last executing test programs: 14.219922061s ago: executing program 4 (id=152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000180)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @loopback, 0x6}, {0x1b, 0x4e23, 0x7, @mcast1, 0x3}, 0xffffffffffffffff, 0xa}}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4b}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 12.287452452s ago: executing program 3 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1/file0'}}]}) 11.570070619s ago: executing program 3 (id=159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 9.936706719s ago: executing program 4 (id=163): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x4048044}, 0x0) 9.329250556s ago: executing program 2 (id=164): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x7fffffff) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 8.500526464s ago: executing program 1 (id=165): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000300)=0xe, 0x4) 8.412708587s ago: executing program 4 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9, 0xfff3}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.328286636s ago: executing program 3 (id=167): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.814456413s ago: executing program 4 (id=168): mkdir(0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x6c, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x3c, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}, @TCA_CODEL_TARGET={0x8, 0x1, 0xd8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x7f}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_LIMIT={0x5, 0x2, 0x3ff}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8b7}]}}]}, 0x6c}}, 0x4000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.700436882s ago: executing program 1 (id=169): syz_mount_image$fuse(0x0, 0x0, 0x234a047, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000280)={[{@rodir}, {@fat=@nocase}, {@fat=@nfs}, {@fat=@discard}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_win95}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@uni_xlateno}, {@fat=@check_strict}, {@uni_xlate}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x27b, &(0x7f0000000640)="$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") io_uring_enter(0xffffffffffffffff, 0x3, 0x10a5, 0x3, 0x0, 0x0) 6.630358141s ago: executing program 0 (id=170): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 5.778554403s ago: executing program 3 (id=171): r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.651091272s ago: executing program 2 (id=172): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48) r4 = dup(r3) r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0) 5.583114094s ago: executing program 1 (id=173): socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x5, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x82, &(0x7f0000002940)={@remote, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "896df4", 0x44, 0x2f, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x4, 0x1, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x8, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x2, {0x3, 0xff, 0x0, 0x1a, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 5.541651566s ago: executing program 0 (id=174): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000003f00019f2cbd70000000000003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 5.176727229s ago: executing program 1 (id=175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x145a42, 0x0) sendfile(r3, r3, 0x0, 0x20003f) 4.448276527s ago: executing program 0 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xdc}}, 0x4000000) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x38, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xe2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r5, r5, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) listen(r4, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3e8, 0x4, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2004c044}, 0x880) 4.44631195s ago: executing program 2 (id=177): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3.040764796s ago: executing program 3 (id=178): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x312000, 0x800, 0x0, 0x5}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 3.018878388s ago: executing program 1 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) 2.650304669s ago: executing program 2 (id=180): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = gettid() timer_create(0x3, &(0x7f0000000040)={0x0, 0x11, 0x4, @tid=r4}, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) 2.620114529s ago: executing program 0 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) write(r2, 0x0, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1.652912028s ago: executing program 1 (id=182): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080)={[{@auto_da_alloc}, {@mblk_io_submit}]}, 0x1, 0x569, &(0x7f0000000a00)="$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") timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 1.394311397s ago: executing program 4 (id=183): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x1000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x800}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 589.745084ms ago: executing program 0 (id=184): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000003b00)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f00000038c0)=[{{&(0x7f0000000080)=@isdn, 0x80, 0x0}, 0x2}], 0x1, 0x22, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 553.100697ms ago: executing program 3 (id=185): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x108, &(0x7f0000000100)=0x6, 0x0, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x358, 0x11, 0x148, 0x358, 0x0, 0x3f0, 0x2a8, 0x2a8, 0x3f0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x358, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x2, 0x0, 0x0, './file0\x00'}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x8800000000000000}}, {0x28}}}}, 0x4e8) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/73, 0x49}], 0x1}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d34, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000380)={0x40, 0x24, 0x16, {0x16, 0xdc02453d76ffa1cb, "1e525fa753d98a0e258ef78f6c11e9e4b3c51406"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 422.059646ms ago: executing program 2 (id=186): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f0000000200)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000240)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) timer_delete(r1) tkill(r2, 0x13) 159.863948ms ago: executing program 4 (id=187): r0 = inotify_init() r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 106.375812ms ago: executing program 2 (id=188): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) 0s ago: executing program 0 (id=189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xfffe, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x0, 0xfffd}}, 0x26) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 67.627767][ T5813] cgroup: Unknown subsys name 'net' [ 67.757509][ T5813] cgroup: Unknown subsys name 'cpuset' [ 67.766417][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.238100][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.437106][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.444292][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.040134][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.054688][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.066563][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.078073][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.087111][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.096199][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.096537][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.106194][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.114277][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.120284][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.136082][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.144607][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.149962][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.154426][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.160877][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.168236][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.177644][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.183200][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.191780][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.200522][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.207833][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.212204][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.219462][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.229637][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.235736][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.896513][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 74.026742][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 74.120083][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 74.142386][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 74.195817][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 74.284898][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.292315][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.300015][ T5827] bridge_slave_0: entered allmulticast mode [ 74.307663][ T5827] bridge_slave_0: entered promiscuous mode [ 74.351338][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.358884][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.366632][ T5827] bridge_slave_1: entered allmulticast mode [ 74.374272][ T5827] bridge_slave_1: entered promiscuous mode [ 74.455233][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.462859][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.470142][ T5828] bridge_slave_0: entered allmulticast mode [ 74.477810][ T5828] bridge_slave_0: entered promiscuous mode [ 74.496631][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.523512][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.530962][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.538752][ T5828] bridge_slave_1: entered allmulticast mode [ 74.546247][ T5828] bridge_slave_1: entered promiscuous mode [ 74.568529][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.641897][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.649453][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.657120][ T5829] bridge_slave_0: entered allmulticast mode [ 74.665602][ T5829] bridge_slave_0: entered promiscuous mode [ 74.685775][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.694582][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.702112][ T5826] bridge_slave_0: entered allmulticast mode [ 74.709995][ T5826] bridge_slave_0: entered promiscuous mode [ 74.741249][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.749287][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.757042][ T5829] bridge_slave_1: entered allmulticast mode [ 74.765515][ T5829] bridge_slave_1: entered promiscuous mode [ 74.776199][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.786194][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.793594][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.800952][ T5826] bridge_slave_1: entered allmulticast mode [ 74.808856][ T5826] bridge_slave_1: entered promiscuous mode [ 74.819254][ T5827] team0: Port device team_slave_0 added [ 74.825438][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.832899][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.840423][ T5825] bridge_slave_0: entered allmulticast mode [ 74.848361][ T5825] bridge_slave_0: entered promiscuous mode [ 74.871416][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.896740][ T5827] team0: Port device team_slave_1 added [ 74.902978][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.910627][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.918086][ T5825] bridge_slave_1: entered allmulticast mode [ 74.925786][ T5825] bridge_slave_1: entered promiscuous mode [ 74.994183][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.019495][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.055205][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.067685][ T5828] team0: Port device team_slave_0 added [ 75.077115][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.088533][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.095614][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.123197][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.139715][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.162904][ T5828] team0: Port device team_slave_1 added [ 