last executing test programs: 1m33.435307541s ago: executing program 0 (id=31): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000080)={0x1, 0x7, 0x2, 0x6, 0xe5, 0x0, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) ioctl$int_in(r2, 0x5421, 0x0) 1m32.626179066s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100)={[{@auto_da_alloc}]}, 0x3, 0x46b, &(0x7f00000007c0)="$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") 1m32.122881871s ago: executing program 0 (id=34): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000240)='ntfs3\x00', 0x0, &(0x7f00000001c0)='acl') r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x8) socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x14, 0x4, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'geneve0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) 1m30.788150382s ago: executing program 0 (id=36): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@grpquota}]}, 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @adiantum, 0x0, @desc1}) 1m28.383670026s ago: executing program 0 (id=45): openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi0\x00', 0x100, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x101200, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000240)={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) 1m26.737513916s ago: executing program 0 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0x5, r5}) 1m26.165244293s ago: executing program 32 (id=49): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x100008) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000cc0), 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000380)={0x5, r5}) 9.592556626s ago: executing program 4 (id=226): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 9.224253838s ago: executing program 4 (id=230): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) ioctl$COMEDI_BUFINFO(r3, 0xc02c640e, &(0x7f0000000080)={0x1, 0x7, 0x2, 0x6, 0xe5, 0x0, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) ioctl$int_in(r4, 0x5421, 0x0) 8.201002969s ago: executing program 3 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = gettid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}}, 0x4c0c8) tkill(r5, 0xb) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r7, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 7.099422272s ago: executing program 2 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 7.098410963s ago: executing program 3 (id=235): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000cc0)={[{@nls={'nls', 0x3d, 'ascii'}}, {@nodecompose}, {@uid}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1994468, 0x0, 0x5, 0x0, &(0x7f00000001c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 6.624263807s ago: executing program 1 (id=236): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x6, 0x401}, &(0x7f00000000c0)=0x8) 6.624085997s ago: executing program 3 (id=237): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 6.461792002s ago: executing program 1 (id=238): socket$inet(0x2, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) 5.500972781s ago: executing program 3 (id=239): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x18}}], 0x4, 0x2090) 5.140287632s ago: executing program 1 (id=240): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 5.139960203s ago: executing program 3 (id=241): preadv(0xffffffffffffffff, &(0x7f00000026c0)=[{&(0x7f0000002700)=""/4088, 0xff8}], 0x1, 0x17c, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x17ff, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x8}) read(r4, &(0x7f0000000140)=""/116, 0x74) syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000014c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000010c0)={0xffffffffffffffff, 0x18, [0xb, 0x3df1, 0x1, 0x8001], &(0x7f0000001080)=[0x0, 0x0, 0x0]}) preadv(r5, &(0x7f0000001500)=[{&(0x7f0000000080)=""/4080, 0x1044}], 0x1, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 5.114052873s ago: executing program 2 (id=242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0xfd8d}], 0x2}, 0x4) 4.993442077s ago: executing program 1 (id=243): request_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200000000000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.380170155s ago: executing program 2 (id=244): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r5, r4, 0x0, 0xfffa83) 2.756499846s ago: executing program 2 (id=245): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4e0) syz_emit_ethernet(0x60, &(0x7f0000000b00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd699e0000002a0601fe800000000000000000000000000039fe8000000000000000000000000000aa4e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7102fffd"], 0x0) 2.681169738s ago: executing program 3 (id=246): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev(r1, &(0x7f0000003300)=[{&(0x7f0000000500)="2dd0c7", 0x3}, {0x0}], 0x2, 0x9, 0x1ff) 2.6204852s ago: executing program 4 (id=247): syz_mount_image$udf(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4e8, &(0x7f00000005c0)="$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") 2.292495739s ago: executing program 4 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x0, 0x20, 0x1, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) 1.832028054s ago: executing program 2 (id=249): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) sendmmsg$inet(r4, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(0xffffffffffffffff, 0xc0305602, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}) 1.29821366s ago: executing program 4 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}], 0x2, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) 383.784508ms ago: executing program 1 (id=251): socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 261.742262ms ago: executing program 2 (id=252): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000bfc000/0xb000)=nil, &(0x7f0000005000/0x3000)=nil, 0xb000, 0x3}) 176.159155ms ago: executing program 1 (id=253): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000cc0)="adf802e537", 0x5) accept4(r0, 0x0, 0x0, 0x800) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0}], 0x4}, 0x24008004) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ff07056b", @ANYRES16=0x0, @ANYBLOB="010002000000fedbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="0800080001", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 0s ago: executing program 4 (id=254): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0700000004000000200000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000f908004457e4b4bf65320103e6c0"], 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523"], 0xfe33) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffff0000}}], 0x68000, 0xe000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. [ 72.462711][ T5760] cgroup: Unknown subsys name 'net' [ 72.629700][ T5760] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.985784][ T5760] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.039750][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.047209][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.050550][ T5778] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.062720][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.071101][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.071873][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.079204][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.094264][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.101639][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.108243][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.114170][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.115837][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.130213][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.139029][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.148415][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.163867][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.171567][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.179027][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.185123][ T5778] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.188435][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.200908][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.208859][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.216495][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.224539][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.580483][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.701160][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 