237.809054][ T7078] erofs (device loop0): mounted with root inode @ nid 36. [ 237.817168][ T7079] erofs (device loop4): mounted with root inode @ nid 36. [ 237.826562][ T7079] syz.4.237: attempt to access beyond end of device [ 237.826562][ T7079] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 237.845117][ T7079] syz.4.237: attempt to access beyond end of device [ 237.845117][ T7079] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 237.858899][ T7079] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 237.870180][ T7079] erofs (device loop4): read error -117 @ 1 of nid 89 [ 237.877303][ T29] audit: type=1800 audit(1773837678.734:56): pid=7079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.237" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 237.899194][ T7079] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 237.910665][ T7079] erofs (device loop4): read error -117 @ 1 of nid 89 [ 238.815127][ T7092] loop5: detected capacity change from 0 to 512 [ 239.822794][ T7092] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.247: couldn't read orphan inode 26 (err -116) [ 239.985018][ T7092] loop5: lost filesystem error report for type 5 error -116 [ 240.000092][ T7092] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.100002][ T7110] 9pnet_fd: p9_fd_create_tcp (7110): problem connecting socket to 127.0.0.1 [ 240.595781][ T7092] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.022225][ T7115] EXT4-fs error (device loop5): ext4_do_update_inode:5572: inode #3: comm syz.5.247: corrupted inode contents [ 241.827399][ T7104] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 241.842936][ T7115] EXT4-fs error (device loop5): ext4_dirty_inode:6453: inode #3: comm syz.5.247: mark_inode_dirty error [ 241.887612][ T7125] loop4: detected capacity change from 0 to 16 [ 241.895568][ T7125] erofs (device loop4): mounted with root inode @ nid 36. [ 241.905105][ T7125] syz.4.252: attempt to access beyond end of device [ 241.905105][ T7125] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 241.920279][ T7125] syz.4.252: attempt to access beyond end of device [ 241.920279][ T7125] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 241.935006][ T7125] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 241.946299][ T7125] erofs (device loop4): read error -117 @ 1 of nid 89 [ 241.954643][ T7125] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 241.965924][ T7125] erofs (device loop4): read error -117 @ 1 of nid 89 [ 241.973391][ T29] audit: type=1800 audit(1773837682.794:57): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.252" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 242.156144][ T7115] Quota error (device loop5): write_blk: dquota write failed [ 242.164018][ T7115] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 242.174064][ T7115] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.247: Failed to acquire dquot type 0 [ 242.317387][ T6411] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.422862][ T7128] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 242.434703][ T7128] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 243.419434][ T7141] loop0: detected capacity change from 0 to 16 [ 243.437470][ T7141] erofs (device loop0): mounted with root inode @ nid 36. [ 244.677551][ T7152] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 245.036560][ T7161] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 246.623567][ T7182] loop5: detected capacity change from 0 to 16 [ 247.422501][ T7182] erofs (device loop5): mounted with root inode @ nid 36. [ 247.432410][ T7182] syz.5.265: attempt to access beyond end of device [ 247.432410][ T7182] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 247.447831][ T7182] syz.5.265: attempt to access beyond end of device [ 247.447831][ T7182] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 247.462235][ T7182] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 247.474240][ T7182] erofs (device loop5): read error -117 @ 1 of nid 89 [ 247.488245][ T7182] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 247.499589][ T7182] erofs (device loop5): read error -117 @ 1 of nid 89 [ 247.776604][ T29] audit: type=1800 audit(1773837688.324:58): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.265" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 247.953718][ T7187] netlink: 32 bytes leftover after parsing attributes in process `syz.2.267'. [ 248.639479][ T7197] loop5: detected capacity change from 0 to 16 [ 248.717628][ T7197] erofs (device loop5): mounted with root inode @ nid 36. [ 249.659706][ T7206] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 249.808765][ T7210] loop2: detected capacity change from 0 to 16 [ 249.909400][ T7210] erofs (device loop2): mounted with root inode @ nid 36. [ 249.923313][ T7210] syz.2.273: attempt to access beyond end of device [ 249.923313][ T7210] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 