last executing test programs: 4.470804204s ago: executing program 3 (id=232): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r0, &(0x7f00000010c0)={&(0x7f0000000800)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0}, 0x20040010) 4.25949927s ago: executing program 3 (id=233): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) 3.840224131s ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) 3.535727649s ago: executing program 2 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_getnexthop={0x24, 0x6a, 0x201, 0x70bd29, 0x25dfdbfd, {}, [@NHA_OIF={0x8}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 3.238957836s ago: executing program 2 (id=241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="c9692fcb934835d7a97cd70e6cd1be43b4af6e3a91", 0x15}], 0x1, &(0x7f0000000540)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0xc6c2ee60220dc2ef}], 0x1, 0x4044800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.237746466s ago: executing program 3 (id=242): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 3.198197647s ago: executing program 1 (id=243): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) 3.066664271s ago: executing program 0 (id=244): ioprio_set$pid(0x1, 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.959376073s ago: executing program 1 (id=245): bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001a40)={0xffffffffffffffff, &(0x7f0000000a40)="74e64bc8b785272b9bc1f7b6f3d4cd5f0bc390436450c69714e2898256070a29da93eec30918c7ce53732a9f8e8c604509205c510a9e1099f269863834888700b073d0b6f89f9572a62291b767f78c0a8345fbded2adb63b59d1dc0434f159f708b562dbe49267935de7c35b6c8bcefca48765d901f9b5560d67f2135e41acca5012b64d6de482860ac4248d13f987c61e08cb827c92c2243b86c58f81eb0dc5ddc358adc4193b046fd10caadcd09215879e5bcf146e245f4aa45c25416349151247c72f0243206848d90541c4911ce81393"}, 0x20) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 2.957510313s ago: executing program 3 (id=246): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0x6, 0x31, 0x5, 0x83, 0x9, 0x42, 0x23, 0xb, 0x3, 0x8, 0x8, 0xf9, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000600)=@assoc_value={r1, 0x3}, 0x8) 2.71201345s ago: executing program 3 (id=247): syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x4810, &(0x7f00000001c0)=ANY=[], 0x14, 0x693, &(0x7f0000000880)="$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") r0 = msgget$private(0x0, 0x47a) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) msgctl$MSG_STAT_ANY(r0, 0xd, &(0x7f0000001680)=""/4096) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000500)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000030000000000000000400000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6, r5}, 0xc) 2.575825443s ago: executing program 1 (id=248): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffd49, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) 2.011463038s ago: executing program 2 (id=249): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f00000006c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0x2020) 1.460816863s ago: executing program 0 (id=250): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000054eb84e040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000013000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$pppoe(0x18, 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000010800014000000001080003401900000008000240000000000900010073797a30000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff8c43a6b9bbbbbb080045000028000000000001907864010100e00000010dbdafa70486e1c79f9800907800020001000000"], 0x0) 1.096421032s ago: executing program 1 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004001"], 0x20) 1.095758382s ago: executing program 2 (id=252): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2e83}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 775.351ms ago: executing program 0 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) 712.065931ms ago: executing program 2 (id=254): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x4088) 600.443335ms ago: executing program 0 (id=255): socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x21, 0x2, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 475.471228ms ago: executing program 2 (id=256): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/138, 0x8a}, {&(0x7f0000000f40)=""/217, 0xd9}, {&(0x7f00000008c0)=""/67, 0x43}, {&(0x7f0000001640)=""/4092, 0xffc}, {&(0x7f0000000580)=""/151, 0x97}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x85}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, &(0x7f0000002cc0)}, 0xff}, {{0x0, 0x0, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4088, 0xff8}, {&(0x7f0000004740)=""/4096, 0x1000}], 0x2}, 0x900000}], 0x7, 0x0, 0x0) 464.752248ms ago: executing program 1 (id=257): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000), 0x4) sendto$inet(r1, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 360.436531ms ago: executing program 1 (id=258): ioprio_set$pid(0x1, 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 297.857912ms ago: executing program 0 (id=259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb}, {}, {0xfff2, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0xfffffffffffffd49, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x41090) 0s ago: executing program 0 (id=260): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYBLOB="010003000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="061f67a5c60000000c0003000000000000000000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 88.633074][ T5763] cgroup: Unknown subsys name 'net' [ 88.772935][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.059865][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 93.892396][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.905224][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.915598][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.926891][ T5782] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.938574][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.952260][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.962580][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.980930][ T5783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.006687][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.021024][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.032671][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.047415][ T5783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.056885][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.066881][ T5783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 94.074608][ T5783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.084286][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.092454][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 