last executing test programs: 3m12.816966887s ago: executing program 2 (id=315): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="080029bd7000fcdbdf250500000008"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x0, 0x100000000, 0x1000045, 0x10000, 0x6, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m9.51927614s ago: executing program 2 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000900), 0x1, 0x0, &(0x7f0000000a40)="82"}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x80) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) 3m5.319207587s ago: executing program 2 (id=325): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x3}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) getsockname$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x1, 0x100) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = msgget$private(0x0, 0x0) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgsnd(r2, 0x0, 0x0, 0x800) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000100)=""/151) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) 3m2.330228722s ago: executing program 2 (id=329): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x8) fcntl$getflags(r0, 0xb) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(0x0, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file1\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) gettid() socket$inet6_tcp(0xa, 0x1, 0x0) 3m0.867024728s ago: executing program 2 (id=332): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r0, 0x100000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x24, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x0, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x37517475adff6b55, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000040)) socket$inet6(0xa, 0x1, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x17) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = dup(r6) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000000)={0x2, 0x2405}) r8 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r8, 0xc040564a, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 2m58.878067745s ago: executing program 2 (id=334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3, 0x2}, 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 2m43.539149045s ago: executing program 32 (id=334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x94) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3, 0x2}, 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)}, 0x0) 4.970509928s ago: executing program 1 (id=827): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 3.840699714s ago: executing program 1 (id=832): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 3.620675187s ago: executing program 0 (id=835): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 3.58579948s ago: executing program 1 (id=836): syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x9c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0xfff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x6}}]}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3.464600487s ago: executing program 0 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 2.178878352s ago: executing program 0 (id=843): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 2.121783985s ago: executing program 3 (id=844): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 1.959019245s ago: executing program 3 (id=846): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.929853717s ago: executing program 4 (id=847): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.748189868s ago: executing program 4 (id=848): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 1.747783798s ago: executing program 3 (id=849): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}], 0x1, 0x4046040) 1.610816496s ago: executing program 0 (id=850): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 1.610063195s ago: executing program 3 (id=851): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$GETALL(0x0, 0x0, 0xd, 0xfffffffffffffffe) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg2\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 501.45076ms ago: executing program 1 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106e2bc00000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 500.797851ms ago: executing program 4 (id=853): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 472.542152ms ago: executing program 3 (id=854): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) 316.530811ms ago: executing program 0 (id=855): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="5e54e507da93883e8c628a600b17cbe584d2e73c68141965f3fbcf0e16db6e759d420151c6c57504", 0x28}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x2, 0x4046040) 316.192021ms ago: executing program 4 (id=856): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) 254.265235ms ago: executing program 0 (id=857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = socket(0x840000000002, 0x3, 0x100) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmmsg$inet(r4, &(0x7f0000010580)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000010540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}], 0x1, 0x20000) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @void, @val={0xc, 0x99, {0x5, 0x38}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040048}, 0x4800) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 249.089465ms ago: executing program 1 (id=858): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, 0x0, 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 214.952927ms ago: executing program 3 (id=859): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x8000, 0x0, 0x7, 0x8}, {0x5, 0x0, 0x7f0, 0x8, 0x101, 0x5}, 0x0, 0x6, 0x4e}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 165.68699ms ago: executing program 4 (id=860): r0 = socket(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x28}}], 0x1, 0x4046040) 90.487884ms ago: executing program 4 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000390400"/20, @ANYRES32=r5, @ANYBLOB="8106e2bc00000200140012800b000100627269646765"], 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x681}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 0s ago: executing program 1 (id=862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x102000, 0x0) flock(r3, 0x1) r4 = socket(0x840000000002, 0x3, 0x100) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x44080) sendmmsg$inet(r4, &(0x7f0000010580)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000010540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}], 0x1, 0x20000) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x3e}, @void, @val={0xc, 0x99, {0x5, 0x38}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040048}, 0x4800) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r6, 0x2) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 83.263897][ T5754] cgroup: Unknown subsys name 'net' [ 83.401134][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.205130][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.965972][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.985725][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.995664][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.002920][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.007271][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.013137][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.024586][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.029907][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.039487][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.039689][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.054178][ T5774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.061414][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.068652][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.074723][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.079213][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.086997][ T5774] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.098094][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.105398][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.112971][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.120691][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.128598][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.134266][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.143946][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.146001][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.684160][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 87.845983][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 87.953101][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.963809][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.971405][ T5769] bridge_slave_0: entered allmulticast mode [ 87.984340][ T5769] bridge_slave_0: entered promiscuous mode [ 87.996080][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.003446][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.010679][ T5769] bridge_slave_1: entered allmulticast mode [ 88.018778][ T5769] bridge_slave_1: entered promiscuous mode [ 88.049330][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 88.071676][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 88.216085][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.231534][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.342331][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.349785][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.357674][ T5766] bridge_slave_0: entered allmulticast mode [ 88.366289][ T5766] bridge_slave_0: entered promiscuous mode [ 88.393961][ T5769] team0: Port device team_slave_0 added [ 88.412142][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.419460][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.430954][ T5766] bridge_slave_1: entered allmulticast mode [ 88.438494][ T5766] bridge_slave_1: entered promiscuous mode [ 88.472994][ T5769] team0: Port device team_slave_1 added [ 88.503723][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.511238][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.519707][ T5777] bridge_slave_0: entered allmulticast mode [ 88.527723][ T5777] bridge_slave_0: entered promiscuous mode [ 88.548288][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.555850][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.563404][ T5768] bridge_slave_0: entered allmulticast mode [ 88.570810][ T5768] bridge_slave_0: entered promiscuous mode [ 88.581128][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.588533][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.596403][ T5768] bridge_slave_1: entered allmulticast mode [ 88.604153][ T5768] bridge_slave_1: entered promiscuous mode [ 88.616055][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.627472][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.635398][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.643531][ T5777] bridge_slave_1: entered allmulticast mode [ 88.650659][ T5777] bridge_slave_1: entered promiscuous mode [ 88.712623][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.749182][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.756481][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.783400][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.797913][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.805187][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.832485][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.847008][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.880108][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.899654][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.924064][ T5766] team0: Port device team_slave_0 added [ 88.944186][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.982633][ T5777] team0: Port device team_slave_0 added [ 88.990598][ T5766] team0: Port device team_slave_1 added [ 89.010679][ T5768] team0: Port device team_slave_0 added [ 89.024001][ T5777] team0: Port device team_slave_1 added [ 89.055350][ T5768] team0: Port device team_slave_1 added [ 89.094257][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.101271][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.127532][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.140827][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.148011][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.174440][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.185314][ T51] Bluetooth: hci2: command tx timeout [ 89.186028][ T51] Bluetooth: hci3: command tx timeout [ 89.193187][ T5774] Bluetooth: hci0: command tx timeout [ 89.234165][ T5769] hsr_slave_0: entered promiscuous mode [ 89.241498][ T5769] hsr_slave_1: entered promiscuous mode [ 89.262039][ T5774] Bluetooth: hci1: command tx timeout [ 89.291400][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.301959][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.328158][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.341205][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.348356][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.374516][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.388489][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.395619][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.421978][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.442078][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.451438][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.477778][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.543277][ T5777] hsr_slave_0: entered promiscuous mode [ 89.550195][ T5777] hsr_slave_1: entered promiscuous mode [ 89.556774][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.564845][ T5777] Cannot create hsr debugfs directory [ 89.636705][ T5768] hsr_slave_0: entered promiscuous mode [ 89.643349][ T5768] hsr_slave_1: entered promiscuous mode [ 89.649586][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.658180][ T5768] Cannot create hsr debugfs directory [ 89.689418][ T5766] hsr_slave_0: entered promiscuous mode [ 89.696125][ T5766] hsr_slave_1: entered promiscuous mode [ 89.702781][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.710414][ T5766] Cannot create hsr debugfs directory [ 90.066408][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.109859][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.145277][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.157632][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.286598][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.297991][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.309143][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.332896][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.440337][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.451484][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.466444][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.479010][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.599477][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.614737][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.632352][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.647093][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.672259][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.731319][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.766832][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.774668][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.810939][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.818495][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.900178][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.961082][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.017525][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.027651][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.034884][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.060354][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.074143][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.081406][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.120615][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.154940][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.162758][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.208825][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.216145][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.255074][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.263030][ T5774] Bluetooth: hci3: command tx timeout [ 91.263108][ T51] Bluetooth: hci0: command tx timeout [ 91.269845][ T5776] Bluetooth: hci2: command tx timeout [ 91.293112][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.300298][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.342929][ T5774] Bluetooth: hci1: command tx timeout [ 91.367304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.374569][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.689078][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.829612][ T5769] veth0_vlan: entered promiscuous mode [ 91.878538][ T5769] veth1_vlan: entered promiscuous mode [ 91.979939][ T5769] veth0_macvtap: entered promiscuous mode [ 92.047703][ T5769] veth1_macvtap: entered promiscuous mode [ 92.061280][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.090309][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.120234][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.135631][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.151306][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.181620][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.191671][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.200605][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.209625][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.332424][ T5768] veth0_vlan: entered promiscuous mode [ 92.399094][ T5768] veth1_vlan: entered promiscuous mode [ 92.437245][ T5777] veth0_vlan: entered promiscuous mode [ 92.451036][ T5766] veth0_vlan: entered promiscuous mode [ 92.459980][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.476817][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.500609][ T5777] veth1_vlan: entered promiscuous mode [ 92.544814][ T5766] veth1_vlan: entered promiscuous mode [ 92.579772][ T5768] veth0_macvtap: entered promiscuous mode [ 92.602512][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.616000][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.634974][ T5768] veth1_macvtap: entered promiscuous mode [ 92.694643][ T5777] veth0_macvtap: entered promiscuous mode [ 92.729939][ T5777] veth1_macvtap: entered promiscuous mode [ 92.751297][ T5766] veth0_macvtap: entered promiscuous mode [ 92.767285][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.780274][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.795174][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.823939][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.835509][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.849689][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.861018][ T5766] veth1_macvtap: entered promiscuous mode [ 92.920112][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.931463][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.952816][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.962472][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.984739][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.995744][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.007884][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.011740][ T5854] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 93.033885][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.047011][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.079111][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.097517][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.108719][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.119995][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.131059][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.142330][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.156483][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.170567][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.181632][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.192765][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.204582][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.216978][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.282280][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.293563][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.304411][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.315278][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.326321][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.337687][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.349187][ T5776] Bluetooth: hci0: command tx timeout [ 93.352632][ T5776] Bluetooth: hci3: command tx timeout [ 93.356254][ T5774] Bluetooth: hci2: command tx timeout [ 93.369781][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.383646][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.392576][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.401307][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.414836][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.434984][ T5774] Bluetooth: hci1: command tx timeout [ 93.457329][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.466902][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.476553][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.485524][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.661196][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.679980][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.726939][ T1076] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.750558][ T1076] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.780633][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.797113][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.860432][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.870927][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.913244][ T5836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.939173][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.965607][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.060792][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.109461][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.123460][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 94.159435][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.202685][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.227398][ T5836] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 94.240796][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.251642][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.275540][ T5836] usb 4-1: config 0 descriptor?? [ 94.320383][ T5836] hub 4-1:0.0: USB hub found [ 94.543858][ T5836] hub 4-1:0.0: 1 port detected [ 94.799042][ T5876] syz.2.8[5876]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.968176][ T5879] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.287027][ T5836] hub 4-1:0.0: activate --> -90 [ 95.422338][ T5774] Bluetooth: hci2: command tx timeout [ 95.422376][ T5776] Bluetooth: hci3: command tx timeout [ 95.427825][ T5774] Bluetooth: hci0: command tx timeout [ 95.502260][ T5776] Bluetooth: hci1: command tx timeout [ 95.585755][ T5876] loop2: detected capacity change from 0 to 32768 [ 95.633181][ T5876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (5876) [ 95.695185][ T5876] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 95.705957][ T5855] usb 4-1: USB disconnect, device number 2 [ 95.753814][ T5876] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.789242][ T5876] BTRFS info (device loop2): force clearing of disk cache [ 95.809090][ T5876] BTRFS info (device loop2): enabling auto defrag [ 95.836554][ T5876] BTRFS info (device loop2): max_inline at 0 [ 95.874466][ T5876] BTRFS info (device loop2): enabling disk space caching [ 95.893142][ T5876] BTRFS info (device loop2): disk space caching is enabled [ 96.133247][ T5876] BTRFS info (device loop2): enabling ssd optimizations [ 96.196169][ T5876] BTRFS info (device loop2): rebuilding free space tree [ 96.323843][ T5876] BTRFS info (device loop2): disabling free space tree [ 96.331644][ T5876] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.384398][ T5876] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.817922][ T42] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 96.863013][ T5916] bridge_slave_0: left allmulticast mode [ 96.868763][ T5916] bridge_slave_0: left promiscuous mode [ 96.875115][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.913531][ T5916] bridge_slave_1: left allmulticast mode [ 96.919343][ T5916] bridge_slave_1: left promiscuous mode [ 96.925294][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.965261][ T5916] bond0: (slave bond_slave_0): Releasing backup interface [ 97.014751][ T5916] bond0: (slave bond_slave_1): Releasing backup interface [ 97.123619][ T5916] team0: Port device team_slave_0 removed [ 97.138712][ T1110] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 97.307088][ T5916] team0: Port device team_slave_1 removed [ 97.314158][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.321658][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.377347][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.385527][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.510094][ T5777] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.755899][ T9] cfg80211: failed to load regulatory.db [ 98.005733][ T5932] loop3: detected capacity change from 0 to 512 [ 98.039722][ T5932] EXT4-fs: Ignoring removed nobh option [ 98.206250][ T5932] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.19: invalid indirect mapped block 256 (level 2) [ 98.265018][ T5932] EXT4-fs (loop3): Remounting filesystem read-only [ 98.325127][ T5816] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 98.334017][ T5932] EXT4-fs (loop3): 2 truncates cleaned up [ 98.350187][ T5932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.403597][ T5816] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.444477][ T5939] loop2: detected capacity change from 0 to 4096 [ 98.474104][ T5939] EXT4-fs: Ignoring removed mblk_io_submit option [ 98.772605][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.912872][ T5939] EXT4-fs: Ignoring removed orlov option [ 98.974371][ T5939] EXT4-fs (loop2): Test dummy encryption mode enabled [ 99.007759][ T5939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.112491][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.435771][ T5959] binder: 5958:5959 ioctl c0306201 200000000300 returned -14 [ 100.006656][ T5975] loop1: detected capacity change from 0 to 512 [ 100.021648][ T5975] EXT4-fs: Ignoring removed nobh option [ 100.094354][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 101.019147][ T5975] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.33: invalid indirect mapped block 256 (level 2) [ 101.076673][ T5975] EXT4-fs (loop1): Remounting filesystem read-only [ 101.096190][ T5975] EXT4-fs (loop1): 2 truncates cleaned up [ 101.125464][ T5975] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.262569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.316640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.344960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.345739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.389906][ T5983] loop3: detected capacity change from 0 to 256 [ 101.436672][ T5983] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 101.549739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.652194][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 101.754509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.755443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.856947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 101.857793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.994902][ T5983] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.233768][ T5766] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.783101][ T5988] input: syz1 as /devices/virtual/input/input5 [ 103.662291][ T5997] loop2: detected capacity change from 0 to 128 [ 103.688304][ T5997] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 103.759975][ T5999] syzkaller0: entered promiscuous mode [ 103.779817][ T5999] syzkaller0: entered allmulticast mode [ 104.000195][ T6005] loop1: detected capacity change from 0 to 1024 [ 104.019319][ T6005] ======================================================= [ 104.019319][ T6005] WARNING: The mand mount option has been deprecated and [ 104.019319][ T6005] and is ignored by this kernel. Remove the mand [ 104.019319][ T6005] option from the mount to silence this warning. [ 104.019319][ T6005] ======================================================= [ 104.278996][ T6005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.663820][ T28] audit: type=1800 audit(1769842737.073:2): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.43" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 104.848689][ T1076] Trying to write to read-only block-device loop1 [ 104.872893][ T6005] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.961910][ T966] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 105.020355][ T6025] loop3: detected capacity change from 0 to 1024 [ 105.111093][ T6025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.123233][ T6025] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.147782][ T6025] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 105.161874][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 105.171308][ T966] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.191988][ T966] usb 3-1: config 0 interface 0 has no altsetting 0 [ 105.201954][ T966] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 105.211250][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.222797][ T966] usb 3-1: config 0 descriptor?? [ 105.355357][ T6025] EXT4-fs error (device loop3): ext4_free_blocks:6692: comm syz.3.46: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.408218][ T6025] EXT4-fs (loop3): Remounting filesystem read-only [ 105.415687][ T6025] EXT4-fs (loop3): 1 orphan inode deleted [ 105.424391][ T6025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.482710][ T6028] loop1: detected capacity change from 0 