last executing test programs: 14.769255528s ago: executing program 3 (id=267): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) 13.609337374s ago: executing program 3 (id=270): socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) getsockopt$sock_buf(r2, 0x1, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r4, 0x0, 0x0) 12.395766601s ago: executing program 0 (id=272): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0}) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 11.465579482s ago: executing program 1 (id=274): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 11.365380885s ago: executing program 0 (id=275): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) 9.798185969s ago: executing program 1 (id=276): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=""/199}, {&(0x7f0000000340)=""/161}, {&(0x7f0000000400)=""/94}, {&(0x7f0000000480)=""/160}, {&(0x7f0000000640)=""/155}, {&(0x7f0000000700)=""/80}], 0x0, &(0x7f0000000580)=""/80, 0x11}}], 0x4000000000002ff, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299f000) r3 = socket$inet6(0xa, 0x2, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000041c0)={0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000003b40)=""/142, 0x8e}, {0x0}, {&(0x7f0000003d00)=""/249, 0xf9}, {0x0}, {&(0x7f0000003f00)=""/229, 0xe5}], 0x6, &(0x7f0000004100)=""/146, 0x92}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) close(0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x4e20, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 9.77883888s ago: executing program 3 (id=277): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xf, 0xa7, &(0x7f0000000040)="$eJzs17GJAkEYBeD/9uD2UhMRDIw3sQdLEUNNxEgR7EBsxFYsYTsw2FTEEdwBETMDA/2+YODNY2DSdzjt+7sqIm0iUtWbl+lusVxNx7P2DD5SERFlRPxHxKDT5uOo7X5yXzfrSd38Pj/+2779vwAAwOuKGD7mS8oX57wCb6GbpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17kGAAD///n9J6M=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r0 = getpid() syz_pidfd_open(r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000300), &(0x7f0000000280)=r2}, 0x20) syz_pidfd_open(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000400)=ANY=[], 0x0) 8.237199605s ago: executing program 0 (id=279): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x4) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x2982, 0x0) 7.973065201s ago: executing program 2 (id=280): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @aes128, 0x3, @desc2}) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 7.939662262s ago: executing program 3 (id=281): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r3, 0xbc7ae000) 7.894975593s ago: executing program 0 (id=282): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 7.485649372s ago: executing program 2 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=ANY=[], 0x47) 7.373532704s ago: executing program 0 (id=284): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000080)=0x2) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 5.777657191s ago: executing program 0 (id=285): socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x0) getsockopt$sock_buf(r2, 0x1, 0x0, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x4}, 0x4) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write(r4, 0x0, 0x0) 4.233066855s ago: executing program 2 (id=286): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket(0x2, 0x80805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000001240)={0xa9004080, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8) setreuid(0x0, r2) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x30, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @remote}]}, &(0x7f00000007c0)=0x10) lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}, @const={0x0, 0x0, 0x0, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x38}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x12, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f983"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf2500"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff090000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000001000000000000002cbd7000003500000200040050000000000000004c001200726663343130362867636d28616573292900"/214], 0x13c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r6, r6, r6, 0x1) add_key(0x0, 0x0, 0x0, 0xffffffffffffffa6, r6) r7 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 3.747365966s ago: executing program 2 (id=287): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvfrom(r2, 0x0, 0x0, 0x61, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0, 0x0, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0x88}]}}}], 0x70}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000580)={0x14, &(0x7f0000000440)={0x20, 0x24, 0xc8, {0xc8, 0xd, "c97f6703aee447ca656496b8d45920d79ede61cfed5e6add910fe5dc60e158eb8275e8619ed012c1b3683a4d9a9920a6d5e7990f0ab3ef9265dac6d37de9a7598bff566cd7b15c63bc804e32d831512174f6c8b6546dd0995200e24760d8653a5a5c57a06ab0cfa77291e11694f47cb74fdbf3b50440f0eeb99ee7057d6ada65078624ca227a18396259b5cfb225f1c60797eff53c3facf58e5a124ddf6e32a72ac4128382de37165063f5adac80685769ba7d21beb96a31bf6a1393aa2e949e1561fbcc38fd"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80b5}}}, &(0x7f0000000b40)={0x1c, &(0x7f00000005c0)={0x20, 0x9}, 0x0, &(0x7f0000000b00)={0x21, 0x0, 0x4, "52fb73e7"}}) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.296127016s ago: executing program 1 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() fchdir(0xffffffffffffffff) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) r3 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, &(0x7f0000000040)={0xd0, 0x2, 0x5}) 3.228871108s ago: executing program 3 (id=289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x3ff, @loopback, 0xffffff1e}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000240)="f8476735d08bbb54e5dd9f6c44739b4ca817e45d0a9ffd387d6fc9b0e7876cc29355d316f9a8524b326cc60f011badcd324a", 0x32, 0x20000040, 0x0, 0x0) 2.168198622s ago: executing program 1 (id=290): socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x800, 0x4) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d00"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r4, r4, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) 2.101981873s ago: executing program 3 (id=291): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000200)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000140)={0x1, 0x0, &(0x7f0000000080)=[0x0]}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000340)=@v1={0x0, @aes128, 0x3, @desc2}) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) 2.100816833s ago: executing program 2 (id=292): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket(0xa, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 1.060965797s ago: executing program 1 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200", "0000000000000000d59e00"}, 0x7, 0x4}) 99.104088ms ago: executing program 1 (id=294): prctl$PR_SET_SECUREBITS(0x1c, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000240)={0x0, &(0x7f0000000140)}, 0x10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 2 (id=295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x49f0, 0x20, 0x8001, 0x48024e}, 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c080}, 0x40480c0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mknod$loop(0x0, 0xfff, 0x0) utimes(&(0x7f0000000100)='./file0\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000000)="abece2d4d226b486b0a1f9a926c03ad36cb13c094188a7", 0x17}, {0x0}, {&(0x7f0000000300)}, {&(0x7f00000003c0)="cc80bb79df7b7188f71af838375da17f333f3f1b5ef328d954f64da2b848f0445e22357995f8d6f01e34e30286c8a89f6c9d8824e4eca10954ceb490efed0c072aba4db754d6fc84e82b3f3c91a33ef52c0bf6c361467043b28316475a", 0x5d}, {&(0x7f0000000480)="c7e15b2bc70647e69c36be04fe2df8d561734dd3f9f720bb4a9da02c15f40aab2709a36c3773cf2721272ee04d8d84cf54b4fbf4637ad607f341c42203ab30b83664bdbbf0b931ccdcbb41127ac4acc875f312c853bce4130f701bffe4bef222315eea99ebeeceb38df5361cd73fc615e14f6179710cb137be7941478d2c801e61f33e7c89b73af695ecda2bf4c4c4b40151b518a5", 0x95}, {&(0x7f0000000140)}, {&(0x7f0000000540)="2f163a2f68addf39d73cc629e0fb9a7bb592b2a853673124f4fb9293dc1ab64f2cb73364faece42f0d368c62618774edf6d55f26a139be5a426a93e82bb49a2790db66b2fa74661dfe", 