76.711740][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 76.739689][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 76.815506][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.822780][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.830327][ T5771] bridge_slave_0: entered allmulticast mode [ 76.839478][ T5771] bridge_slave_0: entered promiscuous mode [ 76.873973][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.881100][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.888524][ T5771] bridge_slave_1: entered allmulticast mode [ 76.895447][ T5771] bridge_slave_1: entered promiscuous mode [ 76.941301][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.950233][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.958352][ T5781] bridge_slave_0: entered allmulticast mode [ 76.966874][ T5781] bridge_slave_0: entered promiscuous mode [ 76.984824][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.991930][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.000114][ T5781] bridge_slave_1: entered allmulticast mode [ 77.008594][ T5781] bridge_slave_1: entered promiscuous mode [ 77.060382][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.070204][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.079786][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.087110][ T5776] bridge_slave_0: entered allmulticast mode [ 77.094790][ T5776] bridge_slave_0: entered promiscuous mode [ 77.102860][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.110573][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.117994][ T5776] bridge_slave_1: entered allmulticast mode [ 77.125521][ T5776] bridge_slave_1: entered promiscuous mode [ 77.132379][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.141810][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.152982][ T5772] bridge_slave_0: entered allmulticast mode [ 77.162657][ T5772] bridge_slave_0: entered promiscuous mode [ 77.183934][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.211497][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.220191][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.227554][ T5772] bridge_slave_1: entered allmulticast mode [ 77.234994][ T5772] bridge_slave_1: entered promiscuous mode [ 77.243924][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.292579][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.314496][ T5771] team0: Port device team_slave_0 added [ 77.322768][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.334623][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.347356][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.369212][ T5771] team0: Port device team_slave_1 added [ 77.377739][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.396795][ T5781] team0: Port device team_slave_0 added [ 77.431242][ T5776] team0: Port device team_slave_0 added [ 77.441866][ T5781] team0: Port device team_slave_1 added [ 77.467549][ T5776] team0: Port device team_slave_1 added [ 77.510427][ T5772] team0: Port device team_slave_0 added [ 77.518930][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.530150][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.571929][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.599850][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.609415][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.642421][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.662118][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.673152][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.702038][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.714775][ T5772] team0: Port device team_slave_1 added [ 77.721471][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.728530][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.754772][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.789288][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.796523][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.822678][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.857364][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.865460][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.896274][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.919579][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.926846][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.955784][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.987294][ T5781] hsr_slave_0: entered promiscuous mode [ 78.001221][ T5781] hsr_slave_1: entered promiscuous mode [ 78.040883][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.048899][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.081356][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.109984][ T5771] hsr_slave_0: entered promiscuous mode [ 78.116767][ T5771] hsr_slave_1: entered promiscuous mode [ 78.122833][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.132441][ T5771] Cannot create hsr debugfs directory [ 78.174100][ T5775] Bluetooth: hci0: command tx timeout [ 78.200401][ T5776] hsr_slave_0: entered promiscuous mode [ 78.207419][ T5776] hsr_slave_1: entered promiscuous mode [ 78.216095][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.224101][ T5776] Cannot create hsr debugfs directory [ 78.253223][ T5775] Bluetooth: hci3: command tx timeout [ 78.257489][ T5789] Bluetooth: hci1: command tx timeout [ 78.259147][ T5782] Bluetooth: hci2: command tx timeout [ 78.347186][ T5772] hsr_slave_0: entered promiscuous mode [ 78.359045][ T5772] hsr_slave_1: entered promiscuous mode [ 78.366348][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.380069][ T5772] Cannot create hsr debugfs directory [ 78.651032][ T5771] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.701492][ T5771] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.714649][ T5771] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.756577][ T5771] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.832812][ T5781] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.845519][ T5781] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.861974][ T5781] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.874710][ T5781] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.928704][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.968862][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.987570][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.000559][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.127570][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.154513][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.166433][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.176816][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.249266][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.285469][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.319583][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.338071][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.345384][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.369612][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.381283][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.388569][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.414350][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.441601][ T2975] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.448798][ T2975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.462851][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.470034][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.509366][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.540512][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.547708][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.562408][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.569543][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.609525][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.699819][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.755853][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.763031][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.788136][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.795306][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.900240][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.991794][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.096591][ T5771] veth0_vlan: entered promiscuous mode [ 80.129284][ T5771] veth1_vlan: entered promiscuous mode [ 80.218270][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.259996][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.263903][ T5782] Bluetooth: hci0: command tx timeout [ 80.269779][ T5771] veth0_macvtap: entered promiscuous mode [ 