last executing test programs: 58.511828748s ago: executing program 4 (id=156): syz_emit_ethernet(0x1c, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007"], 0x2c}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000480)={{0x2, 0x4e24, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}, 'pim6reg\x00'}) 56.615931982s ago: executing program 4 (id=161): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x48) mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2, 0x110, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000100085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 52.785026983s ago: executing program 4 (id=167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800001965ba917c62e1e6902300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 52.115835079s ago: executing program 4 (id=171): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@test_dummy_encryption_v1}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 49.323974408s ago: executing program 4 (id=178): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 47.580030479s ago: executing program 4 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) 46.171356478s ago: executing program 32 (id=184): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) r4 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r6, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r4, 0x48e9, 0x0, 0x0, 0x0, 0x0) 21.943185891s ago: executing program 1 (id=222): socket$inet6(0xa, 0x3, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x7, 0x8b}, 0x0) getpid() openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b00", @ANYBLOB, @ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 20.330973167s ago: executing program 1 (id=226): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x60400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x40010) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60010100000c1100fe8000000000000000000008000000bbfe8000000000000000000000000000aa4e214e21"], 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa006}, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 16.480409764s ago: executing program 1 (id=233): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) 13.999972965s ago: executing program 1 (id=238): syz_open_dev$hiddev(0x0, 0x8, 0x40000) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 11.927640568s ago: executing program 3 (id=239): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r3}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 10.119303756s ago: executing program 3 (id=243): socket$phonet(0x23, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) mlockall(0x5) 10.029061492s ago: executing program 1 (id=245): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x2e, 0x0, 0x0, 0x0, 0x8a}, 0x40084) sendmsg$tipc(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x0) r2 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14) r4 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x0, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x2, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r5, &(0x7f0000000700)={0x800, 0x10, 0x9}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) mq_timedreceive(r5, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r5, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 8.444270738s ago: executing program 0 (id=246): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r0, r1, 0x0, 0x5, &(0x7f0000000280)='$\x8b{!\x00'}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="380100001a00010000f70000fddbdf25fc02580000f4ffffffffffffff0000000000000000000000000000000000000040080006000300030000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003300000000000000000000000000ffffe0000002fffffffffffffffffdffffffffffffff000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00010000000000000000004800010073686132353600"/202], 0x138}}, 0x20000000) 8.442397057s ago: executing program 3 (id=247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) 8.246028322s ago: executing program 2 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 6.652829095s ago: executing program 0 (id=249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xa) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) 5.895820811s ago: executing program 2 (id=250): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) 5.58834531s ago: executing program 0 (id=251): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x37d, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) 4.842602702s ago: executing program 3 (id=252): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.705351357s ago: executing program 2 (id=253): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 3.115961633s ago: executing program 3 (id=254): r0 = socket$inet6(0x10, 0x3, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12000, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0"], 0x398}}, 0x0) 2.876914997s ago: executing program 2 (id=255): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x26020480) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 2.595357769s ago: executing program 0 (id=256): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r3, &(0x7f0000000080)=[{&(0x7f00000001c0)="3f2cdd47fdae", 0x6}], 0x1) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) 2.30491739s ago: executing program 0 (id=257): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 2.120343743s ago: executing program 1 (id=258): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000b00)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 1.205350413s ago: executing program 0 (id=259): socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_io_uring_setup(0x109, &(0x7f00000001c0)={0x0, 0x0, 0x400, 0x200, 0x2e8}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 1.204497009s ago: executing program 3 (id=260): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/unix\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf5734d63b2b58edc5b848d6fa38f7956549438addc5e72bb0cdbce326b0b3f673b0174949173922f6ee103a5a4af7b3068d357d2c8", 0x8f, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.177751466s ago: executing program 2 (id=261): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x2, 0x1) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 0s ago: executing program 2 (id=262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r4, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.50' (ED25519) to the list of known hosts. [ 89.073547][ T5818] cgroup: Unknown subsys name 'net' [ 89.211751][ T5818] cgroup: Unknown subsys name 'cpuset' [ 89.221230][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.951826][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.556660][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.567832][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.587537][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.593293][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.604303][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.615951][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.625590][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.633594][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.642278][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.650444][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.661679][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.662322][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.671182][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.679362][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.688481][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.705254][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.728549][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.734447][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.768167][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.780223][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.789258][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.797868][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.806042][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.815538][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.827678][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.483294][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 