0x49}, {&(0x7f00000005c0)="23efe404e968624b13539b7fa5bc86bb70339cd3918296718a19920f02ac6e6f4ed102e05106b2eec934746f2ed8fe422705449b3ff263712daa75a76a3e513caf72f36a1e9f781d923fc07b6694f09b4bf4df1a96bf9ca48d619b76c6903ecf549a3ebe7e16dd935960577479bba38b1c1e29bac866c7a3693bb55ca92441a457ebf61fbf6c1c483dd2ceed", 0x8c}], 0x8) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000040)={0xfffffffc, 0x1, 0x4, {0x6, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0x2, [{0x80000004, 0x7}, {0x7b767c2d, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x800005}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) syz_emit_vhci(0x0, 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.189' (ED25519) to the list of known hosts. syzkaller login: [ 74.403731][ T5762] cgroup: Unknown subsys name 'net' [ 74.522288][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.270137][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.871328][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.881672][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.891904][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.901697][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.909997][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.925287][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.950500][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.955378][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.957639][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.972254][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.972254][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.980437][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.994409][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.995321][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.001738][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.009720][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.025033][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.026541][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.035986][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.052783][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.060269][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.060667][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.068095][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.082536][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.570449][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.619721][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 78.638079][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.761893][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 78.799336][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.807166][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.814434][ T5779] bridge_slave_0: entered allmulticast mode [ 78.821797][ T5779] bridge_slave_0: entered promiscuous mode [ 78.863543][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.872697][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.880911][ T5779] bridge_slave_1: entered allmulticast mode [ 78.889731][ T5779] bridge_slave_1: entered promiscuous mode [ 78.909248][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.916431][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.923607][ T5777] bridge_slave_0: entered allmulticast mode [ 78.931260][ T5777] bridge_slave_0: entered promiscuous mode [ 78.974783][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.981944][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.989703][ T5777] bridge_slave_1: entered allmulticast mode [ 78.996770][ T5777] bridge_slave_1: entered promiscuous mode [ 79.041456][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.054361][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.079466][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.087394][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.094561][ T5783] bridge_slave_0: entered allmulticast mode [ 79.102489][ T5783] bridge_slave_0: entered promiscuous mode [ 79.121059][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.152282][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.162035][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.169301][ T5783] bridge_slave_1: entered allmulticast mode [ 79.177021][ T5783] bridge_slave_1: entered promiscuous mode [ 79.193380][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.206231][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.213384][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.220749][ T5774] bridge_slave_0: entered allmulticast mode [ 79.227952][ T5774] bridge_slave_0: entered promiscuous mode [ 79.246802][ T5779] team0: Port device team_slave_0 added [ 79.272325][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.281883][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.289144][ T5774] bridge_slave_1: entered allmulticast mode [ 79.296953][ T5774] bridge_slave_1: entered promiscuous mode [ 79.305856][ T5779] team0: Port device team_slave_1 added [ 79.325443][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.378312][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.400342][ T5777] team0: Port device team_slave_0 added [ 79.410534][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.417707][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.445443][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.460460][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.473307][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.493839][ T5777] team0: Port device team_slave_1 added [ 79.511966][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.519502][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.546071][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.575971][ T5783] team0: Port device team_slave_0 added [ 79.600780][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.608062][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.634993][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.660262][ T5783] team0: Port device team_slave_1 added [ 79.687943][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.694983][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.721430][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.733323][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.740518][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.769401][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.791422][ T5774] team0: Port device team_slave_0 added [ 79.800187][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.807270][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.833751][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.872655][ T5774] team0: Port device team_slave_1 added [ 79.926722][ T5777] hsr_slave_0: entered promiscuous mode [ 79.933348][ T5777] hsr_slave_1: entered promiscuous mode [ 79.941307][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.950986][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.977626][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.994537][ T5779] hsr_slave_0: entered promiscuous mode [ 80.002467][ T5779] hsr_slave_1: entered promiscuous mode [ 80.009278][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.017673][ T5779] Cannot create hsr debugfs directory [ 80.042198][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.050048][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.075649][ T5789] Bluetooth: hci3: command tx timeout [ 80.076385][ T51] Bluetooth: hci0: command tx timeout [ 80.087534][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.123265][ T5783] hsr_slave_0: entered promiscuous mode [ 80.130047][ T5783] hsr_slave_1: entered promiscuous mode [ 80.136456][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.144034][ T5783] Cannot create hsr debugfs directory [ 80.154985][ T51] Bluetooth: hci2: command tx timeout [ 80.155207][ T5789] Bluetooth: hci1: command tx timeout [ 80.219434][ T5774] hsr_slave_0: entered promiscuous mode [ 80.229330][ T5774] hsr_slave_1: entered promiscuous mode [ 80.235871][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.243435][ T5774] Cannot create hsr debugfs directory [ 