249.958485][ T7210] syz.2.273: attempt to access beyond end of device [ 249.958485][ T7210] loop2: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 249.972965][ T7210] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 249.984513][ T7210] erofs (device loop2): read error -117 @ 1 of nid 89 [ 249.997387][ T7210] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 250.008862][ T7210] erofs (device loop2): read error -117 @ 1 of nid 89 [ 250.019333][ T29] audit: type=1800 audit(1773837690.834:59): pid=7210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.273" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 250.839521][ T7217] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 254.675542][ T7245] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 255.645980][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.652504][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.367615][ T7260] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 259.996388][ T7263] syz.5.288 (7263) used greatest stack depth: 16488 bytes left [ 260.565770][ T7284] Bluetooth: hci0: unsupported parameter 255 [ 260.593522][ T7281] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 260.594340][ T7284] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 261.448032][ T7289] loop4: detected capacity change from 0 to 16 [ 262.222090][ T7289] erofs (device loop4): mounted with root inode @ nid 36. [ 262.236717][ T7288] syz.4.279: attempt to access beyond end of device [ 262.236717][ T7288] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 262.258768][ T7288] syz.4.279: attempt to access beyond end of device [ 262.258768][ T7288] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 262.272574][ T7288] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 262.283866][ T7288] erofs (device loop4): read error -117 @ 1 of nid 89 [ 262.291780][ T7288] erofs (device loop4): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 262.303322][ T7288] erofs (device loop4): read error -117 @ 1 of nid 89 [ 262.311285][ T29] audit: type=1800 audit(1773837703.134:60): pid=7288 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.279" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 264.445909][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 264.463866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 264.576966][ T7300] ceph: No mds server is up or the cluster is laggy [ 264.680719][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 265.746103][ T5856] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 265.760941][ T5856] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.334671][ T5856] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.358793][ T5856] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.368566][ T5856] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 266.380113][ T7325] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 266.710154][ T7331] loop5: detected capacity change from 0 to 16 [ 267.821422][ T7331] erofs (device loop5): mounted with root inode @ nid 36. [ 267.835880][ T7330] syz.5.302: attempt to access beyond end of device [ 267.835880][ T7330] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 267.864892][ T7330] syz.5.302: attempt to access beyond end of device [ 267.864892][ T7330] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 267.878540][ T7330] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 267.889825][ T7330] erofs (device loop5): read error -117 @ 1 of nid 89 [ 267.897433][ T29] audit: type=1800 audit(1773837708.744:61): pid=7330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.302" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 267.916923][ T7330] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 267.928179][ T7330] erofs (device loop5): read error -117 @ 1 of nid 89 [ 268.556498][ T5854] Bluetooth: hci6: command tx timeout [ 268.913939][ T7336] loop4: detected capacity change from 0 to 2048 [ 269.103568][ T7336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.435340][ T7353] JFS: discard option not supported on device [ 269.445506][ T7353] Mount JFS Failure: -22 [ 269.449827][ T7353] jfs_mount failed w/return code = -22 [ 270.074451][ T29] audit: type=1800 audit(1773837710.924:62): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.303" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 270.128956][ T7336] EXT4-fs: Ignoring removed orlov option [ 270.142232][ T7357] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 270.175206][ T7336] EXT4-fs: Ignoring removed bh option [ 270.208643][ T7336] EXT4-fs: can't change dax mount option while remounting [ 270.633449][ T5854] Bluetooth: hci6: command tx timeout [ 271.708326][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 272.653314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 272.750819][ T7376] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 273.196798][ T5854] Bluetooth: hci6: command tx