96.643915][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 96.676697][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 96.753653][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 96.886016][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 96.905976][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.916276][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.927691][ T5828] bridge_slave_0: entered allmulticast mode [ 96.937848][ T5828] bridge_slave_0: entered promiscuous mode [ 96.980248][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.988047][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.995622][ T5828] bridge_slave_1: entered allmulticast mode [ 97.004401][ T5828] bridge_slave_1: entered promiscuous mode [ 97.167125][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.174849][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.183084][ T5836] bridge_slave_0: entered allmulticast mode [ 97.192794][ T5836] bridge_slave_0: entered promiscuous mode [ 97.201496][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.209272][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.217100][ T5844] bridge_slave_0: entered allmulticast mode [ 97.224736][ T5844] bridge_slave_0: entered promiscuous mode [ 97.237192][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.251519][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.261783][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.269366][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.277848][ T5841] bridge_slave_0: entered allmulticast mode [ 97.286140][ T5841] bridge_slave_0: entered promiscuous mode [ 97.302502][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.310303][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.318240][ T5836] bridge_slave_1: entered allmulticast mode [ 97.326528][ T5836] bridge_slave_1: entered promiscuous mode [ 97.333620][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.341285][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.348928][ T5844] bridge_slave_1: entered allmulticast mode [ 97.357043][ T5844] bridge_slave_1: entered promiscuous mode [ 97.368941][ T24] cfg80211: failed to load regulatory.db [ 97.401272][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.409156][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.417471][ T5841] bridge_slave_1: entered allmulticast mode [ 97.425102][ T5841] bridge_slave_1: entered promiscuous mode [ 97.482959][ T5828] team0: Port device team_slave_0 added [ 97.541322][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.568709][ T5828] team0: Port device team_slave_1 added [ 97.589840][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.597780][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.605596][ T5829] bridge_slave_0: entered allmulticast mode [ 97.613738][ T5829] bridge_slave_0: entered promiscuous mode [ 97.624657][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.652758][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.680729][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.699883][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.727733][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.735797][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.745380][ T5829] bridge_slave_1: entered allmulticast mode [ 97.754922][ T5829] bridge_slave_1: entered promiscuous mode [ 97.767377][ T5152] Bluetooth: hci1: command tx timeout [ 97.802949][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.846683][ T5833] Bluetooth: hci4: command tx timeout [ 97.846690][ T5835] Bluetooth: hci2: command tx timeout [ 97.856735][ T5835] Bluetooth: hci0: command tx timeout [ 97.859466][ T5152] Bluetooth: hci3: command tx timeout [ 97.877035][ T5836] team0: Port device team_slave_0 added [ 97.899075][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.907711][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.935844][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.953142][ T5841] team0: Port device team_slave_0 added [ 97.962629][ T5841] team0: Port device team_slave_1 added [ 97.975427][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.988800][ T5836] team0: Port device team_slave_1 added [ 98.009190][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.017717][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.045849][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.083696][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.148095][ T5844] team0: Port device team_slave_0 added [ 98.191745][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.199679][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.228497][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.255551][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.262981][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.292055][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.305459][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.312826][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.340319][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.359575][ T5844] team0: Port device team_slave_1 added [ 98.379884][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.388277][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.420757][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.475763][ T5828] hsr_slave_0: entered promiscuous mode [ 98.484236][ T5828] hsr_slave_1: entered promiscuous mode [ 98.515380][ T5829] team0: Port device team_slave_0 added [ 98.526677][ T5829] team0: Port device team_slave_1 added [ 98.565505][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.573660][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.603013][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.617094][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.625863][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.654371][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.752335][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.760754][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.789139][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.803258][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.810356][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.838268][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.870625][ T5836] hsr_slave_0: entered promiscuous mode [ 98.878845][ T5836] hsr_slave_1: entered promiscuous mode [ 98.886284][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.895394][ T5836] Cannot create hsr debugfs directory [ 98.998050][ T5841] hsr_slave_0: entered promiscuous mode [ 99.005359][ T5841] hsr_slave_1: entered promiscuous mode [ 99.013432][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.023123][ T5841] Cannot create hsr debugfs directory [ 99.089895][ T5844] hsr_slave_0: entered promiscuous mode [ 99.097039][ T5844] hsr_slave_1: entered promiscuous mode [ 99.103766][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.112303][ T5844] Cannot create hsr debugfs directory [ 99.192730][ T5829] hsr_slave_0: entered promiscuous mode [ 99.200683][ T5829] hsr_slave_1: entered promiscuous mode [ 99.208003][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.216644][ T5829] Cannot create hsr debugfs directory [ 