80.290456][ T5771] veth1_macvtap: entered promiscuous mode [ 80.333942][ T5782] Bluetooth: hci2: command tx timeout [ 80.339400][ T5782] Bluetooth: hci3: command tx timeout [ 80.341801][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.344983][ T5775] Bluetooth: hci1: command tx timeout [ 80.379616][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.401813][ T5781] veth0_vlan: entered promiscuous mode [ 80.418001][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.440648][ T5781] veth1_vlan: entered promiscuous mode [ 80.448760][ T5771] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.459548][ T5771] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.469168][ T5771] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.478011][ T5771] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.525533][ T5776] veth0_vlan: entered promiscuous mode [ 80.538049][ T5772] veth0_vlan: entered promiscuous mode [ 80.568075][ T5776] veth1_vlan: entered promiscuous mode [ 80.595144][ T5772] veth1_vlan: entered promiscuous mode [ 80.648762][ T5776] veth0_macvtap: entered promiscuous mode [ 80.658375][ T5781] veth0_macvtap: entered promiscuous mode [ 80.683788][ T5781] veth1_macvtap: entered promiscuous mode [ 80.692434][ T5776] veth1_macvtap: entered promiscuous mode [ 80.736763][ T5772] veth0_macvtap: entered promiscuous mode [ 80.760127][ T5772] veth1_macvtap: entered promiscuous mode [ 80.771191][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.784416][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.795720][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.807615][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.817703][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.828873][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.841157][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.851780][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.862604][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.875311][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.901523][ T5781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.916445][ T5781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.927984][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.957511][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.968561][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.980573][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.991086][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.002350][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.015617][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.025311][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.034130][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.042802][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.061680][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.066920][ T5781] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.079961][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.083643][ T5781] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.096199][ T5781] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.105545][ T5781] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.116869][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.127633][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.139756][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.150482][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.160545][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.171523][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.183575][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.195998][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.206734][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.218511][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.229721][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.239640][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.250142][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.261062][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.304753][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.327580][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.338846][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.347725][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.458296][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.480620][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.554489][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.562323][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.630151][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.646263][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.652593][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.668385][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.717752][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.752801][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.905000][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.947471][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.343935][ T5775] Bluetooth: hci0: command tx timeout [ 82.413983][ T5782] Bluetooth: hci3: command tx timeout [ 82.419590][ T5775] Bluetooth: hci1: command tx timeout [ 82.432130][ T5782] Bluetooth: hci2: command tx timeout [ 84.433190][ T5775] Bluetooth: hci0: command tx timeout [ 84.553800][ T5872] Zero length message leads to an empty skb [ 84.624084][ T5775] Bluetooth: hci2: command tx timeout [ 84.631224][ T5775] Bluetooth: hci3: command tx timeout [ 84.973251][ T5782] Bluetooth: hci1: command tx timeout [ 85.328060][ T5878] syz.2.13[5878]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.559496][ T5878] loop2: detected capacity change from 0 to 32768 [ 85.713749][ T5878] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 85.722975][ T5878] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 85.881335][ T5878] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 1ms [ 85.950930][ T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 86.035481][ T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 86.142745][ T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 107ms [ 86.163795][ T9] gfs2: fsid=syz:syz.0: jid=0: Done [ 86.184243][ T5878] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 86.432561][ T5878] gfs2: fsid=syz:syz.0: found 1 quota changes [ 87.006075][ T23] cfg80211: failed to load regulatory.db [ 89.419982][ T5781] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 89.419982][ T5781] inode = 11 2339 [ 89.419982][ T5781] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 421 [ 89.463870][ T5781] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 90.549166][ T5921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.556972][ T5781] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5781 [syz-executor] gfs2_quota_sync+0x411/0x5a0 [ 90.589853][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.601208][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.613306][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.629384][ T5781] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 90.722436][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.732841][ T5781] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 90.735854][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.760457][ T5781] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 90.771259][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.781456][ T5781] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 90.791655][ T5781] gfs2: fsid=syz:syz.0: File system withdrawn [ 90.807146][ T5923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.824142][ T5781] CPU: 1 PID: 5781 Comm: syz-executor Not tainted syzkaller #0 [ 90.831736][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.842021][ T5781] Call Trace: [ 90.845311][ T5781] [ 90.848234][ T5781] dump_stack_lvl+0x18c/0x250 [ 90.852903][ T5781] ? kobject_uevent_env+0x363/0x8b0 [ 90.858092][ T5781] ? show_regs_print_info+0x20/0x20 [ 90.863297][ T5781] ? load_image+0x420/0x420 [ 90.867790][ T5781] ? kobject_uevent_env+0x363/0x8b0 [ 90.872979][ T5781] gfs2_withdraw+0xb24/0x13d0 [ 90.877655][ T5781] ? gfs2_lm+0x240/0x240 [ 90.882600][ T5781] ? gfs2_consist_inode_i+0xf5/0x110 [ 90.887899][ T5781] gfs2_inode_refresh+0xc50/0x1160 [ 90.893021][ T5781] ? gfs2_inode_metasync+0xf0/0xf0 [ 90.898143][ T5781] ? gfs2_glock_nq+0xd4f/0x1420 [ 90.903006][ T5781] gfs2_instantiate+0x162/0x220 [ 90.907849][ T5781] gfs2_glock_wait+0x1d4/0x2a0 [ 90.912607][ T5781] do_sync+0x4c6/0xe50 [ 90.916664][ T5781] ? gfs2_quota_sync+0x411/0x5a0 [ 90.921606][ T5781] ? bh_get+0x760/0x760 [ 90.925779][ T5781] ? __lock_acquire+0x7d40/0x7d40 [ 90.930799][ T5781] ? do_raw_spin_lock+0x11f/0x2c0 [ 90.936186][ T5781] ? gfs2_quota_sync+0x411/0x5a0 [ 90.941131][ T5781] ? do_raw_spin_unlock+0x121/0x230 [ 90.946331][ T5781] gfs2_quota_sync+0x411/0x5a0 [ 90.951124][ T5781] gfs2_sync_fs+0x4c/0xb0 [ 90.955481][ T5781] sync_filesystem+0xea/0x220 [ 90.960165][ T5781] generic_shutdown_super+0x6f/0x2b0 [ 90.965450][ T5781] kill_block_super+0x44/0x90 [ 90.970125][ T5781] deactivate_locked_super+0x97/0x100 [ 90.975497][ T5781] cleanup_mnt+0x43b/0x4d0 [ 90.979911][ T5781] task_work_run+0x1d4/0x260 [ 90.984507][ T5781] ? task_work_cancel+0x220/0x220 [ 90.989576][ T5781] ? exit_to_user_mode_loop+0x3b/0x110 [ 90.995072][ T5781] exit_to_user_mode_loop+0xe6/0x110 [ 91.000397][ T5781] exit_to_user_mode_prepare+0xee/0x180 [ 91.005966][ T5781] syscall_exit_to_user_mode+0x1a/0x50 [ 91.011436][ T5781] do_syscall_64+0x61/0xb0 [ 91.015853][ T5781] ? clear_bhb_loop+0x40/0x90 [ 91.020608][ T5781] ? clear_bhb_loop+0x40/0x90 [ 91.025275][ T5781] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.031271][ T5781] RIP: 0033:0x7f5e0f59e097 [ 91.035712][ T5781] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 91.055512][ T5781] RSP: 002b:00007ffcf4e6cf78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 91.063932][ T5781] RAX: 0000000000000000 RBX: 00007f5e0f6321ca RCX: 00007f5e0f59e097 [ 91.071896][ T5781] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcf4e6d030 [ 91.079880][ T5781] RBP: 00007ffcf4e6d030 R08: 00007ffcf4e6e030 R09: 00000000ffffffff [ 91.087858][ T5781] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcf4e6e0c0 [ 91.095823][ T5781] R13: 00007f5e0f6321ca R14: 000000000001535c R15: 00007ffcf4e6e100 [ 91.103831][ T5781] [ 91.157577][ T5923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.185430][ T5923] ipvlan2: entered allmulticast mode [ 91.200953][ T5923] batadv_slave_1: entered allmulticast mode [ 91.353017][ T5923] batman_adv: batadv0: Adding interface: ipvlan2 [ 91.379861][ T5923] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.059272][ T5923] batman_adv: batadv0: Interface activated: ipvlan2 [ 93.324915][ T5938] loop3: detected capacity change from 0 to 32768 [ 93.372993][ T5941] loop0: detected capacity change from 0 to 512 [ 93.382380][ T5941] ======================================================= [ 93.382380][ T5941] WARNING: The mand mount option has been deprecated and [ 93.382380][ T5941] and is ignored by this kernel. Remove the mand [ 93.382380][ T5941] option from the mount to silence this warning. [ 93.382380][ T5941] ======================================================= [ 93.448677][ T5941] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 93.462247][ T5941] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.478736][ T5941] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (54102!=33349) [ 93.488764][ T5941] EXT4-fs (loop0): group descriptors corrupted! [ 93.510945][ T5938] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 93.582712][ T5955] ntfs3: loop0: Primary boot signature is not NTFS. [ 93.593415][ T5938] XFS (loop3): Ending clean mount [ 93.610053][ T5938] XFS (loop3): Quotacheck needed: Please wait. [ 93.620930][ T5955] ntfs3: loop0: try to read out of volume at offset 0x3fe00 [ 93.815148][ T5938] XFS (loop3): Quotacheck: Done. [ 94.953388][ T5772] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 94.969747][ T5961] loop0: detected capacity change from 0 to 512 [ 95.024303][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.36: inode has both inline data and extents flags [ 95.083302][ T5961] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.36: couldn't read orphan inode 15 (err -117) [ 95.151558][ T5961] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.219401][ T5965] trusted_key: syz.1.33 sent an empty control message without MSG_MORE. [ 95.464960][ T5961] loop0: detected capacity change from 512 to 0 [ 95.613934][ C0] I/O error, dev loop0, sector 24 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.629264][ T5968] syz.0.36: attempt to access beyond end of device [ 95.629264][ T5968] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 95.646680][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.666727][ T5968] syz.0.36: attempt to access beyond end of device [ 95.666727][ T5968] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 95.717412][ T5968] syz.0.36: attempt to access beyond end of device [ 95.717412][ T5968] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 95.775281][ T5968] syz.0.36: attempt to access beyond end of device [ 95.775281][ T5968] loop0: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 95.811009][ T5968] syz.0.36: attempt to access beyond end of device [ 95.811009][ T5968] loop0: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 95.843275][ T5968] syz.0.36: attempt to access beyond end of device [ 95.843275][ T5968] loop0: rw=12288, sector=18, nr_sectors = 2 limit=0 [ 96.028580][ C0] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 96.039109][ T5968] EXT4-fs error (device loop0): ext4_get_inode_loc:4634: inode #18: block 9: comm syz.0.36: unable to read itable block [ 96.052256][ T5968] syz.0.36: attempt to access beyond end of device [ 96.052256][ T5968] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 96.070605][ T5968] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 96.079523][ T5968] EXT4-fs (loop0): I/O error while writing superblock [ 96.087106][ T5968] EXT4-fs error (device loop0): empty_inline_dir:1849: inode #18: comm syz.0.36: error -5 getting inode 18 block [ 96.921878][ T5968] syz.0.36: attempt to access beyond end of device [ 96.921878][ T5968] loop0: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 96.963690][ T5983] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.052752][ T5968] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 97.110775][ T5968] EXT4-fs (loop0): I/O error while writing superblock [ 97.135785][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.203614][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.231387][ T5771] syz-executor: attempt to access beyond end of device [ 97.231387][ T5771] loop0: rw=12288, sector=72, nr_sectors = 2 limit=0 [ 97.253337][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.291233][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.343928][ T5771] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 97.363286][ C0] vkms_vblank_simulate: vblank timer overrun [ 98.085634][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.140362][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.169066][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.192013][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.241658][ T5981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 98.252227][ T5981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.269666][ T2998] kworker/u4:11: attempt to access beyond end of device [ 98.269666][ T2998] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 98.273352][ T5981] ipvlan2: entered allmulticast mode [ 98.289108][ T5981] batadv_slave_1: entered allmulticast mode [ 98.308900][ T5981] batman_adv: batadv0: Adding interface: ipvlan2 [ 98.316279][ T5981] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.333740][ T2998] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4619: inode #2: block 5: comm kworker/u4:11: unable to read itable block [ 98.361408][ T5981] batman_adv: batadv0: Interface activated: ipvlan2 [ 98.389769][ T2998] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 98.412166][ T2998] EXT4-fs (loop0): I/O error while writing superblock [ 98.436960][ T5771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.494974][ T5771] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 98.518620][ T5771] EXT4-fs (loop0): I/O error while writing superblock [ 98.910270][ T3008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.026638][ T3008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.138910][ T3008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.209091][ T6003] loop1: detected capacity change from 0 to 32768 [ 99.291981][ T6003] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 99.305992][ T6003] JBD2: Ignoring recovery information on journal [ 99.325660][ T3008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.418464][ T6003] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 100.588792][ T5776] ocfs2: Unmounting device (7,1) on (node local) [ 102.468891][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.520350][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.313261][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.364943][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.372857][ T5775] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.381047][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.771449][ T6052] binder_alloc: 6051: binder_alloc_buf, no vma [ 105.802476][ T5782] Bluetooth: hci0: command tx timeout [ 107.864192][ T5782] Bluetooth: hci0: command tx timeout [ 108.623350][ T3008] hsr_slave_0: left promiscuous mode [ 108.647810][ T3008] hsr_slave_1: left promiscuous mode [ 108.682128][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.708957][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.758381][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.767750][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.780732][ T3008] bridge_slave_1: left allmulticast mode [ 108.793293][ T3008] bridge_slave_1: left promiscuous mode [ 109.013338][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.460679][ T3008] bridge_slave_0: left allmulticast mode [ 109.467490][ T3008] bridge_slave_0: left promiscuous mode [ 109.474247][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.545817][ T3008] veth1_macvtap: left promiscuous mode [ 109.555561][ T3008] veth0_macvtap: left promiscuous mode [ 109.561252][ T3008] veth1_vlan: left promiscuous mode [ 109.586016][ T3008] veth0_vlan: left promiscuous mode [ 109.933245][ T5782] Bluetooth: hci0: command tx timeout [ 112.023367][ T5782] Bluetooth: hci0: command tx timeout [ 112.345578][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 112.427239][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 112.594959][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.802153][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.760809][ T3008] bond0 (unregistering): Released all slaves [ 113.863280][ T6036] chnl_net:caif_netlink_parms(): no params data found [ 113.894561][ T6134] netlink: 14 bytes leftover after parsing attributes in process `syz.1.80'. [ 116.105492][ T6036] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.112603][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.158847][ T6036] bridge_slave_0: entered allmulticast mode [ 116.186988][ T6036] bridge_slave_0: entered promiscuous mode [ 116.213919][ T6036] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.221147][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.253552][ T6036] bridge_slave_1: entered allmulticast mode [ 116.273776][ T6036] bridge_slave_1: entered promiscuous mode [ 116.368909][ T6036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.399712][ T6036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.532405][ T6036] team0: Port device team_slave_0 added [ 116.575667][ T6036] team0: Port device team_slave_1 added [ 116.684330][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.694238][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.743020][ T6036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.765178][ T6036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.772251][ T6036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.873148][ T6036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.020179][ T6036] hsr_slave_0: entered promiscuous mode [ 117.051235][ T6036] hsr_slave_1: entered promiscuous mode [ 117.070254][ T6036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.094263][ T6036] Cannot create hsr debugfs directory [ 117.970912][ T6199] loop1: detected capacity change from 0 to 4096 [ 117.985895][ T6036] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.009365][ T6036] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.033252][ T6199] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 118.076681][ T6036] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.148242][ T6036] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.189918][ T6199] ntfs3: loop1: $Secure::$SDH is corrupted. [ 118.219004][ T6199] ntfs3: loop1: Failed to initialize $Secure (-22). [ 118.432178][ T6036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.508985][ T6036] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.384883][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.392847][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.402358][ T2932] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.409584][ T2932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.464130][ T6036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 121.952107][ T6036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.994840][ T6254] syzkaller0: entered promiscuous mode [ 122.055521][ T6254] syzkaller0: entered allmulticast mode [ 122.414264][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 122.726500][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 122.858408][ T23] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 122.928934][ T23] usb 2-1: config 0 has no interface number 0 [ 122.950366][ T23] usb 2-1: config 0 interface 12 has no altsetting 0 [ 122.972306][ T23] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 123.037272][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.073477][ T23] usb 2-1: Product: syz [ 123.077969][ T23] usb 2-1: Manufacturer: syz [ 123.082599][ T23] usb 2-1: SerialNumber: syz [ 123.157038][ T23] usb 2-1: config 0 descriptor?? [ 123.187098][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.3.107'. [ 124.610211][ T6036] veth0_vlan: entered promiscuous mode [ 125.139660][ T6293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.324807][ T6036] veth1_vlan: entered promiscuous mode [ 125.379628][ T6036] veth0_macvtap: entered promiscuous mode [ 125.406127][ T6036] veth1_macvtap: entered promiscuous mode [ 125.426154][ T23] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 125.443853][ T23] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 125.452692][ T23] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 125.465869][ T23] f81534: probe of 2-1:0.12 failed with error -71 [ 125.558967][ T23] usb 2-1: USB disconnect, device number 2 [ 125.686436][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.703741][ T5786] udevd[5786]: setting mode of /dev/bus/usb/002/002 to 020664 failed: No such file or directory [ 125.720405][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.739691][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.791079][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.795990][ T5786] udevd[5786]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: No such file or directory [ 125.992573][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.053158][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.101590][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.129688][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.157097][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.169892][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.183267][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.199681][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.210271][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.224917][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 126.239132][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.250762][ T6036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 126.308434][ T6036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.364764][ T6036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.416210][ T6036] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.454991][ T6036] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.475722][ T6036] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.493691][ T6036] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.494347][ T6314] capability: warning: `syz.1.115' uses deprecated v2 capabilities in a way that may be insecure [ 128.129947][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.157182][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.183910][ T6297] loop3: detected capacity change from 0 to 32768 [ 128.461946][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.589872][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.598897][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 129.661950][ T6338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.121'. [ 129.701175][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.868704][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 130.724799][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 130.733959][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 130.743824][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 130.754559][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.766189][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.780365][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 