last executing test programs: 51.327127654s ago: executing program 1 (id=524): socket$inet(0x2, 0x4000000000000001, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x400}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa91, 0xffffffff}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f002, 0x4}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r3, 0x0, r2, 0x0, 0x6, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r2, 0x4, 0x7c00) dup3(r3, r2, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 48.755270979s ago: executing program 1 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00:\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b722c64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a41856102000000000000006357ee95fffb99cde923a6c2e7eee552c60119e2822287367b0526cec2098d6ef88304699e83b0d070ad82774d8cc230dc844fa4ed26ec244085d833e4e2309d01aea46150e5d791371358a8ecd02c1e8795d500af4694cc800962a672fd461d94ad695620623ccf81ae84a48df7d0ffafbb72f694c5e1bb70d4b394fd631e5801e7"], 0x3, 0x2b5, &(0x7f0000000380)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) remap_file_pages(&(0x7f000044e000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) userfaultfd(0x80001) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000acf000/0x3000)=nil, 0x3000, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000680)={0x18, 0xfffffffffffffffe, 0x0, {0x4}}, 0x18) 46.044143026s ago: executing program 1 (id=532): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000010) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES32=r3, @ANYRESDEC=r4, @ANYRES8, @ANYRES16], 0x1, 0x1e6, &(0x7f0000000140)="$eJzs20tu00Acx/HfJGkSQ4HyXCCkILGADUmaikqsWs7BqmrTqsIFhNkkQsJcAM7AObgMB4AFO1YY+ZGm9aM1E9y0zfez8Xh+/dvjuu6MolgAFtamHsrIqBnuPGivfLltStU1qx4YgMoFyfZPYMOxqgJwXtR/p3uSFYA/n/EAOCs/X0jfJf349WFb9eyqPsz9SV5rZfNP0v1Gkpu2nPT64qv0eFJvrmTrG/E2zq/mHv/Jo8n5l3VN13VDK7qpW8aXifKdw/p7VmsgAAAWjVH3tLwr1QvSePLOrgqmlrT7LTurTzW1u+8OB6fka4V5K8q722/cnRPOAiBPrdTzX6wePX/9gnRJivLVZL9tO0wAFfBG45Zcd/jOG4WTfNQYv9py/6nhWFWVaZjKjpzfaKZ6go+SDns2bY8c6FiPc/T33PE6sw/exJ/SKB05ZcpryoteWgxjIxuFU8BsN8X4VuXLn5V7XbM1NlTqhzs598K60TqjP/7jjXn/ZwJQtd77g7c9bzR+un+wtTfcG74e9PvP15+tra4PetHKvnfS+h7ARTad9HXk20AAAAAAAAAAAAAAAOAiuaO74Sb92i4AAACAS+i/vTPUUOHrVvO+RgAAAAAAAAAAAAAAAAAALpu/AQAA///U5AZL") r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r9, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xff00, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 44.228887696s ago: executing program 1 (id=536): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, 0x0, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) gettid() r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x20000000002, &(0x7f0000000700)="f387f3d0d636834c015f24e62c2e7c82d107a6808737c85e69706da9c8440000009c0ebf8e3f0a7efe0ed91d923af04bf049364e1b69237c6258215d8f1e91bd3bd03e7f3876d52ef012264768d6b703075024a5164aebe8ba1203b8512b2258bb6dfa2f55f496386fd12d29590c6eee14a6c7bc9d4c9c26915315ab4f01f3b278e7a837b409f9a8d7") ptrace$cont(0x21, r6, 0x80000001, 0x4) timer_create(0x2, &(0x7f0000000340)={0x0, 0x34, 0x800000000004, @tid=r6}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) 42.176515478s ago: executing program 1 (id=540): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) unshare(0x400) socket$packet(0x11, 0x3, 0x300) socket$inet(0xa, 0x1, 0x100) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x59) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x57, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup(0x5596, 0x0) syz_open_dev$MSR(&(0x7f0000000780), 0x80004, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x40c0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000580)={0x20080522}, &(0x7f0000000040)={0x200000, 0x4200003, 0x9, 0x0, 0x20000003, 0x800}) syslog(0x0, 0x0, 0x0) 33.904542439s ago: executing program 1 (id=545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) pipe2(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$key(0xf, 0x3, 0x2) 22.52874528s ago: executing program 0 (id=559): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vcsn(0x0, 0x7, 0x428400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000340)={0x0, {{0xa, 0x2, 0x0, @mcast1}}}, 0x88) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRESDEC=r2, @ANYRESOCT=r3], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.022831429s ago: executing program 0 (id=561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x24000021}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x28a02, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x2, 0x0, 0x0, @str='\x00\x00'}]}, 0x1c}}, 0x40000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r6, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xa1}], 0x2, 0x0, 0x0) listen(r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x96) 19.26297296s ago: executing program 0 (id=564): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x7, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x10000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary) r5 = fsopen(0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r7, 0x2007ffb) sendfile(r7, r7, 0x0, 0x1000000201005) ftruncate(r7, 0x6) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mq_timedsend(r7, &(0x7f0000000380)="e62b48a6c3219c9acf8e8c796997127244e24250ab2fe99562c0b6edea2d3a2f3419cf322c26dbb6838f36887b7fb9049b27b629b9b7ceac0e17203f409eedf5e285c1a767c6e6f76a496bde823e38c325e53756fbba6df4d081585df7cae672f1423cea2007a1e00ad6e543b4129a8e237811ead66c4f3cb16d8914d7ae88eeefc9e855666d7b0497ab53f343363c7e79ca098af7f18b7bbe18455c83f6e4b511424f075cfcba7fbc5fe93db527ddd5924e7a652a0c5b8007b3", 0xba, 0x7, &(0x7f0000000000)={0x77359400}) 17.930410039s ago: executing program 32 (id=545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) pipe2(0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2}, 0x18) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x0, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) socket$key(0xf, 0x3, 0x2) 14.924293067s ago: executing program 3 (id=569): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(r1, r1, 0x0, 0xed) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x38, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x1bc) name_to_handle_at(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000600)=ANY=[@ANYRES16=r0], &(0x7f0000000180), 0x200) 13.664344485s ago: executing program 3 (id=571): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) r6 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x402119, 0x1000}, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r7 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x10000) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, r7, &(0x7f00000004c0)={0x40502, 0x0, 0x2}, 0x0, 0x18}) io_uring_enter(r6, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008011}, 0x4c0e4) syz_init_net_socket$netrom(0x6, 0x5, 0x300) socket$can_j1939(0x1d, 0x2, 0x7) 13.516549536s ago: executing program 2 (id=572): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x88, &(0x7f00000001c0)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x64, 0xb, 0x36, 0x66, 0x65, 0x66, 0x34b61ac358e0f40a, 0x63], 0x2d, [0x31, 0x35, 0x35, 0x62], 0x2d, [0x39, 0x55, 0x39, 0x61], 0x2d, [0x32, 0x63, 0xc, 0x69], 0x2d, [0x35, 0x30, 0x33, 0x33, 0x66, 0x35, 0x33, 0x38]}}}]}, 0x3, 0x448, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000001, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x4}, {}, {}, @raw32}], 0x1c) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r5, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r7}) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8916, &(0x7f0000000000)) ioctl(r8, 0x8936, &(0x7f0000000000)) 11.761805366s ago: executing program 2 (id=573): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$setopts(0xc60a, r0, 0x99a, 0x40) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fallocate(r3, 0x3, 0x2009140, 0x3) r4 = epoll_create1(0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000180)={0xc0002000}) ioctl$TCSETSW2(r5, 0x402c542c, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = syz_io_uring_setup(0x186, &(0x7f00000004c0)={0x0, 0x3416, 0x13100, 0x0, 0x0, 0x0, r1}, 0x0, 0x0) io_uring_enter(r6, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) close_range(r1, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89101) 11.754592797s ago: executing program 3 (id=580): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x78) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap$fb(&(0x7f0000931000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0xa6000) write$bt_hci(r4, 0x0, 0x8) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000010101020000000000000000000000020800034009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x6000c000}, 0x4000000) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 8.03829752s ago: executing program 4 (id=566): writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x4, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=@newtaction={0xb8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xa4, 0x1, [@m_ife={0xa0, 0x1, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x100000}}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xa497}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf765}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x6}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa0000}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x5, 0x5, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb8}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}}, 0x0) 8.03364914s ago: executing program 0 (id=582): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000020000000000000008020000000071102d0000f6ce08936e2a4045a2f0"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000140)='./file1\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c6572726f72733d72656d6f756e742d726f2c61636c2c00a9b504852143b698d2e379891a0dde7f9adfca8cbec85bf8e749e04e"], 0x11, 0x444f, &(0x7f0000004480)="$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") r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r3, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) symlinkat(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r4, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) dup3(r5, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 8.03029541s ago: executing program 2 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYRES16], 0x14}, 0x1, 0x8000000000000, 0x0, 0x4004845}, 0x8004) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f0000000280)=0x8) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x3) r5 = socket(0x28, 0x5, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r6 = socket$inet(0xa, 0x801, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a0010000000", 0x28}], 0x1}, 0x0) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) 8.01762203s ago: executing program 3 (id=584): syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x230}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$media(0x0, 0x4007, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x300, 0xfffffffd, 0xffffffffffffffff}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xc}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x70}}, 0x0) 3.16956873s ago: executing program 4 (id=574): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000100)='+\x88\xc7s\x00\x00\x942nodev\x00\x00\x8cZ_Pv\x03\xa7\xc1\b\xec\x90Q\x85\x83\xcd\x16\xdcw\'\x8a\xe5N\x8c\x17\xfd\xc5\xad\xd5y\x15\x1fx\x17\f\xbc\xd1.\x8cA\x17\x86\xb7-j!Y\x92\xd9\xc4\r8\xd0\xc9X\xa7\x11\xa3\xf0\x8a*\xbc\x87\xcd\x1fl\xfc\xf3]\xb8\xbd\x02\v<\fl\xa6]\xa5\xfb\x05\xcb\x9c\xe2\xc8\x05\xa5\xa5\xeb\xa9\xef\xe3\xf1b\x81\xec\xac\xb6\x80\xd5\xf5S\x85\x06O\x05\xb8\xa1\x15\xcc\x17\xe8s\x95\x95B\xee_\x98\x91)\xe7\xa8+\x8c\xee\x83@q\x16\xcf3\x0f\x81\xa8\xa9`i\x01m:\xcc\x1c\xed<\xcfA3n\xfd\n>\x03\xae\f \xdbH\'\x05\x82\xdbLE\x14\xcdq\x1abcf\xdb8\xe9a\xa8\x00'/201, 0x2) fcntl$addseals(r4, 0x409, 0x12) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x11, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r4, 0xffffe000) epoll_create1(0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file1\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x248, &(0x7f0000000a00)="$eJzsmL1uE08Uxc/Mrtd2FOWff5OCJkhEIgiyjtcCpbEgSEhUNHyJDitZIuNNjJxFIpaQ4AGgo0CiQYIXoKBIRcFDIEEBSEgUcUFBA8Wg2ZmsZz2xd3HL/RWjM3PvfNzj8RQLgiD+Wb5++fn5ycW1a2cAzGIJZT3+3QEYU5ob+Z+e3z/9rHnpxZuPr9/vzD3cH1luVjZCGCMMqEzY3wXwbt1BnO6Uzv4lxZLuLIKn+jo4Tml9E+I/X+vb4LihdQiGW1rfNXQXDL5/HO0o9De60eaddhSuyqYum0A2jdHzDR4zbOq+EEIwI7671++0oijsGcLVsWzIsUaOFNKskVC6WWfB8q8ED4N1jqZxPm4c8NCbVcO/OjjqOqcBhqt6fA1l+L4/tMSo/5g7XN/J1H9QbkV2tVHYk6kyMKlaKSpKNH+oWYf1u5A5XtHpR4X+X5ns9TixLMu5YIfm8XfrKIHsrBKGIenkyG9fxLFcIRfRIhlx82/eeb33FJteyVYxXjyt2pe7gJgv4GpGFKli49UYnxcG+xX7j/0tb0HB8sthxe9PpZA/xh99+ttSRb/Dp/ndTVG2zAQ+vFXvh3jJcFIf87cQwjXej1q8fa+2u9dfaW+3tsKtcCcIGucY8OhsUEseItnOWM+e8T5Xk/dpxnj/SmNyPe7hQSuOe3XVesxDFXHcC5J+kJx7Tid3DzytYlwGcEJ1pONeuqJj7cE8lcOTXKmW7SSCIAiCIAiCIAiCIAiCIIipWARLvoLmEKivsH8CAAD//zcjTJM=") io_setup(0x735c, &(0x7f0000000980)) 3.16912488s ago: executing program 2 (id=575): ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_usbip_server_init(0x1) gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0xb60e5500, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2941], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) setreuid(0xee00, 0xee00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_io_uring_setup(0x38, &(0x7f00000000c0)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, 0x0, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.16886577s ago: executing program 3 (id=576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080), 0x80, 0x63c, &(0x7f0000001bc0)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x2008084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000500)=@isdn={0x22, 