80.655272][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.669597][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.680626][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.692162][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.762327][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.774159][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.784721][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.823259][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.890218][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.902011][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.912044][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.923639][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.025313][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.044556][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.066481][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.078024][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.120049][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.159025][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.194839][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.202321][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.220116][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.227386][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.356743][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.373762][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.389665][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.406572][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.446981][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.454165][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.472627][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.510301][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.517494][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.557287][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.582245][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.589432][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.603807][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.611065][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.627302][ T4248] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.634492][ T4248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.698850][ T4248] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.706221][ T4248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.820309][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.910622][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.005541][ T5779] veth0_vlan: entered promiscuous mode [ 82.044313][ T5779] veth1_vlan: entered promiscuous mode [ 82.132215][ T5779] veth0_macvtap: entered promiscuous mode [ 82.156892][ T5789] Bluetooth: hci3: command tx timeout [ 82.158386][ T51] Bluetooth: hci0: command tx timeout [ 82.176840][ T5779] veth1_macvtap: entered promiscuous mode [ 82.222583][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.235975][ T51] Bluetooth: hci1: command tx timeout [ 82.241440][ T51] Bluetooth: hci2: command tx timeout [ 82.277846][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.323911][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.347816][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.357364][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.366933][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.428170][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.474013][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.543117][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.551553][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.581884][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.633444][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.643333][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.669160][ T5783] veth0_vlan: entered promiscuous mode [ 82.725704][ T5774] veth0_vlan: entered promiscuous mode [ 82.748500][ T5774] veth1_vlan: entered promiscuous mode [ 82.757583][ T5783] veth1_vlan: entered promiscuous mode [ 82.866404][ T5777] veth0_vlan: entered promiscuous mode [ 82.893882][ T5842] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.907425][ T5783] veth0_macvtap: entered promiscuous mode [ 82.926492][ T5774] veth0_macvtap: entered promiscuous mode [ 82.944324][ T5783] veth1_macvtap: entered promiscuous mode [ 82.967677][ T5777] veth1_vlan: entered promiscuous mode [ 82.983939][ T5774] veth1_macvtap: entered promiscuous mode [ 83.059606][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.070991][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.082791][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.094304][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.108845][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.122045][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.160731][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.170097][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.185986][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.200349][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.241929][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.253396][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.264021][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.275636][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.287874][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.315245][ T5777] veth0_macvtap: entered promiscuous mode [ 83.334267][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.374272][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.405033][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.416209][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.428201][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.451533][ T5777] veth1_macvtap: entered promiscuous mode [ 83.462034][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.472844][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.482418][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.491897][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.583518][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.596840][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.606929][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.617422][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.628336][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.638863][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.650719][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.688440][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.700110][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.710697][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.721679][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.731599][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.742748][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.754394][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.790399][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.801710][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.807828][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.821356][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.830915][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.841064][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.868299][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.876712][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.916819][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.927861][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.974110][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.990166][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.070142][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.095252][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.153641][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.178904][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.235605][ T51] Bluetooth: hci0: command tx timeout [ 84.236432][ T5789] Bluetooth: hci3: command tx timeout [ 84.315444][ T5789] Bluetooth: hci2: command tx timeout [ 84.316009][ T51] Bluetooth: hci1: command tx timeout [ 85.500135][ T5862] syz.0.1[5862]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.534730][ T5862] loop0: detected capacity change from 0 to 128 [ 