timeout [ 274.907363][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.946421][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.996221][ T7322] bridge_slave_0: entered allmulticast mode [ 275.016354][ T7322] bridge_slave_0: entered promiscuous mode [ 275.034354][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.123666][ T7398] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 275.157927][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.189727][ T7322] bridge_slave_1: entered allmulticast mode [ 275.239078][ T7322] bridge_slave_1: entered promiscuous mode [ 275.275297][ T5854] Bluetooth: hci6: command tx timeout [ 275.384770][ T7402] loop5: detected capacity change from 0 to 16 [ 275.451418][ T7402] erofs (device loop5): mounted with root inode @ nid 36. [ 275.468455][ T7402] syz.5.316: attempt to access beyond end of device [ 275.468455][ T7402] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 275.516504][ T7402] syz.5.316: attempt to access beyond end of device [ 275.516504][ T7402] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 275.530865][ T7402] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 275.543075][ T7402] erofs (device loop5): read error -117 @ 1 of nid 89 [ 275.559420][ T7402] erofs (device loop5): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 8192 [ 275.570752][ T7402] erofs (device loop5): read error -117 @ 1 of nid 89 [ 276.015896][ T29] audit: type=1800 audit(1773837716.404:63): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.316" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 276.133763][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.304070][ T7409] IPVS: set_ctl: invalid protocol: 2 10.1.1.1:20000 [ 277.044202][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.077802][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.424353][ T7322] team0: Port device team_slave_0 added [ 277.488804][ T7418] netlink: 'syz.5.319': attribute type 2 has an invalid length. [ 277.497292][ T7418] netlink: 'syz.5.319': attribute type 1 has an invalid length. [ 277.507164][ T7418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.319'. [ 277.976932][ T7322] team0: Port device team_slave_1 added [ 278.022467][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.033112][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.224047][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.635253][ T30] INFO: task syz.3.65:6293 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.918081][ T30] Tainted: G L syzkaller #0 [ 278.941906][ T30] Blocked by coredump. [ 278.948566][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.964784][ T30] task:syz.3.65 state:D stack:27496 pid:6293 tgid:6291 ppid:5848 task_flags:0x40044c flags:0x00080002 [ 278.995897][ T30] Call Trace: [ 278.999625][ T30] [ 279.009421][ T30] __schedule+0x1665/0x5590 [ 279.026995][ T30] ? __pfx___schedule+0x10/0x10 [ 279.052137][ T30] ? schedule+0x90/0x360 [ 279.228738][ T30] schedule+0x164/0x360 [ 279.252289][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.921246][ T30] rwsem_down_read_slowpath+0x6d9/0x940 [ 279.962276][ T30] ? rwsem_down_read_slowpath+0x596/0x940 [ 280.126137][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 280.188471][ T30] ? do_futex+0x395/0x420 [ 280.939964][ T30] down_read+0x99/0x2e0 [ 280.964758][ T30] ? exit_mm+0x64/0x250 [ 280.982908][ T30] exit_mm+0x73/0x250 [ 281.005251][ T30] ? unwind_deferred_task_exit+0x67/0xa0 [ 281.036767][ T30] do_exit+0x8b9/0x2490 [ 281.049583][ T30] ? __pfx_do_exit+0x10/0x10 [ 281.068777][ T30] do_group_exit+0x21b/0x2d0 [ 281.082943][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.093276][ T30] get_signal+0x1284/0x1330 [ 281.103305][ T30] arch_do_signal_or_restart+0xbc/0x830 [ 281.115002][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 281.133369][ T30] exit_to_user_mode_loop+0x86/0x480 [ 281.133402][ T30] ? rcu_is_watching+0x15/0xb0 [ 281.133427][ T30] do_syscall_64+0x32d/0xf80 [ 281.133450][ T30] ? trace_irq_disable+0x3b/0x150 [ 281.185092][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.204921][ T30] ? clear_bhb_loop+0x40/0x90 [ 281.213293][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.223614][ T30] RIP: 0033:0x7feed8d9c799 [ 281.233332][ T30] RSP: 002b:00007feed9bbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 281.253273][ T30] RAX: 000000000000000b RBX: 00007feed9016090 RCX: 00007feed8d9c799 [ 281.275256][ T30] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000004 [ 281.293272][ T30] RBP: 00007feed8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 281.313265][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.329960][ T30] R13: 00007feed9016128 R14: 00007feed9016090 R15: 00007ffeb224cf68 [ 281.343326][ T30] [ 281.347973][ T30] [ 281.347973][ T30] Showing all locks held in the system: [ 281.379802][ T30] 1 lock held by khungtaskd/30: [ 281.393355][ T30] #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 