0x80, 0x77, 0x0, 0x7}, 0x80, 0x0, 0x0, 0x0, 0x2d}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01034000000000000000010000000900010073797a3100000000080002400000000140000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000400048014000000110001"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x200000d4) 3.1615396s ago: executing program 0 (id=586): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = inotify_init1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x28f42000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000022) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYRES64=r7], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000230c0000000800000009000000000000090300000000302e302e5f5f"], 0x0, 0x2c, 0x0, 0x0, 0x7f}, 0x28) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x1, 0xe) fsconfig$FSCONFIG_SET_FLAG(r8, 0x0, &(0x7f00000000c0)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) 321.142258ms ago: executing program 0 (id=577): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000280)="85952b177328da2f8757c9343d", 0xd, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/80, 0x50, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0) ioctl$SNDCTL_SEQ_NRMIDIS(r4, 0xc0045103, &(0x7f0000000040)) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x2) ioctl$RFKILL_IOCTL_NOINPUT(r5, 0x5218) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0x1f0268bc, @empty, 0x6}}, 0x0, 0x0, 0x3fc, 0x1, 0x12, 0x4}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x4, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x300, 0x0, 0x0, 0x54}, 0x9c) socket$nl_route(0x10, 0x3, 0x0) 228.654479ms ago: executing program 3 (id=578): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) syz_usb_connect(0x2, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0xe1, 0x5d, 0x84, 0x10, 0x644, 0x800f, 0xd2f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x91, 0xfa, 0x0, 0xc7, 0xc7, 0xcd, 0x2}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x60) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) mknodat$loop(0xffffffffffffff9c, 0x0, 0x40, 0x1) r5 = open(&(0x7f0000000040)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r5, 0x4c06, 0x3) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000740)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 211.975369ms ago: executing program 4 (id=579): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8004) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x4, 0x4, 0x1, 0x1, 0x80000001}, 0x20) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000001540)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_OIF={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) read$hidraw(0xffffffffffffffff, &(0x7f0000002340)=""/147, 0x93) 0s ago: executing program 2 (id=581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) shmdt(0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) getrlimit(0xe, 0x0) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, &(0x7f00000000c0)=@keyring={'key_or_keyring:', r3}) socket(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)=[@rights={{0x18, 0x1, 0x1, [r5, 0xffffffffffffffff]}}], 0x18, 0x8040}}], 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2014800, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x10b400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$ITER_CREATE(0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.74' (ED25519) to the list of known hosts. syzkaller login: [ 64.459836][ T5771] cgroup: Unknown subsys name 'net' [ 64.600849][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.960866][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.991851][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.994778][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.999676][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.007849][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.020377][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.032400][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.042698][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.054189][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.062422][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.073553][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.082001][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.083239][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.089970][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.105666][ T5795] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.105669][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.106083][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.113043][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.121277][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.146649][ T5789] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.154668][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.174559][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.181149][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.197761][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.212682][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.629067][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 68.686378][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 68.765619][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 68.787518][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 68.826389][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.834527][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.841976][ T5781] bridge_slave_0: entered allmulticast mode [ 68.848879][ T5781] bridge_slave_0: entered promiscuous mode [ 68.858404][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.865626][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.872826][ T5781] bridge_slave_1: entered allmulticast mode [ 68.880930][ T5781] bridge_slave_1: entered promiscuous mode [ 68.980433][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.988562][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.996519][ T5782] bridge_slave_0: entered allmulticast mode [ 69.003100][ T5782] bridge_slave_0: entered promiscuous mode [ 69.012444][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.024112][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.059921][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.067193][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.074320][ T5782] bridge_slave_1: entered allmulticast mode [ 69.081554][ T5782] bridge_slave_1: entered promiscuous mode [ 69.113915][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.121148][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.128350][ T5793] bridge_slave_0: entered allmulticast mode [ 69.135473][ T5793] bridge_slave_0: entered promiscuous mode [ 69.170839][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.178127][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.185426][ T5793] bridge_slave_1: entered allmulticast mode [ 69.192082][ T5793] bridge_slave_1: entered promiscuous mode [ 69.200575][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.212596][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.224263][ T5781] team0: Port device team_slave_0 added [ 69.263738][ T5781] team0: Port device team_slave_1 added [ 69.282359][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.289557][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.297505][ T5785] bridge_slave_0: entered allmulticast mode [ 69.304112][ T5785] bridge_slave_0: entered promiscuous mode [ 69.325680][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.358734][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.365992][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.373207][ T5785] bridge_slave_1: entered allmulticast mode [ 69.381002][ T5785] bridge_slave_1: entered promiscuous mode [ 69.388901][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.401264][ T5782] team0: Port device team_slave_0 added [ 69.408915][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.415921][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.442051][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.475693][ T5782] team0: Port device team_slave_1 added [ 69.490859][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.498160][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.524510][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.566330][ T5793] team0: Port device team_slave_0 added [ 69.592242][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.605437][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.616793][ T5793] team0: Port device team_slave_1 added [ 69.623007][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.630068][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.656199][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.668949][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.676025][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.701954][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.777119][ T5781] hsr_slave_0: entered promiscuous mode [ 69.783326][ T5781] hsr_slave_1: entered promiscuous mode [ 69.793369][ T5785] team0: Port device team_slave_0 added [ 69.811817][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.818887][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.845656][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.858525][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.865557][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.891491][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.905442][ T5785] team0: Port device team_slave_1 added [ 70.000045][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.007259][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.033555][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.046442][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.053405][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.079406][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.126113][ T5782] hsr_slave_0: entered promiscuous mode [ 70.132429][ T5782] hsr_slave_1: entered promiscuous mode [ 70.138985][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.147761][ T5782] Cannot create hsr debugfs directory [ 70.185677][ T5785] hsr_slave_0: entered promiscuous mode [ 70.192455][ T5785] hsr_slave_1: entered promiscuous mode [ 70.201274][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.209520][ T5785] Cannot create hsr debugfs directory [ 70.225910][ T5786] Bluetooth: hci2: command tx timeout [ 70.226523][ T5103] Bluetooth: hci1: command tx timeout [ 70.231839][ T5786] Bluetooth: hci3: command tx timeout [ 70.243055][ T5789] Bluetooth: hci0: command tx timeout [ 70.254286][ T5793] hsr_slave_0: entered promiscuous mode [ 70.260505][ T5793] hsr_slave_1: entered promiscuous mode [ 70.268393][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.276044][ T5793] Cannot create hsr debugfs directory [ 70.599411][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.610730][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.621409][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.631986][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.699599][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.708705][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.727519][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.739077][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.793941][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.817853][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.828860][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.839669][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.962717][ T5793] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.982651][ T5793] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.993091][ T5793] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.002830][ T5793] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.022631][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.076703][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.101468][ T3533] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.108702][ T3533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.130252][ T3533] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.137393][ T3533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.174151][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.211370][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.258202][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.282625][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.289768][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.312758][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.329435][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.336604][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.353990][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.371492][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.378642][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.428933][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.436166][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.483732][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.512030][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.523508][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.569499][ T5785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.587541][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.594689][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.612956][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.620102][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.698874][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.741595][ T5793] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.763450][ T5793] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.870146][ T5781] veth0_vlan: entered promiscuous mode [ 71.912930][ T5781] veth1_vlan: entered promiscuous mode [ 72.008249][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.028880][ T5781] veth0_macvtap: entered promiscuous mode [ 72.052999][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.074805][ T5781] veth1_macvtap: entered promiscuous mode [ 72.144884][ T5785] veth0_vlan: entered promiscuous mode [ 72.157340][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.182231][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.197798][ T5785] veth1_vlan: entered promiscuous mode [ 72.211123][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.221497][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.232552][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.241345][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.258599][ T5782] veth0_vlan: entered promiscuous mode [ 72.299553][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.311154][ T5786] Bluetooth: hci3: command tx timeout [ 72.311417][ T5798] Bluetooth: hci2: command tx timeout [ 72.316818][ T5103] Bluetooth: hci0: command tx timeout [ 72.321527][ T5782] veth1_vlan: entered promiscuous mode [ 72.325446][ T5789] Bluetooth: hci1: command tx timeout [ 72.417649][ T5785] veth0_macvtap: entered promiscuous mode [ 72.427656][ T5782] veth0_macvtap: entered promiscuous mode [ 72.442784][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.453530][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.464003][ T5785] veth1_macvtap: entered promiscuous mode [ 72.503318][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.512302][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.523071][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.533269][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.538543][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.550801][ T5782] veth1_macvtap: entered promiscuous mode [ 72.566403][ T5793] veth0_vlan: entered promiscuous mode [ 72.579688][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.590382][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.606067][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.647780][ T5793] veth1_vlan: entered promiscuous mode [ 72.661578][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.670803][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.683595][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.700344][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.717698][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.738537][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.752490][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.764379][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.781306][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.823764][ T5793] veth0_macvtap: entered promiscuous mode [ 72.880858][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.900936][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.911329][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.927079][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.938487][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.950943][ T5793] veth1_macvtap: entered promiscuous mode [ 72.973545][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.982434][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.992303][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.001877][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.124649][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.174653][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.235498][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.293780][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.352460][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.413353][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.504589][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.684538][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.704670][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.715307][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.733915][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.744630][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.755765][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.767269][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.794026][ T5880] syz.0.5[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.842319][ T5793] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.852238][ T5793] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.861079][ T5793] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.869894][ T5793] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.870479][ T5880] loop0: detected capacity change from 0 to 4096 [ 73.898069][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.907911][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.020880][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.049272][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.182637][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.215399][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.275279][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.298249][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.435445][ T5789] Bluetooth: hci3: command tx timeout [ 74.440976][ T5789] Bluetooth: hci0: command tx timeout [ 74.448811][ T5789] Bluetooth: hci1: command tx timeout [ 74.454637][ T5789] Bluetooth: hci2: command tx timeout [ 74.984771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.014993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.221608][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.275120][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.225684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.235412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.244051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.620400][ T5798] Bluetooth: hci2: command tx timeout [ 76.630855][ T5798] Bluetooth: hci1: command tx timeout [ 76.645083][ T5798] Bluetooth: hci0: command tx timeout [ 76.651470][ T5798] Bluetooth: hci3: command tx timeout [ 76.683453][ T5894] loop3: detected capacity change from 0 to 8192 [ 76.705318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.713540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.785247][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.842165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.944764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.954047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.075483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.152113][ T5894] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 77.165479][ T5894] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 77.176319][ T5894] REISERFS (device loop3): using ordered data mode [ 77.182907][ T5894] reiserfs: using flush barriers [ 77.208995][ T5894] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 77.227107][ T5894] REISERFS (device loop3): checking transaction log (loop3) [ 78.990010][ T5902] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 80.433990][ T5894] REISERFS (device loop3): Using tea hash to sort names [ 80.446606][ T5894] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 81.634316][ T5909] Bluetooth: MGMT ver 1.22 [ 81.670227][ T5909] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 81.748219][ T9] cfg80211: failed to load regulatory.db [ 82.375493][ T5914] loop3: detected capacity change from 0 to 16 [ 82.440950][ T5914] erofs: (device loop3): mounted with root inode @ nid 36. [ 82.618894][ T5917] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.266700][ T5926] Zero length message leads to an empty skb [ 85.415336][ T5874] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.527558][ T5942] netlink: 'syz.0.14': attribute type 10 has an invalid length. [ 85.572869][ T5942] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 85.639483][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.650981][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.662858][ T5942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.669716][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.683252][ T5874] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.693339][ T5874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.728521][ T5874] usb 3-1: config 0 descriptor?? [ 85.831124][ T5942] bond_slave_0: entered promiscuous mode [ 85.836999][ T5942] bond_slave_1: entered promiscuous mode [ 85.842700][ T5942] syz_tun: entered promiscuous mode [ 85.871215][ T5942] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.892372][ T5942] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 85.909113][ T5942] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 85.937633][ T5942] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 86.709143][ T5874] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 87.591750][ T5874] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 87.613736][ T5874] usb 3-1: USB disconnect, device number 2 [ 87.718273][ T5947] capability: warning: `syz.0.18' uses 32-bit capabilities (legacy support in use) [ 88.003835][ T5954] fido_id[5954]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 89.176125][ T5956] sched: RT throttling activated [ 91.161419][ T5967] bridge0: entered promiscuous mode [ 91.167100][ T5967] macsec1: entered promiscuous mode [ 91.173671][ T5967] bridge0: port 3(macsec1) entered blocking state [ 91.181034][ T5967] bridge0: port 3(macsec1) entered disabled state [ 91.187753][ T5967] macsec1: entered allmulticast mode [ 91.193055][ T5967] bridge0: entered allmulticast mode [ 91.289376][ T5967] macsec1: left allmulticast mode [ 91.294446][ T5967] bridge0: left allmulticast mode [ 91.303167][ T5967] bridge0: left promiscuous mode [ 91.969572][ T5975] xt_connbytes: Forcing CT accounting to be enabled [ 91.976499][ T5975] Cannot find set identified by id 0 to match [ 96.012409][ T6004] 0: reclassify loop, rule prio 0, protocol 800 [ 96.531321][ T6012] loop0: detected capacity change from 0 to 1764 [ 103.932752][ T6042] 0: reclassify loop, rule prio 0, protocol 800 [ 104.104264][ T6052] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.073183][ T6055] loop2: detected capacity change from 0 to 736 [ 106.138882][ T6066] netlink: 'syz.1.45': attribute type 1 has an invalid length. [ 108.202925][ T6083] pim6reg: entered allmulticast mode [ 110.188054][ T6090] syzkaller0: entered promiscuous mode [ 110.200848][ T6090] syzkaller0: entered allmulticast mode [ 110.298424][ T6090] tipc: Started in network mode [ 110.303397][ T6090] tipc: Node identity 82dafbc5dc, cluster identity 4711 [ 110.328160][ T6090] tipc: Enabled bearer , priority 0 [ 110.351647][ T6089] tipc: Resetting bearer [ 110.410372][ T6089] tipc: Disabling bearer [ 111.651312][ T6100] loop2: detected capacity change from 0 to 256 [ 111.733092][ T6100] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.840836][ T6100] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 113.138365][ T6110] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.147316][ T6110] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.156275][ T6110] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.165248][ T6110] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 113.177021][ T6110] geneve2: entered promiscuous mode [ 113.182359][ T6110] geneve2: entered allmulticast mode [ 113.822766][ T6113] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.988382][ T6113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 113.992109][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.708029][ T6119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 114.728831][ T6119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.160794][ T6119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.935739][ T6133] netlink: 344 bytes leftover after parsing attributes in process `syz.2.62'. [ 116.944670][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.62'. [ 118.552121][ T6143] xt_CT: No such helper "pptp" [ 119.762578][ T6164] binder_alloc: binder_alloc_mmap_handler: 6160 200000ffd000-200001000000 already mapped failed -16 [ 125.232593][ T6194] loop2: detected capacity change from 0 to 4096 [ 125.930988][ T6204] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 126.032677][ T6206] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 126.053272][ T6206] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 127.245764][ T5789] Bluetooth: Unexpected continuation frame (len 16) [ 127.720043][ T6204] gretap1: entered promiscuous mode [ 127.769184][ T6204] bond2: (slave gretap1): making interface the new active one [ 127.814310][ T6204] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 127.881491][ T6204] macvlan3: entered promiscuous mode [ 128.123942][ T6204] macvlan3: entered allmulticast mode [ 128.135921][ T6204] bond2: entered promiscuous mode [ 128.141821][ T6204] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 128.156656][ T6204] bond2: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 129.666551][ T6204] bond2: left promiscuous mode [ 130.028744][ T6204] syz.0.80 (6204) used greatest stack depth: 20912 bytes left [ 131.326214][ T28] audit: type=1326 audit(1762477064.329:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6234 comm="syz.2.88" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x0 [ 132.956204][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.963162][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.081895][ T6264] loop0: detected capacity change from 0 to 16 [ 133.097467][ T6264] ======================================================= [ 133.097467][ T6264] WARNING: The mand mount option has been deprecated