85.599242][ T5862] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 85.633673][ T5862] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.938621][ T5868] raw_sendmsg: syz.1.6 forgot to set AF_INET. Fix it! [ 86.226425][ T5871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.700162][ T5868] ceph: No mds server is up or the cluster is laggy [ 86.708545][ T51] Bluetooth: hci0: command tx timeout [ 86.713899][ T5789] Bluetooth: hci3: command tx timeout [ 86.713978][ T51] Bluetooth: hci1: command tx timeout [ 86.719897][ T5789] Bluetooth: hci2: command tx timeout [ 86.736600][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 86.743367][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 87.969253][ T5887] process 'syz.1.10' launched './file1' with NULL argv: empty string added [ 89.185781][ T5892] loop1: detected capacity change from 0 to 8 [ 91.284611][ C1] sched: RT throttling activated [ 91.995013][ T5880] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x1) [ 92.179286][ T9] cfg80211: failed to load regulatory.db [ 92.414183][ T5908] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 92.422771][ T5908] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 92.431452][ T5908] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 92.732248][ T5909] netlink: 76 bytes leftover after parsing attributes in process `syz.3.16'. [ 93.947479][ T5918] sctp: [Deprecated]: syz.2.17 (pid 5918) Use of int in max_burst socket option. [ 93.947479][ T5918] Use struct sctp_assoc_value instead [ 95.198788][ T8] IPVS: starting estimator thread 0... [ 95.986195][ T5939] warning: `syz.1.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.124822][ T5938] IPVS: using max 31 ests per chain, 74400 per kthread [ 96.135159][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.258969][ T5943] loop1: detected capacity change from 0 to 512 [ 96.285012][ T5943] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.357782][ T5943] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.399749][ T5943] EXT4-fs error (device loop1): ext4_orphan_get:1430: comm syz.1.26: bad orphan inode 131083 [ 96.435586][ T5943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.240329][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.652423][ T5927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.665607][ T5927] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.044012][ T5927] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 99.051549][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.245675][ T5955] netlink: 76 bytes leftover after parsing attributes in process `syz.0.29'. [ 99.414712][ T5927] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 99.423283][ T5927] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.493342][ T5927] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 99.530296][ T5927] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 99.564996][ T5927] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.615707][ T5927] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 99.945409][ T5927] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 99.951479][ T5927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 99.989578][ T5927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.274707][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.434908][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.595057][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.129259][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.355092][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.593273][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.674972][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.204992][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.674742][ T5789] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.758615][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.789766][ T5999] netlink: 76 bytes leftover after parsing attributes in process `syz.2.40'. [ 107.284793][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.805066][ T6068] loop0: detected capacity change from 0 to 2048 [ 113.846844][ T6069] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.215418][ T6069] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 114.227304][ T6069] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 114.241239][ T6069] Remounting filesystem read-only [ 114.247746][ T11] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 114.255502][ T11] NILFS (loop0): discard dirty block: blocknr=39, size=1024 [ 114.262957][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.272229][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.287974][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.317567][ T11] NILFS (loop0): discard dirty page: offset=0, ino=3 [ 114.327921][ T11] NILFS (loop0): discard dirty block: blocknr=42, size=1024 [ 114.338819][ T11] NILFS (loop0): discard dirty block: blocknr=43, size=1024 [ 114.349503][ T11] NILFS (loop0): discard dirty block: blocknr=44, size=1024 [ 114.360857][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.373558][ T11] NILFS (loop0): discard dirty page: offset=65536, ino=3 [ 114.384202][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.400023][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.432180][ T11] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 114.441426][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.456623][ T11] NILFS (loop0): discard dirty page: offset=196608, ino=3 [ 114.464014][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.479277][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.488705][ T11] NILFS (loop0): discard dirty block: blocknr=49, size=1024 [ 114.500469][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.513850][ T11] NILFS (loop0): discard dirty page: offset=0, ino=18 [ 114.523812][ T11] NILFS (loop0): discard dirty block: blocknr=0, size=1024 [ 114.541554][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.552303][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.570943][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.581340][ T11] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 114.594456][ T11] NILFS (loop0): discard dirty block: blocknr=18, size=1024 [ 114.602901][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.620010][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.629445][ T11] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.657783][ T5777] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 114.672660][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 114.681580][ T5777] NILFS (loop0): discard dirty block: blocknr=35, size=1024 [ 114.693508][ T5777] NILFS (loop0): discard dirty block: blocknr=36, size=1024 [ 114.703185][ T5777] NILFS (loop0): discard dirty block: blocknr=37, size=1024 [ 114.721398][ T5777] NILFS (loop0): discard dirty block: blocknr=38, size=1024 [ 114.774903][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=5 [ 114.787975][ T5777] NILFS (loop0): discard dirty block: blocknr=41, size=1024 [ 114.814979][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.851920][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.863482][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.882735][ T5777] NILFS (loop0): discard dirty page: offset=0, ino=4 [ 114.891129][ T5777] NILFS (loop0): discard dirty block: blocknr=40, size=1024 [ 114.901233][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.912593][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 114.930328][ T5777] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024 [ 115.429444][ T6084] netlink: 'syz.2.62': attribute type 1 has an invalid length. [ 115.437637][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.62'. [ 117.395869][ T6116] loop3: detected capacity change from 0 to 256 [ 117.434029][ T6116] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 121.894943][ T6157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 122.818269][ T6176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.937542][ T6193] UBIFS error (pid: 6193): cannot open "./file0", error -22 [ 124.956981][ T6193] loop1: detected capacity change from 0 to 256 [ 125.281332][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.288675][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.308423][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.359073][ T6199] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.417353][ T6199] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 125.511992][ T27] audit: type=1326 audit(1784341047.044:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 125.535681][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.577038][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.592143][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.607341][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 125.624396][ T6199] virt_wifi0 speed is unknown, defaulting to 1000 [ 126.043822][ T27] audit: type=1326 audit(1784341047.054:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.153579][ T27] audit: type=1326 audit(1784341047.054:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.236373][ T6209] netlink: 20 bytes leftover after parsing attributes in process `syz.0.91'. [ 126.254138][ T27] audit: type=1326 audit(1784341047.054:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.280827][ T27] audit: type=1326 audit(1784341047.054:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.306405][ T27] audit: type=1326 audit(1784341047.054:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.509828][ T27] audit: type=1326 audit(1784341047.054:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.533501][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.572285][ T27] audit: type=1326 audit(1784341047.054:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.596037][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.682786][ T27] audit: type=1326 audit(1784341047.054:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.761297][ T27] audit: type=1326 audit(1784341047.054:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6195 comm="syz.0.90" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f98f9de99 code=0x7ffc0000 [ 126.785090][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.269001][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 128.542988][ T6226] loop1: detected capacity change from 0 to 32768 [ 128.588421][ T6226] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 128.656617][ T8] usb 1-1: no configurations [ 128.672831][ T6226] XFS (loop1): Ending clean mount [ 128.684941][ T8] usb 1-1: can't read configurations, error -22 [ 128.687784][ T6226] XFS (loop1): Quotacheck needed: Please wait. [ 128.762384][ T6226] XFS (loop1): Quotacheck: Done. [ 129.096159][ T6236] Zero length message leads to an empty skb [ 129.408586][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 129.457357][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 129.814980][ T8] usb 1-1: device not accepting address 3, error -71 [ 129.826103][ T8] usb usb1-port1: attempt power cycle [ 129.896280][ T6238] vlan2: entered allmulticast mode [ 129.914960][ T6238] bond0: entered allmulticast mode [ 129.924231][ T6238] bond_slave_0: entered allmulticast mode [ 129.942175][ T6238] bond_slave_1: entered allmulticast mode [ 130.244740][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.295401][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 130.303470][ T8] usb 1-1: config 0 has no interface number 0 [ 130.390077][ T8] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 130.429110][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.451619][ T8] usb 1-1: Product: syz [ 130.466430][ T8] usb 1-1: Manufacturer: syz [ 130.492487][ T8] usb 1-1: SerialNumber: syz [ 130.515775][ T6253] siw: device registration error -23 [ 130.585370][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 130.585420][ T27] audit: type=1326 audit(1784341052.244:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 130.616793][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.682381][ T8] usb 1-1: config 0 descriptor?? [ 131.134891][ T8] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 131.154046][ T27] audit: type=1326 audit(1784341052.244:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.232973][ T27] audit: type=1326 audit(1784341052.244:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.250830][ T8] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 131.312158][ T27] audit: type=1326 audit(1784341052.244:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.332010][ T8] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 131.367020][ T8] usb 1-1: media controller created [ 131.372739][ T5911] libceph: connect (1)[c::]:6789 error -101 [ 131.386040][ T27] audit: type=1326 audit(1784341052.244:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.397609][ T6260] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 131.410662][ T5911] libceph: mon0 (1)[c::]:6789 connect error [ 131.433008][ T6259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.102'. [ 131.448903][ T27] audit: type=1326 audit(1784341052.244:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.478654][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.481318][ T27] audit: type=1326 audit(1784341052.244:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.513604][ T27] audit: type=1326 audit(1784341052.244:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.563328][ T27] audit: type=1326 audit(1784341052.254:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.594865][ T27] audit: type=1326 audit(1784341052.254:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6242 comm="syz.3.100" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f438ab9de99 code=0x7ffc0000 [ 131.666435][ T23] libceph: connect (1)[c::]:6789 error -101 [ 131.757986][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 133.211700][ T23] libceph: connect (1)[c::]:6789 error -101 [ 133.222907][ T23] libceph: mon0 (1)[c::]:6789 connect error [ 133.226343][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.236379][ T8] usb 1-1: USB disconnect, device number 4 [ 133.255492][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.282291][ T6256] ceph: No mds server is up or the cluster is laggy [ 138.654967][ T171] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.959361][ T171] usb 1-1: no configurations [ 139.032797][ T171] usb 1-1: can't read configurations, error -22 [ 139.401061][ T171] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.484922][ T6335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.117'. [ 140.459910][ T171] usb 1-1: no configurations [ 140.473979][ T171] usb 1-1: can't read configurations, error -22 [ 140.511753][ T171] usb usb1-port1: attempt power cycle [ 140.531243][ T6339] loop3: detected capacity change from 0 to 512 [ 140.617393][ T6339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.662014][ T6339] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.123: bad orphan inode 131083 [ 140.704036][ T6339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.597564][ T171] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.688381][ T171] usb 1-1: device descriptor read/8, error -71 [ 143.670418][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.622736][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.631686][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.291851][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.336628][ T6374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.728328][ T6374] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.738596][ T6374] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.750228][ T6374] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.760959][ T6374] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.006152][ T6394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.134'. [ 146.110464][ T6396] loop3: detected capacity change from 0 to 4096 [ 146.124970][ T6396] EXT4-fs: inline encryption not supported [ 147.077347][ T6396] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.094749][ T6396] EXT4-fs (loop3): Test dummy encryption mode enabled [ 147.139970][ T6396] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 147.151606][ T6396] System zones: 0-5 [ 147.217989][ T6396] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.496419][ T6408] loop0: detected capacity change from 0 to 32768 [ 147.771689][ T6408] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 148.196174][ T6408] XFS (loop0): Ending clean mount [ 148.210981][ T6408] XFS (loop0): Quotacheck needed: Please wait. [ 148.350541][ T6408] XFS (loop0): Quotacheck: Done. [ 148.569783][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.740498][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 148.740539][ T27] audit: type=1800 audit(1784341070.384:42): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.138" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0 [ 149.242269][ T6432] Cannot find del_set index 0 as target [ 150.131778][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 150.255738][ T6436] loop1: detected capacity change from 0 to 128 [ 150.263115][ T6436] ======================================================= [ 150.263115][ T6436] WARNING: The mand mount option has been deprecated and [ 150.263115][ T6436] and is ignored by this kernel. Remove the mand [ 150.263115][ T6436] option from the mount to silence this warning. [ 150.263115][ T6436] ======================================================= [ 150.453169][ T6436] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.503156][ T6436] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.575795][ T6436] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 150.824399][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 150.831579][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 151.107474][ T9] libceph: connect (1)[c::]:6789 error -101 [ 151.107599][ T6447] xt_connbytes: Forcing CT accounting to be enabled [ 151.113599][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 151.120247][ T6447] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.137888][ T6447] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 151.376850][ T6441] ceph: No mds server is up or the cluster is laggy [ 152.128496][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 156.296956][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 157.911383][ T6508] loop3: detected capacity change from 0 to 512 [ 157.931591][ T6508] EXT4-fs: Ignoring removed nobh option [ 158.294925][ T6508] ext4: Unknown parameter 'permit_directio' [ 159.356244][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 159.383778][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 159.645703][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 159.659110][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 160.170293][ T6518] ceph: No mds server is up or the cluster is laggy [ 160.177394][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 160.200808][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 160.383554][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'. [ 161.653600][ T6545] loop1: detected capacity change from 0 to 8192 [ 162.906532][ T6557] loop1: detected capacity change from 0 to 128 [ 162.928018][ T6557] EXT4-fs (loop1): Test dummy encryption mode enabled [ 162.962193][ T6557] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.981366][ T6557] ext4 filesystem being mounted at /41/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 163.358730][ T6571] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 163.422125][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 163.428430][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 163.685337][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 163.708052][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 163.726410][ T6557] fscrypt (loop1): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 163.756033][ T6566] ceph: No mds server is up or the cluster is laggy [ 164.014288][ T5774] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.067319][ T6588] fuse: Bad value for 'user_id' [ 167.895406][ T6622] fuse: Bad value for 'user_id' [ 167.988162][ T9] libceph: connect (1)[c::]:6789 error -101 [ 168.007884][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 168.028090][ T9] libceph: connect (1)[c::]:6789 error -101 [ 168.035575][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 168.200813][ T6619] ceph: No mds server is up or the cluster is laggy [ 169.809316][ T6638] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.943232][ T6655] loop1: detected capacity change from 0 to 1024 [ 170.018542][ T6655] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 170.053276][ T6655] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.141007][ T6660] fuse: Bad value for 'fd' [ 170.437852][ T11] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: comm kworker/u4:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 170.488046][ T11] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 170.502636][ T11] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.502636][ T11] [ 170.590949][ T4248] EXT4-fs error (device loop1): ext4_map_blocks:720: inode #15: block 8: comm kworker/u4:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 170.611573][ T4248] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 170.632714][ T4248] EXT4-fs (loop1): This should not happen!! Data will be lost [ 170.632714][ T4248] [ 170.685441][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 170.957769][ T6669] netlink: 76 bytes leftover after parsing attributes in process `syz.1.204'. [ 171.430256][ T9] libceph: connect (1)[c::]:6789 error -101 [ 171.453900][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 171.770228][ T9] libceph: connect (1)[c::]:6789 error -101 [ 171.809309][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 172.062959][ T6672] ceph: No mds server is up or the cluster is laggy [ 174.667765][ T6695] fuse: Bad value for 'fd' [ 174.903844][ T6700] netlink: 76 bytes leftover after parsing attributes in process `syz.2.213'. [ 175.065734][ T6701] syzkaller0: entered promiscuous mode [ 175.071290][ T6701] syzkaller0: entered allmulticast mode [ 175.461592][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 175.492358][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 175.765637][ T6384] libceph: connect (1)[c::]:6789 error -101 [ 175.772015][ T6384] libceph: mon0 (1)[c::]:6789 connect error [ 176.167153][ T6709] ceph: No mds server is up or the cluster is laggy [ 176.844778][ T6662] Set syz1 is full, maxelem 65536 reached [ 177.311946][ T6719] loop3: detected capacity change from 0 to 2048 [ 177.548953][ T6720] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.150402][ T6720] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 178.177117][ T6720] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 178.197918][ T6720] Remounting filesystem read-only [ 178.208256][ T1140] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 178.213552][ T6725] loop0: detected capacity change from 0 to 256 [ 178.221504][ T1140] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 178.229469][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.260012][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.273567][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.287398][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 178.294262][ T1140] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 178.296028][ T6725] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 178.308640][ T1140] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 178.321931][ T1140] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 178.329910][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.339370][ T1140] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 178.346879][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.383674][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.395500][ T1140] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 178.408346][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.418548][ T1140] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 178.420052][ T27] audit: type=1800 audit(1784341100.134:43): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.221" name="file1" dev="loop0" ino=1048595 res=0 errno=0 [ 178.427165][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.493347][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.502528][ T1140] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 178.512126][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.521324][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 178.529442][ T1140] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 