99.735943][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.774440][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.803183][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.822021][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.847845][ T5152] Bluetooth: hci1: command tx timeout [ 99.886802][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.901783][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.914984][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.926873][ T5152] Bluetooth: hci3: command tx timeout [ 99.927091][ T5835] Bluetooth: hci4: command tx timeout [ 99.934826][ T5840] Bluetooth: hci2: command tx timeout [ 99.946802][ T5833] Bluetooth: hci0: command tx timeout [ 99.967505][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.065735][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.089936][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.125798][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.139178][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.243956][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.278249][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.317857][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.338661][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.367838][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.403096][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.485140][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.503546][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.517314][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.546480][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.554241][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.567859][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.575315][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.588469][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.596733][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.608696][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.622942][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.634950][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.695346][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.703149][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.845225][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.917537][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.973749][ T1042] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.982561][ T1042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.034451][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.049847][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.057582][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.072764][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.149688][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.197909][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.205472][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.230928][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.249030][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.257696][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.341409][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.349608][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.419611][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.427393][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.634787][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.715282][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.844522][ T5828] veth0_vlan: entered promiscuous mode [ 101.909340][ T5828] veth1_vlan: entered promiscuous mode [ 101.930714][ T5840] Bluetooth: hci1: command tx timeout [ 101.983964][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.007905][ T5840] Bluetooth: hci2: command tx timeout [ 102.013573][ T5840] Bluetooth: hci0: command tx timeout [ 102.022355][ T5833] Bluetooth: hci3: command tx timeout [ 102.025672][ T5836] veth0_vlan: entered promiscuous mode [ 102.028515][ T5152] Bluetooth: hci4: command tx timeout [ 102.077007][ T5836] veth1_vlan: entered promiscuous mode [ 102.191680][ T5828] veth0_macvtap: entered promiscuous mode [ 102.226895][ T5828] veth1_macvtap: entered promiscuous mode [ 102.295842][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.306076][ T5836] veth0_macvtap: entered promiscuous mode [ 102.330235][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.341562][ T5836] veth1_macvtap: entered promiscuous mode [ 102.375177][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.385792][ T5829] veth0_vlan: entered promiscuous mode [ 102.400469][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.419278][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.433010][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.445631][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.459468][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.473099][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.509917][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.535291][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.549752][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.558757][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.573483][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.588953][ T5829] veth1_vlan: entered promiscuous mode [ 102.774643][ T5829] veth0_macvtap: entered promiscuous mode [ 102.812545][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.834814][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.846126][ T5829] veth1_macvtap: entered promiscuous mode [ 102.927452][ T5841] veth0_vlan: entered promiscuous mode [ 102.972656][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.992345][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.994589][ T5841] veth1_vlan: entered promiscuous mode [ 103.013125][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.063777][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.084188][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.097147][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.109053][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.118546][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.151688][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.161356][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.173630][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.182297][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.304873][ T5841] veth0_macvtap: entered promiscuous mode [ 103.312713][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.363487][ T5841] veth1_macvtap: entered promiscuous mode [ 103.385906][ T5844] veth0_vlan: entered promiscuous mode [ 103.507410][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.510182][ T5844] veth1_vlan: entered promiscuous mode [ 103.530435][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.559933][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.608848][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.671166][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.717827][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.742535][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.787005][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.860363][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.880368][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.964169][ T5960] xt_TPROXY: Can be used only with -p tcp or -p udp [ 104.076860][ T5152] Bluetooth: hci1: command tx timeout [ 104.087339][ T5152] Bluetooth: hci4: command tx timeout [ 104.093387][ T5152] Bluetooth: hci0: command tx timeout [ 104.099689][ T5152] Bluetooth: hci3: command tx timeout [ 104.106190][ T5152] Bluetooth: hci2: command tx timeout [ 104.789556][ T5844] veth0_macvtap: entered promiscuous mode [ 104.860977][ T5844] veth1_macvtap: entered promiscuous mode [ 105.051816][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.071883][ T1042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.234987][ T1042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.785906][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.847729][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.874014][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.910268][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.936448][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.952215][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.966302][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.458443][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.494550][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.511540][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.932300][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.993061][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.044019][ T5994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11'. [ 109.176431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 110.326711][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.550284][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.680487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.815699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.887853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.326866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 111.336762][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 111.507120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.516875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.090504][ T6021] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 112.107831][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.173469][ T6021] loop1: detected capacity change from 0 to 512 [ 112.211845][ T6021] EXT4-fs: Ignoring removed nobh option [ 112.292428][ T6021] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.344214][ T6021] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 120.267116][ T6070] block device autoloading is deprecated and will be removed. [ 122.918110][ T5934] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 123.057084][ T6106] loop3: detected capacity change from 0 to 1024 [ 123.077632][ T5934] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 124.072305][ T6106] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.378215][ T6106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 125.178899][ T6106] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 125.179468][ T6106] EXT4-fs: failed to create workqueue [ 125.357326][ T6106] EXT4-fs (loop3): mount failed [ 125.564094][ T6123] xt_TPROXY: Can be used only with -p tcp or -p udp [ 126.453265][ T6122] orangefs_mount: mount request failed with -4 [ 127.014813][ T6135] lo speed is unknown, defaulting to 1000 [ 127.022681][ T6135] lo speed is unknown, defaulting to 1000 [ 127.037737][ T6135] lo speed is unknown, defaulting to 1000 [ 127.076069][ T6135] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.158808][ T6135] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 127.315757][ T6135] lo speed is unknown, defaulting to 1000 [ 127.337734][ T6135] lo speed is unknown, defaulting to 1000 [ 127.359159][ T6135] lo speed is unknown, defaulting to 1000 [ 127.379962][ T6135] lo speed is unknown, defaulting to 1000 [ 127.400508][ T6135] lo speed is unknown, defaulting to 1000 [ 128.048014][ T6142] loop0: detected capacity change from 0 to 256 [ 128.155153][ T6142] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 129.025211][ T6152] binder: 6147:6152 ioctl 4018620d 0 returned -22 [ 130.034375][ T6150] loop1: detected capacity change from 0 to 2048 [ 130.945699][ T6150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 131.183181][ T30] audit: type=1326 audit(1750158892.611:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 131.310667][ T30] audit: type=1326 audit(1750158892.621:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 131.349153][ T30] audit: type=1326 audit(1750158892.621:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 131.443466][ T6172] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.493545][ T30] audit: type=1326 audit(1750158892.621:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 131.586848][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.596264][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.606141][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.617013][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.626409][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.635726][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.645837][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.655201][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.665104][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 131.675141][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 132.386545][ T30] audit: type=1326 audit(1750158892.651:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 132.408373][ T6172] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 132.468088][ T30] audit: type=1326 audit(1750158892.651:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 132.646608][ T6172] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.646608][ T6172] [ 132.666468][ T30] audit: type=1326 audit(1750158892.651:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 132.716424][ T6172] EXT4-fs (loop1): Total free blocks count 0 [ 132.729726][ T30] audit: type=1326 audit(1750158892.651:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5be51858e7 code=0x7ffc0000 [ 132.869657][ T30] audit: type=1326 audit(1750158892.651:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5be512ab19 code=0x7ffc0000 [ 132.876581][ T6172] EXT4-fs (loop1): Free/Dirty block details [ 133.096514][ T6172] EXT4-fs (loop1): free_blocks=2415919104 [ 133.131206][ T6172] EXT4-fs (loop1): dirty_blocks=160 [ 133.243863][ T6172] EXT4-fs (loop1): Block reservation details [ 133.253841][ T30] audit: type=1326 audit(1750158892.651:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6149 comm="syz.1.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5be518e929 code=0x7ffc0000 [ 133.269701][ T6172] EXT4-fs (loop1): i_reserved_data_blocks=10 [ 133.290779][ T6193] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 133.361193][ T6196] loop4: detected capacity change from 0 to 128 [ 133.412682][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 134.860038][ T6210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.997727][ T6220] vlan2: entered allmulticast mode [ 136.921033][ T6227] warning: `syz.2.72' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 137.616893][ T6232] loop3: detected capacity change from 0 to 256 [ 138.187286][ T6232] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 138.222099][ T6232] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 138.351251][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.358676][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.365523][ T6232] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.518154][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 139.518170][ T30] audit: type=1326 audit(1750158900.951:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 139.600140][ T30] audit: type=1326 audit(1750158900.951:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 139.652350][ T30] audit: type=1326 audit(1750158901.001:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 139.725514][ T30] audit: type=1326 audit(1750158901.001:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 139.777634][ T30] audit: type=1326 audit(1750158901.001:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 140.805298][ T30] audit: type=1326 audit(1750158901.001:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 141.646706][ T30] audit: type=1326 audit(1750158901.001:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 141.726614][ T30] audit: type=1326 audit(1750158901.001:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 141.873817][ T6250] loop0: detected capacity change from 0 to 512 [ 141.901122][ T30] audit: type=1326 audit(1750158901.001:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 142.094241][ T30] audit: type=1326 audit(1750158901.001:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6240 comm="syz.0.77" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fb1a9f8e929 code=0x7ffc0000 [ 142.206211][ T6250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.324622][ T6250] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.348100][ T6257] loop3: detected capacity change from 0 to 512 [ 142.365900][ T6257] EXT4-fs: Ignoring removed orlov option [ 142.389128][ T6250] tipc: Started in network mode [ 142.420345][ T6250] tipc: Node identity 4, cluster identity 4711 [ 142.470577][ T6250] tipc: Node number set to 4 [ 142.505285][ T6257] EXT4-fs (loop3): blocks per group (255) and clusters per group (8192) inconsistent [ 143.522663][ T5841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.252928][ T6268] __nla_validate_parse: 44 callbacks suppressed [ 145.252945][ T6268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 145.318608][ T6278] tipc: Started in network mode [ 145.371365][ T6278] tipc: Node identity ca10764d135f, cluster identity 4711 [ 145.663214][ T6278] tipc: Enabled bearer , priority 0 [ 145.676229][ T6271] syzkaller0: MTU too low for tipc bearer [ 145.685944][ T6271] tipc: Disabling bearer [ 145.699213][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 147.376818][ T6287] loop0: detected capacity change from 0 to 2048 [ 147.428357][ T6287] ======================================================= [ 147.428357][ T6287] WARNING: The mand mount option has been deprecated and [ 147.428357][ T6287] and is ignored by this kernel. Remove the mand [ 147.428357][ T6287] option from the mount to silence this warning. [ 147.428357][ T6287] ======================================================= [ 147.515813][ T6287] EXT4-fs: Ignoring removed orlov option [ 147.555669][ T6287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.658894][ T6287] EXT4-fs: error -4 creating inode table initialization thread [ 148.822780][ T6287] EXT4-fs (loop0): mount failed [ 150.460979][ T6313] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 152.910577][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 153.852615][ T6340] syz.1.101 uses obsolete (PF_INET,SOCK_PACKET) [ 153.895161][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.102'. [ 158.483085][ T6381] loop2: detected capacity change from 0 to 40427 [ 158.513844][ T6381] F2FS-fs (loop2): build fault injection rate: 690 [ 158.521885][ T6381] F2FS-fs (loop2): Image doesn't support compression [ 158.531353][ T6381] F2FS-fs (loop2): Image doesn't support compression [ 158.539100][ T6381] F2FS-fs (loop2): build fault injection type: 0x4 [ 158.597312][ T6381] F2FS-fs (loop2): invalid crc value [ 158.768723][ T6381] F2FS-fs (loop2): Start checkpoint disabled! [ 158.826988][ T6381] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 159.737084][ T5988] kworker/u8:8: attempt to access beyond end of device [ 159.737084][ T5988] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.873419][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: kworker/u8:8 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) [ 159.873453][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.873468][ T5988] Workqueue: writeback wb_workfn (flush-7:2) [ 159.873520][ T5988] Call Trace: [ 159.873533][ T5988] [ 159.873543][ T5988] dump_stack_lvl+0x189/0x250 [ 159.873584][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.873616][ T5988] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 159.873642][ T5988] ? __pfx_queue_work_on+0x10/0x10 [ 159.873664][ T5988] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 159.873687][ T5988] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.873714][ T5988] ? f2fs_hw_is_readonly+0x39b/0x470 [ 159.873746][ T5988] f2fs_handle_critical_error+0x37c/0x540 [ 159.873781][ T5988] f2fs_write_end_io+0x495/0x810 [ 159.873810][ T5988] ? blkg_put+0x22/0x240 [ 159.873853][ T5988] __submit_merged_bio+0x27a/0x6a0 [ 159.873887][ T5988] __submit_merged_write_cond+0x255/0x530 [ 159.873922][ T5988] f2fs_write_data_pages+0x261d/0x3000 [ 159.873991][ T5988] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 159.874037][ T5988] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 159.874070][ T5988] ? stack_trace_save+0x9c/0xe0 [ 159.874131][ T5988] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 159.874175][ T5988] ? trace_f2fs_writepages+0x7f/0x200 [ 159.874204][ T5988] ? f2fs_write_node_pages+0x478/0x6e0 [ 159.874245][ T5988] ? sched_clock+0x3f/0x60 [ 159.874270][ T5988] ? sched_clock_cpu+0x74/0x430 [ 159.874302][ T5988] ? psi_task_switch+0x16a/0x6d0 [ 159.874325][ T5988] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 159.874363][ T5988] do_writepages+0x32b/0x550 [ 159.874404][ T5988] ? reacquire_held_locks+0x127/0x1d0 [ 159.874423][ T5988] ? writeback_sb_inodes+0x384/0x1010 [ 159.874466][ T5988] __writeback_single_inode+0x145/0xff0 [ 159.874501][ T5988] ? do_raw_spin_unlock+0x122/0x240 [ 159.874532][ T5988] writeback_sb_inodes+0x6c7/0x1010 [ 159.874564][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.874598][ T5988] ? rcu_is_watching+0x15/0xb0 [ 159.874650][ T5988] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 159.874732][ T5988] ? rcu_is_watching+0x15/0xb0 [ 159.874777][ T5988] wb_writeback+0x43b/0xaf0 [ 159.874819][ T5988] ? queue_io+0x371/0x590 [ 159.874856][ T5988] ? __pfx_wb_writeback+0x10/0x10 [ 159.874899][ T5988] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.874929][ T5988] wb_workfn+0x409/0xef0 [ 159.874975][ T5988] ? __pfx_wb_workfn+0x10/0x10 [ 159.875008][ T5988] ? __lock_acquire+0xab9/0xd20 [ 159.875051][ T5988] ? process_scheduled_works+0x9ef/0x17b0 [ 159.875092][ T5988] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.875114][ T5988] ? process_scheduled_works+0x9ef/0x17b0 [ 159.875145][ T5988] ? process_scheduled_works+0x9ef/0x17b0 [ 159.875179][ T5988] process_scheduled_works+0xade/0x17b0 [ 159.875247][ T5988] ? __pfx_process_scheduled_works+0x10/0x10 [ 159.875301][ T5988] worker_thread+0x8a0/0xda0 [ 159.875324][ T5988] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 159.875364][ T5988] ? __kthread_parkme+0x7b/0x200 [ 159.875396][ T5988] kthread+0x711/0x8a0 [ 159.875425][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 159.875458][ T5988] ? __pfx_kthread+0x10/0x10 [ 159.875484][ T5988] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.875507][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.875531][ T5988] ? __pfx_kthread+0x10/0x10 [ 159.875556][ T5988] ret_from_fork+0x3fc/0x770 [ 159.875590][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 159.875629][ T5988] ? __switch_to_asm+0x39/0x70 [ 159.875650][ T5988] ? __switch_to_asm+0x33/0x70 [ 159.875670][ T5988] ? __pfx_kthread+0x10/0x10 [ 159.875696][ T5988] ret_from_fork_asm+0x1a/0x30 [ 159.875738][ T5988] [ 159.875748][ T5988] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 161.363607][ T6396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 162.013060][ T6400] bridge_slave_0: left allmulticast mode [ 162.113403][ T6400] bridge_slave_0: left promiscuous mode [ 162.148565][ T6402] netlink: 'syz.4.119': attribute type 10 has an invalid length. [ 162.163812][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.221558][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 