130.789654][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.067568][ T9] usb 3-1: usb_control_msg returned -32 [ 131.100828][ T9] usbtmc 3-1:16.0: can't read capabilities [ 131.272040][ T9] usb 3-1: USB disconnect, device number 2 [ 131.627087][ T6329] io-wq is not configured for unbound workers [ 132.841062][ T6377] loop4: detected capacity change from 0 to 764 [ 133.060545][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.067733][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.573722][ T6377] rock: directory entry would overflow storage [ 133.608613][ T6377] rock: sig=0x4654, size=5, remaining=4 [ 134.752788][ T6392] syz.1.132 (6392) used greatest stack depth: 16136 bytes left [ 136.122227][ T6408] loop2: detected capacity change from 0 to 1024 [ 136.141601][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.173278][ T6408] EXT4-fs: inline encryption not supported [ 136.193272][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.282300][ T6408] EXT4-fs (loop2): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.357857][ T6408] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.943406][ T6415] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 137.259333][ T5781] EXT4-fs (loop2): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 138.066047][ T6440] loop3: detected capacity change from 0 to 1024 [ 138.180720][ T6440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.303265][ T6444] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.401978][ T6440] EXT4-fs: inline encryption not supported [ 139.696456][ T6440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.965793][ T6440] EXT4-fs (loop3): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.053373][ T6440] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.293628][ T6458] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 141.483596][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.501163][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.553367][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.568718][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.620897][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.634300][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.658060][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 141.670700][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.691414][ T6485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 141.714172][ T6485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.734484][ T5772] EXT4-fs (loop3): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 141.769163][ T6485] ipvlan3: entered allmulticast mode [ 141.831712][ T6485] batman_adv: batadv0: Adding interface: ipvlan3 [ 141.880719][ T6485] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.907163][ T6485] batman_adv: batadv0: Interface activated: ipvlan3 [ 143.506908][ T6503] loop4: detected capacity change from 0 to 64 [ 144.093340][ T5775] Bluetooth: hci0: command 0x0406 tx timeout [ 144.607794][ T6036] hfs: node 4:3 still has 1 user(s)! [ 144.882975][ T6520] loop2: detected capacity change from 0 to 512 [ 144.930997][ T6520] EXT4-fs: Ignoring removed i_version option [ 144.984232][ T6520] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 145.244134][ T6520] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.160: invalid indirect mapped block 4294967295 (level 1) [ 145.625406][ T6520] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.160: invalid indirect mapped block 4294967295 (level 1) [ 145.904273][ T6520] EXT4-fs (loop2): 2 truncates cleaned up [ 145.911517][ T6520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.093554][ T6529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 146.720695][ T27] audit: type=1800 audit(1780967539.558:2): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.160" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 146.759849][ T6537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.561195][ T5781] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.097822][ T6581] loop4: detected capacity change from 0 to 1024 [ 151.150815][ T6581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.172936][ T6581] EXT4-fs: inline encryption not supported [ 151.179381][ T6581] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.219038][ T6581] EXT4-fs (loop4): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 151.253429][ T6581] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.978697][ T6590] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 155.185596][ T6036] EXT4-fs (loop4): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 155.372897][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 155.655464][ T6640] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.665554][ T6640] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.674409][ T6640] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.683173][ T6640] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.741194][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 156.422567][ T6660] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 156.563191][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.645945][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 158.464615][ T8] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 158.472874][ T8] usb 5-1: config 0 has no interface number 0 [ 158.491878][ T8] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.513215][ T8] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 158.523436][ T8] usb 5-1: config 0 interface 41 has no altsetting 0 [ 158.543734][ T8] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 158.563251][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.571409][ T8] usb 5-1: Product: syz [ 158.577748][ T8] usb 5-1: Manufacturer: syz [ 158.583405][ T8] usb 5-1: SerialNumber: syz [ 158.593196][ T8] usb 5-1: config 0 descriptor?? [ 158.599284][ T6657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.607068][ T6657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.839826][ T6657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.863590][ T6657] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.933252][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.973513][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 159.990829][ T23] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 160.000005][ T23] usb 3-1: config 0 has no interface number 0 [ 160.015721][ T23] usb 3-1: config 0 interface 12 has no altsetting 0 [ 160.034454][ T23] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 160.072593][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.176638][ T23] usb 3-1: Product: syz [ 160.181266][ T23] usb 3-1: Manufacturer: syz [ 160.200809][ T23] usb 3-1: SerialNumber: syz [ 160.265551][ T23] usb 3-1: config 0 descriptor?? [ 160.467175][ T8] sr9700 5-1:0.41 eth5: register 'sr9700' at usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet, 6a:f4:56:b3:9f:cc [ 160.508131][ T8] usb 5-1: USB disconnect, device number 2 [ 160.517402][ T8] sr9700 5-1:0.41 eth5: unregister 'sr9700' usb-dummy_hcd.4-1, CoreChip SR9700 USB Ethernet [ 160.532985][ T6681] loop1: detected capacity change from 0 to 1024 [ 160.602926][ T6681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.623569][ T6681] EXT4-fs: inline encryption not supported [ 160.629605][ T6681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 160.694171][ T6681] EXT4-fs (loop1): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 160.707176][ T6681] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.063175][ T788] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 161.253309][ T788] usb 4-1: Using ep0 maxpacket: 16 [ 161.287550][ T788] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.320341][ T788] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.642904][ T23] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 161.922290][ T788] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 161.962448][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.987958][ T788] usb 4-1: Product: syz [ 162.003035][ T788] usb 4-1: Manufacturer: syz [ 162.012169][ T23] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 162.019588][ T23] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 162.027275][ T23] f81534: probe of 3-1:0.12 failed with error -71 [ 162.043176][ T23] usb 3-1: USB disconnect, device number 3 [ 162.048471][ T788] usb 4-1: SerialNumber: syz [ 162.081774][ T788] r8152-cfgselector 4-1: config 0 descriptor?? [ 162.103158][ T6689] EXT4-fs error (device loop1): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 162.347473][ T788] r8152-cfgselector 4-1: Unknown version 0x0000 [ 162.379660][ T788] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 163.277889][ T5776] EXT4-fs (loop1): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 164.626751][ T6726] syzkaller0: entered promiscuous mode [ 164.661832][ T6726] syzkaller0: entered allmulticast mode [ 164.744576][ T6745] loop3: detected capacity change from 0 to 512 [ 164.831706][ T27] audit: type=1326 audit(1780967557.678:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f59ce59 code=0x7ffc0000 [ 164.841079][ T6745] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.890163][ T6745] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.910528][ T27] audit: type=1326 audit(1780967557.678:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f59ce59 code=0x7ffc0000 [ 165.006783][ T27] audit: type=1326 audit(1780967557.