178.536812][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.553482][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.567074][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.585642][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 178.603805][ T1140] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 178.620791][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.632627][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.642158][ T6726] exFAT-fs (loop0): error, broken FAT chain. [ 178.655682][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.664816][ T6726] exFAT-fs (loop0): Filesystem has been set read-only [ 178.671782][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 178.679303][ T6726] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880620907e0 iblock : 8, err : -5) [ 178.689585][ T1140] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 178.697272][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.718496][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.727941][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.740684][ T1140] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 178.750635][ T1140] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 178.763221][ T6729] netlink: 76 bytes leftover after parsing attributes in process `syz.2.223'. [ 178.781287][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.827608][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.837694][ T1140] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 178.851828][ T5779] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 178.871499][ T5779] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 178.882031][ T5779] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 178.905949][ T5779] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 178.936142][ T5779] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 178.946905][ T5779] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 180.752757][ T6760] loop0: detected capacity change from 0 to 32768 [ 180.794494][ T6760] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 180.821868][ T5840] libceph: connect (1)[c::]:6789 error -101 [ 180.828500][ T5840] libceph: mon0 (1)[c::]:6789 connect error [ 181.093861][ T6760] XFS (loop0): Ending clean mount [ 181.100192][ T6386] libceph: connect (1)[c::]:6789 error -101 [ 181.109661][ T6386] libceph: mon0 (1)[c::]:6789 connect error [ 181.120826][ T6760] XFS (loop0): Quotacheck needed: Please wait. [ 181.182796][ T6760] XFS (loop0): Quotacheck: Done. [ 181.445645][ T6782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.011214][ T6389] libceph: connect (1)[c::]:6789 error -101 [ 182.017328][ T6387] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 182.024949][ T6389] libceph: mon0 (1)[c::]:6789 connect error [ 182.047397][ T6763] ceph: No mds server is up or the cluster is laggy [ 182.057837][ T5777] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.184857][ T6387] usb 2-1: device descriptor read/64, error -71 [ 182.535027][ T6387] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 182.655366][ T6791] netlink: 76 bytes leftover after parsing attributes in process `syz.3.233'. [ 182.714921][ T6387] usb 2-1: device descriptor read/64, error -71 [ 182.843683][ T6387] usb usb2-port1: attempt power cycle [ 183.178781][ T6795] loop3: detected capacity change from 0 to 512 [ 183.201370][ T6795] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.267204][ T6795] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.234: bad orphan inode 131083 [ 183.281168][ T6795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.317221][ T6387] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 183.387877][ T6387] usb 2-1: device descriptor read/8, error -71 [ 183.664734][ T6387] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 183.706209][ T6387] usb 2-1: device descriptor read/8, error -71 [ 183.826203][ T6387] usb usb2-port1: unable to enumerate USB device [ 184.162152][ T5779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.373604][ T6815] pim6reg: entered allmulticast mode [ 185.382509][ T6815] pim6reg: left allmulticast mode [ 187.002564][ T6828] netlink: 76 bytes leftover after parsing attributes in process `syz.0.242'. [ 187.404035][ T9] libceph: connect (1)[c::]:6789 error -101 [ 187.584817][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 187.593846][ T9] libceph: connect (1)[c::]:6789 error -101 [ 187.605361][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 187.615538][ T6822] ceph: No mds server is up or the cluster is laggy [ 189.111002][ T6843] Cannot find del_set index 0 as target [ 191.084484][ T6852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.249'. [ 192.574392][ T6864] netlink: 76 bytes leftover after parsing attributes in process `syz.0.252'. [ 194.276528][ T6874] Cannot find del_set index 0 as target [ 194.561725][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.568448][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.669328][ T6892] loop3: detected capacity change from 0 to 8 [ 196.679432][ T6892] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 196.766974][ T5792] udevd[5792]: incorrect cramfs checksum on /dev/loop3 [ 196.815572][ T5792] udevd[5792]: incorrect cramfs checksum on /dev/loop3 [ 197.997529][ T6899] netlink: 76 bytes leftover after parsing attributes in process `syz.1.262'. [ 198.213811][ T6902] fuse: Bad value for 'fd' [ 198.928598][ T6908] Cannot find map_set index 135 as target [ 202.739689][ T6933] loop0: detected capacity change from 0 to 512 [ 202.761989][ T6933] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 202.793512][ T6933] EXT4-fs error (device loop0): ext4_orphan_get:1430: comm syz.0.272: bad orphan inode 131083 [ 202.836897][ T6933] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.549453][ T6939] netlink: 76 bytes leftover after parsing attributes in process `syz.2.273'. [ 203.793755][ T5777] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.502010][ T6951] loop3: detected capacity change from 0 to 64 [ 205.530160][ T6951] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 209.651950][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.055996][ T6987] netlink: 76 bytes leftover after parsing attributes in process `syz.2.286'. [ 213.459593][ T6998] loop3: detected capacity change from 0 to 512 [ 213.857556][ T6998] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 214.103073][ T7002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.292'. [ 214.902396][ T6998] EXT4-fs error (device loop3): ext4_orphan_get:1430: comm syz.3.291: bad orphan inode 131083 [ 214.966716][ T6998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.034141][ T7012] netlink: 36 bytes leftover after parsing attributes in process `syz.1.294'. [ 215.584946][ T7012] ------------[ cut here ]------------ [ 215.590514][ T7012] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 215.634082][ T7012] WARNING: CPU: 1 PID: 7012 at net/sched/cls_u32.c:855 u32_change+0x1ce8/0x2690 [ 215.644184][ T7012] Modules linked in: [ 215.648323][ T7012] CPU: 1 PID: 7012 Comm: syz.1.294 Not tainted syzkaller #0 [ 215.656230][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 215.666659][ T7012] RIP: 0010:u32_change+0x1ce8/0x2690 [ 215.672029][ T7012] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 215.692238][ T7012] RSP: 0018:ffffc90003356d60 EFLAGS: 00010246 [ 215.698665][ T7012] RAX: 80c1a276d2ea8300 RBX: ffff88805f739800 RCX: 0000000000080000 [ 215.706787][ T7012] RDX: ffffc9000cc19000 RSI: 0000000000006ce3 RDI: 0000000000006ce4 [ 215.714876][ T7012] RBP: ffffc90003356ef8 R08: ffffc90003356967 R09: 1ffff9200066ad2c [ 215.722912][ T7012] R10: dffffc0000000000 R11: fffff5200066ad2d R12: 1ffff9200066adbc [ 215.730980][ T7012] R13: ffff88805b4ca0e8 R14: ffff88802d7b8000 R15: 0000000000000020 [ 215.739056][ T7012] FS: 00007fdb957bd6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 215.748656][ T7012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 215.755502][ T7012] CR2: 000020000002f000 CR3: 0000000025264000 CR4: 00000000003506e0 [ 215.763527][ T7012] Call Trace: [ 215.766921][ T7012] [ 215.769888][ T7012] ? u32_get+0x370/0x370 [ 215.774196][ T7012] tc_new_tfilter+0x1109/0x1820 [ 215.779190][ T7012] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.785402][ T7012] ? rcu_read_unlock+0x8c/0xa0 [ 