and [ 133.097467][ T6264] and is ignored by this kernel. Remove the mand [ 133.097467][ T6264] option from the mount to silence this warning. [ 133.097467][ T6264] ======================================================= [ 134.444299][ T6264] erofs: (device loop0): erofs_read_inode: unsupported chunk format ffff of nid 36 [ 139.576188][ T6303] loop2: detected capacity change from 0 to 4096 [ 139.717901][ T6308] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 140.151334][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.108'. [ 140.172551][ T6310] batadv0: entered promiscuous mode [ 140.569084][ T6310] macvtap1: entered promiscuous mode [ 140.597154][ T6310] macvtap1: entered allmulticast mode [ 140.621378][ T6310] batadv0: entered allmulticast mode [ 140.632209][ T6310] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.650181][ T6321] batadv0: left allmulticast mode [ 140.655683][ T6321] batadv0: left promiscuous mode [ 140.730141][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 142.335981][ T5789] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 150.184291][ T5874] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 150.937212][ T5874] usb 4-1: Using ep0 maxpacket: 32 [ 151.532092][ T5874] usb 4-1: device descriptor read/all, error -71 [ 151.858281][ T6396] loop3: detected capacity change from 0 to 8 [ 153.493158][ T6407] process 'syz.3.129' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 153.527791][ T6407] SQUASHFS error: Failed to read block 0x8f: -5 [ 154.090179][ T28] audit: type=1800 audit(1762477087.469:3): pid=6416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.133" name="bus" dev="overlay" ino=199 res=0 errno=0 [ 154.378780][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.134'. [ 155.623648][ T5789] Bluetooth: hci1: unexpected subevent 0x1a length: 10 > 6 [ 156.155000][ T5905] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 157.445175][ T5905] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.472567][ T5905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 157.697873][ T5905] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.701867][ T6449] loop2: detected capacity change from 0 to 1024 [ 157.714021][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 157.722710][ T5905] usb 4-1: Product: syz [ 157.727224][ T5905] usb 4-1: Manufacturer: syz [ 157.731837][ T5905] usb 4-1: SerialNumber: syz [ 157.853738][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.141'. [ 157.862744][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.141'. [ 157.906075][ T5905] usb 4-1: config 0 descriptor?? [ 158.070159][ T6453] wireguard0: entered promiscuous mode [ 158.076363][ T6453] wireguard0: entered allmulticast mode [ 158.223969][ T6449] syz.2.142: attempt to access beyond end of device [ 158.223969][ T6449] loop2: rw=0, sector=2560, nr_sectors = 2 limit=1024 [ 158.287420][ T6449] Buffer I/O error on dev loop2, logical block 1280, async page read [ 158.296071][ T6449] syz.2.142: attempt to access beyond end of device [ 158.296071][ T6449] loop2: rw=0, sector=2562, nr_sectors = 2 limit=1024 [ 158.319900][ T6449] Buffer I/O error on dev loop2, logical block 1281, async page read [ 158.328573][ T6449] syz.2.142: attempt to access beyond end of device [ 158.328573][ T6449] loop2: rw=0, sector=2564, nr_sectors = 2 limit=1024 [ 158.361289][ T6449] Buffer I/O error on dev loop2, logical block 1282, async page read [ 158.421419][ T5905] usb 4-1: can't set config #0, error -71 [ 158.450467][ T5905] usb 4-1: USB disconnect, device number 4 [ 158.610666][ T6449] syz.2.142: attempt to access beyond end of device [ 158.610666][ T6449] loop2: rw=0, sector=2566, nr_sectors = 2 limit=1024 [ 159.034899][ T6449] Buffer I/O error on dev loop2, logical block 1283, async page read [ 159.043678][ T6449] hfsplus: failed to load attributes file [ 160.471486][ T6474] syz_tun: entered allmulticast mode [ 160.490050][ T6478] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 160.668052][ T6483] loop3: detected capacity change from 0 to 4096 [ 160.681420][ T6474] pimreg: entered allmulticast mode [ 160.723387][ T6473] syz_tun: left allmulticast mode [ 160.737166][ T6486] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.743163][ T6480] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.806683][ T6487] trusted_key: syz.1.147 sent an empty control message without MSG_MORE. [ 161.143464][ T6480] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 161.501491][ T6478] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 161.710459][ T6488] bond1: (slave gretap1): making interface the new active one [ 161.726871][ T6488] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 161.844589][ T6489] macvlan2: entered promiscuous mode [ 162.035454][ T6489] macvlan2: entered allmulticast mode [ 162.109794][ T6489] bond1: entered promiscuous mode [ 162.115533][ T6489] gretap1: entered promiscuous mode [ 162.121712][ T6489] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.146409][ T6489] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 162.203687][ T6489] bond1: left promiscuous mode [ 162.214914][ T6489] gretap1: left promiscuous mode [ 162.935192][ T6489] syz.2.148 (6489) used greatest stack depth: 19792 bytes left [ 162.942794][ T6488] syz.2.148 (6488) used greatest stack depth: 19376 bytes left [ 162.955462][ T6501] loop3: detected capacity change from 0 to 256 [ 163.040253][ T6501] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 165.843842][ T6524] binder: 6523:6524 ioctl c0306201 2000000002c0 returned -14 [ 166.944472][ T28] audit: type=1326 audit(1762477100.319:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 166.967728][ T28] audit: type=1326 audit(1762477100.329:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 166.994293][ T28] audit: type=1326 audit(1762477100.329:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 167.054663][ T28] audit: type=1326 audit(1762477100.329:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb0838f703 code=0x7ffc0000 [ 167.152421][ T28] audit: type=1326 audit(1762477100.329:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffb0838f703 code=0x7ffc0000 [ 167.179800][ T28] audit: type=1326 audit(1762477100.329:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 167.229454][ T6534] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 167.230659][ T6540] loop2: detected capacity change from 0 to 512 [ 167.243179][ T28] audit: type=1326 audit(1762477100.329:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 167.248364][ T6534] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 167.268846][ T28] audit: type=1326 audit(1762477100.339:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 167.446230][ T6540] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 167.584536][ T6540] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 167.625163][ T28] audit: type=1326 audit(1762477100.339:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 167.677829][ T6536] loop3: detected capacity change from 0 to 512 [ 167.832505][ T28] audit: type=1326 audit(1762477100.339:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz.3.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 167.917788][ T6540] EXT4-fs error (device loop2): __ext4_get_inode_loc:4489: comm syz.2.161: Invalid inode table block 1 in block_group 0 [ 167.977712][ T6540] EXT4-fs (loop2): get root inode failed [ 167.983398][ T6540] EXT4-fs (loop2): mount failed [ 167.995072][ T6536] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 168.032453][ T6536] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.096313][ T6536] EXT4-fs (loop3): 1 truncate cleaned up [ 168.120400][ T6536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.428911][ T6553] ubi0: attaching mtd0 [ 168.446371][ T6553] ubi0: scanning is finished [ 168.451075][ T6553] ubi0: empty MTD device detected [ 168.691015][ T6553] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 168.925869][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.141090][ T6559] IPv6: Can't replace route, no match found [ 169.788081][ T6564] loop0: detected capacity change from 0 to 512 [ 169.821124][ T6564] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 169.839085][ T6564] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 169.850246][ T6564] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.165: Invalid inode table block 1 in block_group 0 [ 169.897606][ T6564] EXT4-fs (loop0): get root inode failed [ 169.903303][ T6564] EXT4-fs (loop0): mount failed [ 170.360066][ T6572] ubi0: attaching mtd0 [ 170.371598][ T6572] ubi0: scanning is finished [ 170.990110][ T6572] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 170.995080][ T1056] null_blk: rq ffff888021f20000 timed out [ 171.004748][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.113075][ T1056] null_blk: rq ffff888021f20180 timed out [ 171.119317][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.130076][ T1056] null_blk: rq ffff888021f20300 timed out [ 171.135892][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.148522][ T1056] null_blk: rq ffff888021f20480 timed out [ 171.154551][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.165094][ T1056] null_blk: rq ffff888021f20600 timed out [ 171.171258][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.182225][ T1056] null_blk: rq ffff888021f20780 timed out [ 171.188252][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.198886][ T1056] null_blk: rq ffff888021f20900 timed out [ 171.204647][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.215166][ T1056] null_blk: rq ffff888021f20a80 timed out [ 171.221013][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.235902][ T1056] null_blk: rq ffff888021f20c00 timed out [ 171.242032][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.252777][ T1056] null_blk: rq ffff888021f20d80 timed out [ 171.259005][ T1056] timeout error, dev nullb0, sector 393216 op 0x0:(READ) flags 0xe00000 phys_seg 2 prio class 1 [ 171.270171][ T1056] null_blk: rq ffff888021f20f00 timed out [ 171.276132][ T1056] null_blk: rq ffff888021f21080 timed out [ 171.282070][ T1056] null_blk: rq ffff888021f21200 timed out [ 171.288270][ T1056] null_blk: rq ffff888021f21380 timed out [ 171.294777][ T1056] null_blk: rq ffff888021f21500 timed out [ 171.300733][ T1056] null_blk: rq ffff888021f21680 timed out [ 171.307202][ T1056] null_blk: rq ffff888021f21800 timed out [ 171.313138][ T1056] null_blk: rq ffff888021f21980 timed out [ 171.318918][ T1056] null_blk: rq ffff888021f21b00 timed out [ 171.324663][ T1056] null_blk: rq ffff888021f21c80 timed out [ 171.331051][ T1056] null_blk: rq ffff888021f21e00 timed out [ 171.336824][ T1056] null_blk: rq ffff888021f21f80 timed out [ 171.342567][ T1056] null_blk: rq ffff888021f22100 timed out [ 171.348425][ T1056] null_blk: rq ffff888021f22280 timed out [ 171.355811][ T1056] null_blk: rq ffff888021f22400 timed out [ 171.361818][ T1056] null_blk: rq ffff888021f22580 timed out [ 171.368067][ T1056] null_blk: rq ffff888021f22700 timed out [ 171.373812][ T1056] null_blk: rq ffff888021f22880 timed out [ 171.379780][ T1056] null_blk: rq ffff888021f22a00 timed out [ 171.385951][ T1056] null_blk: rq ffff888021f22b80 timed out [ 171.391726][ T1056] null_blk: rq ffff888021f22d00 timed out [ 171.397517][ T1056] null_blk: rq ffff888021f22e80 timed out [ 171.406103][ T1056] null_blk: rq ffff888021f23000 timed out [ 171.411889][ T1056] null_blk: rq ffff888021f23180 timed out [ 171.417698][ T1056] null_blk: rq ffff888021f23300 timed out [ 171.423464][ T1056] null_blk: rq ffff888021f23480 timed out [ 171.429816][ T1056] null_blk: rq ffff888021f23600 timed out [ 171.435621][ T1056] null_blk: rq ffff888021f23780 timed out [ 171.442254][ T1056] null_blk: rq ffff888021f23900 timed out [ 171.448071][ T1056] null_blk: rq ffff888021f23a80 timed out [ 171.455765][ T1056] null_blk: rq ffff888021f23c00 timed out [ 171.462627][ T1056] null_blk: rq ffff888021f23d80 timed out [ 171.468451][ T1056] null_blk: rq ffff888021f23f00 timed out [ 171.474199][ T1056] null_blk: rq ffff888021f24080 timed out [ 171.479986][ T1056] null_blk: rq ffff888021f24200 timed out [ 171.487775][ T1056] null_blk: rq ffff888021f24380 timed out [ 171.493700][ T1056] null_blk: rq ffff888021f24500 timed out [ 171.499829][ T1056] null_blk: rq ffff888021f24680 timed out [ 171.505786][ T1056] null_blk: rq ffff888021f24800 timed out [ 171.511537][ T1056] null_blk: rq ffff888021f24980 timed out [ 171.517401][ T1056] null_blk: rq ffff888021f24b00 timed out [ 171.523140][ T1056] null_blk: rq ffff888021f24c80 timed out [ 171.529128][ T1056] null_blk: rq ffff888021f24e00 timed out [ 171.534991][ T1056] null_blk: rq ffff888021f24f80 timed out [ 171.543438][ T1056] null_blk: rq ffff888021f25100 timed out [ 172.396506][ T6590] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 173.031533][ T6590] team0: Cannot enslave team device to itself [ 173.054464][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 173.064317][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.171'. [ 173.073722][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 173.206733][ T6591] netlink: 60 bytes leftover after parsing attributes in process `syz.3.171'. [ 173.230013][ T6591] netlink: 104 bytes leftover after parsing attributes in process `syz.3.171'. [ 177.729211][ T6621] loop3: detected capacity change from 0 to 16 [ 177.778676][ T6621] erofs: DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 177.798681][ T6621] erofs: DAX unsupported by block device. Turning off DAX. [ 177.843341][ T6621] erofs: (device loop3): mounted with root inode @ nid 36. [ 177.883135][ T6628] netlink: 'syz.1.179': attribute type 1 has an invalid length. [ 178.068214][ T6628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.142176][ T6633] vlan2: entered