last executing test programs: 10.612325663s ago: executing program 0 (id=179): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000026000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20004440) 10.594159562s ago: executing program 0 (id=180): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x2, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x9, '\x00', 0x0, @flow_dissector}, 0x48) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) socket$nl_route(0x10, 0x3, 0x0) 4.776577009s ago: executing program 1 (id=239): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) writev(r0, &(0x7f00000016c0)=[{&(0x7f0000000080)="9d3b", 0x2}], 0x1) 4.759893265s ago: executing program 1 (id=241): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000100)="8000431e269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0x4e22, 0xc9, @rand_addr=' \x01\x00'}, 0x1c) 4.697462642s ago: executing program 1 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000001000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.275668425s ago: executing program 2 (id=248): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) 4.213262212s ago: executing program 2 (id=249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_open_dev$usbfs(0x0, 0x1029, 0x400240) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, &(0x7f0000000040)}) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r4, 0x2004, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@smackfsdef={'smackfsdef', 0x3d, '&\\:'}}], 0x2f}) ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000000100)={{{0x8, 0x1}}, 0x0, 0x1, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3.846950412s ago: executing program 1 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, 0x0, &(0x7f00000003c0)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80100, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') syz_open_dev$tty20(0xc, 0x4, 0x1) 3.3508647s ago: executing program 2 (id=256): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[], 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x100) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, 0x0, 0x0) syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xf0) unshare(0x28020480) 2.968399255s ago: executing program 1 (id=260): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000ac0)=@newtaction={0x298, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x284, 0x1, [@m_xt={0x100, 0xa, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x39, 0x6, "60d8256d6e17304151fd4e116cd17e9a9916f46a1108fe35c2253eb9e0a39371696c312986c3e3f087692e934a942246981749736d"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xd4, 0x34, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x4, 0x0, 0x136bcb9c}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7f, 0x6, 0x3}, 0x2021}}]}, {0x51, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_bpf={0xac, 0x9, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x6}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x8000}}, @TCA_ACT_BPF_FD={0x8}]}, {0x39, 0x6, "a09e88b2fafe2ad0dddad3cdaa9b726cf5b56034a46fe446c7d19b5780d1bd141230a65f0db61f93ab839c730b3903572c51741956"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4004000}, 0x8000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.656183035s ago: executing program 1 (id=261): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x80402) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) dup(0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) connect$inet6(0xffffffffffffffff, 0x0, 0x0) pwrite64(r0, &(0x7f00000004c0)="2ad0f8654ad1097e98d1bbe495953836040e41", 0x13, 0x9) 2.521076242s ago: executing program 3 (id=263): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x20, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580), 0x0, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be7fe01477df17cede1d86888516e1b14299f716b74b1d65a922e13f8bce125009baf93221c5f41f11d1857ca48bf5c81f74a64be5b9de7c64d738d375", 0x57}, {&(0x7f0000001040)="7f37c2baff0de55ce257091de4c8892e4e2d3615845085eae2e0699584e968c7141722f4305e686bb965fd42e6d1e565ac9a4c61a54bedbb3ed6d56b12c88dfd97cca4043efd9cc56ed65429e609e6df87544cd6486c2c74e84799c1fbc811fe1fbf14c3d474c2baa1e7c86427d235110101", 0x72}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000e00)=[{0x0}, {&(0x7f00000014c0)="44b896818dd13e040b09e9ff5327615afa549fe545b6e79585e067af4328bcc41f778fcecf104cf2318418907de2bda01878a558af061d15e45bfcba7610e1717120c4cd89550ca5069f6a023247437795a1028586291e3ff5ae2d9cd5d53032ac1d8e3f03fda211e4e8b45b57f046dcfde576d968f876c7f903e2fa43dca292ba5c8b339bb8d32875e723f56bf3f8c656c5c528a5b6976144b187c3d58e6bcb45d0236937b54f453e4f6db1a782473b11431baad933e77f6f394fcbec25197f80c65b92d44f127521fcbb98834bb63497275e62728c2cbdc74c00fe08a87b6b289b57110406423a213e83d1fc90e352b7ebdf6a7de4dfca1639d411be33644cafb5342e5653b5c01fce094b85f2af40d7feb1798e5cb1d29daa5def62e1aebf349a8801ab83566259fdb9b404f3d53ddb2ebdf1f25336da5560b6264253327846a1735ef6d24fcfc8dbe6ed7f05dee713c26b5912fbf3ef8fbdcea57709fd9840cd1e93c6397528fffeadc580a1758834f7266a7dd63f9b3f15185a9373beb9bef45bf0ce359f523be49540d1f6cc546e55d0997e7ac631a60bc084f1ab2d51d666a6ae1210ee05d21a2be362e2d4143f765317921bd355f58363b83a93adacd2a3a55da508c627adc43e2f812b1d639b5f210e9f57cf112cc502f9f8ee41569f3b485d", 0x1e4}], 0x2}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.1188863s ago: executing program 0 (id=264): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) 2.07918818s ago: executing program 2 (id=265): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='cq_alloc_error\x00', 0xffffffffffffffff, 0x0, 0x7ff}, 0x18) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) 2.005255752s ago: executing program 3 (id=266): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r1, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x8001}, {0xa, 0x4e23, 0x7, @remote, 0x4}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xfffffff7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x6, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x10, 0x2, 0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55], [0x0, 0x0, 0x0, 0x0, 0x0, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x0, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2000000], [0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb1, 0x5, 0x0, 0xffffffba, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r6, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) ioctl$TIOCSTI(r5, 0x5412, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r7) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x40) 1.973513985s ago: executing program 0 (id=267): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xcea, @remote, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='j', 0x1}], 0x1}}], 0x1, 0x4000) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r2, 0x1}, 0x8) 1.94419429s ago: executing program 4 (id=268): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209", @ANYBLOB], 0x0) 1.194621501s ago: executing program 2 (id=269): mknodat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000180)={0x4000, r0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000007000000000000000300000d000000000000000000000000000000000000000003000000000000000000000001000006040000000500000000000000000000613e610054cf7d88f3154f1118c712240d481df96be1b80f40554ea2ac35e1628534dc854247b881f30d8c9ad41ab1b03e509ad8338203088e630100000000000000cdbe058bdb2a7ce33eda7b3383c10cc20879f63dcdfce4696205a66cc8f5"], &(0x7f0000000600)=""/152, 0x57, 0x98, 0x1}, 0x28) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) landlock_restrict_self(r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_emit_ethernet(0x74, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000000000000000080045000024000000000073907800000300ac1414aa00000000fe9a907802000000000000000f7a1d5b2a9b78d28ae8deca004d184b65b766cd88344d13d23632b37c1597d7fc8bdff85b0057dd5231b0cd1fa747dc4a26b3a819ec60db1da4a5120b8add825b078a5b3faa3d38e15fe8766942052e97f07960a4d08a10f59e8209b02ec845dccbe8fb937283a6788ec6e0907fea6888b7564ac9f8f00eff42edd670ca8d71ecaf30c56f5f590a754269aa0b52f958209141"], 