last executing test programs: 5.539873508s ago: executing program 0 (id=66): openat$tun(0xffffffffffffff9c, 0x0, 0x60242, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 5.380315126s ago: executing program 0 (id=72): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x40, 0x1, 0x49a, 0x5b095, 0x1, 0x112, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) 5.282389746s ago: executing program 0 (id=74): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 3.32129153s ago: executing program 0 (id=107): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xffffffff80099070, 0x0, 0x0, 0x5, 0x100000}}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.305799681s ago: executing program 0 (id=108): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8000810, 0xffffffffffffffff, 0xeb805000) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000180)='Aq') 1.743981859s ago: executing program 4 (id=145): r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007ed, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000100)=0xb329, 0x4) 1.518050692s ago: executing program 2 (id=149): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x2000c800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x57}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300), 0x8) 1.43601478s ago: executing program 2 (id=151): r0 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7dd6, 0x8029, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x0, 0xe875, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, 0x0, 0x0) 1.346348497s ago: executing program 0 (id=154): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x0, 0x26}, 0x28) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="400d5d0000001a4657a75b9139ee170f4bb78547"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.299928251s ago: executing program 2 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.27174744s ago: executing program 2 (id=156): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x7ff, 0x4) 934.101133ms ago: executing program 4 (id=161): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x0) 719.8002ms ago: executing program 4 (id=164): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x60804014) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x2}) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 716.430873ms ago: executing program 4 (id=165): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x6, @loopback, 0xffffcd0b}, 0x1c) sendmsg$unix(r0, &(0x7f0000001680)={&(0x7f00000001c0)=@abs={0x0, 0x0, 0xffffffff}, 0x18, &(0x7f0000000000)=[{&(0x7f00000000c0)="655be7c09841f6a9e16c7f5cda3aab9a9bf36e1a4b7c25b5d4a39b587fbe9e11185603f700000000", 0x28}], 0x1, 0x0, 0x0, 0x40051}, 0x2) 693.123364ms ago: executing program 4 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 623.903966ms ago: executing program 4 (id=167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48042) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x4, 0xcc, 0xffffffb9, 0x1a}, 0x9c) 623.43922ms ago: executing program 3 (id=169): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 563.85597ms ago: executing program 3 (id=170): keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000340), &(0x7f0000002240)=ANY=[@ANYBLOB='enc=oaep hash=tgr192-g\t'], 0x0, 0x0) 547.968111ms ago: executing program 3 (id=171): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="1d", 0x1}], 0x1}}], 0x1, 0x20048884) r2 = accept$inet(r1, 0x0, 0x0) accept4(r2, &(0x7f0000000000)=@ethernet={0x0, @multicast}, 0x0, 0x800) 447.947752ms ago: executing program 3 (id=173): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240f3ffffff87bb53679fd078548ceb6c4414fab0919616e1edec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x0) 360.021742ms ago: executing program 2 (id=176): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000100)={0x5, 0x5, 0xc4c2, 0xa8, 0x8, "6d8e7d4a2de51825039f5343875a8aa1a7a9e9", 0x4, 0x8}) 351.494791ms ago: executing program 2 (id=179): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x26, 0x4, 0x0, 0x1, 0x0) 339.328554ms ago: executing program 1 (id=180): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) 228.676352ms ago: executing program 1 (id=181): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000240)=@ethtool_perm_addr={0x4b, 0x2b, "43720705000100004786b89e6fb2be5c3f0000000900000000000000000007fffd0ceb65e9fa827c003fa8"}}) 164.017553ms ago: executing program 1 (id=182): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, 0xffffffffffffffff, 0x34}, 0x20) 163.688524ms ago: executing program 1 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="03", 0x1}], 0x1}, 0x4) 123.38302ms ago: executing program 3 (id=184): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 36.960975ms ago: executing program 1 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.135976ms ago: executing program 1 (id=186): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe2, 0xfff1}, {0x0, 0xffff}, {0x1, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 3 (id=187): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x1, 0x0, 0x4000}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x11, r2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) syz_io_uring_setup(0xefe, &(0x7f0000000140)={0x0, 0xcc19, 0x10806}, &(0x7f0000000000), &(0x7f0000000380)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 24.362346][ T6538] cgroup: Unknown subsys name 'net' [ 24.462419][ T6538] cgroup: Unknown subsys name 'cpuset' [ 24.464171][ T6538] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.633096][ T6538] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 25.827143][ T6558] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 25.827587][ T6558] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 25.840261][ T6560] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 25.840627][ T6560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 25.840950][ T6560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 25.841520][ T6560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 25.841807][ T6560] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 