allmulticast mode [ 178.159684][ T6633] veth1: entered allmulticast mode [ 178.324496][ T6633] bond1: (slave vlan2): making interface the new active one [ 179.036695][ T6633] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 180.579751][ T6655] openvswitch: netlink: Message has 16 unknown bytes. [ 181.035719][ T6662] loop1: detected capacity change from 0 to 1024 [ 181.240777][ T6662] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.291253][ T6681] loop3: detected capacity change from 0 to 256 [ 182.979354][ T6681] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 183.183293][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.247721][ T6688] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 184.899053][ T27] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 185.101897][ T27] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 185.134954][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.860715][ T27] usb 2-1: config 0 descriptor?? [ 185.900942][ T27] pwc: Creative Labs Webcam Pro Ex detected. [ 186.308124][ T6712] bad cache= option: noneb*"J*䳈^tg]8o, priority 10 [ 190.200241][ T6749] loop0: detected capacity change from 0 to 1024 [ 190.216019][ T6749] EXT4-fs: Ignoring removed orlov option [ 190.273017][ T6749] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 190.307904][ T9] tipc: Node number set to 2886997007 [ 190.731134][ T6751] loop1: detected capacity change from 0 to 40427 [ 191.016615][ T6749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.035773][ T6751] F2FS-fs (loop1): invalid crc value [ 191.051227][ T6751] F2FS-fs (loop1): Found nat_bits in checkpoint [ 191.112108][ T6751] F2FS-fs (loop1): Start checkpoint disabled! [ 191.132712][ T6751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 192.314945][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 192.321243][ T5798] Bluetooth: hci2: command 0x0406 tx timeout [ 192.327533][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 192.328163][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 192.384647][ T6739] overlayfs: failed to clone upperpath [ 192.463729][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.609748][ T1100] kworker/u4:8: attempt to access beyond end of device [ 192.609748][ T1100] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 192.626029][ T1100] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 192.632952][ T1100] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 194.531452][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.537441][ T6797] loop1: detected capacity change from 0 to 32768 [ 194.537833][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.559854][ T6797] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.218 (6797) [ 194.693750][ T6800] tipc: Enabling of bearer rejected, failed to enable media [ 195.069907][ T6797] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 195.080600][ T6797] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 195.089362][ T6797] BTRFS info (device loop1): using free space tree [ 195.608812][ T6797] BTRFS info (device loop1): enabling ssd optimizations [ 195.616088][ T6797] BTRFS info (device loop1): auto enabling async discard [ 195.644801][ T6829] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 196.365580][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 196.365627][ T28] audit: type=1800 audit(1762477129.429:43): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.218" name="file2" dev="loop1" ino=261 res=0 errno=0 [ 196.939457][ T6833] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 197.137283][ T6833] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 197.633895][ T6829] bond3: (slave bridge1): Enslaving as an active interface with a down link [ 197.721591][ T6838] bond3: (slave gretap2): making interface the new active one [ 197.837164][ T6838] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 197.959625][ T6839] macvlan3: entered promiscuous mode [ 197.966956][ T6839] macvlan3: entered allmulticast mode [ 197.973761][ T6839] bond3: entered promiscuous mode [ 197.980099][ T6839] gretap2: entered promiscuous mode [ 197.989100][ T6839] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 198.129911][ T6839] bond3: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 198.149955][ T6839] bond3: left promiscuous mode [ 198.168161][ T6839] gretap2: left promiscuous mode [ 198.252779][ T6849] openvswitch: netlink: Message has 16 unknown bytes. [ 199.008132][ T5793] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.251082][ T6876] xt_NFQUEUE: number of total queues is 0 [ 206.950959][ T6914] binder: BINDER_SET_CONTEXT_MGR already set [ 206.968729][ T6914] binder: 6913:6914 ioctl 4018620d 200000004a80 returned -16 [ 209.175917][ T6920] xt_NFQUEUE: number of total queues is 0 [ 210.394358][ T6931] fuse: Bad value for 'fd' [ 211.965714][ T6950] lo: entered allmulticast mode [ 212.048897][ T6950] tunl0: entered allmulticast mode [ 212.064073][ T6950] gre0: entered allmulticast mode [ 212.356160][ T6950] gretap0: entered allmulticast mode [ 212.385019][ T6950] erspan0: entered allmulticast mode [ 212.466391][ T6950] ip_vti0: entered allmulticast mode [ 212.472517][ T6950] ip6_vti0: entered allmulticast mode [ 212.478604][ T6950] sit0: entered allmulticast mode [ 212.484344][ T6950] ip6tnl0: entered allmulticast mode [ 212.490308][ T6950] ip6gre0: entered allmulticast mode [ 212.495753][ T6954] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 212.546635][ T6950] syz_tun: entered allmulticast mode [ 212.562018][ T6950] ip6gretap0: entered allmulticast mode [ 212.568263][ T6950] bridge0: entered allmulticast mode [ 212.574222][ T6950] vcan0: entered allmulticast mode [ 212.579750][ T6950] bond0: entered allmulticast mode [ 212.584999][ T6950] bond_slave_0: entered allmulticast mode [ 212.590735][ T6950] bond_slave_1: entered allmulticast mode [ 212.597626][ T6950] team0: entered allmulticast mode [ 212.602760][ T6950] team_slave_0: entered allmulticast mode [ 212.608554][ T6950] team_slave_1: entered allmulticast mode [ 212.615377][ T6950] dummy0: entered allmulticast mode [ 212.621253][ T6950] nlmon0: entered allmulticast mode [ 212.627442][ T6950] caif0: entered allmulticast mode [ 212.632716][ T6950] batadv0: entered allmulticast mode [ 212.639068][ T6950] vxcan0: entered allmulticast mode [ 212.644613][ T6950] vxcan1: entered allmulticast mode [ 212.653034][ T6950] veth0: entered allmulticast mode [ 212.659896][ T6950] veth1: entered allmulticast mode [ 212.669666][ T6950] wg0: entered allmulticast mode [ 212.675373][ T6950] wg1: entered allmulticast mode [ 212.681566][ T6950] wg2: entered allmulticast mode [ 212.687307][ T6950] veth0_to_bridge: entered allmulticast mode [ 212.695481][ T6950] veth1_to_bridge: entered allmulticast mode [ 212.703224][ T6950] veth0_to_bond: entered allmulticast mode [ 212.710462][ T6950] veth1_to_bond: entered allmulticast mode [ 212.717751][ T6950] veth0_to_team: entered allmulticast mode [ 212.725467][ T6950] veth1_to_team: entered allmulticast mode [ 212.733059][ T6950] veth0_to_batadv: entered allmulticast mode [ 212.741986][ T6950] batadv_slave_0: entered allmulticast mode [ 212.748766][ T6950] veth1_to_batadv: entered allmulticast mode [ 212.755555][ T6950] batadv_slave_1: entered allmulticast mode [ 212.762154][ T6950] xfrm0: entered allmulticast mode [ 212.768054][ T6950] veth0_to_hsr: entered allmulticast mode [ 212.774520][ T6950] hsr_slave_0: entered allmulticast mode [ 212.781136][ T6950] veth1_to_hsr: entered allmulticast mode [ 212.787996][ T6950] hsr_slave_1: entered allmulticast mode [ 212.794376][ T6950] hsr0: entered allmulticast mode [ 212.800282][ T6950] veth1_virt_wifi: entered allmulticast mode [ 212.807107][ T6950] veth0_virt_wifi: entered allmulticast mode [ 212.813852][ T6950] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 212.821483][ T6950] veth1_vlan: entered allmulticast mode [ 212.827855][ T6950] veth0_vlan: entered allmulticast mode [ 212.834789][ T6950] vlan0: entered allmulticast mode [ 212.840743][ T6950] vlan1: entered allmulticast mode [ 212.846633][ T6950] macvlan0: entered allmulticast mode [ 212.852703][ T6950] macvlan1: entered allmulticast mode [ 212.858897][ T6950] ipvlan0: entered allmulticast mode [ 212.864337][ T6950] ipvlan1: entered allmulticast mode [ 212.869910][ T6950] veth1_macvtap: entered allmulticast mode [ 212.876580][ T6950] veth0_macvtap: entered allmulticast mode [ 212.883090][ T6950] macvtap0: entered allmulticast mode [ 212.889291][ T6950] macsec0: entered allmulticast mode [ 212.895343][ T6950] geneve0: entered allmulticast mode [ 212.901351][ T6950] geneve1: entered allmulticast mode [ 212.907489][ T6950] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 212.915628][ T6950] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 212.923648][ T6950] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 212.932095][ T6950] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 212.940234][ T6950] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 212.948083][ T6950] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 213.110609][ T6962] fuse: Bad value for 'fd' [ 213.825242][ T6963] loop1: detected capacity change from 0 to 256 [ 213.887422][ T6963] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 215.413606][ T28] audit: type=1326 audit(1762477148.789:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 215.632514][ T6986] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.131117][ T28] audit: type=1326 audit(1762477148.819:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.259456][ T28] audit: type=1326 audit(1762477148.819:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.302443][ T28] audit: type=1326 audit(1762477148.819:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.364015][ T28] audit: type=1326 audit(1762477148.819:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.405245][ T28] audit: type=1326 audit(1762477148.819:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.415138][ T6989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.454390][ T28] audit: type=1326 audit(1762477148.819:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.482525][ T28] audit: type=1326 audit(1762477148.819:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 216.862009][ T6997] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 216.868949][ T6997] PKCS7: Only support pkcs7_signedData type [ 217.090624][ T28] audit: type=1326 audit(1762477148.819:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 217.153250][ T6998] warning: `syz.1.262' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 217.442236][ T28] audit: type=1326 audit(1762477148.819:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6982 comm="syz.1.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 220.091361][ T7021] loop0: detected capacity change from 0 to 1024 [ 220.105901][ T7021] EXT4-fs: Ignoring removed bh option [ 220.111414][ T7021] EXT4-fs: Ignoring removed nobh option [ 220.154951][ T7021] EXT4-fs: Ignoring removed bh option [ 220.182858][ T7021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 220.368403][ T7021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.336663][ T5103] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 221.377535][ T7034] raw_sendmsg: syz.2.273 forgot to set AF_INET. Fix it! [ 224.644103][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 224.644119][ T28] audit: type=1800 audit(1762477157.989:70): pid=7039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.270" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 224.723734][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.007574][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.953653][ T7057] (null): rxe_set_mtu: Set mtu to 1024 [ 225.965433][ T7057] wg2 speed is unknown, defaulting to 1000 [ 225.988244][ T7057] wg2 speed is unknown, defaulting to 1000 [ 226.002483][ T7057] wg2 speed is unknown, defaulting to 1000 [ 226.564424][ T7057] infiniband syz2: set active [ 226.569672][ T7057] infiniband syz2: added wg2 [ 226.585591][ T7057] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 226.590974][ T7057] infiniband syz2: Couldn't open port 1 [ 226.625485][ T7057] RDS/IB: syz2: added [ 226.630286][ T7057] smc: adding ib device syz2 with port count 1 [ 226.636838][ T7057] smc: ib device syz2 port 1 has pnetid [ 226.645726][ T7057] wg2 speed is unknown, defaulting to 1000 [ 226.781280][ T786] wg2 speed is unknown, defaulting to 1000 [ 226.813732][ T7057] wg2 speed is unknown, defaulting to 1000 [ 227.134115][ T7057] wg2 speed is unknown, defaulting to 1000 [ 227.175742][ T5829] wg2 speed is unknown, defaulting to 1000 [ 227.420581][ T7057] wg2 speed is unknown, defaulting to 1000 [ 228.063039][ T7076] loop0: detected capacity change from 0 to 8 [ 228.075789][ T7075] sp0: Synchronizing with TNC [ 229.668707][ T7082] tipc: Enabled bearer , priority 0 [ 229.677430][ T7082] syzkaller0: entered promiscuous mode [ 229.682961][ T7082] syzkaller0: entered allmulticast mode [ 229.764056][ T7082] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 230.083804][ T7082] tipc: Resetting bearer [ 230.085033][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.236694][ T7081] tipc: Resetting bearer [ 230.332413][ T7081] tipc: Disabling bearer [ 232.858578][ T7120] loop0: detected capacity change from 0 to 32768 [ 232.881689][ T7120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.289 (7120) [ 232.915397][ T7120] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 232.925662][ T7120] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 232.934333][ T7120] BTRFS info (device loop0): using free space tree [ 233.172722][ T7120] BTRFS info (device loop0): enabling ssd optimizations [ 233.179844][ T7120] BTRFS info (device loop0): auto enabling async