last executing test programs: 38.479331374s ago: executing program 1 (id=129): r0 = fsopen(&(0x7f00000001c0)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) io_setup(0x2e, &(0x7f0000000200)=0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='./file1\x00', 0x82000804) io_submit(r3, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xf, r2, 0x0, 0x0, 0x4000000}]) 38.252621935s ago: executing program 1 (id=132): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x91e8d5c924b6df0f}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000800) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 38.094806073s ago: executing program 1 (id=133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0xc, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 37.085816163s ago: executing program 1 (id=142): setns(0xffffffffffffffff, 0x8020000) openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x4208, r0) ioprio_set$pid(0x2, r0, 0x4004) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) 36.426364975s ago: executing program 1 (id=145): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r3, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5a1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5}) ioctl$IOMMU_VFIO_SET_IOMMU(r0, 0x3b66, 0x1) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000ff2f00000000000001"]) 34.351087927s ago: executing program 1 (id=161): r0 = timerfd_create(0x8, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, &(0x7f0000000140)=""/240, 0xf0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 33.933903678s ago: executing program 32 (id=161): r0 = timerfd_create(0x8, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read(r0, &(0x7f0000000140)=""/240, 0xf0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 8.576655367s ago: executing program 3 (id=317): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) signalfd(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 8.432040994s ago: executing program 3 (id=318): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x38011, r1, 0x0) read(r1, &(0x7f00000000c0)=""/163, 0xd0140f23) 6.944478587s ago: executing program 0 (id=324): sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f00000079c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x4000cdd) unlink(&(0x7f0000000000)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 6.190137525s ago: executing program 3 (id=330): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) 5.292542898s ago: executing program 2 (id=332): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000005440)={0x2020}, 0x2020) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x2000000000000) 4.881794719s ago: executing program 0 (id=334): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x31, &(0x7f0000001600), 0x4) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 4.341755156s ago: executing program 2 (id=335): socket$kcm(0xa, 0x2, 0x73) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x6) pselect6(0x40, &(0x7f00000001c0)={0xc, 0x80000, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write(r2, 0x0, 0x0) 3.535403755s ago: executing program 0 (id=340): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x112}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 3.523757126s ago: executing program 4 (id=341): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x80, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000240)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_enter(r0, 0x3516, 0x7dd6, 0x8, 0x0, 0x0) 3.44049757s ago: executing program 3 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 3.341431595s ago: executing program 2 (id=343): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bind$pptp(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) 3.261425119s ago: executing program 4 (id=344): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x1) 3.2346975s ago: executing program 0 (id=345): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x44}}], 0x1, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r2, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3.180802573s ago: executing program 3 (id=346): openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x7, 0x408, 0x6, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc01, 0x8) writev(r2, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f0000000380)='./file0\x00', 0x1) 2.971813583s ago: executing program 0 (id=347): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2.876419648s ago: executing program 3 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@setlink={0x3c, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2024, 0x1920}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}, @IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2c0400c0}, 0x20008000) 2.495662977s ago: executing program 4 (id=349): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x18e) r2 = inotify_init1(0x80000) inotify_add_watch(r2, &(0x7f00000000c0)='./file0\x00', 0x60006a4) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r1) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 2.255164429s ago: executing program 2 (id=350): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.638857978s ago: executing program 0 (id=351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x3b879000) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000000, 0x0) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) 1.60321641s ago: executing program 4 (id=352): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) lseek(0xffffffffffffffff, 0x76f3, 0x0) fsopen(0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x7fffffff, 0x7, 0x7c, 0x525, 0x0, 0x7, 0x3ff, 0x6}, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000440)={&(0x7f0000000300)={[0x200]}, 0x8}) 1.508040995s ago: executing program 2 (id=353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1.349852973s ago: executing program 4 (id=354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005880)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 787.695631ms ago: executing program 4 (id=355): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 0s ago: executing program 2 (id=356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_fw={{0x7}, {0xfffffffffffffe21}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x7, 0x4}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c040}, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 64.103456][ T5753] cgroup: Unknown subsys name 'net' [ 64.263672][ T5753] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.631913][ T5753] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.001759][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.014162][ T5773] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.027282][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.040460][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.051435][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.058246][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.060808][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.068461][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.081778][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.087953][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.090371][ T5774] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.103511][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.104690][ T5774] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.118573][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.128078][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.135382][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.136467][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.143493][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.151071][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.158287][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.164238][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.172596][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.179626][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.185354][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.565597][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 67.616382][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 67.761482][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.770592][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.778147][ T5765] bridge_slave_0: entered allmulticast mode [ 67.785217][ T5765] bridge_slave_0: entered promiscuous mode [ 67.795287][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.802718][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.810015][ T5765] bridge_slave_1: entered allmulticast mode [ 67.819903][ T5765] bridge_slave_1: entered promiscuous mode [ 67.832613][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 67.858613][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.865745][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.873041][ T5764] bridge_slave_0: entered allmulticast mode [ 67.880567][ T5764] bridge_slave_0: entered promiscuous mode [ 67.912510][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.926275][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.938721][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.945900][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.954114][ T5764] bridge_slave_1: entered allmulticast mode [ 67.962191][ T5764] bridge_slave_1: entered promiscuous mode [ 67.995166][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.029413][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.041817][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.063175][ T5765] team0: Port device team_slave_0 added [ 68.111466][ T5765] team0: Port device team_slave_1 added [ 68.152960][ T5764] team0: Port device team_slave_0 added [ 68.196024][ T5764] team0: Port device team_slave_1 added [ 68.212589][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.220286][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.246687][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.267456][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.274435][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.303140][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.314481][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.321692][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.329013][ T5766] bridge_slave_0: entered allmulticast mode [ 68.335671][ T5766] bridge_slave_0: entered promiscuous mode [ 68.343330][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.350505][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.358005][ T5766] bridge_slave_1: entered allmulticast mode [ 68.364693][ T5766] bridge_slave_1: entered promiscuous mode [ 68.391548][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.398800][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.406118][ T5767] bridge_slave_0: entered allmulticast mode [ 68.413004][ T5767] bridge_slave_0: entered promiscuous mode [ 68.429018][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.436069][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.462971][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.484801][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.491992][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.519325][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.531021][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.538621][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.545872][ T5767] bridge_slave_1: entered allmulticast mode [ 68.552793][ T5767] bridge_slave_1: entered promiscuous mode [ 68.576512][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.624499][ T5765] hsr_slave_0: entered promiscuous mode [ 68.630818][ T5765] hsr_slave_1: entered promiscuous mode [ 68.640299][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.653232][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.696427][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.736196][ T5764] hsr_slave_0: entered promiscuous mode [ 68.742770][ T5764] hsr_slave_1: entered promiscuous mode [ 68.749827][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.757698][ T5764] Cannot create hsr debugfs directory [ 68.773535][ T5767] team0: Port device team_slave_0 added [ 68.782655][ T5767] team0: Port device team_slave_1 added [ 68.791250][ T5766] team0: Port device team_slave_0 added [ 68.799723][ T5766] team0: Port device team_slave_1 added [ 68.848198][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.855205][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.881783][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.917063][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.924043][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.950574][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.962341][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.969441][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.996987][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.030795][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.037911][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.064021][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.136144][ T5766] hsr_slave_0: entered promiscuous mode [ 69.144217][ T5766] hsr_slave_1: entered promiscuous mode [ 69.150463][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.158145][ T5766] Cannot create hsr debugfs directory [ 69.206222][ T5767] hsr_slave_0: entered promiscuous mode [ 69.215286][ T5767] hsr_slave_1: entered promiscuous mode [ 69.221737][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.229846][ T5767] Cannot create hsr debugfs directory [ 69.237827][ T5778] Bluetooth: hci3: command tx timeout [ 69.237839][ T5779] Bluetooth: hci0: command tx timeout [ 69.243489][ T5778] Bluetooth: hci2: command tx timeout [ 69.249267][ T5779] Bluetooth: hci1: command tx timeout [ 69.532708][ T5765] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.558204][ T5765] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.568508][ T5765] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.578692][ T5765] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.620594][ T5764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.632818][ T5764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.644796][ T5764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.655240][ T5764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.765262][ T5766] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.775487][ T5766] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.785755][ T5766] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.811900][ T5766] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.894181][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.903526][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.915216][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.924693][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.960916][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.021117][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.029964][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.062687][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.070063][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.118776][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.129611][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.136759][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.184028][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.191188][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.203360][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.210494][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.243311][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.291515][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.320987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.328170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.338400][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.345649][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.461496][ T5766] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.536660][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.608556][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.632524][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.639725][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.698873][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.706015][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.829627][ T5767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.883277][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.919541][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.935070][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.089804][ T5764] veth0_vlan: entered promiscuous mode [ 71.097701][ T5765] veth0_vlan: entered promiscuous mode [ 71.116542][ T5766] veth0_vlan: entered promiscuous mode [ 71.134629][ T5764] veth1_vlan: entered promiscuous mode [ 71.144342][ T5765] veth1_vlan: entered promiscuous mode [ 71.162134][ T5766] veth1_vlan: entered promiscuous mode [ 71.205183][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.222644][ T5765] veth0_macvtap: entered promiscuous mode [ 71.233230][ T5765] veth1_macvtap: entered promiscuous mode [ 71.267697][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.302832][ T5766] veth0_macvtap: entered promiscuous mode [ 71.313130][ T5764] veth0_macvtap: entered promiscuous mode [ 71.319784][ T5779] Bluetooth: hci1: command tx timeout [ 71.321021][ T5778] Bluetooth: hci2: command tx timeout [ 71.325189][ T5779] Bluetooth: hci0: command tx timeout [ 71.331692][ T51] Bluetooth: hci3: command tx timeout [ 71.354875][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.374856][ T5766] veth1_macvtap: entered promiscuous mode [ 71.386740][ T5765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.396411][ T5765] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.407372][ T5765] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.416119][ T5765] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.432186][ T5764] veth1_macvtap: entered promiscuous mode [ 71.464520][ T5767] veth0_vlan: entered promiscuous mode [ 71.471030][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.482564][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.494286][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.510979][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.521632][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.532732][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.560886][ T5766] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.571207][ T5766] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.581041][ T5766] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.589942][ T5766] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.602949][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.613732][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.623711][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.634197][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.645688][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.653918][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.660592][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.676083][ T5767] veth1_vlan: entered promiscuous mode [ 71.705009][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.715971][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.726271][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.737059][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.748423][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.811185][ T5764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.821612][ T5764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.831654][ T5764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.841269][ T5764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.903256][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.915806][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.964541][ T5767] veth0_macvtap: entered promiscuous mode [ 71.983670][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.986222][ T5767] veth1_macvtap: entered promiscuous mode [ 72.002235][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.039465][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.051096][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.061171][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.071912][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.081778][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.092258][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.103894][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.115494][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.127270][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.140998][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.151480][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.161811][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.172349][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.183568][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.203206][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.211469][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.257425][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.259246][ T1126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.266160][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.285273][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.292910][ T1126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.294040][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.314173][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.333571][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.413676][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.455394][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.624018][ T1126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.641923][ T1126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.785079][ T1083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.794346][ T1083] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.968502][ T5842] syz.2.5[5842]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.047240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.056043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.064912][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.073765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.137641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.236917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 73.246146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.396992][ T5778] Bluetooth: hci0: command tx timeout [ 