25.842039][ T6560] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 25.842331][ T6560] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 25.842870][ T6560] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 25.843207][ T6560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 25.843750][ T6560] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 25.844820][ T6560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 25.845002][ T6560] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 25.845217][ T6560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 25.846079][ T6560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 25.846776][ T6560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 25.859550][ T6563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 25.860964][ T6563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 25.864084][ T6560] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 25.872940][ T6560] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 25.873334][ T6560] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 25.873872][ T6560] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 25.874112][ T6560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 25.881573][ T6566] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 26.005747][ T6556] chnl_net:caif_netlink_parms(): no params data found [ 26.044669][ T6552] chnl_net:caif_netlink_parms(): no params data found [ 26.052993][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 26.089641][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.090032][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.090107][ T6556] bridge_slave_0: entered allmulticast mode [ 26.090541][ T6556] bridge_slave_0: entered promiscuous mode [ 26.092963][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 26.108383][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.108454][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.108517][ T6556] bridge_slave_1: entered allmulticast mode [ 26.109128][ T6556] bridge_slave_1: entered promiscuous mode [ 26.135190][ T6556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.147554][ T6556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.147661][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.147722][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.147776][ T6551] bridge_slave_0: entered allmulticast mode [ 26.148215][ T6551] bridge_slave_0: entered promiscuous mode [ 26.149140][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.149175][ T6552] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.149228][ T6552] bridge_slave_0: entered allmulticast mode [ 26.150106][ T6552] bridge_slave_0: entered promiscuous mode [ 26.150786][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.150808][ T6552] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.150851][ T6552] bridge_slave_1: entered allmulticast mode [ 26.152408][ T6552] bridge_slave_1: entered promiscuous mode [ 26.152824][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 26.169806][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.169869][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.169915][ T6551] bridge_slave_1: entered allmulticast mode [ 26.170359][ T6551] bridge_slave_1: entered promiscuous mode [ 26.180394][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.180431][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.180485][ T6561] bridge_slave_0: entered allmulticast mode [ 26.180924][ T6561] bridge_slave_0: entered promiscuous mode [ 26.182372][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.182419][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.182464][ T6561] bridge_slave_1: entered allmulticast mode [ 26.183214][ T6561] bridge_slave_1: entered promiscuous mode [ 26.193282][ T6556] team0: Port device team_slave_0 added [ 26.198270][ T6552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.203735][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.204614][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.208041][ T6556] team0: Port device team_slave_1 added [ 26.212287][ T6552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.234587][ T6552] team0: Port device team_slave_0 added [ 26.237452][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.239614][ T6551] team0: Port device team_slave_0 added [ 26.240349][ T6551] team0: Port device team_slave_1 added [ 26.244334][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.244352][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.244373][ T6556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.245104][ T6556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.245112][ T6556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.245126][ T6556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.259477][ T6552] team0: Port device team_slave_1 added [ 26.264296][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.274958][ T6556] hsr_slave_0: entered promiscuous mode [ 26.275284][ T6556] hsr_slave_1: entered promiscuous mode [ 26.286830][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.286854][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.286881][ T6552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.294575][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.295757][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.296341][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.297077][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.297086][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.297099][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.298093][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.298324][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.298375][ T6559] bridge_slave_0: entered allmulticast mode [ 26.298784][ T6559] bridge_slave_0: entered promiscuous mode [ 26.299460][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.299477][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.299534][ T6559] bridge_slave_1: entered allmulticast mode [ 26.299957][ T6559] bridge_slave_1: entered promiscuous mode [ 26.300552][ T6552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.300559][ T6552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.300571][ T6552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.304451][ T6561] team0: Port device team_slave_0 added [ 26.305223][ T6561] team0: Port device team_slave_1 added [ 26.328044][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.336796][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.340851][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.340871][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.340885][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.358331][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.358350][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.358375][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.373348][ T6559] team0: Port device team_slave_0 added [ 26.374041][ T6559] team0: Port device team_slave_1 added [ 26.379915][ T6551] hsr_slave_0: entered promiscuous mode [ 26.381536][ T6551] hsr_slave_1: entered promiscuous mode [ 26.382745][ T6551] debugfs: 'hsr0' already exists in 'hsr' [ 26.383705][ T6551] Cannot create hsr debugfs directory [ 26.393605][ T6552] hsr_slave_0: entered promiscuous mode [ 26.394908][ T6552] hsr_slave_1: entered promiscuous mode [ 26.396082][ T6552] debugfs: 'hsr0' already exists in 'hsr' [ 26.397045][ T6552] Cannot create hsr debugfs directory [ 26.403211][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.403230][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.403240][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.416354][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.416382][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.416401][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.439028][ T6561] hsr_slave_0: entered promiscuous mode [ 26.439315][ T6561] hsr_slave_1: entered promiscuous mode [ 26.439499][ T6561] debugfs: 'hsr0' already exists in 'hsr' [ 26.439508][ T6561] Cannot create hsr debugfs directory [ 26.459470][ T6559] hsr_slave_0: entered promiscuous mode [ 26.459777][ T6559] hsr_slave_1: entered promiscuous mode [ 26.459971][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 26.459981][ T6559] Cannot create hsr debugfs directory [ 26.552221][ T6556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.554632][ T6556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.559506][ T6556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.562150][ T6556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.581665][ T6556] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.581704][ T6556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.581870][ T6556] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.581902][ T6556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.587556][ T6551] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.588651][ T6551] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.590503][ T6551] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.592816][ T6551] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.610102][ T6552] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.617484][ T6552] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.619732][ T6552] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.622341][ T6552] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.629035][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.629073][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.629137][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.629160][ T6551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.638485][ T6556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.643703][ T6552] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.643738][ T6552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.643804][ T6552] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.643830][ T6552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.654185][ T4136] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.655579][ T4136] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.656864][ T4136] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.658179][ T4136] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.660125][ T4136] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.661947][ T4136] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.676730][ T6556] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.685988][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.686026][ T4136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.688631][ T6559] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.690893][ T6559] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.693821][ T6559] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.696165][ T6559] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.698593][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.698634][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.734699][ T6556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.734731][ T6556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.743311][ T6552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.764485][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.768462][ T6552] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.771056][ T6561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.779736][ T6561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.786563][ T6561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.789984][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.790018][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.799808][ T6552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.801559][ T6552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.804548][ T6556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.810514][ T6559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.813165][ T6561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.815699][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.815731][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.822441][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.856546][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.856579][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.858071][ T6559] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.863986][ T225] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.864018][ T225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.864327][ T225] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.864344][ T225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.875026][ T6556] veth0_vlan: entered promiscuous mode [ 26.877797][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.877828][ T4136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.889815][ T6559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.889844][ T6559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.902164][ T6552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.909266][ T6552] veth0_vlan: entered promiscuous mode [ 26.913926][ T6552] veth1_vlan: entered promiscuous mode [ 26.915987][ T6556] veth1_vlan: entered promiscuous mode [ 26.935900][ T6552] veth0_macvtap: entered promiscuous mode [ 26.943356][ T6552] veth1_macvtap: entered promiscuous mode [ 26.948093][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.957537][ T6559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.968200][ T6552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.978099][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.984864][ T685] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.985110][ T685] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.985132][ T685] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.985151][ T685] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.994547][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.996986][ T6556] veth0_macvtap: entered promiscuous mode [ 26.998608][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.998629][ T4136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.007122][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.007167][ T4136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.017358][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.025301][ T6556] veth1_macvtap: entered promiscuous mode [ 27.045781][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.054679][ T6551] veth0_vlan: entered promiscuous mode [ 27.062212][ T6556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.063522][ T4136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.064357][ T4136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.069226][ T4136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.069282][ T4136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.080599][ T6551] veth1_vlan: entered promiscuous mode [ 27.093226][ T685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.093256][ T685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.115502][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.115529][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.118002][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.128727][ T6559] veth0_vlan: entered promiscuous mode [ 27.134631][ T6551] veth0_macvtap: entered promiscuous mode [ 27.136923][ T6551] veth1_macvtap: entered promiscuous mode [ 27.141199][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.156705][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.156730][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.157460][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.166690][ T6559] veth1_vlan: entered promiscuous mode [ 27.167977][ T685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.168027][ T685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.168046][ T685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.168059][ T685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.181036][ T6561] veth0_vlan: entered promiscuous mode [ 27.187005][ T6552] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.195519][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.195548][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.199859][ T6559] veth0_macvtap: entered promiscuous mode [ 27.203908][ T6559] veth1_macvtap: entered promiscuous mode [ 27.223173][ T6561] veth1_vlan: entered promiscuous mode [ 27.224793][ T6666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.225547][ T6666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.230513][ T685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.230555][ T685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.236964][ T6666] loop3: detected capacity change from 0 to 512 [ 27.244979][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.248567][ T6561] veth0_macvtap: entered promiscuous mode [ 27.249742][ T6561] veth1_macvtap: entered promiscuous mode [ 27.257297][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.259533][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.268420][ T685] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.268544][ T685] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.268564][ T685] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.268577][ T685] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.274223][ T6559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.277989][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.278017][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.280205][ T5996] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.280231][ T5996] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.280246][ T5996] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.280260][ T5996] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.290197][ T6666] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 27.290242][ T6666] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 27.290262][ T6666] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4: Failed to acquire dquot type 1 [ 27.308248][ T6666] EXT4-fs (loop3): 1 truncate cleaned up [ 