last executing test programs: 8.170540998s ago: executing program 4 (id=278): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_extract_tcp_res(0x0, 0xe3, 0x4) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 4.895842604s ago: executing program 0 (id=289): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x4) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 4.805084189s ago: executing program 3 (id=290): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x50, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 4.758941438s ago: executing program 2 (id=291): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) getpid() sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0x0, 0xffffffffffffffff, 0x0) getpid() r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x3, 0x3, 0x2, 0x7fff, 0x5}}, {0x2}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x5e, 0x2, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x68}}, 0x4000010) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x84, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x800}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3}]}, 0x84}}, 0x40) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/201, 0xfffffe3c, 0x0, 0x1, 0x2}}, 0x48) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, &(0x7f0000000080)) 4.584172036s ago: executing program 1 (id=292): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) creat(&(0x7f0000000340)='./file1\x00', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x9, 0x800) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES16=r0]) 4.195726308s ago: executing program 1 (id=293): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x14, 0x37, 0x0, 0x1, [@typed={0xd, 0x3, 0x0, 0x0, @str='ctr(sm4)\x00'}]}]}, 0x28}}, 0xc000) 4.155205281s ago: executing program 2 (id=294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x40000000, 0x0) 3.998942671s ago: executing program 1 (id=295): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) listen(r1, 0x0) r2 = accept(r1, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local, {[@end, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r3, 0x8b20, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffff17, 0xffffffffffffff85, 0x0, 0x0}, 0x40) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, 0x0) 3.989038894s ago: executing program 3 (id=296): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x0) 3.753810298s ago: executing program 4 (id=297): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000013006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.700797191s ago: executing program 0 (id=298): socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x8) 3.423469979s ago: executing program 4 (id=299): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040840) r2 = socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) getsockopt$inet_int(r2, 0x10d, 0x93, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, r1, 0x64fce33ba3dcdc5d, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008001}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x2100, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061119400000000000620000000000000950000d700000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.231133122s ago: executing program 1 (id=300): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00"/20, @ANYRES32=0x1], 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 3.193834986s ago: executing program 4 (id=301): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/207, 0xcf, 0x0, 0x0}, &(0x7f00000001c0)=0x40) 3.153616834s ago: executing program 2 (id=302): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 3.027111956s ago: executing program 1 (id=303): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x90) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000000a14018e2bbd7000fbdbdf250800150000000000080001"], 0x20}}, 0x20040000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 3.024052163s ago: executing program 4 (id=304): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) getpid() sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setresgid(0x0, 0xffffffffffffffff, 0x0) getpid() r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xa, 0x8, 0x3, 0x3, 0x2, 0x7fff, 0x5}}, {0x2}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x5e, 0x2, 0x6}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x8}]}}]}, 0x68}}, 0x4000010) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x84, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x3}, @ETHTOOL_A_COALESCE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x800}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x7}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x3}]}, 0x84}}, 0x40) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000780)=""/201, 0xfffffe3c, 0x0, 0x1, 0x2}}, 0x48) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, 0x0, &(0x7f0000000080)) 2.853805563s ago: executing program 3 (id=305): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0xc000) 1.978701842s ago: executing program 0 (id=306): socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000200)="a6bea8a120e5f8320c30ce5086dda5e986f34c1008000000000000000004083a4b7fc08a086fc691608752ab740949181c32d2565deb9e", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @local}, 0x14) 1.858663142s ago: executing program 1 (id=307): ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_extract_tcp_res(0x0, 0xe3, 0x4) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) 1.858099346s ago: executing program 2 (id=308): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x4) accept4$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r5, r6, 0x0, 0x0, 0xdead, 0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 1.666873919s ago: executing program 3 (id=309): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r2], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) 1.53048312s ago: executing program 4 (id=310): write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x22, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 1.515133768s ago: executing program 0 (id=311): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1800000014006b05c84e21000ab16d6e230675f80200000044", 0x19}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.139085465s ago: executing program 0 (id=312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r2, 0x50, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r4, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.005524569s ago: executing program 3 (id=313): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3, 0x7f}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x4}, 0x8) sendto$inet(r0, &(0x7f0000000140)="5ab5", 0x34000, 0x10, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 863.74914ms ago: executing program 2 (id=314): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="03", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x398, @empty}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/207, 0xcf, 0x0, 0x0}, &(0x7f00000001c0)=0x40) 47.047712ms ago: executing program 3 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r1) 46.739239ms ago: executing program 2 (id=316): socket(0x200000000000011, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) alarm(0x8) 0s ago: executing program 0 (id=317): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x23, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x10) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2400000, 0x0, 0x0, 0x10, "00f8fffffffffffffff7ffffff00"}) r6 = syz_open_pts(r0, 0x121500) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000280)=0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.47' (ED25519) to the list of known hosts. [ 81.532542][ T5817] cgroup: Unknown subsys name 'net' [ 81.642217][ T5817] cgroup: Unknown subsys name 'cpuset' [ 