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f59ce59 code=0x7ffc0000 [ 165.035219][ T6745] EXT4-fs (loop3): shut down requested (1) [ 165.093313][ T27] audit: type=1326 audit(1780967557.678:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f5e0f59ce59 code=0x7ffc0000 [ 165.118284][ T27] audit: type=1326 audit(1780967557.678:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0f59ce59 code=0x7ffc0000 [ 165.151271][ T27] audit: type=1326 audit(1780967557.738:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e0f55d68e code=0x7ffc0000 [ 165.160202][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.216686][ T27] audit: type=1326 audit(1780967557.738:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e0f55d68e code=0x7ffc0000 [ 165.270743][ T27] audit: type=1326 audit(1780967557.738:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e0f55d68e code=0x7ffc0000 [ 165.370365][ T27] audit: type=1326 audit(1780967557.738:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e0f55d68e code=0x7ffc0000 [ 165.581551][ T27] audit: type=1326 audit(1780967557.738:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6741 comm="syz.2.201" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e0f55d68e code=0x7ffc0000 [ 167.088280][ T6776] loop2: detected capacity change from 0 to 1024 [ 167.104902][ T6776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.126243][ T6776] EXT4-fs: inline encryption not supported [ 167.132190][ T6776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.379691][ T6776] EXT4-fs (loop2): mounted filesystem 00fc0c00-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.426577][ T6776] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.840614][ T5781] EXT4-fs (loop2): unmounting filesystem 00fc0c00-0000-0006-0000-000000000000. [ 170.237082][ T6808] loop1: detected capacity change from 0 to 16 [ 170.266798][ T6811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.213'. [ 170.287699][ T6808] erofs: (device loop1): mounted with root inode @ nid 36. [ 170.367853][ T5782] block nbd0: Receive control failed (result -1) [ 171.823477][ T6825] loop3: detected capacity change from 0 to 131072 [ 171.854380][ T6825] F2FS-fs (loop3): invalid crc value [ 171.914250][ T6825] F2FS-fs (loop3): Found nat_bits in checkpoint [ 172.027379][ T6825] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 172.062805][ T6825] F2FS-fs (loop3): Stopped filesystem due to reason: 0 [ 172.087491][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 172.087505][ T27] audit: type=1800 audit(1780967564.938:72): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.215" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 172.278155][ T6848] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.615773][ T6866] syzkaller0: entered promiscuous mode [ 174.622217][ T6866] syzkaller0: entered allmulticast mode [ 174.702974][ T6872] loop1: detected capacity change from 0 to 4096 [ 175.045198][ T6872] EXT4-fs (loop1): Test dummy encryption mode enabled [ 175.140905][ T6872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.610243][ T6872] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 175.695131][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.219595][ T6910] loop1: detected capacity change from 0 to 64 [ 176.854107][ T6920] loop3: detected capacity change from 0 to 128 [ 177.206985][ T6919] syzkaller0: entered promiscuous mode [ 177.364176][ T6919] syzkaller0: entered allmulticast mode [ 177.434357][ T6910] Trying to free block not in datazone [ 178.109435][ T6931] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.133573][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.792903][ T6940] loop3: detected capacity change from 0 to 1024 [ 181.486487][ T5775] Bluetooth: hci3: command 0x0406 tx timeout [ 182.793350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.043706][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 183.109947][ T6975] loop4: detected capacity change from 0 to 256 [ 183.128037][ T6975] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 183.159190][ T6975] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 183.169013][ T6975] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 183.181431][ T6975] UDF-fs: Scanning with blocksize 512 failed [ 183.199889][ T6975] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 183.225276][ T6975] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.259768][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.268069][ T9] usb 2-1: config 0 has no interface number 0 [ 183.283716][ T9] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 183.313274][ T9] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.332527][ T9] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.351264][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 183.363434][ T5819] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 183.364727][ T9] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 183.400566][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.444565][ T9] usb 2-1: config 0 descriptor?? [ 183.733177][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 183.745592][ T5819] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 183.754163][ T5819] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.764025][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.783512][ T5819] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.795158][ T5819] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.827167][ T5819] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.839394][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.131004][ T5819] usb 4-1: GET_CAPABILITIES returned 0 [ 184.148802][ T5819] usbtmc 4-1:16.0: can't read capabilities [ 185.235441][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 185.240157][ T5819] usb 4-1: USB disconnect, device number 3 [ 185.244365][ T9] uclogic 0003:145F:0212.0001: pen parameters not found [ 185.257564][ T9] uclogic 0003:145F:0212.0001: interface is invalid, ignoring [ 185.271613][ T9] usb 2-1: USB disconnect, device number 3 [ 185.699132][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.1.253'. [ 185.709987][ T6995] ------------[ cut here ]------------ [ 185.715933][ T6995] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 185.730064][ T6995] WARNING: CPU: 0 PID: 6995 at net/sched/cls_u32.c:855 u32_change+0x1c5a/0x24f0 [ 185.739533][ T6995] Modules linked in: [ 185.743533][ T6995] CPU: 0 PID: 6995 Comm: syz.1.253 Not tainted syzkaller #0 [ 185.751038][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.761199][ T6995] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 185.767564][ T6995] Code: f8 eb 59 e8 78 00 d7 f8 c6 05 09 e0 c5 05 01 b9 10 00 00 00 48 c7 c7 c0 a3 c7 8b 4c 89 f6 48 c7 c2 40 a4 c7 8b e8 56 b2 a0 f8 <0f> 0b e9 86 f0 ff ff e8 4a 00 d7 f8 eb 24 e8 43 00 d7 f8 c6 05 a3 [ 185.787406][ T6995] RSP: 0018:ffffc9000cb06d40 EFLAGS: 00010246 [ 185.793966][ T6995] RAX: 4c9dc196a14cc700 RBX: ffff88805cdf9400 RCX: 0000000000080000 [ 185.801975][ T6995] RDX: ffffc9000cc9a000 RSI: 0000000000009172 RDI: 0000000000009173 [ 185.810046][ T6995] RBP: ffffc9000cb06ef8 R08: ffffc9000cb06947 R09: 1ffff92001960d28 [ 185.818090][ T6995] R10: dffffc0000000000 R11: fffff52001960d29 R12: ffff88805c8e2800 [ 185.826186][ T6995] R13: ffff88805c8e28e8 R14: 0000000000000020 R15: ffff88801be68000 [ 185.834264][ T6995] FS: 00007f56c849c6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 185.843271][ T6995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 185.849888][ T6995] CR2: 00007fd1ffc4f156 CR3: 000000005cbc3000 CR4: 00000000003506f0 [ 185.857997][ T6995] Call Trace: [ 185.861299][ T6995] [ 185.864305][ T6995] ? tc_new_tfilter+0x8f7/0x17c0 [ 185.870197][ T6995] ? u32_get+0x370/0x370 [ 185.874829][ T6995] ? u32_get+0x370/0x370 [ 185.879114][ T6995] tc_new_tfilter+0x11f9/0x17c0 [ 185.884169][ T6995] ? tcf_proto_signal_destroying+0x240/0x240 [ 185.890261][ T6995] ? rcu_read_unlock+0x8c/0xa0 [ 185.895135][ T6995] ? tcf_proto_signal_destroying+0x240/0x240 [ 185.901144][ T6995] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 185.906303][ T6995] ? tcf_proto_signal_destroying+0x240/0x240 [ 185.912284][ T6995] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 185.917396][ T6995] ? lockdep_hardirqs_on+0x98/0x150 [ 185.922631][ T6995] ? rtnetlink_bind+0x80/0x80 [ 185.927368][ T6995] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 185.933702][ T6995] ? lock_chain_count+0x20/0x20 [ 185.938586][ T6995] ? __local_bh_enable_ip+0x13a/0x1c0 [ 185.944064][ T6995] ? lockdep_hardirqs_on+0x98/0x150 [ 185.949309][ T6995] ? __local_bh_enable_ip+0x13a/0x1c0 [ 185.954743][ T6995] ? _local_bh_enable+0xa0/0xa0 [ 185.959622][ T6995] ? __dev_queue_xmit+0x265/0x3660 [ 185.964813][ T6995] ? __dev_queue_xmit+0x265/0x3660 [ 185.970903][ T6995] ? __dev_queue_xmit+0x1b2c/0x3660 [ 185.976402][ T6995] ? __dev_queue_xmit+0x265/0x3660 [ 185.981563][ T6995] ? ref_tracker_free+0x690/0x840 [ 185.986665][ T6995] netlink_rcv_skb+0x241/0x4d0 [ 185.991466][ T6995] ? rtnetlink_bind+0x80/0x80 [ 185.996234][ T6995] ? netlink_ack+0x1180/0x1180 [ 186.001027][ T6995] ? __lock_acquire+0x7d40/0x7d40 [ 186.006154][ T6995] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.011367][ T6995] netlink_unicast+0x751/0x8d0 [ 186.016250][ T6995] netlink_sendmsg+0x8d0/0xbf0 [ 186.021084][ T6995] ? netlink_getsockopt+0x590/0x590 [ 186.026370][ T6995] ? aa_sock_msg_perm+0x94/0x150 [ 186.031408][ T6995] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 186.036909][ T6995] ? security_socket_sendmsg+0x80/0xa0 [ 186.042568][ T6995] ? netlink_getsockopt+0x590/0x590 [ 186.047866][ T6995] ____sys_sendmsg+0x5ba/0x960 [ 186.052687][ T6995] ? __asan_memset+0x22/0x40 [ 186.057372][ T6995] ? __sys_sendmsg_sock+0x30/0x30 [ 186.062466][ T6995] ? __import_iovec+0x5f2/0x850 [ 186.068103][ T6995] ? import_iovec+0x73/0xa0 [ 186.073568][ T6995] ___sys_sendmsg+0x2a6/0x360 [ 186.078511][ T6995] ? __sys_sendmsg+0x2a0/0x2a0 [ 186.083666][ T6995] __sys_sendmmsg+0x2ca/0x510 [ 186.088579][ T6995] ? __ia32_sys_sendmsg+0x90/0x90 [ 186.093724][ T6995] ? __ia32_sys_get_robust_list+0x110/0x110 [ 186.099644][ T6995] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 186.106464][ T6995] ? lock_chain_count+0x20/0x20 [ 186.111452][ T6995] __x64_sys_sendmmsg+0xa0/0xb0 [ 186.116398][ T6995] do_syscall_64+0x55/0xb0 [ 186.120850][ T6995] ? clear_bhb_loop+0x40/0x90 [ 186.125582][ T6995] ? clear_bhb_loop+0x40/0x90 [ 186.130284][ T6995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.136266][ T6995] RIP: 0033:0x7f56c759ce59 [ 186.140707][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.160374][ T6995] RSP: 002b:00007f56c849c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 186.168866][ T6995] RAX: ffffffffffffffda RBX: 00007f56c7815fa0 RCX: 00007f56c759ce59 [ 186.178495][ T6995] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 186.187013][ T6995] RBP: 00007f56c7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 186.195046][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.203032][ T6995] R13: 00007f56c7816038 R14: 00007f56c7815fa0 R15: 00007ffc5238ab18 [ 186.211079][ T6995] [ 186.214164][ T6995] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 186.221460][ T6995] CPU: 0 PID: 6995 Comm: syz.1.253 Not tainted syzkaller #0 [ 186.228757][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.238826][ T6995] Call Trace: [ 186.242124][ T6995] [ 186.245070][ T6995] dump_stack_lvl+0x18c/0x250 [ 186.249775][ T6995] ? show_regs_print_info+0x20/0x20 [ 186.254988][ T6995] ? load_image+0x420/0x420 [ 186.259494][ T6995] panic+0x2dc/0x730 [ 186.263393][ T6995] ? bpf_jit_dump+0xd0/0xd0 [ 186.267906][ T6995] __warn+0x2e0/0x470 [ 186.271883][ T6995] ? u32_change+0x1c5a/0x24f0 [ 186.276563][ T6995] ? u32_change+0x1c5a/0x24f0 [ 186.281245][ T6995] report_bug+0x2be/0x4f0 [ 186.285572][ T6995] ? u32_change+0x1c5a/0x24f0 [ 186.290252][ T6995] ? u32_change+0x1c5a/0x24f0 [ 186.294926][ T6995] ? u32_change+0x1c5c/0x24f0 [ 186.299600][ T6995] handle_bug+0xcf/0x120 [ 186.303841][ T6995] exc_invalid_op+0x1a/0x50 [ 186.308339][ T6995] asm_exc_invalid_op+0x1a/0x20 [ 186.313191][ T6995] RIP: 0010:u32_change+0x1c5a/0x24f0 [ 186.318477][ T6995] Code: f8 eb 59 e8 78 00 d7 f8 c6 05 09 e0 c5 05 01 b9 10 00 00 00 48 c7 c7 c0 a3 c7 8b 4c 89 f6 48 c7 c2 40 a4 c7 8b e8 56 b2 a0 f8 <0f> 0b e9 86 f0 ff ff e8 4a 00 d7 f8 eb 24 e8 43 00 d7 f8 c6 05 a3 [ 186.338080][ T6995] RSP: 0018:ffffc9000cb06d40 EFLAGS: 00010246 [ 186.344147][ T6995] RAX: 4c9dc196a14cc700 RBX: ffff88805cdf9400 RCX: 0000000000080000 [ 186.352114][ T6995] RDX: ffffc9000cc9a000 RSI: 0000000000009172 RDI: 0000000000009173 [ 186.360105][ T6995] RBP: ffffc9000cb06ef8 R08: ffffc9000cb06947 R09: 1ffff92001960d28 [ 186.368074][ T6995] R10: dffffc0000000000 R11: fffff52001960d29 R12: ffff88805c8e2800 [ 186.376050][ T6995] R13: ffff88805c8e28e8 R14: 0000000000000020 R15: ffff88801be68000 [ 186.384033][ T6995] ? tc_new_tfilter+0x8f7/0x17c0 [ 186.389000][ T6995] ? u32_get+0x370/0x370 [ 186.393258][ T6995] ? u32_get+0x370/0x370 [ 186.397497][ T6995] tc_new_tfilter+0x11f9/0x17c0 [ 186.402359][ T6995] ? tcf_proto_signal_destroying+0x240/0x240 [ 186.408345][ T6995] ? rcu_read_unlock+0x8c/0xa0 [ 186.413114][ T6995] ? tcf_proto_signal_destroying+0x240/0x240 [ 186.419095][ T6995] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 186.424205][ T6995] ? tcf_proto_signal_destroying+0x240/0x240 [ 186.430178][ T6995] rtnetlink_rcv_msg+0x8b8/0xfa0 [ 186.435116][ T6995] ? lockdep_hardirqs_on+0x98/0x150 [ 186.440317][ T6995] ? rtnetlink_bind+0x80/0x80 [ 186.445021][ T6995] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 186.450996][ T6995] ? lock_chain_count+0x20/0x20 [ 186.455843][ T6995] ? __local_bh_enable_ip+0x13a/0x1c0 [ 186.461294][ T6995] ? lockdep_hardirqs_on+0x98/0x150 [ 186.466587][ T6995] ? __local_bh_enable_ip+0x13a/0x1c0 [ 186.472233][ T6995] ? _local_bh_enable+0xa0/0xa0 [ 186.477105][ T6995] ? __dev_queue_xmit+0x265/0x3660 [ 186.482774][ T6995] ? __dev_queue_xmit+0x265/0x3660 [ 186.487946][ T6995] ? __dev_queue_xmit+0x1b2c/0x3660 [ 186.493170][ T6995] ? __dev_queue_xmit+0x265/0x3660 [ 186.498298][ T6995] ? ref_tracker_free+0x690/0x840 [ 186.503350][ T6995] netlink_rcv_skb+0x241/0x4d0 [ 186.508119][ T6995] ? rtnetlink_bind+0x80/0x80 [ 186.512807][ T6995] ? netlink_ack+0x1180/0x1180 [ 186.518008][ T6995] ? __lock_acquire+0x7d40/0x7d40 [ 186.523031][ T6995] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.528230][ T6995] netlink_unicast+0x751/0x8d0 [ 186.533016][ T6995] netlink_sendmsg+0x8d0/0xbf0 [ 186.537886][ T6995] ? netlink_getsockopt+0x590/0x590 [ 186.543093][ T6995] ? aa_sock_msg_perm+0x94/0x150 [ 186.548044][ T6995] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 186.553328][ T6995] ? security_socket_sendmsg+0x80/0xa0 [ 186.558778][ T6995] ? netlink_getsockopt+0x590/0x590 [ 186.563973][ T6995] ____sys_sendmsg+0x5ba/0x960 [ 186.568825][ T6995] ? __asan_memset+0x22/0x40 [ 186.573413][ T6995] ? __sys_sendmsg_sock+0x30/0x30 [ 186.578435][ T6995] ? __import_iovec+0x5f2/0x850 [ 186.583289][ T6995] ? import_iovec+0x73/0xa0 [ 186.587790][ T6995] ___sys_sendmsg+0x2a6/0x360 [ 186.592472][ T6995] ? __sys_sendmsg+0x2a0/0x2a0 [ 186.597272][ T6995] __sys_sendmmsg+0x2ca/0x510 [ 186.601948][ T6995] ? __ia32_sys_sendmsg+0x90/0x90 [ 186.606974][ T6995] ? __ia32_sys_get_robust_list+0x110/0x110 [ 186.612868][ T6995] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 186.618846][ T6995] ? lock_chain_count+0x20/0x20 [ 186.623694][ T6995] __x64_sys_sendmmsg+0xa0/0xb0 [ 186.628545][ T6995] do_syscall_64+0x55/0xb0 [ 186.632956][ T6995] ? clear_bhb_loop+0x40/0x90 [ 186.637622][ T6995] ? clear_bhb_loop+0x40/0x90 [ 186.642290][ T6995] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.648182][ T6995] RIP: 0033:0x7f56c759ce59 [ 186.652596][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.672197][ T6995] RSP: 002b:00007f56c849c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 186.680612][ T6995] RAX: ffffffffffffffda RBX: 00007f56c7815fa0 RCX: 00007f56c759ce59 [ 186.688581][ T6995] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000006 [ 186.696576][ T6995] RBP: 00007f56c7632d6f R08: 0000000000000000 R09: 0000000000000000 [ 186.704539][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 186.712503][ T6995] R13: 00007f56c7816038 R14: 00007f56c7815fa0 R15: 00007ffc5238ab18 [ 186.720869][ T6995] [ 186.724036][ T6995] Kernel Offset: disabled [ 186.728351][ T6995] Rebooting in 86400 seconds..