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfbfffffe}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r5, &(0x7f0000000780)}, 0x20) 1.193543458s ago: executing program 3 (id=270): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101e04003100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x8000) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x7, 0xd, 0x3ff, 0x2, "bbfb00000b913f641c35c46fe4270505018781c4b694d9cd7e73ac0a0d5c91d0"}) 1.141619948s ago: executing program 4 (id=271): r0 = socket$packet(0x11, 0x3, 0x300) unshare(0x26020480) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000000)=0x4, 0x4) 1.139521441s ago: executing program 4 (id=272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 882.326699ms ago: executing program 4 (id=273): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff2"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) shutdown(r0, 0x2) 864.966666ms ago: executing program 0 (id=274): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) 713.491106ms ago: executing program 4 (id=275): socket(0x10, 0x803, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, r1, 0x0) 438.161662ms ago: executing program 3 (id=276): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 369.322648ms ago: executing program 3 (id=277): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x120, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x1001d, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xf0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x20, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x0, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0xa}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x38d}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x80000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x9}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xa4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8c}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xfffffffffffffef2, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfe}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0x0) 301.55176ms ago: executing program 2 (id=278): syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902440001000000000904000000020a0000052406000005240000000d240f01000000000000000000042413990524"], 0x0) 301.160673ms ago: executing program 3 (id=279): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) syz_usb_disconnect(r0) syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) socket$nl_route(0x10, 0x3, 0x0) 3.077136ms ago: executing program 4 (id=280): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 0 (id=281): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000940)={0x0, 0xfffffff0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 0s ago: executing program 2 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xd, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 30.363067][ T6537] cgroup: Unknown subsys name 'net' [ 30.502715][ T6537] cgroup: Unknown subsys name 'cpuset' [ 30.504690][ T6537] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 30.660375][ T6537] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.876833][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.887676][ T6559] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.888933][ T6559] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.889268][ T6559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.889607][ T6559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.889793][ T6559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.889937][ T6559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.890304][ T6559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.893400][ T6563] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.894843][ T6559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.894995][ T6559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.895093][ T6559] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.895647][ T6563] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.896041][ T6564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.896351][ T6564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.896719][ T6564] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.897433][ T6564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.897953][ T6564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.900164][ T6562] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.900282][ T6564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.900554][ T6564] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.901673][ T6564] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.902260][ T6564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.903166][ T6564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.904387][ T6552] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 33.037246][ T6548] chnl_net:caif_netlink_parms(): no params data found [ 33.108637][ T6560] chnl_net:caif_netlink_parms(): no params data found [ 33.112208][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.112639][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.112716][ T6548] bridge_slave_0: entered allmulticast mode [ 33.113182][ T6548] bridge_slave_0: entered promiscuous mode [ 33.114226][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.114242][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.114307][ T6548] bridge_slave_1: entered allmulticast mode [ 33.114719][ T6548] bridge_slave_1: entered promiscuous mode [ 33.142041][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.160830][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.175801][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 33.177502][ T6548] team0: Port device team_slave_0 added [ 33.178186][ T6548] team0: Port device team_slave_1 added [ 33.183039][ T6554] chnl_net:caif_netlink_parms(): no params data found [ 33.189112][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 33.199009][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.199039][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.199461][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.200537][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.200544][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.200557][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.218896][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.220225][ T6560] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.221483][ T6560] bridge_slave_0: entered allmulticast mode [ 33.221954][ T6560] bridge_slave_0: entered promiscuous mode [ 33.225243][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.225280][ T6560] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.225338][ T6560] bridge_slave_1: entered allmulticast mode [ 33.225735][ T6560] bridge_slave_1: entered promiscuous mode [ 33.252277][ T6548] hsr_slave_0: entered promiscuous mode [ 33.253755][ T6548] hsr_slave_1: entered promiscuous mode [ 33.264335][ T6560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.276041][ T6560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.299164][ T6554] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.299244][ T6554] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.299312][ T6554] bridge_slave_0: entered allmulticast mode [ 33.299720][ T6554] bridge_slave_0: entered promiscuous mode [ 33.300796][ T6554] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.300812][ T6554] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.300859][ T6554] bridge_slave_1: entered allmulticast mode [ 33.301814][ T6554] bridge_slave_1: entered promiscuous mode [ 33.325179][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.326617][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.327907][ T6555] bridge_slave_0: entered allmulticast mode [ 33.329398][ T6555] bridge_slave_0: entered promiscuous mode [ 33.331273][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.332436][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.333717][ T6555] bridge_slave_1: entered allmulticast mode [ 33.334375][ T6555] bridge_slave_1: entered promiscuous mode [ 