81.651579][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.296459][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.992813][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.003227][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.012404][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.020247][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.029990][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.037455][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.046573][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.055105][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.063378][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.071548][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.109530][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.131019][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.138694][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.145234][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.147795][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.154727][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.161159][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.170139][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.176769][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.181220][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.188803][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.196521][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.202080][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.221234][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.247543][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.886383][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 86.976585][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.160139][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.206019][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.393653][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.418591][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.425749][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.433556][ T5827] bridge_slave_0: entered allmulticast mode [ 87.441092][ T5827] bridge_slave_0: entered promiscuous mode [ 87.451218][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.458454][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.465649][ T5827] bridge_slave_1: entered allmulticast mode [ 87.474568][ T5827] bridge_slave_1: entered promiscuous mode [ 87.614654][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.621979][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.629759][ T5839] bridge_slave_0: entered allmulticast mode [ 87.636976][ T5839] bridge_slave_0: entered promiscuous mode [ 87.659950][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.667111][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.674447][ T5828] bridge_slave_0: entered allmulticast mode [ 87.681773][ T5828] bridge_slave_0: entered promiscuous mode [ 87.690552][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.697791][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.705015][ T5828] bridge_slave_1: entered allmulticast mode [ 87.712854][ T5828] bridge_slave_1: entered promiscuous mode [ 87.720072][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.727218][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.734650][ T5833] bridge_slave_0: entered allmulticast mode [ 87.742073][ T5833] bridge_slave_0: entered promiscuous mode [ 87.750231][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.757379][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.764800][ T5833] bridge_slave_1: entered allmulticast mode [ 87.772678][ T5833] bridge_slave_1: entered promiscuous mode [ 87.782421][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.796019][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.805821][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.813219][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.821160][ T5839] bridge_slave_1: entered allmulticast mode [ 87.828928][ T5839] bridge_slave_1: entered promiscuous mode [ 87.960103][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.981943][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.994489][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.007374][ T5827] team0: Port device team_slave_0 added [ 88.017007][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.042315][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.069750][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.081794][ T5827] team0: Port device team_slave_1 added [ 88.191390][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.199130][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.225622][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.243597][ T5839] team0: Port device team_slave_0 added [ 88.250094][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.257302][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.265127][ T5841] bridge_slave_0: entered allmulticast mode [ 88.273280][ T5841] bridge_slave_0: entered promiscuous mode [ 88.279953][ T5838] Bluetooth: hci2: command tx timeout [ 88.285408][ T5831] Bluetooth: hci0: command tx timeout [ 88.288713][ T5843] Bluetooth: hci1: command tx timeout [ 88.291285][ T5847] Bluetooth: hci3: command tx timeout [ 88.296528][ T5838] Bluetooth: hci4: command tx timeout [ 88.305228][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.314688][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.321964][ T5841] bridge_slave_1: entered allmulticast mode [ 88.329857][ T5841] bridge_slave_1: entered promiscuous mode [ 88.339680][ T5828] team0: Port device team_slave_0 added [ 88.359860][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.366853][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.393823][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.407478][ T5839] team0: Port device team_slave_1 added [ 88.445505][ T5828] team0: Port device team_slave_1 added [ 88.454573][ T5833] team0: Port device team_slave_0 added [ 88.511365][ T5833] team0: Port device team_slave_1 added [ 88.522386][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.530010][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.556230][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.574019][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.625348][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.632732][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.659566][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.673458][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.683781][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.691132][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.717447][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.744018][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.751284][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.778437][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.809745][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.816726][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.843197][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.869320][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.876319][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.903547][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.940411][ T5841] team0: Port device team_slave_0 added [ 88.959944][ T5827] hsr_slave_0: entered promiscuous mode [ 88.966766][ T5827] hsr_slave_1: entered promiscuous mode [ 89.032780][ T5841] team0: Port device team_slave_1 added [ 89.149892][ T5839] hsr_slave_0: entered promiscuous mode [ 89.156351][ T5839] hsr_slave_1: entered promiscuous mode [ 89.165349][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.173510][ T5839] Cannot create hsr debugfs directory [ 89.204017][ T5828] hsr_slave_0: entered promiscuous mode [ 89.210993][ T5828] hsr_slave_1: entered promiscuous mode [ 89.217188][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.224854][ T5828] Cannot create hsr debugfs directory [ 89.235854][ T5833] hsr_slave_0: entered promiscuous mode [ 89.247262][ T5833] hsr_slave_1: entered promiscuous mode [ 89.254622][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.262552][ T5833] Cannot create hsr debugfs directory [ 89.293298][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.300561][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.327573][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.340451][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.347505][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.373811][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.575700][ T5841] hsr_slave_0: entered promiscuous mode [ 89.582945][ T5841] hsr_slave_1: entered promiscuous mode [ 89.589819][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.597406][ T5841] Cannot create hsr debugfs directory [ 89.991938][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.013357][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.046133][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.081305][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.155892][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.167389][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.184095][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.202327][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.302172][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.320134][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.345322][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.355647][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.363096][ T5838] Bluetooth: hci3: command tx timeout [ 90.367845][ T5847] Bluetooth: hci0: command tx timeout [ 90.368548][ T5843] Bluetooth: hci4: command tx timeout [ 90.373882][ T5847] Bluetooth: hci1: command tx timeout [ 90.379316][ T5838] Bluetooth: hci2: command tx timeout [ 90.470447][ T5839] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.482316][ T5839] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.495897][ T5839] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.526636][ T5839] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.654325][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.666427][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.679531][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.695835][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.721569][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.763156][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.774570][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.836150][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.846986][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.854427][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.877327][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.906316][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.913480][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.923858][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.931197][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.941345][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.948577][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.976532][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.018018][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.025183][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.053510][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.060671][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.185165][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.270897][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.315007][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.378620][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.385900][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.454896][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.462288][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.503288][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.593379][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.647039][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.692637][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.699829][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.724539][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.750297][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.757419][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.923296][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.962719][ T1207] cfg80211: failed to load regulatory.db [ 91.976354][ T5827] veth0_vlan: entered promiscuous mode [ 92.010428][ T5833] veth0_vlan: entered promiscuous mode [ 92.053987][ T5833] veth1_vlan: entered promiscuous mode [ 92.089876][ T5827] veth1_vlan: entered promiscuous mode [ 92.181124][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.207707][ T5827] veth0_macvtap: entered promiscuous mode [ 92.244741][ T5828] veth0_vlan: entered promiscuous mode [ 92.273890][ T5827] veth1_macvtap: entered promiscuous mode [ 92.311116][ T5828] veth1_vlan: entered promiscuous mode [ 92.327362][ T5833] veth0_macvtap: entered promiscuous mode [ 92.340429][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.360752][ T5833] veth1_macvtap: entered promiscuous mode [ 92.386864][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.402858][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.412249][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.421391][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.430433][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.439810][ T5847] Bluetooth: hci1: command tx timeout [ 92.448149][ T5831] Bluetooth: hci2: command tx timeout [ 92.449167][ T5843] Bluetooth: hci3: command tx timeout [ 92.453627][ T5831] Bluetooth: hci0: command tx timeout [ 92.464571][ T5847] Bluetooth: hci4: command tx timeout [ 92.507556][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.541684][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.562323][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.574784][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.644628][ T5839] veth0_vlan: entered promiscuous mode [ 92.655615][ T5828] veth0_macvtap: entered promiscuous mode [ 92.665989][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.683938][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.700872][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.732460][ T5828] veth1_macvtap: entered promiscuous mode [ 92.750136][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.765734][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.775177][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.789205][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.861855][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.874045][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.881884][ T5839] veth1_vlan: entered promiscuous mode [ 92.912416][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.924040][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.938779][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.950590][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.962302][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.026344][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.028230][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.038057][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.046480][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.064043][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.074941][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.086718][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.100262][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.109262][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.118297][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127031][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.149563][ T5841] veth0_vlan: entered promiscuous mode [ 93.209542][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.224636][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.226095][ T5841] veth1_vlan: entered promiscuous mode [ 93.331684][ T5839] veth0_macvtap: entered