75.192209][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.199642][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.225648][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.239952][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.273554][ T5847] Bluetooth: hci3: command tx timeout [ 75.273557][ T5834] Bluetooth: hci4: command tx timeout [ 75.273771][ T5847] Bluetooth: hci2: command tx timeout [ 75.279910][ T51] Bluetooth: hci0: command tx timeout [ 75.309033][ T5826] team0: Port device team_slave_0 added [ 75.340681][ T5829] team0: Port device team_slave_0 added [ 75.361165][ T5826] team0: Port device team_slave_1 added [ 75.367215][ T51] Bluetooth: hci1: command tx timeout [ 75.375242][ T5825] team0: Port device team_slave_0 added [ 75.384359][ T5829] team0: Port device team_slave_1 added [ 75.391836][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.398901][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.425739][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.463151][ T5825] team0: Port device team_slave_1 added [ 75.482156][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.489493][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.515996][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.579949][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.586951][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.614103][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.633510][ T5827] hsr_slave_0: entered promiscuous mode [ 75.640625][ T5827] hsr_slave_1: entered promiscuous mode [ 75.661404][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.668658][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.695603][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.709690][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.716945][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.743880][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.758264][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.765612][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.792025][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.804948][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.811894][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.838322][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.860891][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.868101][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.894445][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.966999][ T5828] hsr_slave_0: entered promiscuous mode [ 75.974010][ T5828] hsr_slave_1: entered promiscuous mode [ 75.980615][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 75.986595][ T5828] Cannot create hsr debugfs directory [ 76.115257][ T5829] hsr_slave_0: entered promiscuous mode [ 76.122151][ T5829] hsr_slave_1: entered promiscuous mode [ 76.129573][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 76.136297][ T5829] Cannot create hsr debugfs directory [ 76.147683][ T5826] hsr_slave_0: entered promiscuous mode [ 76.155485][ T5826] hsr_slave_1: entered promiscuous mode [ 76.162875][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 76.168835][ T5826] Cannot create hsr debugfs directory [ 76.211003][ T5825] hsr_slave_0: entered promiscuous mode [ 76.218062][ T5825] hsr_slave_1: entered promiscuous mode [ 76.225556][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 76.231301][ T5825] Cannot create hsr debugfs directory [ 76.847673][ T5827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.863166][ T5827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.875919][ T5827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.897781][ T5827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.977999][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.989218][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.002111][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.016241][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.135943][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.149053][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.160050][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.170899][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.306119][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.334130][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.355612][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.356511][ T51] Bluetooth: hci0: command tx timeout [ 77.363721][ T5834] Bluetooth: hci2: command tx timeout [ 77.368264][ T5847] Bluetooth: hci4: command tx timeout [ 77.373712][ T5834] Bluetooth: hci3: command tx timeout [ 77.416149][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.432959][ T5847] Bluetooth: hci1: command tx timeout [ 77.523872][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.561184][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.583462][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.607024][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.632819][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.671115][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.696203][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.741233][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.766215][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.773960][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.805145][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.812310][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.837155][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.878397][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.885636][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.924015][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.948388][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.955717][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.014937][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.022179][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.051962][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.068413][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.075614][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.191325][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.253380][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.260852][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.347870][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.355259][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.414939][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.528319][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.580777][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.601229][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.608496][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.656560][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.664084][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.775528][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.940583][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.998604][ T5827] veth0_vlan: entered promiscuous mode [ 79.088549][ T5828] veth0_vlan: entered promiscuous mode [ 79.132357][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.141611][ T5827] veth1_vlan: entered promiscuous mode [ 79.227970][ T5828] veth1_vlan: entered promiscuous mode [ 79.267533][ T5829] veth0_vlan: entered promiscuous mode [ 79.347258][ T5829] veth1_vlan: entered promiscuous mode [ 79.361295][ T5827] veth0_macvtap: entered promiscuous mode [ 79.383028][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.431450][ T5827] veth1_macvtap: entered promiscuous mode [ 79.438020][ T5847] Bluetooth: hci0: command tx timeout [ 79.438766][ T5842] Bluetooth: hci2: command tx timeout [ 79.446840][ T5847] Bluetooth: hci4: command tx timeout [ 79.449857][ T51] Bluetooth: hci3: command tx timeout [ 79.513620][ T51] Bluetooth: hci1: command tx timeout [ 79.518798][ T5828] veth0_macvtap: entered promiscuous mode [ 79.569624][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.581607][ T5828] veth1_macvtap: entered promiscuous mode [ 79.627912][ T5829] veth0_macvtap: entered promiscuous mode [ 79.639645][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.691650][ T1110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.710376][ T5829] veth1_macvtap: entered promiscuous mode [ 79.723248][ T5825] veth0_vlan: entered promiscuous mode [ 79.732959][ T1110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.743583][ T1110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.771049][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.796143][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.812148][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.827441][ T5825] veth1_vlan: entered promiscuous mode [ 79.845462][ T5826] veth0_vlan: entered promiscuous mode [ 79.868863][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.878995][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.901902][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.910806][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.963433][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.991927][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.004078][ T5826] veth1_vlan: entered promiscuous mode [ 80.087287][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.096235][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.130305][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.139222][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.161036][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.170005][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.189432][ T5825] veth0_macvtap: entered promiscuous mode [ 80.204738][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.213700][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.225236][ T5825] veth1_macvtap: entered promiscuous mode [ 80.290046][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.300299][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.380549][ T5826] veth0_macvtap: entered promiscuous mode [ 80.394623][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.408120][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.409854][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.448302][ T5826] veth1_macvtap: entered promiscuous mode [ 80.459975][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.484308][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.497124][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.504442][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.537886][ T1110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.547512][ T1110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.579361][ T1110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.596225][ T1110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.636931][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.733459][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.751772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.768722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.941196][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.955267][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.977351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.986267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.182154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.191137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.200129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 81.284446][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.293227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.386812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.395561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.482116][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.513778][ T51] Bluetooth: hci4: command tx timeout [ 81.513829][ T5847] Bluetooth: hci3: command tx timeout [ 81.519319][ T5842] Bluetooth: hci2: command tx timeout [ 81.519348][ T5842] Bluetooth: hci0: command tx timeout [ 81.520717][ T70] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.552730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.604020][ T5847] Bluetooth: hci1: command tx timeout [ 81.846671][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.872496][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.813423][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.845450][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.982700][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.021156][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.215022][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 84.227388][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.230623][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 84.244606][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 84.252534][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 84.267896][ C1] IPv4: Oversized IP packet from 172.20.20.170 [ 