162.245269][ T6400] bridge_slave_1: left allmulticast mode [ 162.296667][ T6400] bridge_slave_1: left promiscuous mode [ 162.307087][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.394522][ T6400] bond0: (slave bond_slave_0): Releasing backup interface [ 162.427796][ T5936] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.458136][ T5936] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.471624][ T6400] bond0: (slave bond_slave_1): Releasing backup interface [ 162.508207][ T6400] team0: Port device team_slave_0 removed [ 162.522678][ T5936] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.539983][ T6400] team0: Port device team_slave_1 removed [ 162.549194][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.558193][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.575318][ T6400] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.585221][ T6400] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.607948][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.622868][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.656258][ T5936] usb 2-1: SerialNumber: syz [ 162.724475][ T6402] team0: Port device bond0 added [ 162.740786][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 162.740803][ T30] audit: type=1326 audit(1750158924.181:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6838e929 code=0x7fc00000 [ 162.900458][ T5936] usb 2-1: 0:2 : does not exist [ 163.159970][ T6416] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 163.170702][ T6416] overlayfs: missing 'lowerdir' [ 163.715488][ T30] audit: type=1326 audit(1750158925.151:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6404 comm="syz.3.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7faf6832ab19 code=0x7fc00000 [ 163.825100][ T5936] usb 2-1: USB disconnect, device number 2 [ 164.126603][ T5834] udevd[5834]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.756907][ T6438] xt_TCPMSS: Only works on TCP SYN packets [ 166.338399][ T6439] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.996167][ T6445] TCP: out of memory -- consider tuning tcp_mem [ 168.103838][ T6453] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 168.113859][ T6453] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 168.127268][ T6453] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 170.515059][ T6459] Zero length message leads to an empty skb [ 171.002427][ T6463] loop2: detected capacity change from 0 to 8 [ 171.257059][ T6463] SQUASHFS error: zlib decompression failed, data probably corrupt [ 171.269136][ T6463] SQUASHFS error: Failed to read block 0x9b: -5 [ 171.276009][ T6463] SQUASHFS error: Unable to read metadata cache entry [99] [ 171.338735][ T6473] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 171.933126][ T6463] SQUASHFS error: Unable to read inode 0x127 [ 172.793256][ T30] audit: type=1326 audit(1750158934.021:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 172.946555][ T30] audit: type=1326 audit(1750158934.021:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 172.956807][ T6480] loop4: detected capacity change from 0 to 1024 [ 172.974282][ T30] audit: type=1326 audit(1750158934.021:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.022590][ T6481] loop3: detected capacity change from 0 to 512 [ 173.111084][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.141: iget: bad extended attribute block 1 [ 173.131134][ T30] audit: type=1326 audit(1750158934.021:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.228923][ T6481] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.141: couldn't read orphan inode 15 (err -117) [ 173.274750][ T6481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.288973][ T30] audit: type=1326 audit(1750158934.021:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.346687][ T30] audit: type=1326 audit(1750158934.031:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.479461][ T30] audit: type=1326 audit(1750158934.031:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.511586][ T30] audit: type=1326 audit(1750158934.031:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.558328][ T6487] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 173.602705][ T30] audit: type=1326 audit(1750158934.031:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.690784][ T30] audit: type=1326 audit(1750158934.031:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6461 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e95f8e929 code=0x7fc00000 [ 173.869277][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.155454][ T6492] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 177.868327][ T6501] loop0: detected capacity change from 0 to 262144 [ 177.891181][ T6501] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.147 (6501) [ 177.937982][ T6501] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 177.946026][ T6506] loop4: detected capacity change from 0 to 16 [ 177.949983][ T6501] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 177.967133][ T6501] BTRFS info (device loop0): using free-space-tree [ 178.067247][ T6506] erofs (device loop4): unsupported datalayout 5 of nid 36 [ 178.521643][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 178.521666][ T30] audit: type=1804 audit(1750158939.951:160): pid=6501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.147" name="/newroot/34/file0/bus" dev="loop0" ino=263 res=1 errno=0 [ 179.542390][ T5841] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 179.739416][ T6529] sctp: failed to load transform for md5: -4 [ 179.757446][ T6531] sctp: failed to load transform for md5: -4 [ 180.744440][ T6534] sctp: failed to load transform for md5: -4 [ 180.899080][ T6536] sctp: failed to load transform for md5: -4 [ 181.412660][ T6524] sctp: failed to load transform for md5: -4 [ 181.920558][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.156'. [ 185.265336][ T6584] loop3: detected capacity change from 0 to 1024 [ 187.843056][ T6605] bridge: RTM_NEWNEIGH with invalid ether address [ 187.904791][ T6608] process 'syz.1.168' launched './file0' with NULL argv: empty string added [ 188.584490][ T6615] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 188.987961][ T6618] loop4: detected capacity change from 0 to 512 [ 189.060121][ T6618] EXT4-fs (loop4): Test dummy encryption mode enabled [ 189.107913][ T6618] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.408465][ T6618] EXT4-fs (loop4): 1 truncate cleaned up [ 189.450454][ T6618] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.503256][ T6618] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 190.271746][ T30] audit: type=1804 audit(1750158951.711:161): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.171" name="/newroot/35/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 190.463073][ T6620] lo speed is unknown, defaulting to 1000 [ 190.499089][ T6636] loop0: detected capacity change from 0 to 256 [ 190.617799][ T5844] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 190.865030][ T5844] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.395477][ T6666] loop1: detected capacity change from 0 to 736 [ 193.504810][ T59] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.538040][ T5936] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 193.682595][ T6666] rock: directory entry would overflow storage [ 193.709288][ T6666] rock: sig=0x3b10, size=4, remaining=3 [ 193.720630][ T5936] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 193.728388][ T59] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.744151][ T5936] usb 1-1: config 0 has no interface number 0 [ 193.772203][ T5936] usb 1-1: config 0 interface 214 altsetting 4 endpoint 0x6 has invalid maxpacket 520, setting to 64 [ 193.811751][ T5936] usb 1-1: config 0 interface 214 has no altsetting 