73.402619][ T5778] Bluetooth: hci1: command tx timeout [ 73.403699][ T5842] loop2: detected capacity change from 0 to 512 [ 73.408297][ T51] Bluetooth: hci2: command tx timeout [ 73.422466][ T5768] Bluetooth: hci3: command tx timeout [ 73.467172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.501129][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.567934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.047521][ T5853] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.116153][ T5842] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 74.147611][ T5842] EXT4-fs (loop2): Test dummy encryption mode enabled [ 74.208563][ T5842] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.547366][ T5765] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 75.170257][ T5889] netlink: 'syz.2.18': attribute type 39 has an invalid length. [ 75.234410][ T5890] loop3: detected capacity change from 0 to 512 [ 75.337146][ T5890] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.19: inode has both inline data and extents flags [ 75.366618][ T5890] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 75.383009][ T5890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.477928][ T5778] Bluetooth: hci1: command tx timeout [ 75.477997][ T5768] Bluetooth: hci2: command tx timeout [ 75.483389][ T5779] Bluetooth: hci3: command tx timeout [ 75.488846][ T51] Bluetooth: hci0: command tx timeout [ 75.663676][ T5894] io-wq is not configured for unbound workers [ 75.861226][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.579471][ T5934] loop3: detected capacity change from 0 to 512 [ 77.624962][ T5934] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 77.655352][ T5934] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e028, mo2=0002] [ 77.682882][ T5934] EXT4-fs (loop3): orphan cleanup on readonly fs [ 77.698409][ T5934] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.31: bg 0: block 361: padding at end of block bitmap is not set [ 77.737330][ T5934] EXT4-fs (loop3): Remounting filesystem read-only [ 77.783244][ T5934] EXT4-fs (loop3): 1 truncate cleaned up [ 77.833075][ T5934] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 77.985824][ T5934] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 78.031718][ T5934] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.31: Corrupt directory, running e2fsck is recommended [ 78.083006][ T5941] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 78.109692][ T5943] Illegal XDP return value 4294967294 on prog (id 4) dev syz_tun, expect packet loss! [ 78.136979][ T5941] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.31: Corrupt directory, running e2fsck is recommended [ 78.193607][ T5944] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 78.248870][ T5944] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.31: Corrupt directory, running e2fsck is recommended [ 78.294259][ T5934] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 78.337209][ T5934] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.31: Corrupt directory, running e2fsck is recommended [ 78.408177][ T5941] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 78.447437][ T5934] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.31: dx entry: limit 0 != root limit 125 [ 78.532991][ T5766] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 79.261697][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.613134][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 79.828920][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.848267][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.868775][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.888163][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.903387][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.913105][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.921632][ T9] usb 2-1: Product: syz [ 79.926057][ T9] usb 2-1: Manufacturer: syz [ 79.969486][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 79.975805][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 79.992017][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 80.004214][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 80.085949][ T5978] loop3: detected capacity change from 0 to 32768 [ 80.152427][ T5978] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.208211][ T9] usb 2-1: USB disconnect, device number 2 [ 80.309714][ T5978] XFS (loop3): Ending clean mount [ 80.338286][ T5978] XFS (loop3): Quotacheck needed: Please wait. [ 80.404627][ T5978] XFS (loop3): Quotacheck: Done. [ 80.659838][ T5766] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 80.817371][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.048586][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 81.087045][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.118232][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 81.147482][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.187939][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 81.216817][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 81.235832][ T9] usb 2-1: Product: syz [ 81.246078][ T9] usb 2-1: Manufacturer: syz [ 81.274402][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 81.286948][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 81.313153][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 81.356844][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 81.587824][ T6021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 81.723463][ T6024] smc: net device wlan0 applied user defined pnetid SYZ0 [ 81.814242][ T6027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.62'. [ 81.888262][ T42] cfg80211: failed to load regulatory.db [ 82.012611][ T6015] loop2: detected capacity change from 0 to 40427 [ 82.033402][ T6015] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 82.058437][ T6015] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 82.076300][ T6015] F2FS-fs (loop2): invalid crc value [ 82.100033][ T6015] F2FS-fs (loop2): Found nat_bits in checkpoint [ 82.137726][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 82.137950][ T9] usb 2-1: USB disconnect, device number 3 [ 82.144659][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 82.156566][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 82.290194][ T6015] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 82.306507][ T6015] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.137765][ T6050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 83.636803][ C1] sched: RT throttling activated [ 84.255182][ T6069] process 'syz.0.77' launched './file2' with NULL argv: empty string added [ 84.704856][ T6074] netlink: 24 bytes leftover after parsing attributes in process `syz.1.79'. [ 84.757760][ T6046] loop3: detected capacity change from 0 to 262144 [ 84.765148][ T6046] ======================================================= [ 84.765148][ T6046] WARNING: The mand mount option has been deprecated and [ 84.765148][ T6046] and is ignored by this kernel. Remove the mand [ 84.765148][ T6046] option from the mount to silence this warning. [ 84.765148][ T6046] ======================================================= [ 84.804186][ T6046] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.70 (6046) [ 84.846120][ T6076] loop0: detected capacity change from 0 to 256 [ 84.853713][ T6046] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 84.864482][ T6046] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 84.873842][ T6046] BTRFS info (device loop3): using free space tree [ 85.023420][ T6046] BTRFS info (device loop3): enabling ssd