94.101540][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.142919][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.152848][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.162602][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.185894][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.197024][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.216373][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.615116][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 94.678173][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 94.708331][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 94.818341][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 94.888125][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.898052][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.906758][ T5775] bridge_slave_0: entered allmulticast mode [ 94.913915][ T5775] bridge_slave_0: entered promiscuous mode [ 94.925513][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.933166][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.941229][ T5775] bridge_slave_1: entered allmulticast mode [ 94.949001][ T5775] bridge_slave_1: entered promiscuous mode [ 95.035209][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.043035][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.050830][ T5774] bridge_slave_0: entered allmulticast mode [ 95.058223][ T5774] bridge_slave_0: entered promiscuous mode [ 95.066809][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.074378][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.081957][ T5776] bridge_slave_0: entered allmulticast mode [ 95.089459][ T5776] bridge_slave_0: entered promiscuous mode [ 95.106185][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.117327][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.127050][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.135564][ T5774] bridge_slave_1: entered allmulticast mode [ 95.142648][ T5774] bridge_slave_1: entered promiscuous mode [ 95.160392][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.167854][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.175458][ T5776] bridge_slave_1: entered allmulticast mode [ 95.182346][ T5776] bridge_slave_1: entered promiscuous mode [ 95.207220][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.272689][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.288822][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.303243][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.317232][ T5775] team0: Port device team_slave_0 added [ 95.338886][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.362166][ T5775] team0: Port device team_slave_1 added [ 95.368961][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.376350][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.383653][ T5788] bridge_slave_0: entered allmulticast mode [ 95.390848][ T5788] bridge_slave_0: entered promiscuous mode [ 95.447250][ T5774] team0: Port device team_slave_0 added [ 95.467363][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.475372][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.483079][ T5788] bridge_slave_1: entered allmulticast mode [ 95.491450][ T5788] bridge_slave_1: entered promiscuous mode [ 95.500968][ T5776] team0: Port device team_slave_0 added [ 95.512297][ T5776] team0: Port device team_slave_1 added [ 95.521455][ T5774] team0: Port device team_slave_1 added [ 95.538850][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.547890][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.577535][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.627469][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.636748][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.666316][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.701752][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.711155][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.738825][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.758505][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.766347][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.795148][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.811687][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.822175][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.832334][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.861159][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.886973][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.899074][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.906519][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.933734][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.985107][ T51] Bluetooth: hci1: command tx timeout [ 96.029600][ T5775] hsr_slave_0: entered promiscuous mode [ 96.036450][ T5775] hsr_slave_1: entered promiscuous mode [ 96.047983][ T5788] team0: Port device team_slave_0 added [ 96.071882][ T5774] hsr_slave_0: entered promiscuous mode [ 96.079090][ T5774] hsr_slave_1: entered promiscuous mode [ 96.086773][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.095406][ T5774] Cannot create hsr debugfs directory [ 96.118739][ T5776] hsr_slave_0: entered promiscuous mode [ 96.126860][ T5776] hsr_slave_1: entered promiscuous mode [ 96.133480][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.142420][ T5776] Cannot create hsr debugfs directory [ 96.148826][ T51] Bluetooth: hci2: command tx timeout [ 96.148846][ T5779] Bluetooth: hci0: command tx timeout [ 96.158362][ T5788] team0: Port device team_slave_1 added [ 96.222357][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.232727][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.261415][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.315530][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.322989][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.352782][ T51] Bluetooth: hci3: command tx timeout [ 96.359314][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.499523][ T5788] hsr_slave_0: entered promiscuous mode [ 96.511726][ T5788] hsr_slave_1: entered promiscuous mode [ 96.519584][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.529918][ T5788] Cannot create hsr debugfs directory [ 96.882276][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.906911][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.921145][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.945602][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.997467][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.009448][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.021733][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.031932][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.131806][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.152550][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.165743][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.185787][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.277884][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.293843][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.315755][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.328508][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.382377][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.492810][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.519565][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.526982][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.562966][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.571267][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.604969][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.657566][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.733017][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.742298][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.771490][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.806742][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.816427][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.866666][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.875882][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.916407][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.924602][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.998654][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.998763][ T55] cfg80211: failed to load regulatory.db [ 98.034228][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.046345][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.064924][ T51] Bluetooth: hci1: command tx timeout [ 98.136050][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.145002][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.161599][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.170543][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.224906][ T51] Bluetooth: hci0: command tx timeout [ 98.224914][ T5779] Bluetooth: hci2: command tx timeout [ 98.298379][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.319937][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.384978][ T51] Bluetooth: hci3: command tx timeout [ 98.580138][ T5776] veth0_vlan: entered promiscuous mode [ 98.630573][ T5776] veth1_vlan: entered promiscuous mode [ 98.738022][ T5776] veth0_macvtap: entered promiscuous mode [ 98.781831][ T5776] veth1_macvtap: entered promiscuous mode [ 98.861368][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.885479][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.919508][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.952996][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.971315][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.981742][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.991322][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.028080][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.115286][ T5775] veth0_vlan: entered promiscuous mode [ 99.143227][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.159734][ T5775] veth1_vlan: entered promiscuous mode [ 99.222637][ T5774] veth0_vlan: entered promiscuous mode [ 99.281598][ T2894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.299884][ T5774] veth1_vlan: entered promiscuous mode [ 99.308807][ T2894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.350993][ T5775] veth0_macvtap: entered promiscuous mode [ 99.380507][ T5775] veth1_macvtap: entered promiscuous mode [ 99.402081][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.412613][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.449400][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.467473][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.483070][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.497437][ T5788] veth0_vlan: entered promiscuous mode [ 99.538788][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.550768][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.566264][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.580147][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.592259][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.604263][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.613765][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.633068][ T5774] veth0_macvtap: entered promiscuous mode [ 99.660024][ T5788] veth1_vlan: entered promiscuous mode [ 99.687159][ T5774] veth1_macvtap: entered promiscuous mode [ 99.802221][ T5841] syz.0.1[5841]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 99.805795][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.825735][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.826209][ T5841] loop0: detected capacity change from 0 to 512 [ 99.837002][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.873331][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.882536][ T5841] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1: invalid indirect mapped block 256 (level 2) [ 99.890588][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.954793][ T5841] EXT4-fs (loop0): 2 truncates cleaned up [ 99.961690][ T5841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.968737][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.004087][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.016539][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.028798][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.041818][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.058829][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.073756][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.089247][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.101336][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.106174][ T5841] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 100.112521][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.125295][ T5841] EXT4-fs error (device loop0): ext4_dirty_inode:6144: inode #15: comm syz.0.1: mark_inode_dirty error [ 100.132101][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.158078][ T51] Bluetooth: hci1: command tx timeout [ 100.245709][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.298724][ T5788] veth0_macvtap: entered promiscuous mode [ 100.307581][ T51] Bluetooth: hci0: command tx timeout [ 100.315619][ T51] Bluetooth: hci2: command tx timeout [ 100.370021][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.392239][ T5788] veth1_macvtap: entered promiscuous mode [ 100.419859][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.464357][ T51] Bluetooth: hci3: command tx timeout [ 100.554489][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.581455][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.594860][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.608221][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.619420][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.631945][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.649194][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.687440][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.705947][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.741514][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.805623][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.834710][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.851102][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.863139][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.878555][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.893827][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.923563][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.946543][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.960381][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.969861][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.091806][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.150333][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.172691][ T5856] loop0: detected capacity change from 0 to 256 [ 101.252357][ T5856] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 101.371526][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.425821][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.604654][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.637975][ T5863] loop1: detected capacity change from 0 to 16 [ 101.640285][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.702262][ T5863] erofs: (device loop1): mounted with root inode @ nid 36. [ 101.894837][ T5856] exFAT-fs (loop0): error, broken FAT chain. [ 101.924704][ T5856] exFAT-fs (loop0): Filesystem has been set read-only [ 101.933062][ T5856] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805eee07e0 iblock : 0, err : -5) [ 102.225061][ T51] Bluetooth: hci1: command tx timeout [ 102.347798][ T5872] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.385706][ T51] Bluetooth: hci2: command tx timeout [ 102.385733][ T5779] Bluetooth: hci0: command tx timeout [ 102.471928][ T5874] loop0: detected capacity change from 0 to 2048 [ 102.515391][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 102.544468][ T51] Bluetooth: hci3: command tx timeout [ 102.551856][ T5874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.599769][ T5878] loop3: detected capacity change from 0 to 1024 [ 102.644401][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 102.692871][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 102.755252][ T5869] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.815577][ T5881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16'. [ 102.823220][ T5869] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 102.852154][ T5881] netlink: 32 bytes leftover after parsing attributes in process `syz.1.16'. [ 102.922939][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.070948][ T5884] capability: warning: `syz.1.18' uses deprecated v2 capabilities in a way that may be insecure [ 103.158734][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 103.226450][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 103.255775][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 103.292589][ T5887] loop0: detected capacity change from 0 to 1024 [ 103.346451][ T5869] virt_wifi0 speed is unknown, defaulting to 1000 [ 103.606864][ T5893] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 103.623498][ T5893] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 103.684599][ T5789] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.844826][ T5899] loop2: detected capacity change from 0 to 2048 [ 103.884707][ T5789] usb 2-1: Using ep0 maxpacket: 8 [ 103.897063][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.914203][ T5789] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 103.932856][ T5899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 103.948868][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.981991][ T5789] usb 2-1: config 0 descriptor?? [ 104.059037][ T5901] loop0: detected capacity change from 0 to 512 [ 104.084619][ T5901] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.086852][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 104.111885][ T5901] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 104.152402][ T8] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 104.367808][ T5901] EXT4-fs (loop0): corrupt root inode, run e2fsck [ 104.370419][ T5901] EXT4-fs (loop0): mount failed [ 105.129418][ T5914] input: syz1 as /devices/virtual/input/input5 [ 105.593895][ T5916] syzkaller0: entered promiscuous mode [ 105.602616][ T5916] syzkaller0: entered allmulticast mode [ 106.164025][ C0] sched: RT throttling activated [ 106.354542][ T5918] binder: 5917:5918 ioctl c0306201 0 returned -14 [ 106.445877][ T8] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 106.458458][ T5789] usb 2-1: string descriptor 0 read error: -71 [ 106.480480][ T5789] uvcvideo 2-1:0.0: Found multiple Units with ID 1 [ 106.492067][ T5789] usb 2-1: Found UVC 0.00 device (2833:0201) [ 106.503861][ T5789] usb 2-1: No valid video chain found. [ 106.510718][ T8] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 106.521884][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.537926][ T8] usb 4-1: Product: syz [ 106.547288][ T5789] usb 2-1: USB disconnect, device number 2 [ 106.558540][ T8] usb 4-1: Manufacturer: syz [ 106.584186][ T8] usb 4-1: SerialNumber: syz [ 106.619494][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.754318][ T8] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 106.883173][ T8] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 106.946880][ T8] usb 4-1: USB disconnect, device number 2 [ 106.997326][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 107.211304][ T5935] loop2: detected capacity change from 0 to 1024 [ 107.884215][ T5820] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 108.019516][ T5938] hfsplus: request for non-existent node 1280 in B*Tree [ 108.027112][ T5938] hfsplus: request for non-existent node 1280 in B*Tree [ 108.062711][ T5943] syzkaller0: entered promiscuous mode [ 108.072592][ T5943] syzkaller0: entered allmulticast mode [ 108.107126][ T5820] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.160005][ T5820] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.180141][ T5820] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.193287][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.218885][ T5820] hub 3-1:4.0: USB hub found [ 108.233681][ T5946] input: syz1 as /devices/virtual/input/input6 [ 108.360141][ T5948] binder: 5947:5948 ioctl c0306201 0 returned -14 [ 110.214846][ T5820] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 110.362241][ T5955] loop3: detected capacity change from 0 to 512 [ 110.363492][ T5820] usb 3-1: USB disconnect, device number 2 [ 110.416613][ T5956] loop0: detected capacity change from 0 to 2048 [ 110.452054][ T5955] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.39: invalid indirect mapped block 256 (level 2) [ 110.499788][ T5955] EXT4-fs (loop3): 2 truncates cleaned up [ 110.562137][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 110.586288][ T5955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.792605][ T5955] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5940: Corrupt filesystem [ 110.809128][ T5776] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 110.822599][ T5955] EXT4-fs error (device loop3): ext4_dirty_inode:6144: inode #15: comm syz.3.39: mark_inode_dirty error [ 