to 128 [ 105.542818][ T1136] EXT4-fs (loop3): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 105.621947][ T1136] Quota error (device loop3): write_blk: dquota write failed [ 105.629691][ T1136] Quota error (device loop3): free_dqentry: Can't move quota data block (2) to free list [ 105.778280][ T966] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 105.885658][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.167784][ T5855] usb 3-1: USB disconnect, device number 2 [ 107.358379][ T6050] syzkaller0: entered promiscuous mode [ 107.372060][ T6050] syzkaller0: entered allmulticast mode [ 107.441889][ T966] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.816516][ T966] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 107.837780][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.846289][ T966] usb 4-1: Product: syz [ 107.850593][ T966] usb 4-1: Manufacturer: syz [ 107.855303][ T966] usb 4-1: SerialNumber: syz [ 107.863166][ T966] usb 4-1: config 0 descriptor?? [ 108.593300][ T966] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 108.834670][ T6071] input: syz1 as /devices/virtual/input/input6 [ 108.881196][ T6073] loop0: detected capacity change from 0 to 128 [ 109.030424][ T6073] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.046833][ T6073] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.196781][ T6079] EXT4-fs (loop0): shut down requested (2) [ 109.425330][ T6073] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 109.480876][ T6079] fscrypt: loop0: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 109.612048][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.766956][ T6085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.60'. [ 109.796586][ T6085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 110.039038][ T966] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 110.050053][ T966] usb 4-1: USB disconnect, device number 3 [ 111.138467][ T6100] syzkaller0: entered promiscuous mode [ 111.153477][ T6100] syzkaller0: entered allmulticast mode [ 112.883114][ T6120] loop3: detected capacity change from 0 to 128 [ 112.896530][ T6118] input: syz1 as /devices/virtual/input/input7 [ 112.951642][ T6120] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.977207][ T6120] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.052727][ T6120] EXT4-fs (loop3): shut down requested (2) [ 113.080142][ T6120] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 113.135435][ T6120] fscrypt (loop3, inode 13): Error -5 getting encryption context [ 113.193523][ T6120] EXT4-fs warning (device loop3): ext4_lookup:1870: Inconsistent encryption contexts: 12/13 [ 113.359199][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.169600][ T6133] kvm: emulating exchange as write [ 116.103479][ T6143] syzkaller0: entered promiscuous mode [ 116.115535][ T6143] syzkaller0: entered allmulticast mode [ 120.032902][ T6160] syzkaller0: entered promiscuous mode [ 120.038487][ T6160] syzkaller0: entered allmulticast mode [ 120.059872][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 120.136920][ T6165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 120.268615][ T5776] block nbd0: Receive control failed (result -1) [ 123.481420][ T6188] kvm: pic: non byte write [ 126.257488][ T6200] input: syz1 as /devices/virtual/input/input8 [ 126.819582][ T6208] loop3: detected capacity change from 0 to 512 [ 126.880131][ T6208] FAT-fs (loop3): Directory bread(block 199916) failed [ 126.908937][ T6208] FAT-fs (loop3): Directory bread(block 199917) failed [ 126.941935][ T6208] FAT-fs (loop3): Directory bread(block 199918) failed [ 126.973555][ T6208] FAT-fs (loop3): Directory bread(block 199919) failed [ 126.980521][ T6208] FAT-fs (loop3): Directory bread(block 199920) failed [ 127.023104][ T6208] FAT-fs (loop3): Directory bread(block 199921) failed [ 127.030089][ T6208] FAT-fs (loop3): Directory bread(block 199922) failed [ 127.070906][ T6208] FAT-fs (loop3): Directory bread(block 199923) failed [ 127.206637][ T6208] FAT-fs (loop3): FAT read failed (blocknr 128) [ 127.238951][ T6208] FAT-fs (loop3): Directory bread(block 199916) failed [ 127.645743][ T5776] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 127.652508][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 127.657140][ T5776] CPU: 1 PID: 5776 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 127.671462][ T5776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.681677][ T5776] Workqueue: hci0 hci_rx_work [ 127.686457][ T5776] Call Trace: [ 127.689806][ T5776] [ 127.692803][ T5776] dump_stack_lvl+0x18c/0x250 [ 127.697596][ T5776] ? show_regs_print_info+0x20/0x20 [ 127.702888][ T5776] ? load_image+0x400/0x400 [ 127.707464][ T5776] sysfs_create_dir_ns+0x26e/0x2a0 [ 127.712621][ T5776] ? sysfs_warn_dup+0xa0/0xa0 [ 127.717332][ T5776] ? do_raw_spin_unlock+0x121/0x230 [ 127.722570][ T5776] kobject_add_internal+0x61c/0xcc0 [ 127.727815][ T5776] kobject_add+0x164/0x240 [ 127.732273][ T5776] ? __rwlock_init+0x150/0x150 [ 127.737161][ T5776] ? kobject_init+0x1e0/0x1e0 [ 127.741885][ T5776] ? _raw_spin_unlock+0x28/0x40 [ 127.746774][ T5776] ? get_device_parent+0x366/0x390 [ 127.751945][ T5776] device_add+0x408/0xc20 [ 127.756336][ T5776] hci_conn_add_sysfs+0xd5/0x1e0 [ 127.761313][ T5776] le_conn_complete_evt+0xf5d/0x1540 [ 127.766646][ T5776] ? hci_event_packet+0x4cb/0x1270 [ 127.771911][ T5776] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 127.778214][ T5776] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 127.783909][ T5776] ? skb_pull_data+0xfb/0x200 [ 127.788637][ T5776] hci_le_conn_complete_evt+0x187/0x440 [ 127.794236][ T5776] ? hci_remote_host_features_evt+0x150/0x150 [ 127.800430][ T5776] hci_event_packet+0x7ba/0x1270 [ 127.805407][ T5776] ? bis_list+0x290/0x290 [ 127.809775][ T5776] ? lockdep_hardirqs_on+0x98/0x150 [ 127.815014][ T5776] ? hci_send_to_monitor+0xd7/0x4f0 [ 127.820254][ T5776] hci_rx_work+0x43a/0xd60 [ 127.824728][ T5776] ? process_scheduled_works+0x96f/0x15d0 [ 127.830567][ T5776] process_scheduled_works+0xa5d/0x15d0 [ 127.836282][ T5776] ? assign_work+0x430/0x430 [ 127.840927][ T5776] ? assign_work+0x3d0/0x430 [ 127.845658][ T5776] worker_thread+0xa55/0xfc0 [ 127.850305][ T5776] kthread+0x2fa/0x390 [ 127.854402][ T5776] ? pr_cont_work+0x560/0x560 [ 127.859111][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 127.863743][ T5776] ret_from_fork+0x48/0x80 [ 127.868196][ T5776] ? kthread_blkcg+0xd0/0xd0 [ 127.872831][ T5776] ret_from_fork_asm+0x11/0x20 [ 127.877684][ T5776] [ 127.883458][ T5776] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 127.898125][ T5776] Bluetooth: hci0: failed to register connection device [ 128.105084][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 128.115948][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.149822][ T8] usb 1-1: config 0 descriptor?? [ 128.170001][ T8] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 130.966768][ T8] gspca_stv06xx: I2C: Read error writing address: -71 [ 130.973927][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.011349][ T8] usb 1-1: USB disconnect, device number 2 [ 131.224193][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.257829][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 131.302591][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.397985][ T9] usb 4-1: config 0 descriptor?? [ 131.424135][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 131.861571][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 131.886047][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 131.910796][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 131.930917][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 131.951557][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 131.972340][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 132.005822][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 132.028826][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 132.241639][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.288890][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.316795][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.347984][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.377355][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.417992][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.467379][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.516419][ T9] pwc: Registered as video103. [ 132.549662][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 132.630506][ T6243] loop2: detected capacity change from 0 to 16 [ 132.682659][ T6243] erofs: Unknown parameter 'erofs' [ 132.704115][ T9] usb 4-1: USB disconnect, device number 4 [ 132.774531][ T5783] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 132.840089][ T6246] tipc: Started in network mode [ 132.857295][ T6246] tipc: Node identity 065b4d7ec167, cluster identity 4711 [ 132.884778][ T6246] tipc: Enabled bearer , priority 0 [ 133.062436][ T6248] syzkaller0: entered promiscuous mode [ 133.070012][ T6248] syzkaller0: entered allmulticast mode [ 133.081044][ T6248] tipc: Resetting bearer [ 133.167995][ T6245] tipc: Resetting bearer [ 133.591843][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.599036][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.702232][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 137.042692][ T6245] tipc: Disabling bearer [ 137.075475][ T6277] syz.0.115 (6277): drop_caches: 2 [ 137.102033][ T788] tipc: Node number set to 3342617982 [ 139.497746][ T6309] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 139.655873][ T6313] syzkaller0: entered promiscuous mode [ 139.661569][ T6313] syzkaller0: entered allmulticast mode [ 139.684419][ T6313] tipc: Started in network mode [ 139.689544][ T6313] tipc: Node identity 720c96718cc3, cluster identity 4711 [ 139.706946][ T6313] tipc: Enabled bearer , priority 0 [ 139.728721][ T6312] tipc: Resetting bearer [ 139.805042][ T6312] tipc: Disabling bearer [ 139.947822][ T6318] netlink: 'syz.1.127': attribute type 11 has an invalid length. [ 139.956973][ T6318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.127'. [ 140.761672][ T6319] loop3: detected capacity change from 0 to 764 [ 140.848201][ T6323] loop2: detected capacity change from 0 to 512 [ 140.912584][ T6323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.957951][ T6323] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.128951][ T6328] loop1: detected capacity change from 0 to 4096 [ 141.164900][ T6328] ext4: Unknown parameter 'fowner' [ 141.228868][ T5767] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.400655][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.472124][ T6328] loop1: detected capacity change from 0 to 256 [ 147.929055][ T6376] syzkaller0: entered promiscuous mode [ 147.962111][ T6376] syzkaller0: entered allmulticast mode [ 151.784981][ T6395] tls_set_device_offload_rx: netdev not found [ 153.313322][ T6408] tty tty2: ldisc open failed (-12), clearing slot 1 [ 155.717414][ T6433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 157.919038][ T6448] xt_hashlimit: max too large, truncated to 1048576 [ 159.144679][ T6456] loop2: detected capacity change from 0 to 1024 [ 159.460963][ T6462] hfsplus: failed to extend attributes file [ 162.792099][ T6472] tipc: Enabled bearer , priority 0 [ 162.809806][ T6475] syzkaller0: entered promiscuous mode [ 162.817969][ T6475] syzkaller0: entered allmulticast mode [ 162.909080][ T6464] tipc: Resetting bearer [ 162.941353][ T6477] loop2: detected capacity change from 0 to 128 [ 162.951630][ T6463] tipc: Resetting bearer [ 162.968969][ T6477] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 163.030255][ T6463] tipc: Disabling bearer [ 169.209470][ T6518] tipc: Enabled bearer , priority 0 [ 169.239801][ T6518] syzkaller0: entered promiscuous mode [ 169.252280][ T6518] syzkaller0: entered allmulticast mode [ 169.352602][ T6518] tipc: Resetting bearer [ 169.374516][ T6517] tipc: Resetting bearer [ 169.446409][ T6517] tipc: Disabling bearer [ 170.121923][ T6530] syzkaller0: entered promiscuous mode [ 170.156562][ T6530] syzkaller0: entered allmulticast mode [ 171.231730][ C0] sched: RT throttling activated [ 172.142297][ T28] audit: type=1326 audit(1769842804.433:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.559947][ T28] audit: type=1326 audit(1769842804.433:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.645719][ T28] audit: type=1326 audit(1769842804.433:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.675190][ T28] audit: type=1326 audit(1769842804.433:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.702600][ T28] audit: type=1326 audit(1769842804.433:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.732659][ T28] audit: type=1326 audit(1769842804.433:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.765813][ T28] audit: type=1326 audit(1769842804.443:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.794123][ T28] audit: type=1326 audit(1769842804.443:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.824223][ T28] audit: type=1326 audit(1769842804.443:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.852060][ T28] audit: type=1326 audit(1769842804.443:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6544 comm="syz.2.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce2979aeb9 code=0x7ffc0000 [ 172.964130][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 173.624112][ T9] usb 2-1: config 0 has no interfaces? [ 173.629777][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 174.597884][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.610860][ T9] usb 2-1: config 0 descriptor?? [ 174.718761][ T9] usb 2-1: USB disconnect, device number 2 [ 176.253029][ T6571] syzkaller0: entered promiscuous mode [ 176.269126][ T6571] syzkaller0: entered allmulticast mode [ 183.296205][ T6613] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 185.792999][ T6631] syzkaller0: entered promiscuous mode [ 185.798635][ T6631] syzkaller0: entered allmulticast mode [ 189.917271][ T6653] sctp: failed to load transform for md5: -2 [ 190.803065][ T6670] 9pnet_fd: Insufficient options for proto=fd [ 195.036118][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.043659][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.078154][ T6695] tipc: Can't bind to reserved service type 2 [ 195.120207][ T6695] netlink: 277 bytes leftover after parsing attributes in process `syz.0.226'. [ 196.595161][ T6702] syzkaller0: entered promiscuous mode [ 196.649592][ T6702] syzkaller0: entered allmulticast mode [ 197.342086][ T6709] capability: warning: `syz.0.231' uses 32-bit capabilities (legacy support in use) [ 204.957007][ T6760] syzkaller0: entered promiscuous mode [ 206.672190][ T6760] syzkaller0: entered allmulticast mode [ 207.719224][ T6786] loop1: detected capacity change from 0 to 64 [ 207.850995][ T6786] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 209.356967][ T6799] warning: `syz.1.251' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 210.775382][ T6810] Zero length message leads to an empty skb [ 211.191843][ T6811] sctp: failed to load transform for md5: -2 [ 212.577099][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 212.583973][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 212.590100][ T5083] Bluetooth: hci3: command 0x0406 tx timeout [ 212.596675][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 212.768413][ T6835] process 'syz.1.256' launched './file0' with NULL argv: empty string added [ 213.265472][ T6838] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 213.814209][ T6847] syzkaller0: entered promiscuous mode [ 213.819782][ T6847] syzkaller0: entered allmulticast mode [ 215.145668][ T6856] loop1: detected capacity change from 0 to 128 [ 215.912444][ T6867] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 215.940640][ T6867] CIFS: Unable to determine destination address [ 215.948399][ T6867] xt_nat: multiple ranges no longer supported [ 216.953012][ T6874] CIFS: Unable to determine destination address [ 216.960654][ T6874] xt_nat: multiple ranges no longer supported [ 217.114862][ T6876] overlayfs: bad index found (index=index/00fb210001c17cbc6c5ee44a8cb22819ecc5529cae16d8325fa501000000000000, ftype=2000, origin ftype=a000). [ 219.435040][ T6891] Bluetooth: MGMT ver 1.22 [ 219.440029][ T6891] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 223.767957][ T6910] loop3: detected capacity change from 0 to 1024 [ 223.823576][ T6910] EXT4-fs: Ignoring removed bh option [ 223.873833][ T6910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.049391][ T6920] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 226.382264][ T5769] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.551532][ T5778] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 234.840616][ T6969] No source specified [ 237.711526][ T6988] loop2: detected capacity change from 0 to 128 [ 237.751089][ T6988] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.779815][ T6988] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.147653][ T7002] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 241.205184][ T5777] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.953606][ T7015] input: syz0 as /devices/virtual/input/input11 [ 243.471038][ T7026] overlayfs: failed to clone upperpath [ 243.504892][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 243.892561][ T7030] cgroup: name respecified [ 245.648070][ T7040] kernel profiling enabled (shift: 9) [ 247.323402][ T7038] loop1: detected capacity change from 0 to 1024 [ 247.332687][ T7038] EXT4-fs: Ignoring removed mblk_io_submit option [ 247.339197][ T7038] EXT4-fs: Ignoring removed orlov option [ 248.214763][ T7038] EXT4-fs (loop1): Test dummy encryption mode enabled [ 248.242239][ T7038] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 248.253316][ T7038] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 248.263414][ T7038] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 249.127969][ T7051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 250.880962][ T7060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 251.091171][ T7063] netlink: 'syz.0.313': attribute type 27 has an invalid length. [ 254.081410][ T7073] loop2: detected capacity change from 0 to 1024 [ 254.139747][ T7073] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 254.173129][ T7073] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 254.471006][ T7073] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c800e02c, mo2=0000] [ 255.155882][ T7073] EXT4-fs error (device loop2): ext4_free_blocks:6692: comm syz.2.315: Freeing blocks not in datazone - block = 0, count = 4096 [ 255.246562][ T7073] EXT4-fs (loop2): Remounting filesystem read-only [ 255.292590][ T7073] EXT4-fs (loop2): 1 orphan inode deleted [ 255.320691][ T7073] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.334031][ T1136] EXT4-fs (loop2): Quota write (off=3072, len=1024) cancelled because transaction is not started [ 255.380633][ T1136] __quota_error: 2 callbacks suppressed [ 255.380649][ T1136] Quota error (device loop2): write_blk: dquota write failed [ 255.409182][ T1136] Quota error (device loop2): free_dqentry: Can't move quota data block (2) to free list [ 255.508682][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.907532][ T6234] IPVS: starting estimator thread 0... [ 256.093493][ T7093] IPVS: using max 18 ests per chain, 43200 per kthread [ 256.468949][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.476055][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.624667][ T7108] loop2: detected capacity change from 0 to 128 [ 258.310962][ T7109] No source specified [ 260.188803][ T7118] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 264.995110][ T7136] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 265.011311][ T7136] batman_adv: batadv0: Adding interface: wlan0 [ 265.017904][ T7136] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.043403][ C0] vkms_vblank_simulate: vblank timer overrun [ 265.050221][ T7136] batman_adv: batadv0: Interface activated: wlan0 [ 266.347107][ T788] IPVS: starting estimator thread 0... [ 266.442180][ T7142] IPVS: using max 15 ests per chain, 36000 per kthread [ 267.883149][ T7151] loop3: detected capacity change from 0 to 128 [ 267.951043][ T7147] No source specified [ 271.617870][ T7162] hub 8-0:1.0: USB hub found [ 271.627794][ T7162] hub 8-0:1.0: 1 port detected [ 273.976831][ T7168] loop1: detected capacity change from 0 to 256 [ 274.022902][ T7168] exfat: Deprecated parameter 'namecase' [ 274.028711][ T7168] exfat: Deprecated parameter 'utf8' [ 274.470039][ T7170] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 275.462554][ T788] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 275.839980][ T788] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 275.933718][ T7182] comedi comedi3: pcl812: I/O port conflict (0x8001,16) [ 276.624387][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.645126][ T788] usb 2-1: config 0 descriptor?? [ 276.758961][ T788] cp210x 2-1:0.0: cp210x converter detected [ 276.900165][ T788] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 276.911785][ T788] cp210x 2-1:0.0: querying part number failed [ 276.952858][ T788] usb 2-1: cp210x converter now attached to ttyUSB0 [ 277.018835][ T7189] loop3: detected capacity change from 0 to 512 [ 277.040838][ T7189] ext4: Unknown parameter 'fsuuid' [ 277.172514][ T7174] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.109384][ T5816] usb 2-1: USB disconnect, device number 3 [ 279.185312][ T5816] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.213140][ T5816] cp210x 2-1:0.0: device disconnected [ 284.771642][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 284.788642][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 284.798716][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 284.824531][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 284.852447][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 284.962244][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 285.088853][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.498343][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.755862][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.027328][ T5774] Bluetooth: hci3: command tx timeout [ 287.521394][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.857407][ T7223] chnl_net:caif_netlink_parms(): no params data found [ 288.301464][ T7223] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.339571][ T7223] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.448404][ T7223] bridge_slave_0: entered allmulticast mode [ 288.462512][ T7223] bridge_slave_0: entered promiscuous mode [ 288.937223][ T7259] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 289.320700][ T5774] Bluetooth: hci3: command tx timeout [ 289.340855][ T7223] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.391876][ T7223] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.399338][ T7223] bridge_slave_1: entered allmulticast mode [ 289.468498][ T7223] bridge_slave_1: entered promiscuous mode [ 290.525376][ T7223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.549514][ T7223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.777907][ T7223] team0: Port device team_slave_0 added [ 290.796555][ T7276] kvm: pic: non byte write [ 290.843089][ T7223] team0: Port device team_slave_1 added [ 290.906056][ T49] tipc: Left network mode [ 290.928830][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.948452][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.976045][ T7223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.000744][ T7223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.010027][ T7223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.043730][ T7223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.240774][ T7223] hsr_slave_0: entered promiscuous mode [ 291.247961][ T7223] hsr_slave_1: entered promiscuous mode [ 291.255662][ T7223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.265990][ T7223] Cannot create hsr debugfs directory [ 291.341804][ T5774] Bluetooth: hci3: command tx timeout [ 292.862587][ T7298] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 293.421810][ T5774] Bluetooth: hci3: command tx timeout [ 294.990110][ T7319] loop1: detected capacity change from 0 to 512 [ 295.018324][ T7319] ext4: Unknown parameter 'fsuuid' [ 297.331093][ T7223] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 297.601852][ T7223] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 297.628618][ T7223] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 297.753496][ T7223] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 297.799631][ T49] batman_adv: batadv0: Interface deactivated: wlan0 [ 297.881546][ T49] batman_adv: batadv0: Removing interface: wlan0 [ 297.892508][ T7345] overlayfs: failed to clone upperpath [ 298.060320][ T49] hsr_slave_0: left promiscuous mode [ 298.078330][ T49] hsr_slave_1: left promiscuous mode [ 298.086782][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.101506][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.111007][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.119160][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.136234][ T49] bridge_slave_1: left allmulticast mode [ 298.152240][ T49] bridge_slave_1: left promiscuous mode [ 298.163057][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.192388][ T49] bridge_slave_0: left allmulticast mode [ 298.202202][ T49] bridge_slave_0: left promiscuous mode [ 298.215069][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.296742][ T49] veth1_macvtap: left promiscuous mode [ 298.305591][ T49] veth0_macvtap: left promiscuous mode [ 298.319095][ T49] veth1_vlan: left promiscuous mode [ 298.335047][ T49] veth0_vlan: left promiscuous mode [ 298.932231][ T7364] loop3: detected capacity change from 0 to 128 [ 299.051040][ T7367] overlayfs: failed to clone upperpath [ 299.168092][ T7364] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 299.307383][ T7364] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 300.990901][ T7375] netlink: 'syz.1.379': attribute type 27 has an invalid length. [ 301.214001][ T5769] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.862559][ T49] team0 (unregistering): Port device team_slave_1 removed [ 302.096620][ T49] team0 (unregistering): Port device team_slave_0 removed [ 302.285703][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.448044][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.301772][ T49] bond0 (unregistering): Released all slaves [ 303.841013][ T7223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.909774][ T7223] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.966355][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.973645][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.036717][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.044016][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.093289][ T7223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.883312][ T7223] veth0_vlan: entered promiscuous mode [ 306.923810][ T7223] veth1_vlan: entered promiscuous mode [ 307.068902][ T7223] veth0_macvtap: entered promiscuous mode [ 307.100411][ T7223] veth1_macvtap: entered promiscuous mode [ 307.119847][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.130476][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.140373][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.150978][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.164081][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.220819][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.231872][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.244165][ T7223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.262255][ T7223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.330276][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.793944][ T7223] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.844546][ T7223] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.882102][ T7223] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.923569][ T7223] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.054276][ T7465] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 308.108400][ T7465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.022738][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.065572][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.354976][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.412154][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.722492][ T5855] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 311.987565][ T5855] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 312.020861][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.082664][ T5855] usb 4-1: config 0 descriptor?? [ 312.156096][ T5855] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 312.352183][ T7511] netlink: 'syz.4.411': attribute type 1 has an invalid length. [ 312.498419][ T7511] vlan2: entered allmulticast mode [ 312.512494][ T7511] veth0_to_bond: entered allmulticast mode [ 314.512034][ T5855] gspca_stv06xx: HDCS-1020 sensor detected [ 314.586559][ T7533] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 314.786865][ T7533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.871959][ T7536] vlan2: entered allmulticast mode [ 314.907358][ T7536] veth0_to_bond: entered allmulticast mode [ 314.997102][ T7538] vlan2: entered allmulticast mode [ 315.021759][ T7538] veth0_to_bond: entered allmulticast mode [ 315.257389][ T5855] STV06xx: probe of 4-1:0.0 failed with error -71 [ 315.285410][ T5855] usb 4-1: USB disconnect, device number 5 [ 317.223462][ T7574] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 317.375716][ T7574] 8021q: adding VLAN 0 to HW filter on device bond2 [ 317.911511][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.212219][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.968322][ T7608] Illegal XDP return value 4294967294 on prog (id 30) dev syz_tun, expect packet loss! [ 322.583026][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.434'. [ 325.688785][ T7670] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 327.768918][ T7714] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 327.850716][ T7714] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.428332][ T7783] tls_set_device_offload_rx: netdev not found [ 337.437566][ T7832] tls_set_device_offload_rx: netdev not found [ 337.968936][ T7851] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 338.034307][ T7851] 8021q: adding VLAN 0 to HW filter on device bond2 [ 