optimizations [ 85.030577][ T6046] BTRFS info (device loop3): auto enabling async discard [ 85.245443][ T27] audit: type=1800 audit(1773706084.253:2): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.70" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 85.552900][ T6107] netlink: 228 bytes leftover after parsing attributes in process `syz.1.85'. [ 85.733508][ T5766] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 85.985619][ T6114] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.000544][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.457196][ T6118] ref_ctr_offset mismatch. inode: 0x7f offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 86.544560][ T6124] loop1: detected capacity change from 0 to 128 [ 86.615947][ T6124] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 86.776906][ T27] audit: type=1800 audit(1773706085.793:3): pid=6124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.91" name="bus" dev="loop1" ino=1048592 res=0 errno=0 [ 87.315480][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.99'. [ 87.873212][ T6154] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 87.897664][ T6154] vlan2: entered allmulticast mode [ 87.903025][ T6154] veth0_to_bond: entered allmulticast mode [ 88.229117][ T6159] Zero length message leads to an empty skb [ 88.255492][ T6165] macvlan2: entered promiscuous mode [ 88.279655][ T6165] macvlan2: entered allmulticast mode [ 88.874118][ T6177] netlink: 'syz.1.112': attribute type 27 has an invalid length. [ 89.471328][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.480119][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.762715][ T6203] xt_recent: Unsupported userspace flags (000000b1) [ 89.968944][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.003214][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.307781][ T6177] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.317012][ T6177] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.326230][ T6177] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.336618][ T6177] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.379752][ T6235] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 91.717235][ T6241] kvm: Disabled LAPIC found during irq injection [ 91.998619][ T6253] netlink: 36 bytes leftover after parsing attributes in process `syz.0.138'. [ 92.200816][ T6258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 92.228139][ T6258] netlink: 32 bytes leftover after parsing attributes in process `syz.0.140'. [ 92.689370][ T6265] loop1: detected capacity change from 0 to 128 [ 92.755697][ T6265] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.908197][ T6265] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 93.138162][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 93.164809][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 93.213338][ T5767] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 93.236272][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 93.264502][ T6272] syz_tun: entered allmulticast mode [ 93.278608][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 93.325967][ T6276] netlink: 'syz.0.147': attribute type 6 has an invalid length. [ 93.427577][ T5767] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 93.492129][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 93.560092][ T6275] loop3: detected capacity change from 0 to 32768 [ 93.566663][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.149'. [ 93.583140][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 93.597390][ T6275] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.148 (6275) [ 93.609540][ T5767] EXT4-fs error (device loop1): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 93.610283][ T5767] EXT4-fs error (device loop1): ext4_readdir:223: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 93.651489][ T6275] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 93.662036][ T6275] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 93.670878][ T6275] BTRFS info (device loop3): using free space tree [ 93.754929][ T6275] BTRFS info (device loop3): enabling ssd optimizations [ 93.761985][ T6275] BTRFS info (device loop3): auto enabling async discard [ 93.894882][ T6298] loop0: detected capacity change from 0 to 512 [ 94.016916][ T6298] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.0.151: corrupted xattr block 95: invalid header [ 94.143466][ T6298] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 94.167696][ T6298] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.151: bg 0: block 7: invalid block bitmap [ 94.207744][ T6298] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6651: Corrupt filesystem [ 94.223803][ T6298] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2969: inode #11: comm syz.0.151: corrupted xattr block 95: invalid header [ 94.270909][ T6298] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -117) [ 94.292774][ T6298] EXT4-fs (loop0): 1 orphan inode deleted [ 94.293158][ T5766] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.337980][ T6298] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.517188][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 94.720465][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.116541][ T6270] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 95.240567][ T27] audit: type=1326 audit(1773706094.243:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6323 comm="syz.2.160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90ddd9c799 code=0x0 [ 96.191929][ T6343] warning: `syz.2.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.252829][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.265458][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.278357][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.302978][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.323723][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 96.335283][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.847104][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.050737][ T6365] syz.3.172(6365): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 97.231588][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 97.850424][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.897172][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.907226][ T9] usb 3-1: Product: syz [ 97.911433][ T9] usb 3-1: Manufacturer: syz [ 97.916082][ T9] usb 3-1: SerialNumber: syz [ 97.925710][ T9] usb 3-1: config 0 descriptor?? [ 98.083097][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 98.177396][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.446455][ T5779] Bluetooth: hci3: command tx timeout [ 98.466448][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.495622][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.503526][ T6345] bridge_slave_0: entered allmulticast mode [ 98.511322][ T6345] bridge_slave_0: entered promiscuous mode [ 98.557594][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.589099][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.615824][ T6345] bridge_slave_1: entered allmulticast mode [ 98.641182][ T6345] bridge_slave_1: entered promiscuous mode [ 98.693053][ T1126] hsr_slave_0: left promiscuous mode [ 98.702145][ T1126] hsr_slave_1: left promiscuous mode [ 98.714298][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.725536][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.739833][ T1126] bridge_slave_1: left allmulticast mode [ 98.745684][ T1126] bridge_slave_1: left promiscuous mode [ 98.755429][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.786071][ T1126] bridge_slave_0: left allmulticast mode [ 98.797813][ T1126] bridge_slave_0: left promiscuous mode [ 98.811223][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.224260][ T9] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 99.528538][ T9] usb 3-1: USB disconnect, device number 2 [ 99.851837][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 99.897913][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 99.941333][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.992373][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.370537][ T1126] bond0 (unregistering): Released all slaves [ 100.520448][ T5779] Bluetooth: hci3: command tx timeout [ 100.599384][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.761100][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.914025][ T6345] team0: Port device team_slave_0 added [ 100.944111][ T6345] team0: Port device team_slave_1 added [ 101.009433][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.044522][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.097069][ T6345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.157945][ T6345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.187778][ T6345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.223602][ T6345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.251922][ T6420] tipc: Started in network mode [ 101.260497][ T6420] tipc: Node identity e2de0202a349, cluster identity 4711 [ 101.269172][ T6420] tipc: Enabled bearer , priority 0 [ 101.353056][ T6345] hsr_slave_0: entered promiscuous mode [ 101.371281][ T6345] hsr_slave_1: entered promiscuous mode [ 101.391819][ T6345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.411818][ T6345] Cannot create hsr debugfs directory [ 101.442205][ T6425] syzkaller0: MTU too low for tipc bearer [ 101.457288][ T6425] tipc: Disabling bearer [ 101.987652][ T6345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.005326][ T6345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.023735][ T6345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.054842][ T6345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.268203][ T6345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.329313][ T6345] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.360417][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.367780][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.414405][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.421838][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.597129][ T5779] Bluetooth: hci3: command tx timeout [ 103.196179][ T6345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.912271][ T6345] veth0_vlan: entered promiscuous mode [ 103.951624][ T6345] veth1_vlan: entered promiscuous mode [ 104.089046][ T6345] veth0_macvtap: entered promiscuous mode [ 104.117783][ T6345] veth1_macvtap: entered promiscuous mode [ 104.217436][ T6517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.204'. [ 104.263787][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.295761][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.315900][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.338013][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.356850][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.376846][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.389314][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.419552][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.437234][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.456806][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.477018][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.496908][ T6345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.516569][ T6508] loop3: detected capacity change from 0 to 32768 [ 104.532916][ T6345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.560789][ T6345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.616200][ T6508] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.639207][ T6345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.677118][ T5779] Bluetooth: hci3: command tx timeout [ 104.690686][ T6345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.719824][ T6345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.745207][ T6345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.853016][ T6508] XFS (loop3): Ending clean mount [ 104.996106][ T6539] ref_ctr_offset mismatch. inode: 0x120 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 105.011794][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.035806][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.137717][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.168604][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.326486][ T27] audit: type=1804 audit(1773706104.333:5): pid=6550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.199" name="/newroot/52/file1/file1" dev="loop3" ino=9286 res=1 errno=0 [ 105.424395][ T27] audit: type=1804 audit(1773706104.343:6): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.199" name="/newroot/52/file1/file1" dev="loop3" ino=9286 res=1 errno=0 [ 105.502033][ T5766] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.766447][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 105.879513][ T6566] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.887218][ T6566] IPv6: NLM_F_CREATE should be set when creating new route [ 105.942285][ T6564] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.949631][ T6564] IPv6: NLM_F_CREATE should be set when creating new route [ 106.757259][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 106.980220][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.028755][ T23] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.107043][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.157961][ T23] usb 3-1: config 0 descriptor?? [ 107.462113][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 107.495806][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 107.542183][ T23] usb 3-1: USB disconnect, device number 3 [ 108.128531][ T6606] loop0: detected capacity change from 0 to 1024 [ 108.152149][ T6606] EXT4-fs (loop0): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 108.177108][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.255894][ T6606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.399651][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.416702][ T27] audit: type=1800 audit(1773706107.433:7): pid=6606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.220" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 108.416932][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.487899][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.517190][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.529338][ T23] usb 3-1: config 0 descriptor?? [ 108.581562][ T5764] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.672341][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.221'. [ 108.770861][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.3.221'. [ 108.824814][ T6617] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 109.010196][ T23] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 109.083436][ T23] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.436422][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (swapper/1) [ 109.650740][ T42] usb 3-1: USB disconnect, device number 4 [ 111.414490][ T6704] netlink: 'syz.0.242': attribute type 13 has an invalid length. [ 111.596464][ T6713] netlink: 'syz.3.243': attribute type 9 has an invalid length. [ 111.609638][ T6713] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.243'. [ 111.887135][ T6725] loop4: detected capacity change from 0 to 512 [ 111.891726][ T6717] netlink: 'syz.3.243': attribute type 9 has an invalid length. [ 111.909638][ T6725] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.932895][ T6717] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.243'. [ 111.933638][ T6725] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.001652][ T6725] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.247: corrupted xattr entries [ 112.047327][ T6725] EXT4-fs (loop4): 1 orphan inode deleted [ 112.086733][ T6725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.357389][ T42] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.391020][ T6345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.568809][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.600762][ T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.632181][ T42] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 112.662842][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.694790][ T42] usb 1-1: config 0 descriptor?? [ 112.873937][ T6755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'. [ 113.158536][ T42] pyra 0003:1E7D:2CF6.0002: unknown main item tag 0x2 [ 113.181907][ T42] pyra 0003:1E7D:2CF6.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 113.196120][ T6763] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 113.459733][ T27] audit: type=1326 audit(1773706112.483:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6745 comm="syz.2.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ddd9c799 code=0x7fc00000 [ 114.096012][ T6789] trusted_key: syz.2.265 sent an empty control message without MSG_MORE. [ 114.123398][ T6774] lo: entered promiscuous mode [ 114.128691][ T6774] lo: entered allmulticast mode [ 114.577406][ T42] pyra 0003:1E7D:2CF6.0002: couldn't init struct pyra_device [ 114.608888][ T42] pyra 0003:1E7D:2CF6.0002: couldn't install mouse [ 114.627832][ T42] pyra: probe of 0003:1E7D:2CF6.0002 failed with error -71 [ 114.655693][ T42] usb 1-1: USB disconnect, device number 2 [ 115.981244][ T6804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 117.037041][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 117.079971][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 118.295505][ T6851] loop4: detected capacity change from 0 to 256 [ 119.348593][ T6881] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 119.429812][ T6881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.523536][ T6884] bond1: (slave veth5): Enslaving as an active interface with a down link [ 119.548581][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 119.652339][ T6886] bond1: entered promiscuous mode [ 119.661367][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.688461][ T6881] veth0_virt_wifi: entered promiscuous mode [ 119.743829][ T6881] bond1: (slave veth0_virt_wifi): making interface the new active one [ 119.779633][ T6881] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 119.796056][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.4.304'. [ 119.870633][ T6893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.977393][ T6894] macsec1: entered promiscuous mode [ 120.005827][ T6894] bond1: entered promiscuous mode [ 120.051929][ T6894] bond1: left promiscuous mode [ 120.156714][ T6886] IPv6: sit2: Disabled Multicast RS [ 120.196362][ T6886] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.247418][ T6886] bond1: (slave sit2): The slave device specified does not support setting the MAC address [ 120.271645][ T6886] bond1: (slave sit2): Error -95 calling set_mac_address [ 120.521959][ T6908] loop3: detected capacity change from 0 to 256 [ 120.531571][ T6908] FAT-fs (loop3): bogus number of FAT structure [ 120.557261][ T6908] FAT-fs (loop3): Can't find a valid FAT filesystem [ 120.586509][ T6910] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 120.599747][ T6910] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.311'. [ 123.656612][ T6980] loop2: detected capacity change from 0 to 1024 [ 123.694878][ T6980] EXT4-fs: Ignoring removed i_version option [ 123.763093][ T6980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.813590][ T27] audit: type=1800 audit(1773706122.833:9): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.331" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 123.816606][ T6980] syz.2.331 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 123.876312][ T6952] loop0: detected capacity change from 0 to 40427 [ 123.924807][ T6952] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x7ffff [ 123.979133][ T6952] F2FS-fs (loop0): invalid crc value [ 124.013648][ T6952] F2FS-fs (loop0): Found nat_bits in checkpoint [ 124.015117][ T6980] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4045: comm syz.2.331: Allocating blocks 385-513 which overlap fs metadata [ 124.130370][ T6979] EXT4-fs (loop2): pa ffff888076dd2570: logic 16, phys. 129, len 24 [ 124.139791][ T6979] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 8 [ 124.176180][ T6952] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 124.314992][ T11] Trying to write to read-only block-device loop2 [ 124.358142][ T5765] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.993289][ T5764] syz-executor: attempt to access beyond end of device [ 124.993289][ T5764] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 125.099730][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 125.113545][ T5764] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 128.405040][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.354'. [ 129.622184][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.356'. [ 235.206747][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 235.213756][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P49/1:b..l [ 235.222024][ C1] rcu: (detected by 1, t=10502 jiffies, g=17961, q=553 ncpus=2) [ 235.229867][ C1] task:kworker/u4:3 state:R running task stack:24456 pid:49 ppid:2 flags:0x00004000 [ 235.241900][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 235.248461][ C1] Call Trace: [ 235.251758][ C1] [ 235.254703][ C1] __schedule+0x1553/0x45a0 [ 235.259255][ C1] ? asan.module_dtor+0x20/0x20 [ 235.264125][ C1] ? mark_lock+0x94/0x320 [ 235.268476][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 235.274492][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 235.279801][ C1] preempt_schedule_irq+0xbf/0x150 [ 235.284937][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 235.290679][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 235.296500][ C1] irqentry_exit+0x67/0x70 [ 235.300932][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.306925][ C1] RIP: 0010:ieee80211_ibss_rx_queued_mgmt+0x11d1/0x2c80 [ 235.313885][ C1] Code: 80 fe 06 0f 83 41 15 00 00 e8 3b 3e 8e f7 49 be 00 00 00 00 00 fc ff df 43 0f b6 04 37 84 c0 44 8b 64 24 70 0f 85 97 15 00 00 <48> 8b 44 24 60 89 18 48 89 c3 43 0f b6 04 37 84 c0 0f 85 63 15 00 [ 235.333503][ C1] RSP: 0018:ffffc90000ba7820 EFLAGS: 00000246 [ 235.339682][ C1] RAX: 0000000000000000 RBX: 0000000000000fff RCX: ffff88801d251e00 [ 235.347689][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.355670][ C1] RBP: ffffc90000ba7ae8 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 235.363649][ C1] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: 0000000000000fff [ 235.371631][ C1] R13: fffff52000174f20 R14: dffffc0000000000 R15: 1ffff1100f1b1200 [ 235.379647][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xe9d/0x2c80 [ 235.385914][ C1] ? ieee80211_ibss_rx_no_sta+0x7a0/0x7a0 [ 