84.280709][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.450207][ T5977] netlink: 'syz.3.11': attribute type 39 has an invalid length. [ 85.846194][ T5993] loop4: detected capacity change from 0 to 256 [ 86.012137][ T5995] netlink: zone id is out of range [ 86.048451][ T5993] FAT-fs (loop4): Directory bread(block 1285) failed [ 86.055498][ T5995] netlink: zone id is out of range [ 86.075613][ T5995] netlink: zone id is out of range [ 86.094150][ T5993] FAT-fs (loop4): Directory bread(block 1286) failed [ 86.103693][ T5995] netlink: zone id is out of range [ 86.109633][ T5993] FAT-fs (loop4): Directory bread(block 1287) failed [ 86.134028][ T5995] netlink: zone id is out of range [ 86.146115][ T5993] FAT-fs (loop4): Directory bread(block 1288) failed [ 86.241628][ T5993] FAT-fs (loop4): Directory bread(block 1285) failed [ 86.260621][ T5993] FAT-fs (loop4): Directory bread(block 1286) failed [ 86.280014][ T5993] FAT-fs (loop4): Directory bread(block 1287) failed [ 86.323673][ T5993] FAT-fs (loop4): Directory bread(block 1288) failed [ 86.360450][ T5993] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 86.804450][ T10] cfg80211: failed to load regulatory.db [ 88.689785][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 89.875158][ T6031] Zero length message leads to an empty skb [ 89.970006][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.24'. [ 90.018053][ T6035] : renamed from bond_slave_0 (while UP) [ 90.389898][ T6037] team_slave_0: entered promiscuous mode [ 90.397512][ T6037] team_slave_1: entered promiscuous mode [ 90.446472][ T6037] macvlan2: entered allmulticast mode [ 90.468001][ T6037] team0: entered allmulticast mode [ 90.494827][ T6037] team_slave_0: entered allmulticast mode [ 90.505764][ T6041] process 'syz.1.28' launched './file0' with NULL argv: empty string added [ 90.517308][ T6037] team_slave_1: entered allmulticast mode [ 90.534883][ T6041] Invalid argument reading file caps for ./file0 [ 90.536330][ T6037] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.615474][ T6037] team0: left allmulticast mode [ 90.639595][ T6037] team_slave_0: left allmulticast mode [ 90.661816][ T6037] team_slave_1: left allmulticast mode [ 90.683407][ T6037] team_slave_0: left promiscuous mode [ 90.689517][ T6037] team_slave_1: left promiscuous mode [ 92.444172][ T6058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 92.560804][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.730224][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 94.397028][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 95.472558][ T30] audit: type=1326 audit(1773242074.144:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92bf9c799 code=0x7ffc0000 [ 95.554825][ T30] audit: type=1326 audit(1773242074.144:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92bf9c799 code=0x7ffc0000 [ 95.628971][ T30] audit: type=1326 audit(1773242074.144:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fa92bf9c799 code=0x7ffc0000 [ 95.824328][ T30] audit: type=1326 audit(1773242074.144:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92bf9c799 code=0x7ffc0000 [ 95.887188][ T30] audit: type=1326 audit(1773242074.144:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6085 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa92bf9c799 code=0x7ffc0000 [ 96.505167][ T6101] libceph: secret too big 289 [ 100.800698][ T6147] loop2: detected capacity change from 0 to 256 [ 100.813401][ T6147] ======================================================= [ 100.813401][ T6147] WARNING: The mand mount option has been deprecated and [ 100.813401][ T6147] and is ignored by this kernel. Remove the mand [ 100.813401][ T6147] option from the mount to silence this warning. [ 100.813401][ T6147] ======================================================= [ 100.849933][ T6147] exfat: Deprecated parameter 'utf8' [ 100.855659][ T6147] exfat: Deprecated parameter 'namecase' [ 100.861534][ T6147] exfat: Deprecated parameter 'utf8' [ 101.730078][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 101.757899][ T6147] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 101.848203][ T6147] exFAT-fs (loop2): start_clu is invalid cluster(0x0) [ 101.869763][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 102.665443][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 102.694199][ T6141] ceph: No mds server is up or the cluster is laggy [ 102.717748][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 102.790227][ T6153] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.804591][ T6153] xt_TCPMSS: Only works on TCP SYN packets [ 103.373802][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 103.392652][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 105.398413][ T6183] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.993102][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 110.089941][ T6222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.74'. [ 110.107295][ T6222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 112.298609][ T6240] loop2: detected capacity change from 0 to 4096 [ 112.310462][ T6240] EXT4-fs: inline encryption not supported [ 112.319318][ T6240] ext4: Unknown parameter 'nouser_xattr' [ 115.307950][ T6251] netlink: 'syz.0.81': attribute type 1 has an invalid length. [ 115.931806][ T6251] veth3: entered promiscuous mode [ 115.978294][ T6254] ref_ctr increment failed for inode: 0x67 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88807a34b300 [ 116.304561][ T6261] loop1: detected capacity change from 0 to 512 [ 116.517164][ T6261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.596240][ T6261] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.915529][ T6276] loop0: detected capacity change from 0 to 512 [ 117.319711][ T6276] EXT4-fs warning (device loop0): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 117.335911][ T6276] EXT4-fs (loop0): mount failed [ 117.769291][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.268529][ T6294] loop2: detected capacity change from 0 to 2048 [ 119.325572][ T6294] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 120.265984][ T6291] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 24576 lbcount: 28672 extent 129+28160 [ 123.710423][ T6335] loop3: detected capacity change from 0 to 4096 [ 123.742820][ T30] audit: type=1804 audit(1773242358.421:7): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.110" name="/newroot/26/file0" dev="tmpfs" ino=150 res=1 errno=0 [ 123.768872][ T6352] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: 1 [ 123.818671][ T6352] ref_ctr increment failed for inode: 0x96 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807cec2640 [ 124.210536][ T6335] ntfs3(loop3): ino=3, Correct links count -> 2. [ 124.216568][ T6360] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -30507, delta: -1 [ 124.412599][ T6360] ref_ctr decrement failed for inode: 0x96 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88807cec2640 [ 124.441045][ T6360] uprobe: syz.0.110:6360 failed to unregister, leaking uprobe [ 125.768860][ T6374] loop1: detected capacity change from 0 to 128 [ 125.917167][ T6374] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 126.739186][ T6374] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 126.788609][ T6374] ext2 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.287782][ T5825] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 128.342256][ T6401] loop0: detected capacity change from 0 to 1024 [ 128.386602][ T6401] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 128.415660][ T6401] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 128.438988][ T6401] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 128.483794][ T6401] EXT4-fs error (device loop0): ext4_get_journal_inode:5863: comm syz.0.127: inode #63: comm syz.0.127: iget: illegal inode # [ 128.502253][ T6401] loop0: lost filesystem error report for type 5 error -117 [ 128.503127][ C1] EXT4-fs (loop0): initial error at time 1773242363: ext4_get_journal_inode:5863 [ 128.521613][ C1] EXT4-fs (loop0): last error at time 1773242363: ext4_get_journal_inode:5863 [ 129.436919][ T6401] EXT4-fs (loop0): no journal found [ 129.462222][ T6401] EXT4-fs (loop0): can't get journal size [ 129.495172][ T6401] EXT4-fs (loop0): failed to initialize system zone (-22) [ 129.503414][ T6401] EXT4-fs (loop0): mount failed [ 130.568782][ T30] audit: type=1326 audit(1773242365.201:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6419 comm="syz.3.131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc70f9c799 code=0x0 [ 132.895170][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.903294][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.755396][ T6445] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 133.915546][ T5847] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 133.926875][ T5847] Bluetooth: hci0: Injecting HCI hardware error event [ 133.943037][ T5847] Bluetooth: hci0: hardware error 0x00 [ 135.039277][ T6454] syzkaller0: entered promiscuous mode [ 135.055893][ T6462] netlink: 124 bytes leftover after parsing attributes in process `syz.2.139'. [ 135.156881][ T6454] syzkaller0: entered allmulticast mode [ 136.233606][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.629639][ T6478] loop2: detected capacity change from 0 to 2048 [ 136.838935][ T6486] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 137.050984][ T6496] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 137.589007][ T6488] kvm: pic: non byte write [ 137.628069][ T6497] kvm: vcpu 0: requested 768 ns lapic timer period limited to 200000 ns [ 137.743157][ T6478] syz.2.146 (6478) used greatest stack depth: 18264 bytes left [ 138.032356][ T6506] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.884015][ T6515] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 138.892564][ T6515] overlayfs: failed to set xattr on upper [ 138.898408][ T6515] overlayfs: ...falling back to redirect_dir=nofollow. [ 138.905459][ T6515] overlayfs: ...falling back to index=off. [ 138.911307][ T6515] overlayfs: ...falling back to uuid=null. [ 139.035313][ T6515] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 139.202559][ T6518] syz.0.156 uses obsolete (PF_INET,SOCK_PACKET) [ 141.153536][ T6531] kvm: pic: non byte write [ 143.058996][ T30] audit: type=1804 audit(1773242377.741:9): pid=6546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.164" name="bus" dev="ramfs" ino=10422 res=1 errno=0 [ 144.046211][ T30] audit: type=1804 audit(1773242378.731:10): pid=6555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.164" name="bus" dev="ramfs" ino=10422 res=1 errno=0 [ 145.391294][ T6566] loop1: detected capacity change from 0 to 256 [ 145.428812][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 145.798755][ T6578] Illegal XDP return value 4294967294 on prog (id 21) dev syz_tun, expect packet loss! [ 146.797027][ T6559] netlink: 'syz.4.168': attribute type 2 has an invalid length. [ 150.489496][ T30] audit: type=1326 audit(1773242385.171:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.543749][ T30] audit: type=1326 audit(1773242385.201:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.576659][ T30] audit: type=1326 audit(1773242385.211:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.606460][ T6612] loop1: detected capacity change from 0 to 1024 [ 150.613487][ T30] audit: type=1326 audit(1773242385.211:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.642349][ T6612] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.660263][ T30] audit: type=1326 audit(1773242385.211:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.721540][ T6612] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.735402][ T30] audit: type=1326 audit(1773242385.221:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.759316][ T30] audit: type=1326 audit(1773242385.221:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.786109][ T30] audit: type=1326 audit(1773242385.231:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.813051][ T30] audit: type=1326 audit(1773242385.231:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7effb9b9c799 code=0x7ffc0000 [ 150.858543][ T30] audit: type=1326 audit(1773242385.231:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7effb9b9c502 code=0x7ffc0000 [ 151.898094][ T92] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.010576][ C0] BUG: workqueue function usb_giveback_urb_bh changed kcov_mode from 1073741824 to 0 [ 152.171192][ T92] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.183918][ T92] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 152.193664][ T92] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.255340][ T92] usb 4-1: config 0 descriptor?? [ 152.276311][ T5825] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.309488][ T92] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 154.276606][ T92] usb 4-1: USB disconnect, device number 2