215.790424][ T7012] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.796521][ T7012] ? tcf_proto_signal_destroying+0x240/0x240 [ 215.802547][ T7012] rtnetlink_rcv_msg+0x892/0xf90 [ 215.807598][ T7012] ? rtnetlink_rcv_msg+0x220/0xf90 [ 215.812776][ T7012] ? rtnetlink_bind+0x80/0x80 [ 215.817553][ T7012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.823625][ T7012] ? lock_chain_count+0x20/0x20 [ 215.828767][ T7012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.834286][ T7012] ? lockdep_hardirqs_on+0x98/0x150 [ 215.839579][ T7012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 215.845056][ T7012] ? _local_bh_enable+0xa0/0xa0 [ 215.849967][ T7012] ? __dev_queue_xmit+0x275/0x3630 [ 215.855184][ T7012] ? __dev_queue_xmit+0x1bc2/0x3630 [ 215.860416][ T7012] ? __dev_queue_xmit+0x275/0x3630 [ 215.865597][ T7012] ? ref_tracker_free+0x686/0x830 [ 215.870683][ T7012] netlink_rcv_skb+0x235/0x4c0 [ 215.875514][ T7012] ? rtnetlink_bind+0x80/0x80 [ 215.880213][ T7012] ? netlink_ack+0x1160/0x1160 [ 215.885356][ T7012] ? __lock_acquire+0x7d80/0x7d80 [ 215.890495][ T7012] ? netlink_deliver_tap+0x2e/0x1b0 [ 215.895762][ T7012] netlink_unicast+0x7b1/0x930 [ 215.900575][ T7012] netlink_sendmsg+0x8d0/0xbf0 [ 215.905464][ T7012] ? netlink_getsockopt+0x590/0x590 [ 215.910706][ T7012] ? apparmor_socket_sendmsg+0x8e/0x330 [ 215.916468][ T7012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.921987][ T7012] ? security_socket_sendmsg+0x80/0xa0 [ 215.927505][ T7012] ? netlink_getsockopt+0x590/0x590 [ 215.932739][ T7012] ____sys_sendmsg+0x61b/0x980 [ 215.937575][ T7012] ? __asan_memset+0x22/0x40 [ 215.942199][ T7012] ? __sys_sendmsg_sock+0x30/0x30 [ 215.947276][ T7012] ? __import_iovec+0x5f2/0x850 [ 215.952138][ T7012] ? import_iovec+0x73/0xa0 [ 215.956745][ T7012] ___sys_sendmsg+0x2a6/0x360 [ 215.961458][ T7012] ? preempt_schedule+0xc0/0xd0 [ 215.966351][ T7012] ? __sys_sendmsg+0x2b0/0x2b0 [ 215.971176][ T7012] __sys_sendmmsg+0x2ca/0x510 [ 215.975917][ T7012] ? __ia32_sys_sendmsg+0x90/0x90 [ 215.980968][ T7012] ? __ia32_sys_get_robust_list+0x110/0x110 [ 215.986908][ T7012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 215.993052][ T7012] ? lock_chain_count+0x20/0x20 [ 215.998177][ T7012] __x64_sys_sendmmsg+0xa0/0xb0 [ 216.003075][ T7012] do_syscall_64+0x55/0xb0 [ 216.007550][ T7012] ? clear_bhb_loop+0x40/0x90 [ 216.012234][ T7012] ? clear_bhb_loop+0x40/0x90 [ 216.016946][ T7012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.022958][ T7012] RIP: 0033:0x7fdb9499de99 [ 216.027429][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.047144][ T7012] RSP: 002b:00007fdb957bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.055672][ T7012] RAX: ffffffffffffffda RBX: 00007fdb94c25fa0 RCX: 00007fdb9499de99 [ 216.063689][ T7012] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 216.071787][ T7012] RBP: 00007fdb94a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 216.079854][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.087962][ T7012] R13: 00007fdb94c26038 R14: 00007fdb94c25fa0 R15: 00007ffd983748b8 [ 216.096379][ T7012] [ 216.099442][ T7012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 216.106770][ T7012] CPU: 1 PID: 7012 Comm: syz.1.294 Not tainted syzkaller #0 [ 216.114079][ T7012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 216.124223][ T7012] Call Trace: [ 216.127511][ T7012] [ 216.130451][ T7012] dump_stack_lvl+0x18c/0x250 [ 216.135140][ T7012] ? show_regs_print_info+0x20/0x20 [ 216.140346][ T7012] ? load_image+0x420/0x420 [ 216.144860][ T7012] panic+0x2ca/0x720 [ 216.148773][ T7012] ? bpf_jit_dump+0xd0/0xd0 [ 216.153291][ T7012] __warn+0x2e0/0x470 [ 216.157284][ T7012] ? u32_change+0x1ce8/0x2690 [ 216.161964][ T7012] ? u32_change+0x1ce8/0x2690 [ 216.166643][ T7012] report_bug+0x2be/0x4f0 [ 216.170970][ T7012] ? u32_change+0x1ce8/0x2690 [ 216.175648][ T7012] ? u32_change+0x1ce8/0x2690 [ 216.180334][ T7012] ? u32_change+0x1cea/0x2690 [ 216.185010][ T7012] handle_bug+0xcf/0x120 [ 216.189260][ T7012] exc_invalid_op+0x1a/0x50 [ 216.193766][ T7012] asm_exc_invalid_op+0x1a/0x20 [ 216.198641][ T7012] RIP: 0010:u32_change+0x1ce8/0x2690 [ 216.203932][ T7012] Code: f8 eb 59 e8 aa 7c d2 f8 c6 05 89 8a c2 05 01 b9 10 00 00 00 48 c7 c7 60 06 c8 8b 4c 89 fe 48 c7 c2 e0 06 c8 8b e8 88 55 9c f8 <0f> 0b e9 1f f0 ff ff e8 7c 7c d2 f8 eb 24 e8 75 7c d2 f8 c6 05 16 [ 216.223713][ T7012] RSP: 0018:ffffc90003356d60 EFLAGS: 00010246 [ 216.229870][ T7012] RAX: 80c1a276d2ea8300 RBX: ffff88805f739800 RCX: 0000000000080000 [ 216.237861][ T7012] RDX: ffffc9000cc19000 RSI: 0000000000006ce3 RDI: 0000000000006ce4 [ 216.245831][ T7012] RBP: ffffc90003356ef8 R08: ffffc90003356967 R09: 1ffff9200066ad2c [ 216.253814][ T7012] R10: dffffc0000000000 R11: fffff5200066ad2d R12: 1ffff9200066adbc [ 216.261791][ T7012] R13: ffff88805b4ca0e8 R14: ffff88802d7b8000 R15: 0000000000000020 [ 216.269794][ T7012] ? u32_get+0x370/0x370 [ 216.274055][ T7012] tc_new_tfilter+0x1109/0x1820 [ 216.278927][ T7012] ? tcf_proto_signal_destroying+0x240/0x240 [ 216.285181][ T7012] ? rcu_read_unlock+0x8c/0xa0 [ 216.289948][ T7012] ? tcf_proto_signal_destroying+0x240/0x240 [ 216.295948][ T7012] ? tcf_proto_signal_destroying+0x240/0x240 [ 216.301946][ T7012] rtnetlink_rcv_msg+0x892/0xf90 [ 216.306900][ T7012] ? rtnetlink_rcv_msg+0x220/0xf90 [ 216.312113][ T7012] ? rtnetlink_bind+0x80/0x80 [ 216.316893][ T7012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 216.322882][ T7012] ? lock_chain_count+0x20/0x20 [ 216.327750][ T7012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 216.333147][ T7012] ? lockdep_hardirqs_on+0x98/0x150 [ 216.338524][ T7012] ? __local_bh_enable_ip+0x13a/0x1c0 [ 216.343906][ T7012] ? _local_bh_enable+0xa0/0xa0 [ 216.348825][ T7012] ? __dev_queue_xmit+0x275/0x3630 [ 216.353941][ T7012] ? __dev_queue_xmit+0x1bc2/0x3630 [ 216.359253][ T7012] ? __dev_queue_xmit+0x275/0x3630 [ 216.364383][ T7012] ? ref_tracker_free+0x686/0x830 [ 216.369431][ T7012] netlink_rcv_skb+0x235/0x4c0 [ 216.374200][ T7012] ? rtnetlink_bind+0x80/0x80 [ 216.378879][ T7012] ? netlink_ack+0x1160/0x1160 [ 216.383655][ T7012] ? __lock_acquire+0x7d80/0x7d80 [ 216.388695][ T7012] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.393901][ T7012] netlink_unicast+0x7b1/0x930 [ 216.398683][ T7012] netlink_sendmsg+0x8d0/0xbf0 [ 216.403461][ T7012] ? netlink_getsockopt+0x590/0x590 [ 216.408772][ T7012] ? apparmor_socket_sendmsg+0x8e/0x330 [ 216.414335][ T7012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.419636][ T7012] ? security_socket_sendmsg+0x80/0xa0 [ 216.425106][ T7012] ? netlink_getsockopt+0x590/0x590 [ 216.430312][ T7012] ____sys_sendmsg+0x61b/0x980 [ 216.435113][ T7012] ? __asan_memset+0x22/0x40 [ 216.439706][ T7012] ? __sys_sendmsg_sock+0x30/0x30 [ 216.444732][ T7012] ? __import_iovec+0x5f2/0x850 [ 216.449587][ T7012] ? import_iovec+0x73/0xa0 [ 216.454097][ T7012] ___sys_sendmsg+0x2a6/0x360 [ 216.458792][ T7012] ? preempt_schedule+0xc0/0xd0 [ 216.463660][ T7012] ? __sys_sendmsg+0x2b0/0x2b0 [ 216.468468][ T7012] __sys_sendmmsg+0x2ca/0x510 [ 216.473186][ T7012] ? __ia32_sys_sendmsg+0x90/0x90 [ 216.478247][ T7012] ? __ia32_sys_get_robust_list+0x110/0x110 [ 216.484181][ T7012] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 216.490172][ T7012] ? lock_chain_count+0x20/0x20 [ 216.495033][ T7012] __x64_sys_sendmmsg+0xa0/0xb0 [ 216.499911][ T7012] do_syscall_64+0x55/0xb0 [ 216.504385][ T7012] ? clear_bhb_loop+0x40/0x90 [ 216.509074][ T7012] ? clear_bhb_loop+0x40/0x90 [ 216.513748][ T7012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 216.519745][ T7012] RIP: 0033:0x7fdb9499de99 [ 216.524165][ T7012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.543859][ T7012] RSP: 002b:00007fdb957bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 216.552272][ T7012] RAX: ffffffffffffffda RBX: 00007fdb94c25fa0 RCX: 00007fdb9499de99 [ 216.560243][ T7012] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 216.568228][ T7012] RBP: 00007fdb94a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 216.576194][ T7012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.584157][ T7012] R13: 00007fdb94c26038 R14: 00007fdb94c25fa0 R15: 00007ffd983748b8 [ 216.592149][ T7012] [ 216.595320][ T7012] Kernel Offset: disabled [ 216.599647][ T7012] Rebooting in 86400 seconds..