281.410136][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.434858][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.435244][ T30] 2 locks held by getty/5602: [ 281.524510][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.542703][ T30] #0: ffff8880371190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 281.573300][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 281.593269][ T30] 1 lock held by syz.3.65/6293: [ 281.609478][ T30] #0: ffff88802c1bb538 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 281.634217][ T30] 1 lock held by syz.0.264/7177: [ 281.639205][ T30] #0: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 281.655082][ T30] 2 locks held by syz-executor/7322: [ 281.660402][ T30] 1 lock held by syz.1.321/7419: [ 281.668939][ T30] #0: ffff8880331e28b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 281.755595][ T30] [ 281.772312][ T30] ============================================= [ 281.772312][ T30] [ 281.820754][ T30] NMI backtrace for cpu 0 [ 281.820768][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 281.820786][ T30] Tainted: [L]=SOFTLOCKUP [ 281.820790][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.820797][ T30] Call Trace: [ 281.820802][ T30] [ 281.820808][ T30] dump_stack_lvl+0xe8/0x150 [ 281.820832][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 281.820853][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.820874][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 281.820895][ T30] sys_info+0x135/0x170 [ 281.820912][ T30] watchdog+0x1002/0x1060 [ 281.820934][ T30] ? watchdog+0x1da/0x1060 [ 281.820953][ T30] kthread+0x388/0x470 [ 281.820969][ T30] ? __pfx_watchdog+0x10/0x10 [ 281.820983][ T30] ? __pfx_kthread+0x10/0x10 [ 281.820999][ T30] ret_from_fork+0x51e/0xb90 [ 281.821021][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 281.821039][ T30] ? __switch_to+0xc7d/0x1450 [ 281.821058][ T30] ? __pfx_kthread+0x10/0x10 [ 281.821074][ T30] ret_from_fork_asm+0x1a/0x30 [ 281.821097][ T30] [ 281.821101][ T30] Sending NMI from CPU 0 to CPUs 1: [ 281.939828][ C1] NMI backtrace for cpu 1 [ 281.939844][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 281.939864][ C1] Tainted: [L]=SOFTLOCKUP [ 281.939870][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 281.939879][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 281.939902][ C1] Code: ed 6a 02 e9 d3 f1 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 e1 14 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 281.939914][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 281.939928][ C1] RAX: 0000000000b8834f RBX: ffffffff819b946a RCX: 0000000080000001 [ 281.939939][ C1] RDX: 0000000000000001 RSI: ffffffff8df3af0d RDI: ffffffff8c284e00 [ 281.939950][ C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733 [ 281.939961][ C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001 [ 281.939971][ C1] R13: 1ffff11003c5b000 R14: 0000000000000001 R15: 1ffff11003c5b000 [ 281.939987][ C1] FS: 0000000000000000(0000) GS:ffff888125535000(0000) knlGS:0000000000000000 [ 281.940000][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.940010][ C1] CR2: 00007ffcc738cf6d CR3: 00000000378de000 CR4: 00000000003526f0 [ 281.940023][ C1] Call Trace: [ 281.940029][ C1] [ 281.940035][ C1] default_idle+0x9/0x20 [ 281.940055][ C1] default_idle_call+0x72/0xb0 [ 281.940076][ C1] do_idle+0x36a/0x5f0 [ 281.940094][ C1] ? __pfx_do_idle+0x10/0x10 [ 281.940111][ C1] ? do_idle+0xa/0x5f0 [ 281.940126][ C1] cpu_startup_entry+0x43/0x60 [ 281.940141][ C1] start_secondary+0x101/0x110 [ 281.940161][ C1] common_startup_64+0x13e/0x147 [ 281.940187][ C1] [ 282.115055][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 282.121950][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 282.132633][ T30] Tainted: [L]=SOFTLOCKUP [ 282.136957][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 282.147013][ T30] Call Trace: [ 282.150299][ T30] [ 282.153239][ T30] vpanic+0x56c/0xa60 [ 282.157245][ T30] ? __pfx___schedule+0x10/0x10 [ 282.162103][ T30] ? __pfx_vpanic+0x10/0x10 [ 282.166630][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 282.172809][ T30] panic+0xc5/0xd0 [ 282.176550][ T30] ? __pfx_panic+0x10/0x10 [ 282.180998][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 282.186392][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 282.192574][ T30] watchdog+0x105b/0x1060 [ 282.196922][ T30] ? watchdog+0x1da/0x1060 [ 282.201354][ T30] kthread+0x388/0x470 [ 282.205432][ T30] ? __pfx_watchdog+0x10/0x10 [ 282.210126][ T30] ? __pfx_kthread+0x10/0x10 [ 282.214738][ T30] ret_from_fork+0x51e/0xb90 [ 282.219348][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 282.224467][ T30] ? __switch_to+0xc7d/0x1450 [ 282.229158][ T30] ? __pfx_kthread+0x10/0x10 [ 282.233756][ T30] ret_from_fork_asm+0x1a/0x30 [ 282.238538][ T30] [ 282.242413][ T30] Kernel Offset: disabled [ 282.246743][ T30] Rebooting in 86400 seconds..