promiscuous mode [ 93.336596][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.363201][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.371307][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.415194][ T5839] veth1_macvtap: entered promiscuous mode [ 93.513882][ T5841] veth0_macvtap: entered promiscuous mode [ 93.541587][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.564679][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.576647][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.578382][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.595141][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.606343][ T5922] loop1: detected capacity change from 0 to 4096 [ 93.606587][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.629146][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.645468][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.652058][ T5922] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.658931][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.688730][ T5841] veth1_macvtap: entered promiscuous mode [ 93.710777][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.723113][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.733529][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.746016][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.754760][ T5922] fs-verity (loop1, inode 16): Unknown hash algorithm number: 32 [ 93.756511][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.774748][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.786194][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.890018][ T5839] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.910091][ T5839] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.928671][ T5839] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.993565][ T5839] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.025016][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.096572][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.108382][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.125331][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.137441][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.148547][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.162373][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.172554][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.183651][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.193564][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.205924][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.218047][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.344297][ T5931] evm: overlay not supported [ 94.538160][ T5847] Bluetooth: hci4: command tx timeout [ 94.544252][ T5847] Bluetooth: hci0: command tx timeout [ 94.550536][ T5847] Bluetooth: hci1: command tx timeout [ 94.559511][ T5847] Bluetooth: hci3: command tx timeout [ 94.573304][ T5847] Bluetooth: hci2: command tx timeout [ 95.117127][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.127977][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.138836][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.149787][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.160841][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.171732][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.182669][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.193500][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.206894][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.283146][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.307580][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.325353][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.335102][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.635854][ T5944] loop2: detected capacity change from 0 to 512 [ 95.654131][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.678437][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.696842][ T5944] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 95.765955][ T5944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.787337][ T5944] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.811147][ T5944] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.10: corrupted inode contents [ 95.840129][ T5944] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.10: mark_inode_dirty error [ 95.862298][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.883371][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.896647][ T5944] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.10: corrupted inode contents [ 95.952092][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.985103][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.013351][ T5944] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.10: corrupted inode contents [ 96.048284][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.086908][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.093699][ T5944] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.10: mark_inode_dirty error [ 96.129266][ T5944] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.10: corrupted inode contents [ 96.164844][ T5944] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.10: mark_inode_dirty error [ 96.228140][ T5944] EXT4-fs error (device loop2): ext4_do_update_inode:5182: inode #2: comm syz.2.10: corrupted inode contents [ 96.290455][ T5944] EXT4-fs error (device loop2): ext4_dirty_inode:6074: inode #2: comm syz.2.10: mark_inode_dirty error [ 96.449060][ T5940] loop0: detected capacity change from 0 to 40427 [ 96.491125][ T5940] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 96.519437][ T5940] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.571407][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.709788][ T5957] loop4: detected capacity change from 0 to 512 [ 96.750716][ T5957] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 96.810363][ T5957] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.862809][ T5957] EXT4-fs (loop4): 1 truncate cleaned up [ 96.901426][ T5957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.110175][ T30] audit: type=1800 audit(1744772125.030:2): pid=5963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file0" dev="overlay" ino=27 res=0 errno=0 [ 97.768688][ T5940] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 97.808516][ T5940] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 98.644496][ T5972] loop3: detected capacity change from 0 to 4096 [ 98.772528][ T5972] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512). [ 98.830172][ T5981] loop2: detected capacity change from 0 to 128 [ 98.912408][ T5981] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 98.952163][ T5981] System zones: 1-3, 19-19, 35-36 [ 98.970917][ T5981] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.006177][ T5981] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 99.503080][ T5975] loop1: detected capacity change from 0 to 16 [ 99.815802][ T5975] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 26000) [ 99.870475][ T5975] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.14'. [ 99.870725][ T5975] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 99.906788][ T5975] 0ªX¹¦Dö»: entered allmulticast mode [ 99.943902][ T5833] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.159431][ T5989] loop3: detected capacity change from 0 to 2048 [ 100.229050][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.458071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.912534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.925501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.014985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.118226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 101.219780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.526668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.629710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.718419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 103.084958][ T6015] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.404283][ T6017] loop1: detected capacity change from 0 to 8192 [ 103.581518][ T6021] loop0: detected capacity change from 0 to 256 [ 106.392539][ T6033] loop1: detected capacity change from 0 to 4096 [ 106.445845][ T6033] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 107.054048][ T6035] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 107.072605][ T6035] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 107.315182][ T6048] loop0: detected capacity change from 0 to 2048 [ 107.780323][ T6048] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.961984][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.031590][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.644899][ T6061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.35'. [ 109.685466][ T47] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.724747][ T6061] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.825013][ T6069] xt_bpf: check failed: parse error [ 110.047774][ T47] usb 2-1: Using ep0 maxpacket: 8 [ 110.058346][ T47] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 110.067954][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.102534][ T47] usb 2-1: config 0 descriptor?? [ 110.184139][ T6073] loop4: detected capacity change from 0 to 512 [ 110.195338][ T6073] ======================================================= [ 110.195338][ T6073] WARNING: The mand mount option has been deprecated and [ 110.195338][ T6073] and is ignored by this kernel. Remove the mand [ 110.195338][ T6073] option from the mount to silence this warning. [ 110.195338][ T6073] ======================================================= [ 110.374950][ T6073] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.37: invalid indirect mapped block 11 (level 0) [ 110.394645][ T6073] EXT4-fs (loop4): Remounting filesystem read-only [ 110.412475][ T6073] EXT4-fs (loop4): 1 truncate cleaned up [ 110.430512][ T6073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.060571][ T47] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 111.073344][ T47] asix 2-1:0.0: probe with driver asix failed with error -32 [ 111.238051][ T6079] loop0: detected capacity change from 0 to 512 [ 111.276239][ T6079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.311816][ T6079] EXT4-fs (loop0): 1 truncate cleaned up [ 111.339637][ T6079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.125781][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.171007][ T6086] netlink: 'syz.1.36': attribute type 12 has an invalid length. [ 112.435290][ T6088] loop4: detected capacity change from 0 to 4096 [ 112.522527][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.2.40'. [ 112.563564][ T6077] loop3: detected capacity change from 0 to 40427 [ 112.592045][ T6088] EXT4-fs: Ignoring removed oldalloc option [ 112.632894][ T6077] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 112.637246][ T6088] EXT4-fs (loop4): Test dummy encryption mode enabled [ 112.668065][ T6077] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 112.706725][ T6088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.012458][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.045121][ T6077] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 113.055531][ T6105] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx" [ 113.063521][ T6077] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 113.141811][ T6104] loop2: detected capacity change from 0 to 4096 [ 113.165626][ T6104] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 113.186153][ T6108] loop0: detected capacity change from 0 to 256 [ 113.254810][ T6108] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 113.345881][ T6108] exFAT-fs (loop0): start_clu is invalid cluster(0xffffffff) [ 113.374580][ T47] usb 2-1: USB disconnect, device number 2 [ 114.493613][ T6118] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.564437][ T6118] netlink: 83 bytes leftover after parsing attributes in process `syz.2.48'. [ 114.589148][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.762919][ T6126] capability: warning: `syz.1.52' uses deprecated v2 capabilities in a way that may be insecure [ 114.789753][ T6125] loop3: detected capacity change from 0 to 512 [ 115.716992][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.794296][ T6125] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.882074][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.893084][ T6139] loop4: detected capacity change from 0 to 256 [ 116.040630][ T6139] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d) [ 116.643375][ T6152] syzkaller0: entered promiscuous mode [ 116.654525][ T6152] syzkaller0: entered allmulticast mode [ 116.776994][ T6156] loop1: detected capacity change from 0 to 4096 [ 116.816216][ T6156] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 117.471810][ T6159] tty tty28: ldisc open failed (-12), clearing slot 27 [ 117.700547][ T6168] netlink: 83 bytes leftover after parsing attributes in process `syz.4.63'. [ 119.108687][ T6180] 9pnet_fd: Insufficient options for proto=fd [ 120.077580][ T6184] loop0: detected capacity change from 0 to 256 [ 120.085599][ T6184] exfat: Unknown parameter 'iochar' [ 120.283014][ T5829] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 120.437859][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 120.453270][ T5829] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 120.475420][ T5829] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.496760][ T5829] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.526292][ T5829] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.542162][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.551235][ T5829] usb 2-1: Product: syz [ 120.555497][ T5829] usb 2-1: Manufacturer: syz [ 120.560685][ T5829] usb 2-1: SerialNumber: syz [ 121.356941][ T5829] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 121.628463][ T5829] usb 2-1: USB disconnect, device number 3 [ 122.692548][ T5887] udevd[5887]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.985145][ T6204] loop3: detected capacity change from 0 to 1024 [ 123.050158][ T6204] EXT4-fs: Mount option(s) incompatible with ext2 [ 129.977441][ T6227] netlink: 83 bytes leftover after parsing attributes in process `syz.2.77'. [ 130.457987][ T1207] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 130.609327][ T1207] usb 2-1: Using ep0 maxpacket: 32 [ 130.634994][ T1207] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.674766][ T1207] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.726499][ T1207] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 130.777574][ T1207] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 130.810719][ T1207] usb 2-1: Product: syz [ 130.854278][ T1207] usb 2-1: Manufacturer: syz [ 131.408583][ T1207] hub 2-1:4.0: USB hub found [ 131.663019][ T1207] hub 2-1:4.0: 2 ports detected [ 131.846482][ T6245] loop2: detected capacity change from 0 to 128 [ 131.869806][ T1207] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 131.880263][ T1207] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 131.943100][ T1207] usb 2-1: USB disconnect, device number 4 [ 133.301025][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.309340][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.712656][ T6261] loop0: detected capacity change from 0 to 256 [ 134.764242][ T6261] FAT-fs (loop0): Directory bread(block 64) failed [ 134.777856][ T6261] FAT-fs (loop0): Directory bread(block 65) failed [ 134.787066][ T6261] FAT-fs (loop0): Directory bread(block 66) failed [ 134.794461][ T6261] FAT-fs (loop0): Directory bread(block 67) failed [ 134.811991][ T6261] FAT-fs (loop0): Directory bread(block 68) failed [ 134.820036][ T6261] FAT-fs (loop0): Directory bread(block 69) failed [ 134.827051][ T6261] FAT-fs (loop0): Directory bread(block 70) failed [ 134.835138][ T6261] FAT-fs (loop0): Directory bread(block 71) failed [ 134.842794][ T6261] FAT-fs (loop0): Directory bread(block 72) failed [ 134.850175][ T6261] FAT-fs (loop0): Directory bread(block 73) failed [ 134.966332][ T6261] syz.0.88: attempt to access beyond end of device [ 134.966332][ T6261] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 134.985879][ T6261] syz.0.88: attempt to access beyond end of device [ 134.985879][ T6261] loop0: rw=2049, sector=1320, nr_sectors = 32 limit=256 [ 135.001544][ T6261] syz.0.88: attempt to access beyond end of device [ 135.001544][ T6261] loop0: rw=2049, sector=1384, nr_sectors = 32 limit=256 [ 135.026927][ T6261] syz.0.88: attempt to access beyond end of device [ 135.026927][ T6261] loop0: rw=2049, sector=1448, nr_sectors = 32 limit=256 [ 135.044159][ T6261] syz.0.88: attempt to access beyond end of device [ 135.044159][ T6261] loop0: rw=2049, sector=1512, nr_sectors = 32 limit=256 [ 135.060049][ T6261] syz.0.88: attempt to access beyond end of device [ 135.060049][ T6261] loop0: rw=2049, sector=1576, nr_sectors = 32 limit=256 [ 135.074555][ T6261] syz.0.88: attempt to access beyond end of device [ 135.074555][ T6261] loop0: rw=2049, sector=1640, nr_sectors = 32 limit=256 [ 135.090390][ T6261] syz.0.88: attempt to access beyond end of device [ 135.090390][ T6261] loop0: rw=2049, sector=1704, nr_sectors = 32 limit=256 [ 135.105009][ T6261] syz.0.88: attempt to access beyond end of device [ 135.105009][ T6261] loop0: rw=2049, sector=1768, nr_sectors = 32 limit=256 [ 135.123175][ T6261] syz.0.88: attempt to access beyond end of device [ 135.123175][ T6261] loop0: rw=2049, sector=1864, nr_sectors = 32 limit=256 [ 135.493124][ T6267] netlink: 83 bytes leftover after parsing attributes in process `syz.3.90'. [ 135.636724][ T6265] loop4: detected capacity change from 0 to 4096 [ 135.786819][ T6265] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.508124][ T6277] loop3: detected capacity change from 0 to 2048 [ 136.740967][ T6277] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.155581][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.230244][ T5841] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.152310][ T6310] loop4: detected capacity change from 0 to 256 [ 143.010611][ T6318] netlink: 83 bytes leftover after parsing attributes in process `syz.3.103'. [ 144.001686][ T6328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.106'. [ 144.920610][ T6337] loop4: detected capacity change from 0 to 128 [ 145.054735][ T6344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 145.086544][ T6345] bio_check_eod: 3 callbacks suppressed [ 145.086564][ T6345] syz.4.109: attempt to access beyond end of device [ 145.086564][ T6345] loop4: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 145.117037][ T6345] syz.4.109: attempt to access beyond end of device [ 145.117037][ T6345] loop4: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 145.196612][ T6345] syz.4.109: attempt to access beyond end of device [ 145.196612][ T6345] loop4: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 145.243464][ T6345] syz.4.109: attempt to access beyond end of device [ 145.243464][ T6345] loop4: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 145.292855][ T6345] syz.4.109: attempt to access beyond end of device [ 145.292855][ T6345] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 145.378232][ T6345] syz.4.109: attempt to access beyond end of device [ 145.378232][ T6345] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 145.432939][ T6345] syz.4.109: attempt to access beyond end of device [ 145.432939][ T6345] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 145.457206][ T6345] syz.4.109: attempt to access beyond end of device [ 145.457206][ T6345] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 145.480647][ T6343] kvm: MWAIT instruction emulated as NOP! [ 145.497895][ T6345] syz.4.109: attempt to access beyond end of device [ 145.497895][ T6345] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 145.512857][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.114'. [ 145.522005][ T6345] syz.4.109: attempt to access beyond end of device [ 145.522005][ T6345] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 149.022603][ T6390] netlink: 'syz.4.123': attribute type 4 has an invalid length. [ 150.008204][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.021198][ T6381] loop0: detected capacity change from 0 to 4096 [ 150.167450][ T6390] syz.4.123 (6390) used greatest stack depth: 18592 bytes left [ 150.836394][ T6397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 151.554183][ T6392] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.835826][ T6402] loop3: detected capacity change from 0 to 128 [ 153.086237][ T6408] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 153.095465][ T6409] bio_check_eod: 14 callbacks suppressed [ 153.095488][ T6409] syz.1.129: attempt to access beyond end of device [ 153.095488][ T6409] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 153.123968][ T6409] MINIX-fs: unable to read superblock [ 153.296857][ T6416] bridge0: port 3(geneve0) entered blocking state [ 153.337877][ T6416] bridge0: port 3(geneve0) entered disabled state [ 153.346687][ T6416] geneve0: entered allmulticast mode [ 153.790547][ T6416] geneve0: entered promiscuous mode [ 153.840433][ T6416] bridge0: port 3(geneve0) entered blocking state [ 153.847303][ T6416] bridge0: port 3(geneve0) entered forwarding state [ 155.914213][ T6439] hub 9-0:1.0: USB hub found [ 155.921871][ T6439] hub 9-0:1.0: 1 port detected [ 156.692121][ T6437] loop1: detected capacity change from 0 to 4096 [ 156.737473][ T6437] EXT4-fs: Ignoring removed bh option [ 157.472038][ T6437] EXT4-fs: Ignoring removed nobh option [ 157.502774][ T6441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.138'. [ 157.509548][ T6437] ext4: Unknown parameter 'fscontext' [ 158.345809][ T6447] loop0: detected capacity change from 0 to 4096 [ 158.429887][ T6447] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512). [ 159.255891][ T6455] loop0: detected capacity change from 0 to 2048 [ 159.445611][ T6455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.468221][ T6455] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.541692][ T6461] syz.2.143: attempt to access beyond end of device [ 159.541692][ T6461] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 159.554473][ T6461] MINIX-fs: unable to read superblock [ 159.682695][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.112769][ T6481] tipc: Started in network mode [ 162.135724][ T6481] tipc: Node identity 4, cluster identity 4711 [ 162.151021][ T6481] tipc: Node number set to 4 [ 162.409055][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.150'. [ 163.969136][ T6510] Zero length message leads to an empty skb [ 165.169060][ T6519] fuse: Unknown parameter 'use00000000000000000000' [ 165.774126][ T6512] syz.2.157: attempt to access beyond end of device [ 165.774126][ T6512] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 165.787033][ T6512] MINIX-fs: unable to read superblock [ 165.959998][ T6520] loop3: detected capacity change from 0 to 512 [ 166.322748][ T6531] netlink: 24 bytes leftover after parsing attributes in process `syz.1.163'. [ 166.340844][ T6520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.560821][ T6520] EXT4-fs (loop3): orphan cleanup on readonly fs [ 166.823265][ T6520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.159: bg 0: block 248: padding at end of block bitmap is not set [ 166.983573][ T6520] Quota error (device loop3): write_blk: dquota write failed [ 167.030789][ T6520] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 167.115014][ T6520] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.159: Failed to acquire dquot type 1 [ 167.197438][ T6520] EXT4-fs (loop3): 1 truncate cleaned up [ 167.924850][ T6520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.209314][ T5839] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.485512][ T6540] loop1: detected capacity change from 0 to 40427 [ 168.500132][ T6540] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 168.506550][ T6540] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 169.413873][ T6540] F2FS-fs (loop1): invalid crc value [ 170.364646][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 170.389964][ T6566] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 170.414607][ T6566] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 171.601699][ T6585] syz.4.176: attempt to access beyond end of device [ 171.601699][ T6585] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 171.614482][ T6585] MINIX-fs: unable to read superblock [ 173.239337][ T6591] netlink: 24 bytes leftover after parsing attributes in process `syz.3.178'. [ 174.771623][ T6609] loop1: detected capacity change from 0 to 256 [ 174.897114][ T6609] FAT-fs (loop1): Directory bread(block 64) failed [ 174.912264][ T6609] FAT-fs (loop1): Directory bread(block 65) failed [ 174.932507][ T6609] FAT-fs (loop1): Directory bread(block 66) failed [ 174.967503][ T6609] FAT-fs (loop1): Directory bread(block 67) failed [ 175.015866][ T6609] FAT-fs (loop1): Directory bread(block 68) failed [ 175.068039][ T6609] FAT-fs (loop1): Directory bread(block 69) failed [ 175.123476][ T6609] FAT-fs (loop1): Directory bread(block 70) failed [ 175.172441][ T6609] FAT-fs (loop1): Directory bread(block 71) failed [ 175.226142][ T6609] FAT-fs (loop1): Directory bread(block 72) failed [ 175.276301][ T6609] FAT-fs (loop1): Directory bread(block 73) failed [ 176.356393][ T6617] loop1: detected capacity change from 0 to 2048 [ 176.377262][ T6617] EXT4-fs: Ignoring removed bh option [ 176.456520][ T6617] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.871240][ T13] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.904437][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 178.069682][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.191'. [ 178.082943][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.082943][ T13] [ 178.113150][ T13] EXT4-fs (loop1): Total free blocks count 0 [ 178.142997][ T13] EXT4-fs (loop1): Free/Dirty block details [ 178.173287][ T13] EXT4-fs (loop1): free_blocks=2415919104 [ 178.201674][ T13] EXT4-fs (loop1): dirty_blocks=1600 [ 178.249584][ T13] EXT4-fs (loop1): Block reservation details [ 178.283244][ T13] EXT4-fs (loop1): i_reserved_data_blocks=100 [ 178.312207][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 1572 with error 28 [ 178.329072][ T6640] loop3: detected capacity change from 0 to 128 [ 179.256802][ T6647] syz.4.189: attempt to access beyond end of device [ 179.256802][ T6647] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 179.367448][ T6647] MINIX-fs: unable to read superblock [ 181.434443][ T6662] overlay: Unknown parameter 'mask' [ 182.675115][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.202'. [ 183.659988][ T6693] loop1: detected capacity change from 0 to 1024 [ 184.706833][ T6701] veth1_to_bond: entered allmulticast mode [ 184.865944][ T6692] veth1_to_bond: left allmulticast mode [ 185.171734][ T6696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 186.412540][ T6712] loop2: detected capacity change from 0 to 512 [ 186.661433][ T6712] EXT4-fs (loop2): 1 orphan inode deleted [ 186.693639][ T6028] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 186.729537][ T6712] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.832104][ T6712] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.847864][ T6028] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:13: Failed to release dquot type 1 [ 186.963341][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.217'. [ 187.813068][ T5833] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.833579][ T53] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 187.847812][ T53] EXT4-fs error (device loop2): ext4_release_dquot:6971: comm kworker/u8:3: Failed to release dquot type 1 [ 188.196443][ T6740] loop3: detected capacity change from 0 to 256 [ 188.211733][ T6740] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0x1119abd0 [ 188.232311][ T6740] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x1119abd0 [ 188.241105][ T6740] exFAT-fs (loop3): Invalid exboot-signature(sector = 6): 0x00000000 [ 188.249626][ T6740] exFAT-fs (loop3): Invalid exboot-signature(sector = 7): 0x00000000 [ 188.258373][ T6740] exFAT-fs (loop3): Invalid exboot-signature(sector = 8): 0x00000000 [ 188.270981][ T6740] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e) [ 188.287793][ T6740] exFAT-fs (loop3): invalid boot region [ 188.293465][ T6740] exFAT-fs (loop3): failed to recognize exfat type [ 188.549916][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 188.892075][ T24] usb 4-1: config index 0 descriptor too short (expected 10860, got 146) [ 188.971567][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.534557][ T24] usb 4-1: config 0 has no interfaces? [ 189.567823][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 189.592686][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 189.628520][ T24] usb 4-1: SerialNumber: syz [ 189.818737][ T24] usb 4-1: config 0 descriptor?? [ 191.325139][ T6762] loop2: detected capacity change from 0 to 256 [ 191.342111][ T6762] exfat: Deprecated parameter 'utf8' [ 191.347991][ T6762] exfat: Deprecated parameter 'namecase' [ 191.353870][ T6762] exfat: Deprecated parameter 'utf8' [ 191.802421][ T5886] usb 4-1: USB disconnect, device number 2 [ 192.812550][ T6762] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 194.398424][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.409546][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.575256][ T6776] syzkaller0: entered promiscuous mode [ 194.580849][ T6776] syzkaller0: entered allmulticast mode [ 195.886447][ T6780] loop0: detected capacity change from 0 to 4096 [ 196.961830][ T6780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.080863][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.034981][ T6836] loop1: detected capacity change from 0 to 512 [ 202.204717][ T6836] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.220972][ T6836] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.259561][ T6836] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.247: corrupted inode contents [ 202.284113][ T6836] EXT4-fs error (device loop1): ext4_dirty_inode:6074: inode #2: comm syz.1.247: mark_inode_dirty error [ 202.362049][ T6836] EXT4-fs error (device loop1): ext4_do_update_inode:5182: inode #2: comm syz.1.247: corrupted inode contents [ 202.379941][ T6836] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.247: mark_inode_dirty error [ 202.512091][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.991772][ T6822] tipc: Started in network mode [ 204.007694][ T6822] tipc: Node identity , cluster identity 4711 [ 204.014972][ T6822] tipc: Failed to obtain node identity [ 204.027276][ T6822] tipc: Enabling of bearer rejected, failed to enable media [ 204.123762][ T6856] gtp0: entered promiscuous mode [ 204.945970][ T6877] loop1: detected capacity change from 0 to 128 [ 206.033024][ T6888] gtp0: entered promiscuous mode [ 207.428968][ T6904] syz.1.264 uses obsolete (PF_INET,SOCK_PACKET) [ 207.658860][ T6913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.266'. [ 208.014180][ T6920] loop4: detected capacity change from 0 to 512 [ 208.027807][ T6920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 208.165047][ T6920] EXT4-fs error (device loop4): xattr_find_entry:333: inode #15: comm syz.4.258: corrupted xattr entries [ 208.198654][ T6920] EXT4-fs (loop4): Remounting filesystem read-only [ 208.205237][ T6920] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 208.219090][ T6920] EXT4-fs (loop4): 1 truncate cleaned up [ 208.243445][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.829997][ T6920] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.882249][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 211.888657][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 211.896246][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 211.905804][ T5848] Bluetooth: hci4: command 0x0406 tx timeout [ 211.911934][ T5846] Bluetooth: hci2: command 0x0406 tx timeout [ 212.972560][ T6997] netlink: 'syz.3.290': attribute type 10 has an invalid length. [ 213.131407][ T7000] program syz.1.292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.166169][ T6999] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.207656][ T6997] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 213.234276][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 213.243341][ T6996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.291'. [ 213.968620][ T7008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.006971][ T7008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.051748][ T7008] bond0 (unregistering): Released all slaves [ 214.263544][ T7022] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.300'. [ 215.655628][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 215.664516][ T7031] netlink: 16 bytes leftover after parsing attributes in process `syz.4.304'. [ 215.693907][ T7041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 216.005773][ T7045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.229252][ T7050] warning: `syz.0.311' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 217.512369][ T7049] ------------[ cut here ]------------ [ 217.518287][ T7049] WARNING: CPU: 1 PID: 7049 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 217.529239][ T7049] Modules linked in: [ 217.533467][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz.4.310 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 217.544961][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.556053][ T7049] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 217.563264][ T7049] Code: 00 00 e8 b6 b3 2c f7 48 c1 e5 04 48 8d b5 60 c0 c8 9a ba 10 00 00 00 4c 89 ff e8 2e ee 96 f7 e9 ce 00 00 00 e8 94 b3 2c f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 bf b7 2c f7 85 ed [ 217.583871][ T7049] RSP: 0018:ffffc9000ba57c48 EFLAGS: 00010293 [ 217.590635][ T7049] RAX: ffffffff8a96c80c RBX: 0000000000000001 RCX: ffff88802788bc00 [ 217.599175][ T7049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 217.607738][ T7049] RBP: 0000000000000000 R08: ffffffff8a96c4ee R09: 1ffffffff20c0836 [ 217.615768][ T7049] R10: dffffc0000000000 R11: fffffbfff20c0837 R12: ffffffff86e0c410 [ 217.624302][ T7049] R13: dffffc0000000000 R14: ffff8880584a7500 R15: 0000000000000000 [ 217.632960][ T7049] FS: 000055558d5eb500(0000) GS:ffff888125080000(0000) knlGS:0000000000000000 [ 217.643770][ T7049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.651992][ T7049] CR2: 00007fdb86ce56c0 CR3: 000000002a31c000 CR4: 00000000003526f0 [ 217.660699][ T7049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.669757][ T7049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.677989][ T7049] Call Trace: [ 217.681779][ T7049] [ 217.684767][ T7049] udpv6_destroy_sock+0x212/0x270 [ 217.690001][ T7049] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 217.698230][ T7049] sk_common_release+0x71/0x2e0 [ 217.705405][ T7049] inet_release+0x17d/0x200 [ 217.710862][ T7049] sock_close+0xbc/0x240 [ 217.715167][ T7049] ? __pfx_sock_close+0x10/0x10 [ 217.720399][ T7049] __fput+0x3e9/0x9f0 [ 217.724440][ T7049] task_work_run+0x251/0x310 [ 217.729165][ T7049] ? _raw_spin_unlock+0x28/0x50 [ 217.734259][ T7049] ? __pfx_task_work_run+0x10/0x10 [ 217.739489][ T7049] ? syscall_exit_to_user_mode+0xa3/0x340 [ 217.745278][ T7049] syscall_exit_to_user_mode+0x13f/0x340 [ 217.751865][ T7049] do_syscall_64+0x100/0x230 [ 217.756515][ T7049] ? clear_bhb_loop+0x45/0xa0 [ 217.761964][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.768027][ T7049] RIP: 0033:0x7f151598e169 [ 217.772496][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.792209][ T7049] RSP: 002b:00007fff92abbae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 217.800839][ T7049] RAX: 0000000000000000 RBX: 0000000000034bd0 RCX: 00007f151598e169 [ 217.808952][ T7049] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 217.817056][ T7049] RBP: 00007f1515bb7ba0 R08: 0000000000000001 R09: 0000000c92abbddf [ 217.825137][ T7049] R10: 00007f1515800000 R11: 0000000000000246 R12: 00007f1515bb5fac [ 217.833204][ T7049] R13: 00007f1515bb5fa0 R14: ffffffffffffffff R15: 00007fff92abbc00 [ 217.841371][ T7049] [ 217.844432][ T7049] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.851753][ T7049] CPU: 1 UID: 0 PID: 7049 Comm: syz.4.310 Not tainted 6.15.0-rc1-next-20250411-syzkaller #0 PREEMPT(full) [ 217.863140][ T7049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.873207][ T7049] Call Trace: [ 217.876505][ T7049] [ 217.879456][ T7049] dump_stack_lvl+0x241/0x360 [ 217.884189][ T7049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.889526][ T7049] ? __pfx__printk+0x10/0x10 [ 217.894137][ T7049] ? vscnprintf+0x5d/0x90 [ 217.898506][ T7049] panic+0x349/0x880 [ 217.902432][ T7049] ? __warn+0x174/0x4d0 [ 217.906611][ T7049] ? __pfx_panic+0x10/0x10 [ 217.911065][ T7049] __warn+0x344/0x4d0 [ 217.915073][ T7049] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 217.920902][ T7049] report_bug+0x2b3/0x500 [ 217.925242][ T7049] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 217.931064][ T7049] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 217.936885][ T7049] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 217.942709][ T7049] handle_bug+0x89/0x170 [ 217.946966][ T7049] exc_invalid_op+0x1a/0x50 [ 217.951515][ T7049] asm_exc_invalid_op+0x1a/0x20 [ 217.956376][ T7049] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 217.962947][ T7049] Code: 00 00 e8 b6 b3 2c f7 48 c1 e5 04 48 8d b5 60 c0 c8 9a ba 10 00 00 00 4c 89 ff e8 2e ee 96 f7 e9 ce 00 00 00 e8 94 b3 2c f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 bf b7 2c f7 85 ed [ 217.982968][ T7049] RSP: 0018:ffffc9000ba57c48 EFLAGS: 00010293 [ 217.989096][ T7049] RAX: ffffffff8a96c80c RBX: 0000000000000001 RCX: ffff88802788bc00 [ 217.997169][ T7049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 218.005286][ T7049] RBP: 0000000000000000 R08: ffffffff8a96c4ee R09: 1ffffffff20c0836 [ 218.013443][ T7049] R10: dffffc0000000000 R11: fffffbfff20c0837 R12: ffffffff86e0c410 [ 218.021874][ T7049] R13: dffffc0000000000 R14: ffff8880584a7500 R15: 0000000000000000 [ 218.029881][ T7049] ? __pfx_geneve_gro_receive+0x10/0x10 [ 218.035452][ T7049] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 218.041194][ T7049] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 218.047107][ T7049] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 218.052929][ T7049] udpv6_destroy_sock+0x212/0x270 [ 218.057974][ T7049] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 218.063530][ T7049] sk_common_release+0x71/0x2e0 [ 218.068399][ T7049] inet_release+0x17d/0x200 [ 218.072935][ T7049] sock_close+0xbc/0x240 [ 218.077208][ T7049] ? __pfx_sock_close+0x10/0x10 [ 218.082086][ T7049] __fput+0x3e9/0x9f0 [ 218.086106][ T7049] task_work_run+0x251/0x310 [ 218.090724][ T7049] ? _raw_spin_unlock+0x28/0x50 [ 218.095593][ T7049] ? __pfx_task_work_run+0x10/0x10 [ 218.100723][ T7049] ? syscall_exit_to_user_mode+0xa3/0x340 [ 218.106456][ T7049] syscall_exit_to_user_mode+0x13f/0x340 [ 218.112105][ T7049] do_syscall_64+0x100/0x230 [ 218.116705][ T7049] ? clear_bhb_loop+0x45/0xa0 [ 218.121398][ T7049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.127303][ T7049] RIP: 0033:0x7f151598e169 [ 218.131725][ T7049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.151341][ T7049] RSP: 002b:00007fff92abbae8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 218.159778][ T7049] RAX: 0000000000000000 RBX: 0000000000034bd0 RCX: 00007f151598e169 [ 218.167772][ T7049] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 218.175760][ T7049] RBP: 00007f1515bb7ba0 R08: 0000000000000001 R09: 0000000c92abbddf [ 218.183794][ T7049] R10: 00007f1515800000 R11: 0000000000000246 R12: 00007f1515bb5fac [ 218.191884][ T7049] R13: 00007f1515bb5fa0 R14: ffffffffffffffff R15: 00007fff92abbc00 [ 218.199968][ T7049] [ 218.203299][ T7049] Kernel Offset: disabled [ 218.207639][ T7049] Rebooting in 86400 seconds..