33.334861][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.334897][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.334947][ T6547] bridge_slave_0: entered allmulticast mode [ 33.335363][ T6547] bridge_slave_0: entered promiscuous mode [ 33.336047][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.336065][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.336108][ T6547] bridge_slave_1: entered allmulticast mode [ 33.336552][ T6547] bridge_slave_1: entered promiscuous mode [ 33.337721][ T6560] team0: Port device team_slave_0 added [ 33.345204][ T6554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.346232][ T6554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.355540][ T6560] team0: Port device team_slave_1 added [ 33.365838][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.385092][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.386899][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.386923][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.386936][ T6560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.387616][ T6560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.387624][ T6560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.387635][ T6560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.404924][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.409155][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.412176][ T6554] team0: Port device team_slave_0 added [ 33.413218][ T6554] team0: Port device team_slave_1 added [ 33.433362][ T6555] team0: Port device team_slave_0 added [ 33.434121][ T6555] team0: Port device team_slave_1 added [ 33.438577][ T6560] hsr_slave_0: entered promiscuous mode [ 33.439387][ T6560] hsr_slave_1: entered promiscuous mode [ 33.439561][ T6560] debugfs: 'hsr0' already exists in 'hsr' [ 33.439598][ T6560] Cannot create hsr debugfs directory [ 33.453450][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.454611][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.454644][ T6554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.469234][ T6547] team0: Port device team_slave_0 added [ 33.470838][ T6547] team0: Port device team_slave_1 added [ 33.471620][ T6554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.471627][ T6554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.471639][ T6554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.477528][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.477538][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.477552][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.478125][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.478133][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.478145][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.523856][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.523885][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.523900][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.524482][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.524489][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.524500][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.533596][ T6555] hsr_slave_0: entered promiscuous mode [ 33.533867][ T6555] hsr_slave_1: entered promiscuous mode [ 33.534033][ T6555] debugfs: 'hsr0' already exists in 'hsr' [ 33.534044][ T6555] Cannot create hsr debugfs directory [ 33.545909][ T6554] hsr_slave_0: entered promiscuous mode [ 33.546206][ T6554] hsr_slave_1: entered promiscuous mode [ 33.546364][ T6554] debugfs: 'hsr0' already exists in 'hsr' [ 33.546374][ T6554] Cannot create hsr debugfs directory [ 33.560218][ T6548] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.564840][ T6547] hsr_slave_0: entered promiscuous mode [ 33.566202][ T6547] hsr_slave_1: entered promiscuous mode [ 33.567395][ T6547] debugfs: 'hsr0' already exists in 'hsr' [ 33.568340][ T6547] Cannot create hsr debugfs directory [ 33.574990][ T6548] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.578058][ T6548] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.589905][ T6548] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.684670][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.684719][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.684884][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.684913][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.691609][ T6560] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.693941][ T6560] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.696730][ T6560] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.700058][ T6560] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.724476][ T6555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.729178][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.729222][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.729324][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.729363][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.736116][ T6555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.738471][ T6555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.753718][ T6548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.760170][ T6555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.778539][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.780010][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.783338][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.784767][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.796897][ T6548] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.799205][ T6547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.802468][ T6560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.804356][ T6547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.806611][ T6547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.808704][ T6547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.826295][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.826343][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.834590][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.834638][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.839247][ T6560] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.858174][ T6554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.861440][ T6554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.863947][ T6554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.866077][ T6554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.870053][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.870097][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.886932][ T6548] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.886961][ T6548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.889974][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.889996][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.955887][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.978456][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.980926][ T2049] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.980976][ T2049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.993886][ T6547] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.993916][ T6547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.998008][ T2049] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.998057][ T2049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.003925][ T6548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.007545][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.016790][ T6554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.026760][ T6560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.033592][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.047395][ T6554] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.050755][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.050814][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.055387][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.055433][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.055935][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.055950][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.066522][ T15] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.066564][ T15] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.093203][ T6548] veth0_vlan: entered promiscuous mode [ 34.102379][ T6548] veth1_vlan: entered promiscuous mode [ 34.110737][ T6548] veth0_macvtap: entered promiscuous mode [ 34.146320][ T6555] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.147701][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.153137][ T6560] veth0_vlan: entered promiscuous mode [ 34.154552][ T6560] veth1_vlan: entered promiscuous mode [ 34.161801][ T6548] veth1_macvtap: entered promiscuous mode [ 34.166497][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.169373][ T6548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.176343][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.176585][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.176602][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.176617][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.184340][ T6547] veth0_vlan: entered promiscuous mode [ 34.190326][ T6560] veth0_macvtap: entered promiscuous mode [ 34.195817][ T6547] veth1_vlan: entered promiscuous mode [ 34.198129][ T6560] veth1_macvtap: entered promiscuous mode [ 34.203615][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.226334][ T6560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.244203][ T2191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.244272][ T2191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.244294][ T2191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.244308][ T2191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.250885][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.255909][ T6554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.263822][ T6547] veth0_macvtap: entered promiscuous mode [ 34.266964][ T6547] veth1_macvtap: entered promiscuous mode [ 34.277496][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.289463][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.292009][ T2191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.292034][ T2191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.308419][ T2049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.308452][ T2049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.318841][ T2049] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.319446][ T2049] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.319469][ T2049] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.319489][ T2049] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.328358][ T6555] veth0_vlan: entered promiscuous mode [ 34.329870][ T6555] veth1_vlan: entered promiscuous mode [ 34.346425][ T6555] veth0_macvtap: entered promiscuous mode [ 34.350335][ T6555] veth1_macvtap: entered promiscuous mode [ 34.355715][ T6554] veth0_vlan: entered promiscuous mode [ 34.357274][ T6554] veth1_vlan: entered promiscuous mode [ 34.367421][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.369933][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.385328][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.385359][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.387557][ T6548] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.395853][ T2191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.395889][ T2191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.416782][ T2049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416849][ T2049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416872][ T2049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.416889][ T2049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.425305][ T2191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.425334][ T2191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.434410][ T6554] veth0_macvtap: entered promiscuous mode [ 34.445520][ T6554] veth1_macvtap: entered promiscuous mode [ 34.450314][ T15] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.450373][ T15] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.486320][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.487301][ T6554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.505763][ T15] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.505832][ T15] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.505861][ T15] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.505878][ T15] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.516456][ T2191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.516487][ T2191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.525292][ T6662] loop3: detected capacity change from 0 to 32768 [ 34.537198][ T6662] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.4 (6662) [ 34.558129][ T2049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.558163][ T2049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.564857][ T6662] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 34.564939][ T6662] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 34.564982][ T6662] BTRFS info (device loop3): using free-space-tree [ 34.608152][ T2191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.615584][ T2191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.971922][ T6551] Bluetooth: hci2: command tx timeout [ 34.971946][ T52] Bluetooth: hci4: command tx timeout [ 34.972445][ T6564] Bluetooth: hci3: command tx timeout [ 34.972802][ T6552] Bluetooth: hci1: command tx timeout [ 34.972978][ T6119] Bluetooth: hci0: command tx timeout [ 35.288152][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.288184][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.011120][ T6706] syz.4.7 uses obsolete (PF_INET,SOCK_PACKET) [ 36.107016][ T6698] loop2: detected capacity change from 0 to 32768 [ 36.180219][ T6548] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 36.250278][ T6698] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 36.257687][ T6698] allowing incompatible features above 0.0: (unknown version) [ 36.260289][ T6698] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 36.260340][ T6698] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 36.260398][ T6698] bcachefs (loop2): initializing new filesystem [ 36.267692][ T6698] bcachefs (loop2): going read-write [ 36.332026][ T6698] bcachefs (loop2): marking superblocks [ 36.346695][ T6698] bcachefs (loop2): initializing freespace [ 36.349110][ T6698] bcachefs (loop2): done initializing freespace [ 36.354759][ T6698] bcachefs (loop2): reading snapshots table [ 36.355870][ T6698] bcachefs (loop2): reading snapshots done [ 36.593474][ T6698] bcachefs (loop2): done starting filesystem [ 36.613055][ T6726] loop1: detected capacity change from 0 to 2048 [ 36.705973][ T6726] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.027395][ T6717] infiniband syz2: set down [ 37.027805][ T6717] infiniband syz2: added syzkaller0 [ 37.056111][ T6717] RDS/IB: syz2: added [ 37.056243][ T6717] smc: adding ib device syz2 with port count 1 [ 37.056578][ T6717] smc: ib device syz2 port 1 has pnetid [ 37.062059][ T6119] Bluetooth: hci2: command tx timeout [ 37.063112][ T6552] Bluetooth: hci1: command tx timeout [ 37.063159][ T6552] Bluetooth: hci3: command tx timeout [ 37.063183][ T6552] Bluetooth: hci4: command tx timeout [ 37.064217][ T6551] Bluetooth: hci0: command tx timeout [ 37.146640][ T6735] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.024421][ T6554] bcachefs (loop2): shutting down [ 38.025691][ T6554] bcachefs (loop2): going read-only [ 38.026953][ T6554] bcachefs (loop2): finished waiting for writes to stop [ 38.029777][ T6547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.046797][ T6554] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 38.414697][ T6554] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 38.480392][ T6554] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 38.480879][ T6554] bcachefs (loop2): marking filesystem clean [ 38.500722][ T6554] bcachefs (loop2): shutdown complete [ 38.859049][ T6760] netlink: 'syz.3.17': attribute type 3 has an invalid length. [ 39.030738][ T240] smc: removing ib