discard [ 235.005850][ T28] audit: type=1800 audit(1762477168.199:71): pid=7145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.289" name="file2" dev="loop0" ino=261 res=0 errno=0 [ 237.350765][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 237.665719][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.758268][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.906605][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.361302][ T7155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.402854][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 239.669430][ T7162] loop0: detected capacity change from 0 to 256 [ 239.721371][ T7162] FAT-fs (loop0): Unrecognized mount option "shorname=mixed" or missing value [ 242.022647][ T7175] ieee802154 phy0 wpan0: encryption failed: -22 [ 244.287032][ T7198] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 245.080829][ T7198] team0: Cannot enslave team device to itself [ 245.333897][ T7204] loop0: detected capacity change from 0 to 40427 [ 245.401052][ T7204] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 245.410248][ T7204] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 245.435052][ T7204] F2FS-fs (loop0): invalid crc value [ 245.463638][ T7204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 245.536199][ T7204] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 245.543293][ T7204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 247.363294][ T28] audit: type=1800 audit(1762477180.589:72): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.305" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 249.484389][ T5781] syz-executor: attempt to access beyond end of device [ 249.484389][ T5781] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 249.551758][ T5781] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 249.575406][ T7233] tipc: Enabling of bearer rejected, failed to enable media [ 249.750737][ T7238] mmap: syz.3.314 (7238) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 250.226271][ T7248] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 250.693140][ T7246] netlink: 'syz.2.316': attribute type 1 has an invalid length. [ 250.817248][ T7246] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.930348][ T7249] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 251.364246][ T7246] vlan2: entered allmulticast mode [ 251.370172][ T7246] veth1: entered allmulticast mode [ 251.428398][ T7246] veth1: entered promiscuous mode [ 251.546357][ T7246] veth1: left promiscuous mode [ 251.638061][ T7246] bond2: (slave vlan2): making interface the new active one [ 251.645815][ T7246] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 251.664598][ T7246] veth1: entered promiscuous mode [ 251.730082][ T7246] vlan2: entered promiscuous mode [ 251.759172][ T7246] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 253.649610][ T7260] syz.2.318 uses obsolete (PF_INET,SOCK_PACKET) [ 255.055252][ T5874] IPVS: starting estimator thread 0... [ 255.977912][ T7271] IPVS: using max 18 ests per chain, 43200 per kthread [ 255.993799][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.122847][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.221074][ T7279] netlink: 'syz.3.321': attribute type 10 has an invalid length. [ 256.229135][ T7279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.321'. [ 256.243544][ T7279] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 256.277442][ T7279] batman_adv: batadv0: Adding interface: virt_wifi0 [ 256.284391][ T7279] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.310632][ T7279] batman_adv: batadv0: Interface activated: virt_wifi0 [ 258.812515][ T7286] trusted_key: encrypted_key: insufficient parameters specified [ 263.806005][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 263.891220][ T7317] veth1_macvtap: left promiscuous mode [ 269.321969][ T7355] siw: device registration error -23 [ 273.883990][ T7386] input: syz1 as /devices/virtual/input/input5 [ 274.416114][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 274.536949][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 275.460617][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 275.512438][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 276.155074][ T5829] libceph: connect (1)[c::]:6789 error -101 [ 276.162039][ T5829] libceph: mon0 (1)[c::]:6789 connect error [ 276.353017][ T7386] ceph: No mds server is up or the cluster is laggy [ 278.263572][ T7401] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.273126][ T7401] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.281887][ T7401] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.290620][ T7401] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.943261][ T7401] vxlan0: entered allmulticast mode [ 278.967673][ T7401] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 279.009071][ T7411] random: crng reseeded on system resumption [ 279.457852][ T1090] vlan2: left promiscuous mode [ 280.224036][ T7417] netlink: 144 bytes leftover after parsing attributes in process `syz.2.354'. [ 281.236592][ T7424] fuse: Bad value for 'fd' [ 281.744524][ T7427] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 281.782323][ T7427] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.874034][ T7427] gretap2: entered promiscuous mode [ 281.926756][ T7427] bond3: (slave gretap2): making interface the new active one [ 283.234432][ T7427] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 283.383889][ T7435] macvlan2: entered promiscuous mode [ 283.402677][ T7435] macvlan2: entered allmulticast mode [ 283.425626][ T7435] bond3: entered promiscuous mode [ 283.453496][ T7435] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 283.516421][ T7435] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 283.544409][ T7435] bond3: left promiscuous mode [ 285.091339][ T7450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.361'. [ 292.375460][ T7508] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 295.186352][ T7519] loop0: detected capacity change from 0 to 40427 [ 295.206439][ T7519] F2FS-fs (loop0): Invalid segment count (1) [ 295.242854][ T7519] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 295.515056][ T7282] blk_print_req_error: 45 callbacks suppressed [ 295.515070][ T7282] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 295.884540][ T7531] (null): rxe_set_mtu: Set mtu to 1024 [ 295.893495][ T7531] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 296.616666][ T7530] loop0: detected capacity change from 0 to 1024 [ 296.626086][ T7530] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 296.635804][ T7530] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 296.649150][ T7530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.871371][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.798123][ T7555] loop0: detected capacity change from 0 to 64 [ 301.932234][ T7574] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 302.270893][ T7584] random: crng reseeded on system resumption [ 304.257526][ T7591] netlink: 144 bytes leftover after parsing attributes in process `syz.3.392'. [ 305.604224][ T7609] netlink: 'syz.2.397': attribute type 7 has an invalid length. [ 307.655779][ T7625] loop0: detected capacity change from 0 to 16 [ 307.851444][ T7625] erofs: (device loop0): mounted with root inode @ nid 36. [ 308.736624][ C1] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(40936205834364) <= P.seqno(0) <= S.SWH(40936205834438)) and (P.ackno exists or LAWL(1129859460208) <= P.ackno(1129859460209) <= S.AWH(1129859460210), sending SYNC... [ 309.229657][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.1.405'. [ 310.413865][ T7644] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 310.421907][ T7644] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 310.430472][ T7644] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 310.438009][ T7644] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 310.445886][ T7644] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 310.452916][ T7644] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 310.460842][ T7644] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 310.468064][ T7644] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 310.474963][ T7644] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 310.483195][ T7644] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 310.490120][ T7644] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 310.504321][ T7644] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 310.511262][ T7644] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 310.519515][ T7644] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 311.764206][ T7653] xt_connbytes: Forcing CT accounting to be enabled [ 311.785744][ T7653] loop0: detected capacity change from 0 to 2048 [ 311.795106][ T7653] NILFS (loop0): unrecognized mount option "/dev/video#" [ 311.848042][ T7653] loop0: detected capacity change from 0 to 1024 [ 311.855296][ T7653] EXT4-fs: Ignoring removed i_version option [ 311.884437][ T7653] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.031802][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.754298][ T7675] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 312.766801][ T7675] batman_adv: batadv0: Adding interface: ip6gretap1 [ 312.773578][ T7675] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.800012][ T7675] batman_adv: batadv0: Interface activated: ip6gretap1 [ 313.257727][ T7678] loop0: detected capacity change from 0 to 64 [ 313.710460][ T7686] netlink: 24 bytes leftover after parsing attributes in process `syz.0.414'. [ 315.281334][ T7690] loop1: detected capacity change from 0 to 8192 [ 315.300837][ T7694] loop0: detected capacity change from 0 to 1024 [ 315.628363][ T7694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.740953][ T7690] overlay: filesystem on ./file1 not supported [ 317.337968][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.352462][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.690546][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 318.706016][ T7706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.422'. [ 319.643410][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.923564][ T7728] loop0: detected capacity change from 0 to 64 [ 320.964362][ T7728] hfs: unable to locate alternate MDB [ 320.983280][ T7728] hfs: continuing without an alternate MDB [ 321.241637][ T27] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 321.744744][ T786] IPVS: starting estimator thread 0... [ 321.836844][ T7736] IPVS: using max 19 ests per chain, 45600 per kthread [ 322.026443][ T27] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.038493][ T27] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 322.805062][ T7740] syz.3.430 (7740) used greatest stack depth: 17960 bytes left [ 322.825872][ T27] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 322.839137][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.054566][ T27] usb 2-1: can't set config #1, error -71 [ 323.072655][ T27] usb 2-1: USB disconnect, device number 3 [ 324.527217][ T7759] overlayfs: failed to clone lowerpath [ 324.762245][ T7761] loop0: detected capacity change from 0 to 256 [ 327.283478][ T7785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 327.303080][ T7785] batman_adv: batadv0: Adding interface: ip6gretap1 [ 327.538904][ T7785] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.565401][ T7785] batman_adv: batadv0: Interface activated: ip6gretap1 [ 328.845767][ T7799] bridge2: entered promiscuous mode [ 328.851748][ T7799] bridge2: entered allmulticast mode [ 329.734944][ T28] audit: type=1326 audit(1762477263.109:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 330.124669][ T28] audit: type=1326 audit(1762477263.109:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 330.210014][ T28] audit: type=1326 audit(1762477263.149:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 330.531920][ T28] audit: type=1326 audit(1762477263.149:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 330.554138][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.416988][ T7810] loop0: detected capacity change from 0 to 32768 [ 331.795221][ T28] audit: type=1326 audit(1762477263.149:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 331.883407][ T28] audit: type=1326 audit(1762477263.149:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 331.923155][ T28] audit: type=1326 audit(1762477263.149:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 332.009166][ T28] audit: type=1326 audit(1762477263.149:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 332.085813][ T28] audit: type=1326 audit(1762477263.149:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 332.135002][ T28] audit: type=1326 audit(1762477263.149:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7802 comm="syz.3.