0 [ 193.852035][ T5936] usb 1-1: New USB device found, idVendor=0499, idProduct=1008, bcdDevice=6c.26 [ 193.884073][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.933476][ T5936] usb 1-1: Product: syz [ 193.940280][ T5936] usb 1-1: Manufacturer: syz [ 193.978671][ T5936] usb 1-1: SerialNumber: syz [ 194.015390][ T5936] usb 1-1: config 0 descriptor?? [ 194.042347][ T59] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.051392][ T6662] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.502226][ T59] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.787711][ T6685] xt_hashlimit: size too large, truncated to 1048576 [ 195.531098][ T5936] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.871484][ T6691] loop0: detected capacity change from 0 to 40427 [ 195.951374][ T6691] F2FS-fs (loop0): invalid crc value [ 196.110860][ T6691] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 196.123166][ T5936] snd-usb-audio 1-1:0.214: probe with driver snd-usb-audio failed with error -2 [ 196.217049][ T5936] usb 1-1: USB disconnect, device number 2 [ 197.289021][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.214/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.379618][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.402212][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.416531][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.431254][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.445266][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 197.742801][ T6708] loop1: detected capacity change from 0 to 16 [ 197.752573][ T6708] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 200.043015][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.050256][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.057142][ T5152] Bluetooth: hci4: command tx timeout [ 202.166467][ T5152] Bluetooth: hci4: command tx timeout [ 202.285363][ T6724] ieee802154 phy0 wpan0: encryption failed: -90 [ 204.246868][ T5152] Bluetooth: hci4: command tx timeout [ 205.820214][ T59] team0: Port device bond0 removed [ 205.834478][ T59] bond0 (unregistering): Released all slaves [ 205.891354][ T6742] pimreg: entered allmulticast mode [ 205.955082][ T6701] lo speed is unknown, defaulting to 1000 [ 206.218572][ T59] tipc: Left network mode [ 206.326559][ T5152] Bluetooth: hci4: command tx timeout [ 211.257987][ T6701] chnl_net:caif_netlink_parms(): no params data found [ 212.656637][ T59] hsr_slave_0: left promiscuous mode [ 212.675407][ T59] hsr_slave_1: left promiscuous mode [ 212.737885][ T59] veth1_macvtap: left promiscuous mode [ 212.756651][ T59] veth0_macvtap: left promiscuous mode [ 212.762635][ T59] veth1_vlan: left promiscuous mode [ 212.795390][ T6817] loop1: detected capacity change from 0 to 512 [ 212.813494][ T59] veth0_vlan: left promiscuous mode [ 212.901382][ T6817] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 213.072880][ T6817] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.214: casefold flag without casefold feature [ 213.331467][ T6817] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.214: couldn't read orphan inode 15 (err -117) [ 213.588200][ T6817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.955054][ T6824] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 214.269196][ T5828] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.190819][ T6841] loop1: detected capacity change from 0 to 1024 [ 218.287531][ T12] hfsplus: b-tree write err: -5, ino 4 [ 222.415201][ T5152] Bluetooth: hci0: command 0x0406 tx timeout [ 222.426547][ T5152] Bluetooth: hci3: command 0x0406 tx timeout [ 222.434409][ T5152] Bluetooth: hci2: command 0x0406 tx timeout [ 222.444672][ T5152] Bluetooth: hci1: command 0x0406 tx timeout [ 223.237227][ T6811] syz_tun: entered allmulticast mode [ 223.302625][ T6818] dvmrp1: entered allmulticast mode [ 223.407050][ T6811] syz_tun: left allmulticast mode [ 225.296802][ T6701] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.383424][ T6902] loop3: detected capacity change from 0 to 128 [ 225.404299][ T6701] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.424713][ T6701] bridge_slave_0: entered allmulticast mode [ 225.433009][ T6896] Illegal XDP return value 4294967274 on prog (id 70) dev N/A, expect packet loss! [ 225.478608][ T6701] bridge_slave_0: entered promiscuous mode [ 225.532175][ T6902] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 225.593717][ T6701] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.626513][ T6902] EXT4-fs (loop3): Encoding requested by superblock is unknown [ 225.659062][ T6701] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.708449][ T6701] bridge_slave_1: entered allmulticast mode [ 225.763580][ T6701] bridge_slave_1: entered promiscuous mode [ 228.257798][ T6928] loop3: detected capacity change from 0 to 1024 [ 229.349696][ T6701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.385325][ T6701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.570623][ T6701] team0: Port device team_slave_0 added [ 231.709769][ T6701] team0: Port device team_slave_1 added [ 232.009583][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.025805][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.009903][ T6701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.031979][ T6947] lo speed is unknown, defaulting to 1000 [ 233.050433][ T6701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.060339][ T6701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.146205][ T6701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.240890][ T6967] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.267030][ T6967] bond0: (slave rose0): Enslaving as an active interface with an up link [ 234.543231][ T6988] loop0: detected capacity change from 0 to 256 [ 235.291976][ T6988] FAT-fs (loop0): Directory bread(block 64) failed [ 235.347537][ T6988] FAT-fs (loop0): Directory bread(block 65) failed [ 235.354751][ T6988] FAT-fs (loop0): Directory bread(block 66) failed [ 235.431396][ T6988] FAT-fs (loop0): Directory bread(block 67) failed [ 235.486929][ T6988] FAT-fs (loop0): Directory bread(block 68) failed [ 235.510733][ T6988] FAT-fs (loop0): Directory bread(block 69) failed [ 235.517966][ T6988] FAT-fs (loop0): Directory bread(block 70) failed [ 235.524823][ T6988] FAT-fs (loop0): Directory bread(block 71) failed [ 235.535013][ T6988] FAT-fs (loop0): Directory bread(block 72) failed [ 235.535219][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 235.543288][ T6988] FAT-fs (loop0): Directory bread(block 73) failed [ 235.598935][ T6993] netlink: 28 bytes leftover after parsing attributes in process `syz.2.253'. [ 236.343587][ T6701] hsr_slave_0: entered promiscuous mode [ 236.353841][ T6701] hsr_slave_1: entered promiscuous mode [ 236.363199][ T6701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.372705][ T6701] Cannot create hsr debugfs directory [ 236.993095][ T6993] dummy0: entered promiscuous mode [ 237.012561][ T6993] bond0: entered promiscuous mode [ 237.017952][ T6993] bond_slave_0: entered promiscuous mode [ 237.024173][ T6993] bond_slave_1: entered promiscuous mode [ 237.191152][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 237.319119][ T6845] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 237.401559][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.419101][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.488521][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.532122][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.599029][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.616996][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.725155][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.764251][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.812887][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.836093][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.002410][ T36] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 238.816539][ T5988] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 238.875845][ T6701] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.959311][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.994064][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.009403][ T6701] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.217822][ T12] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 239.224857][ T6701] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.983190][ T6701] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.038262][ T7030] bond_slave_0: entered promiscuous mode [ 240.044427][ T7030] bond_slave_1: entered promiscuous mode [ 240.069646][ T5988] ------------[ cut here ]------------ [ 240.076223][ T5988] WARNING: net/wireless/ibss.c:37 at __cfg80211_ibss_joined+0x3ca/0x440, CPU#0: kworker/u8:8/5988 [ 240.088506][ T5988] Modules linked in: [ 240.094058][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: kworker/u8:8 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) [ 240.106069][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.116642][ T5988] Workqueue: cfg80211 cfg80211_event_work [ 240.116768][ T7030] macsec1: entered promiscuous mode [ 240.124098][ T5988] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 240.124172][ T5988] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 b7 f6 f6 90 0f 0b 90 eb bd e8 e7 b7 f6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 d7 b7 f6 f6 90 0f 0b 90 e9 de fd [ 240.124192][ T5988] RSP: 0018:ffffc90004bdf8e0 EFLAGS: 00010293 [ 240.124215][ T5988] RAX: ffffffff8ac9b389 RBX: dffffc0000000000 RCX: ffff888026118000 [ 240.124233][ T5988] RDX: 0000000000000000 RSI: ffffffff8d98bf66 RDI: ffffffff8be2efe0 [ 240.181043][ T5988] RBP: ffffc90004bdf9b8 R08: ffffffff8fa147f7 R09: 1ffffffff1f428fe [ 240.189811][ T5988] R10: dffffc0000000000 R11: fffffbfff1f428ff R12: ffff88806bcc4d90 [ 240.198182][ T5988] R13: 1ffff9200097bf24 R14: ffff8880274b3338 R15: 0000000000000006 [ 240.206864][ T5988] FS: 0000000000000000(0000) GS:ffff888125c40000(0000) knlGS:0000000000000000 [ 240.218300][ T5988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 240.227045][ T5988] CR2: 000020000002e000 CR3: 0000000075d08000 CR4: 00000000003526f0 [ 240.236128][ T5988] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 240.244614][ T5988] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 240.246476][ T7030] bond0: entered promiscuous mode [ 240.253594][ T5988] Call Trace: [ 240.253611][ T5988] [ 240.253624][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.253664][ T5988] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 240.253694][ T5988] ? cfg80211_event_work+0x24/0x60 [ 240.253731][ T5988] ? __pfx___mutex_lock+0x10/0x10 [ 240.253767][ T5988] cfg80211_process_wdev_events+0x38a/0x4f0 [ 240.293512][ T5988] cfg80211_process_rdev_events+0xa1/0x110 [ 240.299878][ T5988] cfg80211_event_work+0x2c/0x60 [ 240.305013][ T5988] ? process_scheduled_works+0x9ef/0x17b0 [ 240.310966][ T5988] process_scheduled_works+0xade/0x17b0 [ 240.316700][ T5988] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.322761][ T5988] worker_thread+0x8a0/0xda0 [ 240.327501][ T5988] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.334063][ T5988] ? __kthread_parkme+0x7b/0x200 [ 240.340268][ T5988] kthread+0x711/0x8a0 [ 240.344453][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 240.350488][ T5988] ? __pfx_kthread+0x10/0x10 [ 240.355672][ T5988] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.361143][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.366601][ T5988] ? __pfx_kthread+0x10/0x10 [ 240.371675][ T5988] ret_from_fork+0x3fc/0x770 [ 240.376460][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 240.382182][ T5988] ? __switch_to_asm+0x39/0x70 [ 240.387107][ T5988] ? __switch_to_asm+0x33/0x70 [ 240.391924][ T5988] ? __pfx_kthread+0x10/0x10 [ 240.396678][ T5988] ret_from_fork_asm+0x1a/0x30 [ 240.401713][ T5988] [ 240.405167][ T5988] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 240.412514][ T5988] CPU: 0 UID: 0 PID: 5988 Comm: kworker/u8:8 Not tainted 6.16.0-rc2-next-20250617-syzkaller #0 PREEMPT(full) [ 240.424524][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.435323][ T5988] Workqueue: cfg80211 cfg80211_event_work [ 240.441864][ T5988] Call Trace: [ 240.445752][ T5988] [ 240.448962][ T5988] dump_stack_lvl+0x99/0x250 [ 240.453878][ T5988] ? __asan_memcpy+0x40/0x70 [ 240.459118][ T5988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.465736][ T5988] ? __pfx__printk+0x10/0x10 [ 240.470501][ T5988] panic+0x2db/0x790 [ 240.476690][ T5988] ? __pfx_panic+0x10/0x10 [ 240.481802][ T5988] ? ret_from_fork_asm+0x1a/0x30 [ 240.486957][ T5988] __warn+0x334/0x4c0 [ 240.491145][ T5988] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 240.498000][ T5988] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 240.503763][ T5988] report_bug+0x2be/0x4f0 [ 240.508413][ T5988] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 240.514703][ T5988] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 240.520544][ T5988] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 240.526136][ T5988] handle_bug+0x84/0x160 [ 240.530750][ T5988] exc_invalid_op+0x1a/0x50 [ 240.535277][ T5988] asm_exc_invalid_op+0x1a/0x20 [ 240.540952][ T5988] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 240.547609][ T5988] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f2 b7 f6 f6 90 0f 0b 90 eb bd e8 e7 b7 f6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 d7 b7 f6 f6 90 0f 0b 90 e9 de fd [ 240.568194][ T5988] RSP: 0018:ffffc90004bdf8e0 EFLAGS: 00010293 [ 240.574824][ T5988] RAX: ffffffff8ac9b389 RBX: dffffc0000000000 RCX: ffff888026118000 [ 240.583010][ T5988] RDX: 0000000000000000 RSI: ffffffff8d98bf66 RDI: ffffffff8be2efe0 [ 240.591831][ T5988] RBP: ffffc90004bdf9b8 R08: ffffffff8fa147f7 R09: 1ffffffff1f428fe [ 240.600559][ T5988] R10: dffffc0000000000 R11: fffffbfff1f428ff R12: ffff88806bcc4d90 [ 240.608576][ T5988] R13: 1ffff9200097bf24 R14: ffff8880274b3338 R15: 0000000000000006 [ 240.616878][ T5988] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 240.622461][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.628473][ T5988] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 240.634839][ T5988] ? cfg80211_event_work+0x24/0x60 [ 240.639978][ T5988] ? __pfx___mutex_lock+0x10/0x10 [ 240.645024][ T5988] cfg80211_process_wdev_events+0x38a/0x4f0 [ 240.650947][ T5988] cfg80211_process_rdev_events+0xa1/0x110 [ 240.656889][ T5988] cfg80211_event_work+0x2c/0x60 [ 240.662027][ T5988] ? process_scheduled_works+0x9ef/0x17b0 [ 240.668066][ T5988] process_scheduled_works+0xade/0x17b0 [ 240.674139][ T5988] ? __pfx_process_scheduled_works+0x10/0x10 [ 240.680203][ T5988] worker_thread+0x8a0/0xda0 [ 240.685116][ T5988] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 240.691468][ T5988] ? __kthread_parkme+0x7b/0x200 [ 240.696631][ T5988] kthread+0x711/0x8a0 [ 240.701086][ T5988] ? __pfx_worker_thread+0x10/0x10 [ 240.706492][ T5988] ? __pfx_kthread+0x10/0x10 [ 240.711672][ T5988] ? _raw_spin_unlock_irq+0x23/0x50 [ 240.717814][ T5988] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.726139][ T5988] ? __pfx_kthread+0x10/0x10 [ 240.732010][ T5988] ret_from_fork+0x3fc/0x770 [ 240.737104][ T5988] ? __pfx_ret_from_fork+0x10/0x10 [ 240.742275][ T5988] ? __switch_to_asm+0x39/0x70 [ 240.747186][ T5988] ? __switch_to_asm+0x33/0x70 [ 240.752406][ T5988] ? __pfx_kthread+0x10/0x10 [ 240.757115][ T5988] ret_from_fork_asm+0x1a/0x30 [ 240.762263][ T5988] [ 240.765727][ T5988] Kernel Offset: disabled [ 240.770343][ T5988] Rebooting in 86400 seconds..