27.308722][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 27.390907][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.390937][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.417106][ T4136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.417134][ T4136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.435447][ T225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.435485][ T225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.458410][ T685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 27.458441][ T685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 27.496722][ T6685] Bluetooth: MGMT ver 1.23 [ 27.543142][ T6691] loop4: detected capacity change from 0 to 256 [ 27.548863][ T6691] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.552626][ T6691] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 27.560111][ T6691] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 27.560366][ T6691] exFAT-fs (loop4): failed to load alloc-bitmap [ 27.560372][ T6691] exFAT-fs (loop4): failed to recognize exfat type [ 27.590987][ T6695] syzkaller0: entered promiscuous mode [ 27.591014][ T6695] syzkaller0: entered allmulticast mode [ 27.593743][ T6670] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 27.658089][ T6702] loop2: detected capacity change from 0 to 128 [ 27.667004][ T6702] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 27.680396][ T6702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 27.750333][ T6711] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 27.838286][ T6552] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.851642][ T6565] Bluetooth: hci0: command tx timeout [ 27.914276][ T6737] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.931755][ T6565] Bluetooth: hci4: command tx timeout [ 27.931861][ T6565] Bluetooth: hci1: command tx timeout [ 27.931924][ T6565] Bluetooth: hci3: command tx timeout [ 27.931991][ T6565] Bluetooth: hci2: command tx timeout [ 28.215766][ T6765] loop4: detected capacity change from 0 to 8 [ 28.299788][ T6772] loop4: detected capacity change from 0 to 512 [ 28.302647][ T6772] EXT4-fs: Invalid journal IO priority (must be 0-7) [ 28.373807][ T6778] loop4: detected capacity change from 0 to 256 [ 28.382519][ T6778] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0xc3d18d74, utbl_chksum : 0xe619d30d) [ 28.382658][ T6778] exFAT-fs (loop4): failed to load alloc-bitmap [ 28.382665][ T6778] exFAT-fs (loop4): failed to recognize exfat type [ 28.435949][ T6782] Zero length message leads to an empty skb [ 28.529832][ T6792] syzkaller0: entered promiscuous mode [ 28.529855][ T6792] syzkaller0: entered allmulticast mode [ 28.646501][ T6796] loop4: detected capacity change from 0 to 128 [ 28.647301][ T6796] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 28.647852][ T6796] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 28.763289][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.765214][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.931817][ T6817] loop3: detected capacity change from 0 to 128 [ 28.932194][ T6817] ======================================================= [ 28.932194][ T6817] WARNING: The mand mount option has been deprecated and [ 28.932194][ T6817] and is ignored by this kernel. Remove the mand [ 28.932194][ T6817] option from the mount to silence this warning. [ 28.932194][ T6817] ======================================================= [ 28.947399][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.69'. [ 28.966213][ T6819] syzkaller0: entered promiscuous mode [ 28.966235][ T6819] syzkaller0: entered allmulticast mode [ 29.056647][ T6825] loop3: detected capacity change from 0 to 256 [ 29.080370][ T6825] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 29.153372][ T6829] syzkaller0: entered promiscuous mode [ 29.153398][ T6829] syzkaller0: entered allmulticast mode [ 29.156899][ T6825] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 29.156922][ T6825] exFAT-fs (loop3): Filesystem has been set read-only [ 29.157528][ T6825] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff) [ 29.414315][ T6841] loop4: detected capacity change from 0 to 256 [ 29.574992][ T6841] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 29.588962][ T6840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.591890][ T6840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.849644][ T6861] binder: 6860:6861 ioctl 400c620e 20000100 returned -22 [ 30.011234][ T6565] Bluetooth: hci2: command tx timeout [ 30.011268][ T6565] Bluetooth: hci3: command tx timeout [ 30.011299][ T6565] Bluetooth: hci1: command tx timeout [ 30.011317][ T6565] Bluetooth: hci4: command tx timeout [ 30.302945][ T1857] kernel read not supported for file /vcs (pid: 1857 comm: kworker/1:2) [ 30.331349][ T6560] Bluetooth: hci0: command tx timeout [ 30.950206][ T6912] loop2: detected capacity change from 0 to 512 [ 30.955094][ T6912] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.955139][ T6912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.003821][ T6914] syzkaller0: entered promiscuous mode [ 31.003844][ T6914] syzkaller0: entered allmulticast mode [ 31.166059][ T6928] loop2: detected capacity change from 0 to 1024 [ 31.184978][ T6928] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 31.185210][ T6928] syz.2.111: attempt to access beyond end of device [ 31.185210][ T6928] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 31.185239][ T6928] Buffer I/O error on dev loop2, logical block 458752, async page read [ 31.185288][ T6928] syz.2.111: attempt to access beyond end of device [ 31.185288][ T6928] loop2: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 31.185296][ T6928] Buffer I/O error on dev loop2, logical block 458752, async page read [ 31.185464][ T6928] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 31.185471][ T6928] hfsplus: xattr search failed [ 31.321276][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.412964][ T6945] syzkaller0: entered promiscuous mode [ 31.414108][ T6945] syzkaller0: entered allmulticast mode [ 31.426784][ T6947] Illegal XDP return