338.072174][ T7854] vlan2: entered allmulticast mode [ 338.091527][ T7854] veth0_to_bond: entered allmulticast mode [ 338.126457][ T7854] bond2: (slave vlan2): Enslaving as an active interface with a down link [ 339.572781][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 341.454890][ T7883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.488'. [ 343.023280][ T7897] syzkaller0: entered promiscuous mode [ 343.028933][ T7897] syzkaller0: entered allmulticast mode [ 345.323118][ T7934] hub 8-0:1.0: USB hub found [ 345.328940][ T7934] hub 8-0:1.0: 1 port detected [ 352.508357][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.515'. [ 352.617300][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.515'. [ 353.336382][ T28] audit: type=1326 audit(1769842985.733:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 353.402303][ T28] audit: type=1326 audit(1769842985.733:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 353.677868][ T28] audit: type=1326 audit(1769842985.743:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 354.075395][ T28] audit: type=1326 audit(1769842985.743:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 354.199997][ T28] audit: type=1326 audit(1769842985.743:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 354.369912][ T28] audit: type=1326 audit(1769842985.743:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 354.475825][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 354.494498][ T28] audit: type=1326 audit(1769842985.743:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 355.481225][ T28] audit: type=1326 audit(1769842985.743:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 355.559291][ T8011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.524'. [ 355.596499][ T28] audit: type=1326 audit(1769842985.743:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 355.658279][ T8024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.519'. [ 355.668238][ T28] audit: type=1326 audit(1769842985.743:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8001 comm="syz.1.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbad9aeb9 code=0x7ffc0000 [ 355.735433][ T8023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 355.783396][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.518'. [ 355.828377][ T8024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 355.886288][ T8026] syz.3.518 (8026) used greatest stack depth: 19784 bytes left [ 362.392715][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 362.552906][ T8099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 368.594396][ T8173] sctp: failed to load transform for md5: -2 [ 372.668518][ T8219] hub 8-0:1.0: USB hub found [ 372.681839][ T8219] hub 8-0:1.0: 1 port detected [ 379.294543][ T8284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.574'. [ 379.350273][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.356972][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.444207][ T8288] vlan2: entered allmulticast mode [ 380.052659][ T8307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.580'. [ 384.263439][ T8367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 388.097022][ T8418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 392.951416][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.626'. [ 393.939549][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.628'. [ 399.650666][ T8525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.643'. [ 399.679739][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.4.643'. [ 407.964621][ T8605] (null): rxe_set_mtu: Set mtu to 1024 [ 407.974200][ T8605] wg2 speed is unknown, defaulting to 1000 [ 407.984267][ T8605] wg2 speed is unknown, defaulting to 1000 [ 407.994388][ T8605] wg2 speed is unknown, defaulting to 1000 [ 408.164188][ T8605] infiniband syz2: set active [ 408.169356][ T8605] infiniband syz2: added wg2 [ 408.214922][ T5859] wg2 speed is unknown, defaulting to 1000 [ 408.272032][ T8605] RDS/IB: syz2: added [ 408.277478][ T8605] smc: adding ib device syz2 with port count 1 [ 408.284148][ T8605] smc: ib device syz2 port 1 has pnetid [ 408.296763][ T8605] wg2 speed is unknown, defaulting to 1000 [ 408.400397][ T5859] wg2 speed is unknown, defaulting to 1000 [ 408.533755][ T8605] wg2 speed is unknown, defaulting to 1000 [ 408.712198][ T8605] wg2 speed is unknown, defaulting to 1000 [ 408.887774][ T8605] wg2 speed is unknown, defaulting to 1000 [ 411.040665][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 411.316741][ T8649] syzkaller0: entered promiscuous mode [ 411.331765][ T8649] syzkaller0: entered allmulticast mode [ 411.645145][ T8656] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 412.109949][ T8662] wg2 speed is unknown, defaulting to 1000 [ 413.084132][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 417.695644][ T8729] syz2: rxe_newlink: already configured on wg2 [ 417.977837][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.257568][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.374345][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.422086][ T8728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.848968][ T8746] (null): rxe_set_mtu: Set mtu to 1024 [ 418.859849][ T8746] rdma_rxe: rxe_newlink: failed to add wg2 [ 421.182350][ T8783] (null): rxe_set_mtu: Set mtu to 1024 [ 421.192390][ T8783] rdma_rxe: rxe_newlink: failed to add wg2 [ 422.341731][ T8803] (null): rxe_set_mtu: Set mtu to 1024 [ 422.348711][ T8803] rdma_rxe: rxe_newlink: failed to add wg2 [ 423.885328][ T8823] (null): rxe_set_mtu: Set mtu to 1024 [ 423.892283][ T8823] rdma_rxe: rxe_newlink: failed to add wg2 [ 424.980702][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.740'. [ 425.027285][ T8835] vlan2: entered allmulticast mode [ 425.130089][ T8839] (null): rxe_set_mtu: Set mtu to 1024 [ 425.139337][ T8839] rdma_rxe: rxe_newlink: failed to add wg2 [ 426.734983][ T8865] (null): rxe_set_mtu: Set mtu to 1024 [ 426.742128][ T8865] rdma_rxe: rxe_newlink: failed to add wg2 [ 427.164367][ T8869] syz2: rxe_newlink: already configured on wg2 [ 427.235015][ T8868] syzkaller0: entered promiscuous mode [ 427.250263][ T8868] syzkaller0: entered allmulticast mode [ 427.259047][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 427.936368][ T8884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 428.529423][ T8904] (null): rxe_set_mtu: Set mtu to 1024 [ 428.536491][ T8904] rdma_rxe: rxe_newlink: failed to add wg2 [ 429.617230][ T8916] (null): rxe_set_mtu: Set mtu to 1024 [ 429.623155][ T8916] rdma_rxe: rxe_newlink: failed to add wg2 [ 429.963729][ T8925] (null): rxe_set_mtu: Set mtu to 1024 [ 429.971885][ T8925] rdma_rxe: rxe_newlink: failed to add wg2 [ 430.751084][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.773'. [ 430.758432][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.803770][ T8935] syzkaller0: entered promiscuous mode [ 430.809464][ T8935] syzkaller0: entered allmulticast mode [ 430.835517][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.908086][ T8933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.507399][ T8948] syz2: rxe_newlink: already configured on wg2 [ 432.314607][ T8956] syzkaller0: entered promiscuous mode [ 432.320562][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.340496][ T8956] syzkaller0: entered allmulticast mode [ 432.472911][ T8964] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.549363][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.582417][ T8959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.097115][ T8976] (null): rxe_set_mtu: Set mtu to 1024 [ 433.104216][ T8976] rdma_rxe: rxe_newlink: failed to add wg2 [ 433.427425][ T8979] syz2: rxe_newlink: already configured on wg2 [ 434.243109][ T8996] syzkaller0: entered promiscuous mode [ 434.249287][ T8996] syzkaller0: entered allmulticast mode [ 434.683467][ T8999] (null): rxe_set_mtu: Set mtu to 1024 [ 434.690477][ T8999] rdma_rxe: rxe_newlink: failed to add wg2 [ 434.789093][ T9000] (null): rxe_set_mtu: Set mtu to 1024 [ 434.796490][ T9000] rdma_rxe: rxe_newlink: failed to add wg2 [ 435.669847][ T9019] (null): rxe_set_mtu: Set mtu to 1024 [ 435.675791][ T9019] rdma_rxe: rxe_newlink: failed to add wg2 [ 435.888195][ T9021] syz2: rxe_newlink: already configured on wg2 [ 435.900255][ T9015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.400022][ T9015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.560179][ T9015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.597943][ T9015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.958548][ T9037] (null): rxe_set_mtu: Set mtu to 1024 [ 436.965566][ T9037] rdma_rxe: rxe_newlink: failed to add wg2 [ 437.660555][ T9040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 437.776018][ T9045] syzkaller0: entered promiscuous mode [ 437.783238][ T9045] syzkaller0: entered allmulticast mode [ 438.154512][ T9053] (null): rxe_set_mtu: Set mtu to 1024 [ 438.161486][ T9053] rdma_rxe: rxe_newlink: failed to add wg2 [ 439.384512][ T9070] (null): rxe_set_mtu: Set mtu to 1024 [ 439.391464][ T9070] rdma_rxe: rxe_newlink: failed to add wg2 [ 439.711921][ T9073] syz2: rxe_newlink: already configured on wg2 [ 440.495896][ T9091] (null): rxe_set_mtu: Set mtu to 1024 [ 440.503067][ T9091] rdma_rxe: rxe_newlink: failed to add wg2 [ 440.786848][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.794413][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.390392][ T9104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.833'. [ 441.578180][ T9111] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 441.824297][ T9111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 442.139768][ T9125] (null): rxe_set_mtu: Set mtu to 1024 [ 442.146793][ T9125] rdma_rxe: rxe_newlink: failed to add wg2 [ 442.356994][ T9127] syz2: rxe_newlink: already configured on wg2 [ 443.806582][ T9158] (null): rxe_set_mtu: Set mtu to 1024 [ 443.813635][ T9158] rdma_rxe: rxe_newlink: failed to add wg2 [ 444.084383][ T9161] syz2: rxe_newlink: already configured on wg2 [ 444.567176][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 444.611496][ T9163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 444.918804][ T9176] syzkaller0: entered promiscuous mode [ 