device syz2 [ 39.131554][ T6551] Bluetooth: hci0: command tx timeout [ 39.131687][ T6564] Bluetooth: hci4: command tx timeout [ 39.131717][ T6564] Bluetooth: hci3: command tx timeout [ 39.131745][ T6564] Bluetooth: hci1: command tx timeout [ 39.137415][ T6119] Bluetooth: hci2: command tx timeout [ 39.217865][ T6762] loop3: detected capacity change from 0 to 32768 [ 40.065454][ T6774] loop0: detected capacity change from 0 to 32768 [ 40.247571][ T6762] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 40.247604][ T6762] allowing incompatible features above 0.0: (unknown version) [ 40.247628][ T6762] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 40.247647][ T6762] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 40.247669][ T6762] bcachefs (loop3): initializing new filesystem [ 40.249186][ T6762] bcachefs (loop3): going read-write [ 40.268174][ T6774] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 40.272601][ T6774] allowing incompatible features above 0.0: (unknown version) [ 40.272619][ T6774] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 40.272646][ T6774] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 40.272673][ T6774] bcachefs (loop0): initializing new filesystem [ 40.286203][ T6774] bcachefs (loop0): going read-write [ 40.348622][ T6762] bcachefs (loop3): marking superblocks [ 40.358215][ T6762] bcachefs (loop3): initializing freespace [ 40.362537][ T6774] bcachefs (loop0): marking superblocks [ 40.367847][ T6774] bcachefs (loop0): initializing freespace [ 40.370204][ T6774] bcachefs (loop0): done initializing freespace [ 40.370584][ T6762] bcachefs (loop3): done initializing freespace [ 40.375605][ T6762] bcachefs (loop3): reading snapshots table [ 40.375782][ T6774] bcachefs (loop0): reading snapshots table [ 40.375807][ T6774] bcachefs (loop0): reading snapshots done [ 40.376087][ T6762] bcachefs (loop3): reading snapshots done [ 40.388482][ T6762] bcachefs (loop3): done starting filesystem [ 40.396560][ T6774] bcachefs (loop0): done starting filesystem [ 40.887644][ T6798] loop2: detected capacity change from 0 to 32768 [ 40.893340][ T6801] netlink: 'syz.4.22': attribute type 3 has an invalid length. [ 40.893367][ T6801] netlink: 'syz.4.22': attribute type 1 has an invalid length. [ 40.893451][ T6801] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.22'. [ 40.990779][ T6798] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 40.990819][ T6798] allowing incompatible features above 0.0: (unknown version) [ 40.990839][ T6798] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 40.990853][ T6798] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 40.990872][ T6798] bcachefs (loop2): initializing new filesystem [ 40.998000][ T6798] bcachefs (loop2): going read-write [ 41.032043][ T6798] bcachefs (loop2): marking superblocks [ 41.040590][ T6798] bcachefs (loop2): initializing freespace [ 41.052757][ T6798] bcachefs (loop2): done initializing freespace [ 41.056977][ T6798] bcachefs (loop2): reading snapshots table [ 41.057021][ T6798] bcachefs (loop2): reading snapshots done [ 41.088280][ T6798] bcachefs (loop2): done starting filesystem [ 41.192691][ T6804] loop1: detected capacity change from 0 to 32768 [ 41.211141][ T6119] Bluetooth: hci2: command tx timeout [ 41.212162][ T6119] Bluetooth: hci0: command tx timeout [ 41.212767][ T6552] Bluetooth: hci1: command tx timeout [ 41.212790][ T6552] Bluetooth: hci3: command tx timeout [ 41.212805][ T6552] Bluetooth: hci4: command tx timeout [ 41.487198][ T6555] bcachefs (loop0): shutting down [ 41.487233][ T6555] bcachefs (loop0): going read-only [ 41.487259][ T6555] bcachefs (loop0): finished waiting for writes to stop [ 41.499704][ T6804] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 41.511136][ T6804] allowing incompatible features above 0.0: (unknown version) [ 41.511186][ T6804] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 41.511218][ T6804] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 41.511254][ T6804] bcachefs (loop1): initializing new filesystem [ 41.512823][ T6804] bcachefs (loop1): going read-write [ 41.529638][ T6819] loop4: detected capacity change from 0 to 32768 [ 41.533709][ T6555] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 41.603388][ T6804] bcachefs (loop1): marking superblocks [ 41.605392][ T6804] bcachefs (loop1): initializing freespace [ 41.615756][ T6804] bcachefs (loop1): done initializing freespace [ 41.620125][ T6804] bcachefs (loop1): reading snapshots table [ 41.620174][ T6804] bcachefs (loop1): reading snapshots done [ 41.627094][ T6555] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 4 [ 41.633567][ T6555] bcachefs (loop0): clean shutdown complete, journal seq 5 [ 41.633996][ T6555] bcachefs (loop0): marking filesystem clean [ 41.641083][ T6804] bcachefs (loop1): done starting filesystem [ 41.647677][ T6819] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 41.649119][ T6819] allowing incompatible features above 0.0: (unknown version) [ 41.650037][ T6819] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 41.650167][ T6819] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 41.650199][ T6819] bcachefs (loop4): initializing new filesystem [ 41.863451][ T6819] bcachefs (loop4): going read-write [ 41.886016][ T6555] bcachefs (loop0): shutdown complete [ 41.900766][ T6548] bcachefs (loop3): shutting down [ 41.900796][ T6548] bcachefs (loop3): going read-only [ 41.900822][ T6548] bcachefs (loop3): finished waiting for writes to stop [ 41.915002][ T6819] bcachefs (loop4): marking superblocks [ 41.916732][ T6819] bcachefs (loop4): initializing freespace [ 41.919752][ T6819] bcachefs (loop4): done initializing freespace [ 41.927483][ T6819] bcachefs (loop4): reading snapshots table [ 41.927543][ T6819] bcachefs (loop4): reading snapshots done [ 41.948143][ T6819] bcachefs (loop4): done starting filesystem [ 41.949178][ T6548] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2 [ 42.027257][ T6548] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 42.027771][ T6548] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 42.028123][ T6548] bcachefs (loop3): marking filesystem clean [ 42.045816][ T6548] bcachefs (loop3): shutdown complete [ 42.466057][ T6554] bcachefs (loop2): shutting down [ 42.466085][ T6554] bcachefs (loop2): going read-only [ 42.466694][ T6554] bcachefs (loop2): finished waiting for writes to stop [ 42.484312][ T6554] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4 [ 42.507537][ T6554] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 42.510956][ T6554] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 42.511763][ T6554] bcachefs (loop2): marking filesystem clean [ 42.526210][ T6554] bcachefs (loop2): shutdown complete [ 43.021261][ T6547] bcachefs (loop1): shutting down [ 43.021291][ T6547] bcachefs (loop1): going read-only [ 43.021318][ T6547] bcachefs (loop1): finished waiting for writes to stop [ 43.040741][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.0.29'. [ 43.057228][ T6547] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 43.070668][ T6848] loop3: detected capacity change from 0 to 256 [ 43.073413][ T6848] exfat: Deprecated parameter 'utf8' [ 43.073449][ T6848] exfat: Deprecated parameter 'namecase' [ 43.074394][ T6848] exfat: Deprecated parameter 'namecase' [ 43.074404][ T6848] exfat: Deprecated parameter 'utf8' [ 43.083631][ T6859] loop2: detected capacity change from 0 to 512 [ 43.085855][ T6860] loop0: detected capacity change from 0 to 1024 [ 43.087259][ T6859] ======================================================= [ 43.087259][ T6859] WARNING: The mand mount option has been deprecated and [ 43.087259][ T6859] and is ignored by this kernel. Remove the mand [ 43.087259][ T6859] option from the mount to silence this warning. [ 43.087259][ T6859] ======================================================= [ 43.108523][ T6848] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 43.126882][ T6560] bcachefs (loop4): shutting down [ 43.126918][ T6560] bcachefs (loop4): going read-only [ 43.127555][ T6560] bcachefs (loop4): finished waiting for writes to stop [ 