value 4294967274 on prog (id 7) dev syz_tun, expect packet loss! [ 31.470852][ T6949] loop3: detected capacity change from 0 to 16 [ 31.477569][ T6949] erofs (device loop3): mounted with root inode @ nid 36. [ 31.481635][ T6560] erofs (device loop3): failed to decompress -41 in[4096, 0] out[9000] [ 31.491272][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 31.495496][ T10] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.497713][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 31.499220][ T10] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 31.499258][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.507302][ T10] usb 1-1: config 0 descriptor?? [ 31.984953][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 32.091399][ T6565] Bluetooth: hci1: command tx timeout [ 32.092466][ T6565] Bluetooth: hci3: command tx timeout [ 32.092507][ T6565] Bluetooth: hci2: command tx timeout [ 32.092585][ T6560] Bluetooth: hci4: command 0x040f tx timeout [ 32.112672][ T10] nzxt-smart2 0003:1E71:2009.0001: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 32.114599][ T6978] loop2: detected capacity change from 0 to 1024 [ 32.115340][ T6978] hfsplus: unable to load nls mapping "cIt&BR}̀ȀR=@R "Xhq䣦i | dT2XV}>A?B xJTJϸΣj8?]Lez t˘iJaUhArF:`YWAVD .*T\3" [ 32.160461][ T6981] loop2: detected capacity change from 0 to 1024 [ 32.184019][ T6981] hfsplus: xattr search failed [ 32.226538][ T6983] syzkaller0: entered promiscuous mode [ 32.226564][ T6983] syzkaller0: entered allmulticast mode [ 32.302441][ T6991] loop4: detected capacity change from 0 to 512 [ 32.346486][ T6991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 32.352795][ T6991] EXT4-fs (loop4): shut down requested (1) [ 32.361931][ T6559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 32.411518][ T6566] Bluetooth: hci0: command tx timeout [ 32.516200][ T1857] usb 1-1: USB disconnect, device number 2 [ 32.704961][ T7028] syzkaller0: entered promiscuous mode [ 32.704995][ T7028] syzkaller0: entered allmulticast mode [ 32.943488][ T7044] process 'syz.1.152' launched '/dev/fd/7' with NULL argv: empty string added [ 33.301328][ T6610] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.424040][ T7064] syzkaller0: entered promiscuous mode [ 33.424067][ T7064] syzkaller0: entered allmulticast mode [ 33.463076][ T6610] usb 1-1: Using ep0 maxpacket: 16 [ 33.468193][ T6610] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.468223][ T6610] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.468238][ T6610] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 33.468253][ T6610] usb 1-1: config 0 interface 0 has no altsetting 0 [ 33.468270][ T6610] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 33.468282][ T6610] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.478538][ T6610] usb 1-1: config 0 descriptor?? [ 33.840047][ T7097] syzkaller0: entered promiscuous mode [ 33.840075][ T7097] syzkaller0: entered allmulticast mode [ 34.124174][ T6610] usb 1-1: USB disconnect, device number 3 [ 34.184403][ T6566] Bluetooth: hci4: command 0x040f tx timeout [ 34.184438][ T6566] Bluetooth: hci2: command tx timeout [ 34.184465][ T6566] Bluetooth: hci3: command tx timeout [ 34.184482][ T6566] Bluetooth: hci1: command tx timeout [ 34.234904][ T7130] syzkaller0: entered promiscuous mode [ 34.236081][ T7130] syzkaller0: entered allmulticast mode [ 34.256690][ T7132] syzkaller0: entered promiscuous mode [ 34.256718][ T7132] syzkaller0: entered allmulticast mode [ 34.399516][ T7138] ------------[ cut here ]------------ [ 34.399527][ T7138] WARNING: CPU: 0 PID: 7138 at fs/exec.c:119 path_noexec+0x1ac/0x1e4 [ 34.401558][ T7138] Modules linked in: [ 34.402122][ T7138] CPU: 0 UID: 0 PID: 7138 Comm: syz.3.187 Not tainted syzkaller #0 PREEMPT [ 34.403359][ T7138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 34.404149][ T7140] loop1: detected capacity change from 0 to 128 [ 34.404840][ T7140] msdos: Bad value for 'time_offset' [ 34.406549][ T7138] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 34.407721][ T7138] pc : path_noexec+0x1ac/0x1e4 [ 34.408397][ T7138] lr : path_noexec+0x1ac/0x1e4 [ 34.409098][ T7138] sp : ffff80009fad7a30 [ 34.409727][ T7138] x29: ffff80009fad7a30 x28: ffff0000de0c4098 x27: dfff800000000000 [ 34.410942][ T7138] x26: ffff0000cdc90748 x25: ffff80009fad7ac0 x24: ffff0000cdc90740 [ 34.412188][ T7138] x23: ffff80009fad7c20 x22: 1fffe00019b920f0 x21: dfff800000000000 [ 34.413346][ T7138] x20: 0000000000000000 x19: ffff0000cdc90780 x18: 0000000000000000 [ 34.414490][ T7138] x17: 0000000000000000 x16: ffff80008ad6b188 x15: 0000000000000007 [ 34.415738][ T7138] x14: 0000000000000002 x13: 0000000000000003 x12: 0000000000ff0100 [ 34.416868][ T7138] x11: 0000000000080000 x10: 0000000000000130 x9 : ffff8000a7072000 [ 34.418074][ T7138] x8 : 0000000000000131 x7 : 0000000000000000 x6 : 0000000000000000 [ 34.419228][ T7138] x5 : 0000000000000077 x4 : 0000000000000000 x3 : 0000000000002000 [ 34.420390][ T7138] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000 [ 34.421613][ T7138] Call trace: [ 34.422115][ T7138] path_noexec+0x1ac/0x1e4 (P) [ 34.422843][ T7138] do_mmap+0xb1c/0xfac [ 34.423444][ T7138] vm_mmap_pgoff+0x2d8/0x45c [ 34.424110][ T7138] ksys_mmap_pgoff+0x394/0x5b8 [ 34.424819][ T7138] __arm64_sys_mmap+0xf8/0x110 [ 34.425463][ T7138] invoke_syscall+0x98/0x254 [ 34.426133][ T7138] el0_svc_common+0xe8/0x23c [ 34.426861][ T7138] do_el0_svc+0x48/0x58 [ 34.427452][ T7138] el0_svc+0x5c/0x254 [ 34.428056][ T7138] el0t_64_sync_handler+0x84/0x12c [ 34.428800][ T7138] el0t_64_sync+0x198/0x19c [ 34.429484][ T7138] irq event stamp: 324 [ 34.430090][ T7138] hardirqs last enabled at (323): [] local_daif_restore+0x1c/0x3c [ 34.431456][ T7138] hardirqs last disabled at (324): [] el1_brk64+0x20/0x54 [ 34.432711][ T7138] softirqs last enabled at (318): [] local_bh_enable+0x10/0x34 [ 34.434091][ T7138] softirqs last disabled at (316): [] local_bh_disable+0x10/0x34 [ 34.435507][ T7138] ---[ end trace 0000000000000000 ]--- [ 36.251337][ T6560] Bluetooth: hci4: command 0x040f tx timeout