444.941857][ T9176] syzkaller0: entered allmulticast mode [ 444.999402][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 445.070864][ T9182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.861'. [ 553.431693][ C1] ------------[ cut here ]------------ [ 553.439296][ C1] WARNING: CPU: 1 PID: 9184 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 553.450032][ C1] Modules linked in: [ 553.454048][ C1] CPU: 1 PID: 9184 Comm: syz.1.862 Not tainted syzkaller #0 [ 553.461386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.471526][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 553.478105][ C1] Code: ff ff ff 48 c7 c7 a0 84 30 97 be 04 00 00 00 e8 6a ca 6d 00 48 89 df b8 01 00 00 00 87 05 1c 11 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 72 13 8d 74 47 48 c7 c0 6c 14 8b 8e 48 c1 e8 03 [ 553.497771][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 553.503896][ C1] RAX: 0000000000000000 RBX: ffffffff8d137240 RCX: ffffffff81717376 [ 553.512008][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137240 [ 553.520120][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 553.528183][ C1] R10: dffffc0000000000 R11: fffffbfff2e61094 R12: 0000000000002904 [ 553.536206][ C1] R13: ffffffff8d137240 R14: 0000000000000a02 R15: dffffc0000000000 [ 553.544240][ C1] FS: 000055556baed500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 553.553224][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 553.559862][ C1] CR2: 00007f6cbade8600 CR3: 000000007ad09000 CR4: 00000000003506e0 [ 553.568349][ C1] Call Trace: [ 553.571688][ C1] [ 553.574590][ C1] rcu_core+0x635/0x1770 [ 553.578906][ C1] ? ktime_get+0x7f/0x280 [ 553.583298][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 553.588590][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 553.593845][ C1] ? sched_clock+0x3f/0x60 [ 553.598319][ C1] ? sched_clock_cpu+0x75/0x430 [ 553.603359][ C1] ? ktime_get+0x7f/0x280 [ 553.607769][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 553.614691][ C1] ? lock_chain_count+0x20/0x20 [ 553.619646][ C1] handle_softirqs+0x280/0x820 [ 553.624520][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 553.629349][ C1] ? do_softirq+0x1a0/0x1a0 [ 553.633910][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 553.639193][ C1] __irq_exit_rcu+0xd3/0x190 [ 553.643845][ C1] ? irq_exit_rcu+0x20/0x20 [ 553.648427][ C1] irq_exit_rcu+0x9/0x20 [ 553.652725][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 553.658419][ C1] [ 553.661398][ C1] [ 553.664382][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 553.670509][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 553.676385][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7a be da f6 48 89 df e8 32 93 db f6 e8 bd 9e ff f6 fb bf 01 00 00 00 42 99 ce f6 65 8b 05 13 d0 75 75 85 c0 74 02 5b c3 e8 90 b7 72 [ 553.696508][ C1] RSP: 0018:ffffc900032c7c78 EFLAGS: 00000286 [ 553.702650][ C1] RAX: a7558aa301326e00 RBX: ffff88802dc00940 RCX: a7558aa301326e00 [ 553.710701][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 553.719287][ C1] RBP: ffff88802dc00dd8 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 553.727513][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 1ffff11005b801bb [ 553.735684][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 553.743834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 553.749118][ C1] get_signal+0x11f5/0x13f0 [ 553.753810][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 553.760333][ C1] ? get_sigframe_size+0x20/0x20 [ 553.765507][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 553.771232][ C1] exit_to_user_mode_loop+0x70/0x110 [ 553.777077][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 553.783247][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 553.788880][ C1] do_syscall_64+0x61/0xa0 [ 553.793828][ C1] ? clear_bhb_loop+0x40/0x90 [ 553.799121][ C1] ? clear_bhb_loop+0x40/0x90 [ 553.804671][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 553.811506][ C1] RIP: 0033:0x7f6cbac6b45a [ 553.816465][ C1] Code: 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 <66> 0f 1f 44 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 [ 553.836848][ C1] RSP: 002b:00007ffee5b3a8d0 EFLAGS: 00000293 [ 553.843751][ C1] RAX: 00007f6cba4327a8 RBX: 00007f6cba428b30 RCX: ffffffff812e4af4 [ 553.852001][ C1] RDX: ffffffff812e4af4 RSI: ffffffff812e4b1a RDI: 00007f6cba42c418 [ 553.862231][ C1] RBP: 00007f6cba4218c0 R08: 00007f6cbb000000 R09: 00007f6cbb016128 [ 553.872739][ C1] R10: 0000000000000001 R11: 000000000000000f R12: 00007f6cba436f70 [ 553.881048][ C1] R13: 000000000000001e R14: 0000000000002ad6 R15: 0000000000000001 [ 553.889296][ C1] ? arch_do_signal_or_restart+0x3f4/0x800 [ 553.895302][ C1] ? arch_do_signal_or_restart+0x3f4/0x800 [ 553.901543][ C1] ? arch_do_signal_or_restart+0x41a/0x800 [ 553.907820][ C1] [ 553.910990][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 553.919285][ C1] CPU: 1 PID: 9184 Comm: syz.1.862 Not tainted syzkaller #0 [ 553.927091][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 553.939432][ C1] Call Trace: [ 553.942854][ C1] [ 553.947937][ C1] dump_stack_lvl+0x18c/0x250 [ 553.952686][ C1] ? show_regs_print_info+0x20/0x20 [ 553.957951][ C1] ? load_image+0x400/0x400 [ 553.962652][ C1] panic+0x2dc/0x730 [ 553.966615][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 553.971398][ C1] __warn+0x2e0/0x470 [ 553.975486][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 553.981275][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 553.987068][ C1] report_bug+0x2be/0x4f0 [ 553.991477][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 553.997264][ C1] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 554.003062][ C1] ? rcu_check_gp_start_stall+0x2de/0x460 [ 554.009292][ C1] handle_bug+0xcf/0x120 [ 554.013615][ C1] exc_invalid_op+0x1a/0x50 [ 554.018213][ C1] asm_exc_invalid_op+0x1a/0x20 [ 554.023131][ C1] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 554.029557][ C1] Code: ff ff ff 48 c7 c7 a0 84 30 97 be 04 00 00 00 e8 6a ca 6d 00 48 89 df b8 01 00 00 00 87 05 1c 11 bf 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff 40 72 13 8d 74 47 48 c7 c0 6c 14 8b 8e 48 c1 e8 03 [ 554.049228][ C1] RSP: 0018:ffffc900001f0bb8 EFLAGS: 00010046 [ 554.055354][ C1] RAX: 0000000000000000 RBX: ffffffff8d137240 RCX: ffffffff81717376 [ 554.063376][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8d137240 [ 554.071399][ C1] RBP: ffffc900001f0e30 R08: 0000000000000003 R09: 0000000000000004 [ 554.079420][ C1] R10: dffffc0000000000 R11: fffffbfff2e61094 R12: 0000000000002904 [ 554.087432][ C1] R13: ffffffff8d137240 R14: 0000000000000a02 R15: dffffc0000000000 [ 554.095555][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 554.101477][ C1] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 554.107358][ C1] rcu_core+0x635/0x1770 [ 554.111752][ C1] ? ktime_get+0x7f/0x280 [ 554.116143][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 554.121570][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 554.126828][ C1] ? sched_clock+0x3f/0x60 [ 554.131384][ C1] ? sched_clock_cpu+0x75/0x430 [ 554.136285][ C1] ? ktime_get+0x7f/0x280 [ 554.140671][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 554.146712][ C1] ? lock_chain_count+0x20/0x20 [ 554.151713][ C1] handle_softirqs+0x280/0x820 [ 554.156749][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 554.161595][ C1] ? do_softirq+0x1a0/0x1a0 [ 554.166348][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 554.171622][ C1] __irq_exit_rcu+0xd3/0x190 [ 554.176334][ C1] ? irq_exit_rcu+0x20/0x20 [ 554.180998][ C1] irq_exit_rcu+0x9/0x20 [ 554.185416][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 554.191199][ C1] [ 554.194206][ C1] [ 554.197179][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 554.203344][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 554.209198][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 7a be da f6 48 89 df e8 32 93 db f6 e8 bd 9e ff f6 fb bf 01 00 00 00 42 99 ce f6 65 8b 05 13 d0 75 75 85 c0 74 02 5b c3 e8 90 b7 72 [ 554.229038][ C1] RSP: 0018:ffffc900032c7c78 EFLAGS: 00000286 [ 554.235172][ C1] RAX: a7558aa301326e00 RBX: ffff88802dc00940 RCX: a7558aa301326e00 [ 554.243219][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 554.251239][ C1] RBP: ffff88802dc00dd8 R08: ffffffff8e8adfaf R09: 1ffffffff1d15bf5 [ 554.259269][ C1] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 1ffff11005b801bb [ 554.267334][ C1] R13: 0000000000000021 R14: dffffc0000000000 R15: 0000000000000000 [ 554.275381][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 554.280639][ C1] get_signal+0x11f5/0x13f0 [ 554.285210][ C1] arch_do_signal_or_restart+0xc2/0x800 [ 554.290824][ C1] ? get_sigframe_size+0x20/0x20 [ 554.295840][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 554.301371][ C1] exit_to_user_mode_loop+0x70/0x110 [ 554.307002][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 554.312641][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 554.318194][ C1] do_syscall_64+0x61/0xa0 [ 554.322874][ C1] ? clear_bhb_loop+0x40/0x90 [ 554.327618][ C1] ? clear_bhb_loop+0x40/0x90 [ 554.332455][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.338427][ C1] RIP: 0033:0x7f6cbac6b45a [ 554.342905][ C1] Code: 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 48 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 39 f2 73 13 <66> 0f 1f 44 00 00 48 8b 70 f8 48 83 e8 08 48 39 f2 72 f3 48 39 c3 [ 554.362587][ C1] RSP: 002b:00007ffee5b3a8d0 EFLAGS: 00000293 [ 554.368796][ C1] RAX: 00007f6cba4327a8 RBX: 00007f6cba428b30 RCX: ffffffff812e4af4 [ 554.376816][ C1] RDX: ffffffff812e4af4 RSI: ffffffff812e4b1a RDI: 00007f6cba42c418 [ 554.384834][ C1] RBP: 00007f6cba4218c0 R08: 00007f6cbb000000 R09: 00007f6cbb016128 [ 554.392875][ C1] R10: 0000000000000001 R11: 000000000000000f R12: 00007f6cba436f70 [ 554.400904][ C1] R13: 000000000000001e R14: 0000000000002ad6 R15: 0000000000000001 [ 554.408954][ C1] ? arch_do_signal_or_restart+0x3f4/0x800 [ 554.414836][ C1] ? arch_do_signal_or_restart+0x3f4/0x800 [ 554.420707][ C1] ? arch_do_signal_or_restart+0x41a/0x800 [ 554.426573][ C1] [ 554.430212][ C1] Kernel Offset: disabled [ 554.435201][ C1] Rebooting in 86400 seconds..