43.136262][ T6860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.136541][ T6547] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 43.142309][ T6859] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.144428][ T6547] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 43.144810][ T6547] bcachefs (loop1): marking filesystem clean [ 43.151785][ T6560] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 43.169601][ T6560] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4 [ 43.173593][ T6560] bcachefs (loop4): clean shutdown complete, journal seq 5 [ 43.173962][ T6560] bcachefs (loop4): marking filesystem clean [ 43.208672][ T6560] bcachefs (loop4): shutdown complete [ 43.215263][ T6849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 43.215329][ T6849] IPv6: NLM_F_CREATE should be set when creating new route [ 43.215349][ T6849] IPv6: NLM_F_CREATE should be set when creating new route [ 43.219697][ T6547] bcachefs (loop1): shutdown complete [ 43.254497][ T6555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.387899][ T6874] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.27: corrupted inode contents [ 43.389259][ T6874] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.27: mark_inode_dirty error [ 43.390056][ T6874] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.27: corrupted inode contents [ 43.390403][ T6874] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.27: mark_inode_dirty error [ 43.895353][ T6876] loop3: detected capacity change from 0 to 32768 [ 43.952050][ T6554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.057200][ T6884] loop2: detected capacity change from 0 to 512 [ 44.063524][ T6884] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.443906][ T6896] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.34: corrupted inode contents [ 44.445061][ T6896] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.34: mark_inode_dirty error [ 44.445583][ T6896] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.34: corrupted inode contents [ 44.446399][ T6896] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.34: mark_inode_dirty error [ 44.960360][ T6876] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names [ 44.960393][ T6876] allowing incompatible features above 0.0: (unknown version) [ 44.960418][ T6876] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 44.960430][ T6876] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 44.960450][ T6876] bcachefs (loop3): initializing new filesystem [ 44.968715][ T6876] bcachefs (loop3): going read-write [ 45.002019][ T6876] bcachefs (loop3): marking superblocks [ 45.018279][ T6876] bcachefs (loop3): initializing freespace [ 45.019056][ T6876] bcachefs (loop3): done initializing freespace [ 45.023917][ T6876] bcachefs (loop3): reading snapshots table [ 45.023963][ T6876] bcachefs (loop3): reading snapshots done [ 45.038574][ T6876] bcachefs (loop3): done starting filesystem [ 45.121176][ T6554] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.174318][ T6914] loop1: detected capacity change from 0 to 40427 [ 45.176738][ T6914] f2fs: Unknown parameter 'errkLremount-ro' [ 45.256924][ T6920] loop1: detected capacity change from 0 to 2048 [ 45.257098][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.0.41'. [ 45.284714][ T6920] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 45.288084][ T6920] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 45.294450][ T6922] netlink: 'syz.0.43': attribute type 3 has an invalid length. [ 45.308985][ T6924] loop4: detected capacity change from 0 to 512 [ 45.313579][ T6924] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.313613][ T6924] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.328262][ T6924] EXT4-fs (loop4): 1 truncate cleaned up [ 45.328696][ T6924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.413159][ T6916] loop2: detected capacity change from 0 to 32768 [ 45.417659][ T6916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.40 (6916) [ 45.424247][ T6916] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 45.424302][ T6916] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm [ 45.424324][ T6916] BTRFS info (device loop2): using free-space-tree [ 45.446259][ T6560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.704238][ T6916] BTRFS info (device loop2): rebuilding free space tree [ 45.724156][ T6950] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (48424) [ 45.724197][ T6950] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 46.172983][ T6956] loop4: detected capacity change from 0 to 40427 [ 46.174679][ T6956] F2FS-fs: heap/no_heap options were deprecated [ 46.421595][ T6956] F2FS-fs (loop4): build fault injection rate: 19 [ 46.421619][ T6956] F2FS-fs (loop4): build fault injection type: 0x3bfe8c [ 46.423384][ T6956] F2FS-fs (loop4): invalid crc value [ 46.435101][ T6916] BTRFS info (device loop2): scrub: started on devid 1 [ 46.452584][ T6916] BTRFS info (device loop2): scrub: finished on devid 1 with status: 0 [ 46.454928][ T6956] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x4e8/0x7ac [ 46.460559][ T6548] bcachefs (loop3): shutting down [ 46.460599][ T6548] bcachefs (loop3): going read-only [ 46.460620][ T6548] bcachefs (loop3): finished waiting for writes to stop [ 46.475060][ T6956] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1b0/0x3b0 [ 46.478298][ T6956] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 46.480891][ T6956] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 46.485964][ T6955] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x19c/0x868 [ 46.488669][ T6955] F2FS-fs (loop4): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0xe4/0x6d0 [ 46.489178][ T6955] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x1fc/0x1820 [ 46.489196][ T6955] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0] [ 46.492537][ T6955] syz.4.47: attempt to access beyond end of device [ 46.492537][ T6955] loop4: rw=2049, sector=45096, nr_sectors = 32 limit=40427 [ 46.500393][ T6548] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 46.515338][ T6965] loop0: detected capacity change from 0 to 512 [ 46.543652][ T6554] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 46.552877][ T6965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.616779][ T6548] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4 [ 46.617750][ T6548] bcachefs (loop3): clean shutdown complete, journal seq 5 [ 46.618319][ T6548] bcachefs (loop3): marking filesystem clean [ 47.040151][ T6548] bcachefs (loop3): shutdown complete [ 47.071459][ T6560] syz-executor: attempt to access beyond end of device [ 47.071459][ T6560] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 47.071495][ T6560] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of bio_endio+0x804/0x840 [ 47.071836][ T6560] CPU: 0 UID: 0 PID: 6560 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 47.071850][ T6560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 47.071855][ T6560] Call trace: [ 47.071857][ T6560] show_stack+0x2c/0x3c (C) [ 47.071867][ T6560] __dump_stack+0x30/0x40 [ 47.071873][ T6560] dump_stack_lvl+0xd8/0x12c [ 47.071878][ T6560] dump_stack+0x1c/0x28 [ 47.071883][ T6560] f2fs_handle_critical_error+0x34c/0x4b8 [ 47.071890][ T6560] f2fs_stop_checkpoint+0x5c/0x70 [ 47.071897][ T6560] f2fs_write_end_io+0x768/0xa70 [ 47.071903][ T6560] bio_endio+0x804/0x840 [ 47.071908][ T6560] submit_bio_noacct+0x158/0x176c [ 47.071913][ T6560] submit_bio+0x3b4/0x550 [ 47.071918][ T6560] f2fs_submit_write_bio+0x13c/0x324 [ 47.071923][ T6560] __submit_merged_bio+0x254/0x704 [ 47.071929][ T6560] __submit_merged_write_cond+0x23c/0x4ac [ 47.071934][ T6560] f2fs_write_data_pages+0x1d28/0x2634 [ 47.071940][ T6560] do_writepages+0x270/0x468 [ 47.071947][ T6560] filemap_fdatawrite+0x14c/0x1f4 [ 47.071962][ T6560] f2fs_sync_dirty_inodes+0x2b8/0x788 [ 47.071967][ T6560] f2fs_write_checkpoint+0x690/0x16a0 [ 47.071973][ T6560] kill_f2fs_super+0x21c/0x584 [ 47.071981][ T6560] deactivate_locked_super+0xc4/0x12c [ 47.071991][ T6560] deactivate_super+0xe0/0x100 [ 47.071997][ T6560] cleanup_mnt+0x31c/0x3ac [ 47.072002][ T6560] __cleanup_mnt+0x20/0x30 [ 47.072007][ T6560] task_work_run+0x1dc/0x260 [ 47.072013][ T6560] do_notify_resume+0x174/0x1f4 [ 47.072019][ T6560] el0_svc+0xb8/0x180 [ 47.072026][ T6560] el0t_64_sync_handler+0x84/0x12c [ 47.072031][ T6560] el0t_64_sync+0x198/0x19c [ 47.072043][ T6560] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 47.192208][ T6977] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.50: corrupted inode contents [ 47.223393][ T6977] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.50: mark_inode_dirty error [ 47.225780][ T6977] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.50: corrupted inode contents [ 47.228763][ T6977] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.50: mark_inode_dirty error [ 47.368125][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.368125][ T240] loop1: rw=1, sector=3570, nr_sectors = 7648 limit=2048 [ 47.390403][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.390403][ T240] loop1: rw=1, sector=11218, nr_sectors = 13160 limit=2048 [ 47.435856][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.435856][ T240] loop1: rw=1, sector=24378, nr_sectors = 2072 limit=2048 [ 47.437603][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.437603][ T240] loop1: rw=1, sector=26450, nr_sectors = 2048 limit=2048 [ 47.439324][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.439324][ T240] loop1: rw=1, sector=28498, nr_sectors = 2048 limit=2048 [ 47.451530][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.451530][ T240] loop1: rw=1, sector=30546, nr_sectors = 2688 limit=2048 [ 47.455729][ T240] kworker/u8:4: attempt to access beyond end of device [ 47.455729][ T240] loop1: rw=1, sector=33234, nr_sectors = 1064 limit=2048 [ 47.462265][ T6547] UDF-fs: warning (device loop1): udf_evict_inode: Inode 1376 (mode 40755) has inode size 324 different from extent length 836. Filesystem need not be standards compliant. [ 47.887427][ T6555] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.964382][ T6987] loop4: detected capacity change from 0 to 32768 [ 48.010379][ T6987] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 48.026184][ T6987] XFS (loop4): Ending clean mount [ 48.050452][ T6991] loop0: detected capacity change from 0 to 32768 [ 48.051491][ T6991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.56 (6991) [ 48.106561][ T7002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.54'. [ 48.141346][ T6991] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 48.141383][ T6991] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm [ 48.141400][ T6991] BTRFS info (device loop0): using free-space-tree [ 48.159107][ T6560] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 48.353765][ T6555] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.112016][ T31] audit: type=1326 audit(49.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7026 comm="syz.4.61" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffae75c0a8 code=0x0 [ 49.356377][ T6582] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.661347][ T6582] usb 1-1: Using ep0 maxpacket: 16 [ 49.671486][ T6582] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 49.673325][ T6582] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 49.673365][ T6582] usb 1-1: config 0 has no interface number 0 [ 49.673469][ T6582] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 49.673498][ T6582] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.747750][ T6582] usb 1-1: config 0 descriptor?? [ 49.856467][ T6582] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 50.006865][ T7064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.008803][ T7064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.058369][ T6582] usb 1-1: USB disconnect, device number 2 [ 50.444776][ T7086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.444971][ T7086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.921521][ T7099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.923846][ T7099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.406913][ T11] Process accounting resumed [ 51.744095][ T7113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.746678][ T7113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.811873][ T7054] IPVS: starting estimator thread 0... [ 51.895472][ T6582] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 51.901118][ T7116] IPVS: using max 69 ests per chain, 165600 per kthread [ 52.042738][ T7122] netlink: 'syz.3.92': attribute type 11 has an invalid length. [ 52.042768][ T7122] netlink: 44 bytes leftover after parsing attributes in process `syz.3.92'. [ 52.241993][ T6582] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 52.242022][ T6582] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 52.242041][ T6582] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 52.242061][ T6582] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 52.242073][ T6582] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 52.253338][ T6582] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 52.253368][ T6582] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 52.253391][ T6582] usb 1-1: Product: syz [ 52.253403][ T6582] usb 1-1: Manufacturer: syz [ 52.262786][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.262972][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.270632][ T6582] cdc_wdm 1-1:1.0: skipping garbage [ 52.271988][ T6582] cdc_wdm 1-1:1.0: skipping garbage [ 52.275207][ T6582] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 52.276261][ T6582] cdc_wdm 1-1:1.0: Unknown control protocol [ 52.689766][ T7054] usb 1-1: USB disconnect, device number 3 [ 54.687573][ T7184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.687777][ T7184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.777481][ T7186] syz_tun: entered allmulticast mode [ 54.778410][ T7185] syz_tun: left allmulticast mode [ 55.672252][ T7202] veth0_virt_: renamed from ipvlan1 [ 56.840285][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.840469][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.652862][ T7270] loop7: detected capacity change from 0 to 7 [ 59.250826][ T7270] Dev loop7: unable to read RDB block 7 [ 59.250862][ T7270] loop7: unable to read partition table [ 59.250947][ T7270] loop7: partition table beyond EOD, truncated [ 59.250972][ T7270] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 59.257927][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 59.258001][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 59.342256][ T31] audit: type=1326 audit(59.320:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.346284][ T31] audit: type=1326 audit(59.320:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.351434][ T31] audit: type=1326 audit(59.320:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.351485][ T31] audit: type=1326 audit(59.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.351513][ T31] audit: type=1326 audit(59.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.362747][ T31] audit: type=1326 audit(59.340:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=109 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.362783][ T31] audit: type=1326 audit(59.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.362800][ T31] audit: type=1326 audit(59.