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb0838f6c9 code=0x7ffc0000 [ 332.801666][ T7818] loop0: detected capacity change from 0 to 64 [ 332.812762][ T7823] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 334.031207][ T7833] loop1: detected capacity change from 0 to 256 [ 334.070027][ T7833] FAT-fs (loop1): Unrecognized mount option "uid=" or missing value [ 336.215751][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'. [ 336.240841][ T7843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.457'. [ 336.284168][ T7855] loop0: detected capacity change from 0 to 256 [ 336.303050][ T7855] FAT-fs (loop0): Unrecognized mount option "iocharsename=winft" or missing value [ 341.379504][ T7888] loop0: detected capacity change from 0 to 256 [ 341.459424][ T7888] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 342.086466][ T7893] loop1: detected capacity change from 0 to 4096 [ 343.345973][ T7893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.342707][ T5793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.879484][ T7923] netlink: 292 bytes leftover after parsing attributes in process `syz.1.474'. [ 345.890618][ T7923] netlink: 144 bytes leftover after parsing attributes in process `syz.1.474'. [ 348.406778][ T7931] overlayfs: failed to clone upperpath [ 350.293376][ T7944] loop0: detected capacity change from 0 to 256 [ 351.310933][ T5103] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 351.382907][ T7955] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 351.414828][ T7955] FAT-fs (loop0): error, corrupted file size (i_pos 196, 2097152) [ 351.476047][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 351.476076][ T28] audit: type=1800 audit(1762477284.779:157): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.481" name="file1" dev="loop0" ino=1048635 res=0 errno=0 [ 353.448022][ T7962] loop0: detected capacity change from 0 to 256 [ 353.460961][ T7962] exfat: Deprecated parameter 'utf8' [ 353.511719][ T7962] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 353.542561][ T7976] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 353.640698][ T7976] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.692241][ T7979] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.703542][ T7979] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 353.716865][ T7979] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 354.624393][ T7976] ip6erspan0: entered promiscuous mode [ 354.652826][ T7976] bond2: (slave ip6erspan0): making interface the new active one [ 354.669317][ T7976] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 354.697134][ T7979] macvlan2: entered promiscuous mode [ 354.703797][ T7979] bond2: entered promiscuous mode [ 354.710215][ T7979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 354.791672][ T7979] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of ip6erspan0 [ 355.076586][ T7979] bond2: left promiscuous mode [ 355.533938][ T28] audit: type=1326 audit(1762477288.909:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 355.556239][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.563337][ T28] audit: type=1326 audit(1762477288.909:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7993 comm="syz.2.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 355.585552][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.030126][ T28] audit: type=1326 audit(1762477289.299:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 356.052332][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.073048][ T28] audit: type=1326 audit(1762477289.299:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 356.334380][ T28] audit: type=1326 audit(1762477289.299:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 357.134654][ T28] audit: type=1326 audit(1762477289.299:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 357.156872][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.224985][ T28] audit: type=1326 audit(1762477289.299:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fefb3b915e7 code=0x7ffc0000 [ 357.268692][ T28] audit: type=1326 audit(1762477289.299:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fefb3b9155c code=0x7ffc0000 [ 357.296095][ T28] audit: type=1326 audit(1762477289.299:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fefb3b91494 code=0x7ffc0000 [ 357.394474][ T28] audit: type=1326 audit(1762477289.299:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fefb3b91494 code=0x7ffc0000 [ 357.532238][ T28] audit: type=1326 audit(1762477289.299:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fefb3b8e32a code=0x7ffc0000 [ 357.554414][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.579856][ T28] audit: type=1326 audit(1762477289.309:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 358.256096][ T8031] syz.1.500: attempt to access beyond end of device [ 358.256096][ T8031] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 358.268936][ T8031] F2FS-fs (nbd1): Unable to read 1th superblock [ 358.276227][ T8031] syz.1.500: attempt to access beyond end of device [ 358.276227][ T8031] nbd1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 358.289688][ T8031] F2FS-fs (nbd1): Unable to read 2th superblock [ 358.382452][ T28] audit: type=1326 audit(1762477289.309:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 358.454640][ T28] audit: type=1326 audit(1762477289.309:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 358.477018][ T28] audit: type=1326 audit(1762477289.309:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz.1.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb3b8f6c9 code=0x7ffc0000 [ 358.754379][ T8037] loop1: detected capacity change from 0 to 64 [ 362.898355][ T8066] loop1: detected capacity change from 0 to 1024 [ 362.984137][ T8066] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.869729][ T8083] ptrace attach of "./syz-executor exec"[5782] was attempted by "./syz-executor exec"[8083] [ 365.213521][ T8091] tipc: Started in network mode [ 365.221113][ T8091] tipc: Node identity ac14140f, cluster identity 4711 [ 365.235181][ T8091] tipc: New replicast peer: 255.255.255.255 [ 365.256116][ T8091] tipc: Enabled bearer , priority 10 [ 365.664532][ T6737] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 366.458954][ T27] tipc: Node number set to 2886997007 [ 367.223368][ T8108] dlm: non-version read from control device 0 [ 368.232200][ T8113] serio: Serial port ttyS3 [ 370.431893][ T5103] Bluetooth: hci0: unexpected event for opcode 0x202d [ 370.432766][ T8130] overlayfs: failed to clone upperpath [ 371.090025][ T8134] capability: warning: `syz.0.520' uses deprecated v2 capabilities in a way that may be insecure [ 372.980497][ T8144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.524'. [ 373.295381][ T8148] netlink: 148 bytes leftover after parsing attributes in process `syz.2.526'. [ 374.841846][ T8162] loop1: detected capacity change from 0 to 256 [ 376.223930][ T8162] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 378.084015][ T8178] loop1: detected capacity change from 0 to 64 [ 378.786165][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.792598][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.027241][ T8186] bridge0: port 3(team0) entered blocking state [ 379.034378][ T8186] bridge0: port 3(team0) entered disabled state [ 379.053535][ T8186] team0: entered promiscuous mode [ 379.059822][ T8186] team_slave_0: entered promiscuous mode [ 379.067048][ T8186] team_slave_1: entered promiscuous mode [ 379.078224][ T8186] bridge0: port 3(team0) entered blocking state [ 379.085257][ T8186] bridge0: port 3(team0) entered forwarding state [ 379.562555][ T8184] syz.0.535: attempt to access beyond end of device [ 379.562555][ T8184] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 379.627041][ T8184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 379.742448][ T8184] veth0_macvtap: left promiscuous mode [ 380.581136][ T8191] netlink: 'syz.2.537': attribute type 20 has an invalid length. [ 380.633079][ T8191] IPv6: NLM_F_CREATE should be specified when creating new route [ 380.648377][ T8191] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.655977][ T8191] IPv6: NLM_F_CREATE should be set when creating new route [ 380.773245][ T8202] Cannot find add_set index 65532 as target [ 381.230816][ T8204] printk: syz.1.540 (8204): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated). [ 387.037084][ T8219] netlink: 256 bytes leftover after parsing attributes in process `syz.2.542'. [ 387.047370][ T8219] unsupported nlmsg_type 40 [ 389.380711][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 389.380725][ T28] audit: type=1326 audit(1762477322.759:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 389.527401][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 389.776155][ T28] audit: type=1326 audit(1762477322.759:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 390.212506][ T8234] netlink: 'syz.2.546': attribute type 12 has an invalid length. [ 390.235173][ T28] audit: type=1326 audit(1762477322.759:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 390.335810][ T28] audit: type=1326 audit(1762477322.789:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 390.466592][ T28] audit: type=1326 audit(1762477322.789:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 390.626143][ T28] audit: type=1326 audit(1762477322.789:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 390.731336][ T8248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.549'. [ 390.758471][ T8248] loop0: detected capacity change from 0 to 128 [ 391.380167][ T28] audit: type=1326 audit(1762477322.789:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 391.537812][ T28] audit: type=1326 audit(1762477322.789:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 392.223783][ T28] audit: type=1326 audit(1762477322.789:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 392.291470][ T8251] fuse: Unknown parameter 'fd0x0000000000000005' [ 392.365015][ T28] audit: type=1326 audit(1762477322.789:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8228 comm="syz.2.546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d0d8f6c9 code=0x7ffc0000 [ 392.523888][ T27] libceph: connect (1)[c::]:6789 error -101 [ 392.540803][ T8251] ceph: No mds server is up or the cluster is laggy [ 392.593871][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 392.946345][ T27] libceph: connect (1)[c::]:6789 error -101 [ 392.952832][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 393.582819][ T8258] loop0: detected capacity change from 0 to 32768 [ 393.620331][ T8258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.551 (8258) [ 393.641091][ T8258] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 393.651294][ T8258] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 393.660028][ T8258] BTRFS info (device loop0): using free space tree [ 393.915615][ T8258] BTRFS info (device loop0): enabling ssd optimizations [ 393.922623][ T8258] BTRFS info (device loop0): auto enabling async discard [ 397.316801][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 399.534241][ T8214] BTRFS: device label `g4_}|eO1Sv>j0,(`5?wڲ0Pbg6I^+-# &_tGݿ@Md$͵E"d'´(chm-OJYMx^/&AI1L3p+ǚP)! devid 1 transid 10 /dev/loop0 scanned by udevd (8214) [ 400.280640][ T8307] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 401.216126][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 401.238703][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.559'. [ 403.492091][ T8337] bridge0: port 4(gretap0) entered blocking state [ 403.499534][ T8337] bridge0: port 4(gretap0) entered disabled state [ 403.509228][ T8337] gretap0: entered promiscuous mode [ 403.516311][ T8337] bridge0: port 4(gretap0) entered blocking state [ 403.524166][ T8337] bridge0: port 4(gretap0) entered forwarding state [ 403.542767][ T8337] gretap0: left promiscuous mode [ 403.551039][ T8337] bridge0: port 4(gretap0) entered disabled state [ 405.943244][ T8351] syz.3.567 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 408.996155][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 409.003490][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 409.090024][ T8361] ceph: No mds server is up or the cluster is laggy [ 409.531979][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.544059][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.554959][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.563234][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.916416][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 409.927238][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 412.040199][ T8370] wg2 speed is unknown, defaulting to 1000 [ 412.115135][ T5789] Bluetooth: hci4: command tx timeout [ 412.821465][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 412.977094][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.989232][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.015364][ T8370] bridge_slave_0: entered allmulticast mode [ 413.022166][ T8370] bridge_slave_0: entered promiscuous mode [ 413.034336][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.043509][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.051757][ T8370] bridge_slave_1: entered allmulticast mode [ 413.059494][ T8370] bridge_slave_1: entered promiscuous mode [ 413.180635][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.206099][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.262249][ T8370] team0: Port device team_slave_0 added [ 413.326523][ T8370] team0: Port device team_slave_1 added [ 413.352002][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.359186][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.392450][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.408043][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.415581][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.442527][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.488111][ T8370] hsr_slave_0: entered promiscuous mode [ 413.495328][ T8370] hsr_slave_1: entered promiscuous mode [ 413.502952][ T8370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.510812][ T8370] Cannot create hsr debugfs directory [ 413.654939][ T8370] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 413.664275][ T8370] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 413.675869][ T8370] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 413.691559][ T8370] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 413.724903][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.733819][ T8370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.742198][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.751729][ T8370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.768332][ T1072] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.780564][ T1072] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.848809][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.873046][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.886558][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.893832][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.910779][ T1072] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.918018][ T1072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.107735][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.155136][ T5789] Bluetooth: hci4: command tx timeout [ 414.334227][ T8370] veth0_vlan: entered promiscuous mode [ 414.351806][ T8370] veth1_vlan: entered promiscuous mode [ 414.383550][ T8370] veth0_macvtap: entered promiscuous mode [ 414.393697][ T8370] veth1_macvtap: entered promiscuous mode [ 414.411412][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.423320][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.433386][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.444508][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.457356][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.468547][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.481696][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.493500][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.506776][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.520766][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.531703][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.541791][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.553146][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.563400][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.574376][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.587102][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.603944][ T8370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.612947][ T8370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.622387][ T8370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.631962][ T8370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.718641][ T3533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.733337][ T3533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.763827][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.772865][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.946031][ T8418] loop0: detected capacity change from 0 to 32768 [ 416.393104][ T5789] Bluetooth: hci4: command tx timeout [ 418.845686][ T5103] Bluetooth: hci4: command tx timeout [ 418.938360][ T8420] sctp: failed to load transform for md5: -2 [ 419.546675][ T8418] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 419.548838][ T8418] (syz.0.582,8418,1):ocfs2_initialize_super:2285 ERROR: status = -12 [ 419.567366][ T8418] (syz.0.582,8418,1):ocfs2_fill_super:1178 ERROR: status = -12 [ 420.716486][ T8445] loop4: detected capacity change from 0 to 16 [ 421.398123][ T8445] erofs: (device loop4): mounted with root inode @ nid 36. [ 423.665242][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.579'. [ 529.064988][ C1] ------------[ cut here ]------------ [ 529.072088][ C1] WARNING: CPU: 1 PID: 8459 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 529.082641][ C1] Modules linked in: [ 529.086571][ C1] CPU: 1 PID: 8459 Comm: syz.4.579 Not tainted syzkaller #0 [ 529.093860][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.103944][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 529.110319][ C1] Code: ff ff ff 48 c7 c7 a0 14 ef 96 be 04 00 00 00 e8 ea bc 6c 00 48 89 df b8 01 00 00 00 87 05 bc e4 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 51 d3 8c 74 47 48 c7 c0 1c c2 4a 8e 48 c1 e8 03 [ 529.130106][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 529.136182][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35140 RCX: ffffffff81702fd6 [ 529.144163][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35140 [ 529.152146][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 529.160121][ C1] R10: dffffc0000000000 R11: fffffbfff2dde294 R12: 0000000000002904 [ 529.168101][ C1] R13: 1ffff110171e7a22 R14: 0000000000000a02 R15: dffffc0000000000 [ 529.176080][ C1] FS: 00007fe2ca6b26c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 529.185100][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.191689][ C1] CR2: 00007fb8d0e137ac CR3: 0000000063b7f000 CR4: 00000000003506e0 [ 529.199684][ C1] Call Trace: [ 529.202988][ C1] [ 529.205868][ C1] rcu_core+0x612/0x1720 [ 529.210142][ C1] ? ktime_get+0x7f/0x280 [ 529.214489][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 529.219721][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 529.224949][ C1] ? sched_clock+0x3f/0x60 [ 529.229391][ C1] ? mark_lock+0x94/0x320 [ 529.233734][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 529.239726][ C1] ? lock_chain_count+0x20/0x20 [ 529.244768][ C1] handle_softirqs+0x280/0x820 [ 529.249545][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 529.254328][ C1] ? do_softirq+0x180/0x180 [ 529.258842][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 529.264057][ C1] __irq_exit_rcu+0xc7/0x190 [ 529.268656][ C1] ? irq_exit_rcu+0x20/0x20 [ 529.273181][ C1] irq_exit_rcu+0x9/0x20 [ 529.277428][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 529.283088][ C1] [ 529.286027][ C1] [ 529.288967][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 529.294955][ C1] RIP: 0010:smp_call_function_many_cond+0xddf/0x1130 [ 529.301648][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 da d6 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 15 d3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 f9 d2 [ 529.321268][ C1] RSP: 0018:ffffc9000346fa80 EFLAGS: 00000246 [ 529.327343][ C1] RAX: ffffffff817abc97 RBX: 1ffff110171c8791 RCX: 0000000000080000 [ 529.335319][ C1] RDX: ffffc900199b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 529.343292][ C1] RBP: ffffc9000346fbf0 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 529.351449][ C1] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff8880b8e43c88 [ 529.359428][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d348 R15: 0000000000000000 [ 529.367415][ C1] ? smp_call_function_many_cond+0xdf7/0x1130 [ 529.373532][ C1] ? ktime_get_clocktai+0x20/0x20 [ 529.378589][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 529.383825][ C1] ? smp_call_function_many+0x40/0x40 [ 529.389211][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 529.395127][ C1] ? _raw_spin_unlock+0x40/0x40 [ 529.399988][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 529.406078][ C1] clock_was_set+0x71c/0x7d0 [ 529.410691][ C1] ? destroy_hrtimer_on_stack+0x20/0x20 [ 529.416247][ C1] ? __asan_memcpy+0x40/0x70 [ 529.420859][ C1] do_settimeofday64+0x579/0x720 [ 529.425814][ C1] ? length_mt6+0xe8/0x160 [ 529.430237][ C1] ? __x64_sys_clock_settime+0x227/0x270 [ 529.435905][ C1] ? get_device_system_crosststamp+0x8f0/0x8f0 [ 529.442092][ C1] ? length_mt6+0xe8/0x160 [ 529.446535][ C1] ? security_settime64+0x7b/0xa0 [ 529.451579][ C1] ? do_sys_settimeofday64+0x163/0x250 [ 529.457055][ C1] __x64_sys_clock_settime+0x227/0x270 [ 529.462534][ C1] ? lock_chain_count+0x20/0x20 [ 529.467411][ C1] ? exit_itimers+0x570/0x570 [ 529.472129][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 529.477348][ C1] do_syscall_64+0x55/0xb0 [ 529.481784][ C1] ? clear_bhb_loop+0x40/0x90 [ 529.486471][ C1] ? clear_bhb_loop+0x40/0x90 [ 529.491159][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.497082][ C1] RIP: 0033:0x7fe2c978f6c9 [ 529.501533][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.521166][ C1] RSP: 002b:00007fe2ca6b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 529.529604][ C1] RAX: ffffffffffffffda RBX: 00007fe2c99e5fa0 RCX: 00007fe2c978f6c9 [ 529.537602][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 529.545602][ C1] RBP: 00007fe2c9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 529.553587][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.561575][ C1] R13: 00007fe2c99e6038 R14: 00007fe2c99e5fa0 R15: 00007ffd75a0fad8 [ 529.569597][ C1] [ 529.572629][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 529.579908][ C1] CPU: 1 PID: 8459 Comm: syz.4.579 Not tainted syzkaller #0 [ 529.587191][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 529.597321][ C1] Call Trace: [ 529.600606][ C1] [ 529.603449][ C1] dump_stack_lvl+0x16c/0x230 [ 529.608143][ C1] ? show_regs_print_info+0x20/0x20 [ 529.613352][ C1] ? load_image+0x3b0/0x3b0 [ 529.617872][ C1] panic+0x2c0/0x710 [ 529.621788][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 529.626308][ C1] __warn+0x2e0/0x470 [ 529.630298][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 529.636052][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 529.641801][ C1] report_bug+0x2be/0x4f0 [ 529.646157][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 529.651900][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 529.657723][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 529.663625][ C1] handle_bug+0xcf/0x120 [ 529.667882][ C1] exc_invalid_op+0x1a/0x50 [ 529.672391][ C1] asm_exc_invalid_op+0x1a/0x20 [ 529.677246][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 529.683586][ C1] Code: ff ff ff 48 c7 c7 a0 14 ef 96 be 04 00 00 00 e8 ea bc 6c 00 48 89 df b8 01 00 00 00 87 05 bc e4 7e 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 51 d3 8c 74 47 48 c7 c0 1c c2 4a 8e 48 c1 e8 03 [ 529.703204][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 529.709278][ C1] RAX: 0000000000000000 RBX: ffffffff8cd35140 RCX: ffffffff81702fd6 [ 529.717251][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd35140 [ 529.725222][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 529.733196][ C1] R10: dffffc0000000000 R11: fffffbfff2dde294 R12: 0000000000002904 [ 529.741170][ C1] R13: 1ffff110171e7a22 R14: 0000000000000a02 R15: dffffc0000000000 [ 529.749156][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 529.754905][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 529.760638][ C1] rcu_core+0x612/0x1720 [ 529.764894][ C1] ? ktime_get+0x7f/0x280 [ 529.769227][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 529.774432][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 529.779641][ C1] ? sched_clock+0x3f/0x60 [ 529.784064][ C1] ? mark_lock+0x94/0x320 [ 529.788399][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 529.794384][ C1] ? lock_chain_count+0x20/0x20 [ 529.799257][ C1] handle_softirqs+0x280/0x820 [ 529.804040][ C1] ? __irq_exit_rcu+0xc7/0x190 [ 529.808816][ C1] ? do_softirq+0x180/0x180 [ 529.813324][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 529.818538][ C1] __irq_exit_rcu+0xc7/0x190 [ 529.823134][ C1] ? irq_exit_rcu+0x20/0x20 [ 529.827649][ C1] irq_exit_rcu+0x9/0x20 [ 529.831896][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 529.837542][ C1] [ 529.840490][ C1] [ 529.843443][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 529.849448][ C1] RIP: 0010:smp_call_function_many_cond+0xddf/0x1130 [ 529.856139][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 da d6 0a 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 15 d3 0a 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 f9 d2 [ 529.875755][ C1] RSP: 0018:ffffc9000346fa80 EFLAGS: 00000246 [ 529.881830][ C1] RAX: ffffffff817abc97 RBX: 1ffff110171c8791 RCX: 0000000000080000 [ 529.889803][ C1] RDX: ffffc900199b1000 RSI: 000000000007ffff RDI: 0000000000080000 [ 529.897864][ C1] RBP: ffffc9000346fbf0 R08: ffffffff8e4a8d6f R09: 1ffffffff1c951ad [ 529.905836][ C1] R10: dffffc0000000000 R11: fffffbfff1c951ae R12: ffff8880b8e43c88 [ 529.913810][ C1] R13: dffffc0000000000 R14: ffff8880b8f3d348 R15: 0000000000000000 [ 529.921880][ C1] ? smp_call_function_many_cond+0xdf7/0x1130 [ 529.927975][ C1] ? ktime_get_clocktai+0x20/0x20 [ 529.933012][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 529.938212][ C1] ? smp_call_function_many+0x40/0x40 [ 529.943590][ C1] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 529.949489][ C1] ? _raw_spin_unlock+0x40/0x40 [ 529.954343][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 529.960425][ C1] clock_was_set+0x71c/0x7d0 [ 529.965036][ C1] ? destroy_hrtimer_on_stack+0x20/0x20 [ 529.970588][ C1] ? __asan_memcpy+0x40/0x70 [ 529.975203][ C1] do_settimeofday64+0x579/0x720 [ 529.980157][ C1] ? length_mt6+0xe8/0x160 [ 529.984586][ C1] ? __x64_sys_clock_settime+0x227/0x270 [ 529.990230][ C1] ? get_device_system_crosststamp+0x8f0/0x8f0 [ 529.996393][ C1] ? length_mt6+0xe8/0x160 [ 530.000819][ C1] ? security_settime64+0x7b/0xa0 [ 530.005850][ C1] ? do_sys_settimeofday64+0x163/0x250 [ 530.011317][ C1] __x64_sys_clock_settime+0x227/0x270 [ 530.016791][ C1] ? lock_chain_count+0x20/0x20 [ 530.021646][ C1] ? exit_itimers+0x570/0x570 [ 530.026340][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 530.031544][ C1] do_syscall_64+0x55/0xb0 [ 530.035971][ C1] ? clear_bhb_loop+0x40/0x90 [ 530.040651][ C1] ? clear_bhb_loop+0x40/0x90 [ 530.045337][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.051231][ C1] RIP: 0033:0x7fe2c978f6c9 [ 530.055650][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.075346][ C1] RSP: 002b:00007fe2ca6b2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 530.083765][ C1] RAX: ffffffffffffffda RBX: 00007fe2c99e5fa0 RCX: 00007fe2c978f6c9 [ 530.091739][ C1] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 530.099710][ C1] RBP: 00007fe2c9811f91 R08: 0000000000000000 R09: 0000000000000000 [ 530.107679][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.115649][ C1] R13: 00007fe2c99e6038 R14: 00007fe2c99e5fa0 R15: 00007ffd75a0fad8 [ 530.123637][ C1] [ 531.251530][ C1] Shutting down cpus with NMI [ 531.256550][ C1] Kernel Offset: disabled [ 531.261389][ C1] Rebooting in 86400 seconds..