235.391744][ C1] ? mark_lock+0x94/0x320 [ 235.396088][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 235.402081][ C1] ? lock_chain_count+0x20/0x20 [ 235.406949][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 235.412868][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 235.418091][ C1] ? skb_dequeue+0x124/0x160 [ 235.422700][ C1] ieee80211_iface_work+0x717/0xc70 [ 235.427918][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.433220][ C1] cfg80211_wiphy_work+0x225/0x260 [ 235.438349][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 235.444182][ C1] process_scheduled_works+0xa5d/0x15d0 [ 235.449867][ C1] ? worker_attach_to_pool+0x380/0x380 [ 235.455346][ C1] ? assign_work+0x3d2/0x5d0 [ 235.460390][ C1] worker_thread+0xa55/0xfc0 [ 235.465352][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 235.471349][ C1] ? _raw_spin_unlock+0x40/0x40 [ 235.476216][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 235.482229][ C1] kthread+0x2fa/0x390 [ 235.486303][ C1] ? pr_cont_work+0x560/0x560 [ 235.490994][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.495591][ C1] ret_from_fork+0x48/0x80 [ 235.500022][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.504626][ C1] ret_from_fork_asm+0x11/0x20 [ 235.509417][ C1] [ 235.512455][ C1] rcu: rcu_preempt kthread starved for 10528 jiffies! g17961 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 235.523753][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 235.533733][ C1] rcu: RCU grace-period kthread stack dump: [ 235.539625][ C1] task:rcu_preempt state:R running task stack:27160 pid:17 ppid:2 flags:0x00004000 [ 235.550420][ C1] Call Trace: [ 235.553713][ C1] [ 235.556667][ C1] __schedule+0x1553/0x45a0 [ 235.561211][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x120 [ 235.567123][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 235.573037][ C1] ? asan.module_dtor+0x20/0x20 [ 235.577905][ C1] ? enqueue_timer+0x23d/0x550 [ 235.582695][ C1] ? __mod_timer+0x984/0xdb0 [ 235.587320][ C1] schedule+0xbd/0x170 [ 235.591409][ C1] schedule_timeout+0x188/0x2d0 [ 235.596269][ C1] ? console_conditional_schedule+0x40/0x40 [ 235.602180][ C1] ? update_process_times+0x1b0/0x1b0 [ 235.607572][ C1] ? prepare_to_swait_event+0x339/0x360 [ 235.613131][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 235.618008][ C1] ? rcu_gp_init+0x1162/0x1560 [ 235.622786][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 235.627658][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 235.633658][ C1] ? rcu_gp_init+0x1560/0x1560 [ 235.638431][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 235.643304][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 235.648521][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 235.653740][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 235.658346][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 235.663639][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 235.668585][ C1] ? __kthread_parkme+0x162/0x1c0 [ 235.673627][ C1] kthread+0x2fa/0x390 [ 235.677701][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 235.682824][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.687425][ C1] ret_from_fork+0x48/0x80 [ 235.691856][ C1] ? kthread_blkcg+0xd0/0xd0 [ 235.696457][ C1] ret_from_fork_asm+0x11/0x20 [ 235.701243][ C1] [ 235.704267][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 235.710608][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 235.717643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 235.727707][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 235.733357][ C1] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 235.753157][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 235.759239][ C1] RAX: 44420aefe0253a00 RBX: ffffffff8162ac40 RCX: 44420aefe0253a00 [ 235.767232][ C1] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 235.775239][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 235.783223][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff11003848780 [ 235.791215][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 235.799283][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 235.808224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.814816][ C1] CR2: 00007fc2dc68b159 CR3: 000000007d845000 CR4: 00000000003506e0 [ 235.822811][ C1] Call Trace: [ 235.826101][ C1] [ 235.829041][ C1] default_idle+0x13/0x20 [ 235.833385][ C1] default_idle_call+0x6c/0xa0 [ 235.838175][ C1] do_idle+0x1f0/0x4e0 [ 235.842267][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 235.847476][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 235.852684][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 235.858954][ C1] cpu_startup_entry+0x43/0x60 [ 235.864093][ C1] start_secondary+0xee/0xf0 [ 235.868700][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 235.874809][ C1] [ 236.597483][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.603841][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 236.627411][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 236.633759][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=33424 sent=0 n=-1 (errno 32: Broken pipe) [ 238.766837][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 238.772921][ T5086] Bluetooth: hci0: command 0x0406 tx timeout [ 238.781054][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 238.787218][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 240.152696][ T5897] syz_tun (unregistering): left allmulticast mode [ 240.522146][ T1093] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.680255][ T1093] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.787271][ T1093] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.903173][ T1093] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.178386][ T1093] hsr_slave_0: left promiscuous mode [ 242.184468][ T1093] hsr_slave_1: left promiscuous mode [ 242.193038][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.202947][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.211866][ T1093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.224625][ T1093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.241778][ T1093] bridge_slave_1: left allmulticast mode [ 242.248007][ T1093] bridge_slave_1: left promiscuous mode [ 242.257910][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.274188][ T1093] bridge_slave_0: left allmulticast mode [ 242.284283][ T1093] bridge_slave_0: left promiscuous mode [ 242.294852][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.345446][ T1093] veth1_macvtap: left promiscuous mode [ 242.356360][ T1093] veth0_macvtap: left promiscuous mode [ 242.362570][ T1093] veth1_vlan: left promiscuous mode [ 242.373722][ T1093] veth0_vlan: left promiscuous mode [ 243.214241][ T1093] team0 (unregistering): Port device team_slave_1 removed [ 243.261819][ T1093] team0 (unregistering): Port device team_slave_0 removed [ 243.303253][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.348576][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.656398][ T1093] bond0 (unregistering): Released all slaves [ 244.129989][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.211010][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.303826][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.380287][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.561342][ T1093] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.635097][ T1093] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.699027][ T1093] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.793881][ T1093] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0