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7280 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb4b5c0a8 code=0x7ffc0000 [ 59.514736][ T7292] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 59.514781][ T7292] netlink: 36 bytes leftover after parsing attributes in process `syz.0.150'. [ 59.589682][ T7293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.590905][ T7293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.788766][ T7297] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 59.788793][ T7297] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 59.789322][ T7297] vhci_hcd vhci_hcd.0: Device attached [ 59.794143][ T7297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.794318][ T7297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.798934][ T7298] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 59.800762][ T42] vhci_hcd: stop threads [ 59.801843][ T42] vhci_hcd: release socket [ 59.801863][ T42] vhci_hcd: disconnect device [ 60.462441][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.464299][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.589805][ T7313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.590081][ T7313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.006451][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.009350][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.021968][ T7335] loop7: detected capacity change from 0 to 3 [ 61.205047][ T6582] libceph: connect (1)[c::]:6789 error -101 [ 61.205275][ T6582] libceph: mon0 (1)[c::]:6789 connect error [ 61.207294][ T6582] libceph: connect (1)[c::]:6789 error -101 [ 61.207389][ T6582] libceph: mon0 (1)[c::]:6789 connect error [ 61.237147][ T7346] ceph: No mds server is up or the cluster is laggy [ 62.259395][ T31] audit: type=1326 audit(62.230:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7358 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895c0a8 code=0x7ffc0000 [ 62.296143][ T31] audit: type=1326 audit(62.270:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7358 comm="syz.1.175" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9895c0a8 code=0x7ffc0000 [ 62.399682][ T7367] netlink: 180 bytes leftover after parsing attributes in process `syz.0.179'. [ 62.779426][ T7373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 62.817140][ T7373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.817322][ T7373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.991172][ T6582] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.131825][ T7378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.134788][ T7378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.174012][ T6582] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.174055][ T6582] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.174085][ T6582] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.188731][ T6582] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 63.188768][ T6582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.188790][ T6582] usb 1-1: Product: syz [ 63.188801][ T6582] usb 1-1: Manufacturer: syz [ 63.188809][ T6582] usb 1-1: SerialNumber: syz [ 63.206444][ T6582] hub 1-1:1.0: bad descriptor, ignoring hub [ 63.207680][ T6582] hub 1-1:1.0: probe with driver hub failed with error -5 [ 63.418244][ T6582] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 63.598266][ T6551] Bluetooth: hci4: unexpected subevent 0x01 length: 6 < 18 [ 63.659966][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.660722][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.068642][ T7419] __vm_enough_memory: pid: 7419, comm: syz.2.198, bytes: 4503599627366400 not enough memory for the allocation [ 64.494796][ T2413] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.494862][ T2413] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.736297][ T7369] usb 1-1: reset high-speed USB device number 4 using dummy_hcd [ 64.772790][ T2330] cfg80211: failed to load regulatory.db [ 65.492547][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 65.492613][ T7449] Zero length message leads to an empty skb [ 66.140775][ T7472] ubi31: attaching mtd0 [ 66.147517][ T7472] ubi31: scanning is finished [ 66.147560][ T7472] ubi31: empty MTD device detected [ 66.375821][ T7472] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 66.375893][ T7472] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 66.375905][ T7472] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 66.375915][ T7472] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 66.375925][ T7472] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 66.375933][ T7472] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 66.375940][ T7472] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2975515175 [ 66.375947][ T7472] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 66.380211][ T7474] ubi31: background thread "ubi_bgt31d" started, PID 7474 [ 66.884473][ T7501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.223'. [ 66.898062][ T7476] syz.1.217 (7476): drop_caches: 2 [ 66.898624][ T7476] syz.1.217 (7476): drop_caches: 2 [ 67.061373][ T7516] syz.1.230 (7516): drop_caches: 2 [ 67.063065][ T7516] syz.1.230 (7516): drop_caches: 2 [ 68.739958][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.247'. [ 68.974826][ T7568] overlayfs: failed to resolve 'smackfsdef=&:': -2 [ 69.237710][ T7579] dvmrp8: entered allmulticast mode [ 69.239372][ T7579] dvmrp8: left allmulticast mode [ 70.372994][ T7600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.373206][ T7600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.723938][ T7369] usb 1-1: can't restore configuration #1 (error=-110) [ 70.733207][ T6582] usb 1-1: USB disconnect, device number 4 [ 70.885066][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 70.910339][ T6582] usblp0: removed [ 71.293799][ T7620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.298465][ T7620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.468612][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.468782][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.576012][ T7647] gretap0: entered promiscuous mode [ 72.577294][ T7647] vlan2: entered promiscuous mode [ 72.668361][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.670122][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.811170][ T7662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.281'. [ 74.141847][ T7665] ------------[ cut here ]------------ [ 74.141873][ T7665] verifier bug: not inlined functions bpf_send_signal_thread#117 is missing func(1) [ 74.141935][ T7665] WARNING: CPU: 0 PID: 7665 at kernel/bpf/verifier.c:22840 bpf_check+0x1559c/0x15d8c [ 74.145863][ T7665] Modules linked in: [ 74.146531][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.2.282 Not tainted 6.17.0-rc1-syzkaller-g8f5ae30d69d7 #0 PREEMPT [ 74.148333][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 74.149965][ T7665] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 74.151281][ T7665] pc : bpf_check+0x1559c/0x15d8c [ 74.152129][ T7665] lr : bpf_check+0x1559c/0x15d8c [ 74.152937][ T7665] sp : ffff80009c1c7480 [ 74.153601][ T7665] x29: ffff80009c1c7980 x28: dfff800000000000 x27: 0000000000004006 [ 74.154956][ T7665] x26: 1ffff000133eec0b x25: ffff800099f7605c x24: ffff0000f7960008 [ 74.156346][ T7665] x23: ffff800099f76058 x22: ffff80008b144280 x21: ffff800092df4000 [ 74.157681][ T7665] x20: ffff800099f7605c x19: 1ffff000133eec0b x18: 00000000b7030000 [ 74.158958][ T7665] x17: 0000000000000004 x16: ffff80008b007340 x15: 0000000000000001 [ 74.160324][ T7665] x14: 1ffff00013838e00 x13: 0000000000000000 x12: 0000000000000000 [ 74.161670][ T7665] x11: 0000000000080000 x10: 000000000000a79d x9 : 1077c92be6700d00 [ 74.163008][ T7665] x8 : 1077c92be6700d00 x7 : ffff800080563af4 x6 : 0000000000000000 [ 74.164351][ T7665] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807de560 [ 74.165676][ T7665] x2 : 0000000000000002 x1 : 0000000100000000 x0 : 0000000000000000 [ 74.166869][ T7665] Call trace: [ 74.167376][ T7665] bpf_check+0x1559c/0x15d8c (P) [ 74.168132][ T7665] bpf_prog_load+0xec8/0x13fc [ 74.168865][ T7665] __sys_bpf+0x450/0x628 [ 74.169491][ T7665] __arm64_sys_bpf+0x80/0x98 [ 74.170200][ T7665] invoke_syscall+0x98/0x2b8 [ 74.170930][ T7665] el0_svc_common+0x130/0x23c [ 74.171735][ T7665] do_el0_svc+0x48/0x58 [ 74.172397][ T7665] el0_svc+0x58/0x180 [ 74.173006][ T7665] el0t_64_sync_handler+0x84/0x12c [ 74.173802][ T7665] el0t_64_sync+0x198/0x19c [ 74.174533][ T7665] irq event stamp: 338 [ 74.175206][ T7665] hardirqs last enabled at (337): [] exit_to_kernel_mode+0xc0/0xf0 [ 74.176766][ T7665] hardirqs last disabled at (338): [] el1_brk64+0x1c/0x48 [ 74.178246][ T7665] softirqs last enabled at (162): [] local_bh_enable+0x10/0x34 [ 74.179742][ T7665] softirqs last disabled at (160): [] local_bh_disable+0x10/0x34 [ 74.181166][ T7665] ---[ end trace 0000000000000000 ]--- [ 74.182042][ C0] vkms_vblank_simulate: vblank timer overrun