111.041531][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.076180][ T5980] input: syz1 as /devices/virtual/input/input7 [ 112.254215][ T5981] loop1: detected capacity change from 0 to 512 [ 112.296999][ T5981] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 112.341736][ T5981] EXT4-fs (loop1): corrupt root inode, run e2fsck [ 112.391850][ T5989] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 112.404735][ T5989] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 112.461735][ T5981] EXT4-fs (loop1): mount failed [ 112.749687][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.186145][ T5815] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 113.228255][ T5995] loop0: detected capacity change from 0 to 1024 [ 113.254415][ T5815] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 113.318179][ T5815] usb 3-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 113.384877][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.432968][ T5815] usb 3-1: Product: syz [ 113.453266][ T5815] usb 3-1: Manufacturer: syz [ 113.483661][ T5815] usb 3-1: SerialNumber: syz [ 113.511229][ T5997] loop3: detected capacity change from 0 to 2048 [ 113.652183][ T5997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 113.827255][ T5815] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 113.910655][ T5815] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 113.948673][ T5815] usb 3-1: USB disconnect, device number 3 [ 114.052950][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 114.221157][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 114.915235][ T5815] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.110264][ T6003] hfsplus: request for non-existent node 1280 in B*Tree [ 115.117810][ T6003] hfsplus: request for non-existent node 1280 in B*Tree [ 115.137225][ T5816] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 115.174590][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 115.191524][ T5815] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 115.217967][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.243617][ T5815] usb 4-1: config 0 descriptor?? [ 115.366877][ T5816] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.450579][ T5816] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.511953][ T5815] usb 4-1: string descriptor 0 read error: -71 [ 115.558753][ T5816] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 115.598203][ T5815] uvcvideo 4-1:0.0: Found multiple Units with ID 1 [ 115.624848][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.635617][ T5815] usb 4-1: Found UVC 0.00 device (2833:0201) [ 115.645097][ T5815] usb 4-1: No valid video chain found. [ 115.656762][ T5815] usb 4-1: USB disconnect, device number 3 [ 115.734666][ T5816] hub 1-1:4.0: USB hub found [ 115.940058][ T5816] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 116.085454][ T5816] usb 1-1: USB disconnect, device number 2 [ 116.189568][ T6020] input: syz1 as /devices/virtual/input/input8 [ 117.561910][ T6030] loop3: detected capacity change from 0 to 512 [ 117.676342][ T6030] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 117.867555][ T6041] loop2: detected capacity change from 0 to 1024 [ 117.939533][ T6030] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 118.039992][ T6030] EXT4-fs (loop3): mount failed [ 118.184142][ T5816] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.424940][ T5816] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 118.496355][ T5816] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 118.634628][ T5816] usb 2-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 118.694238][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.736700][ T5816] usb 2-1: Product: syz [ 118.761543][ T5816] usb 2-1: Manufacturer: syz [ 118.776536][ T5816] usb 2-1: SerialNumber: syz [ 118.800754][ T6051] input: syz1 as /devices/virtual/input/input9 [ 119.181118][ T5816] usb 2-1: BAAD MICROPHONE c_chmask mismatch [ 119.278149][ T5816] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 119.343348][ T5816] usb 2-1: USB disconnect, device number 3 [ 119.388027][ T5820] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 119.396897][ T6054] hfsplus: request for non-existent node 1280 in B*Tree [ 119.404345][ T6054] hfsplus: request for non-existent node 1280 in B*Tree [ 119.455571][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.574248][ T5789] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 119.657377][ T5820] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 119.670330][ T5820] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.680883][ T5820] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.690925][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.707655][ T5820] hub 3-1:4.0: USB hub found [ 119.754129][ T5789] usb 1-1: Using ep0 maxpacket: 8 [ 119.761212][ T5789] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 119.771337][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.788487][ T5789] usb 1-1: config 0 descriptor?? [ 120.015118][ T5789] usb 1-1: string descriptor 0 read error: -71 [ 120.029112][ T5789] uvcvideo 1-1:0.0: Found multiple Units with ID 1 [ 120.042028][ T5789] usb 1-1: Found UVC 0.00 device (2833:0201) [ 120.050244][ T5789] usb 1-1: No valid video chain found. [ 120.068782][ T5789] usb 1-1: USB disconnect, device number 3 [ 120.190620][ T6066] loop1: detected capacity change from 0 to 1024 [ 120.643337][ T6074] input: syz1 as /devices/virtual/input/input10 [ 120.658792][ T6072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.80'. [ 120.746006][ T6072] netlink: 32 bytes leftover after parsing attributes in process `syz.3.80'. [ 121.040053][ T5820] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 121.126786][ T5820] usb 3-1: USB disconnect, device number 4 [ 121.293712][ T6085] loop2: detected capacity change from 0 to 512 [ 121.337880][ T6085] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 121.380841][ T6085] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 121.430317][ T6085] EXT4-fs (loop2): mount failed [ 121.437528][ T6093] loop1: detected capacity change from 0 to 1024 [ 121.760880][ T6099] input: syz1 as /devices/virtual/input/input11 [ 121.806285][ T6101] loop2: detected capacity change from 0 to 1024 [ 122.173175][ T6108] loop1: detected capacity change from 0 to 1024 [ 122.390065][ T6110] loop2: detected capacity change from 0 to 2048 [ 122.551258][ T6110] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.679912][ T5820] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 122.760066][ T6112] hfsplus: request for non-existent node 1280 in B*Tree [ 122.767729][ T6112] hfsplus: request for non-existent node 1280 in B*Tree [ 122.863127][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.917166][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.934745][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.949838][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.973597][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.021177][ T5820] hub 2-1:4.0: USB hub found [ 123.303740][ T6131] loop2: detected capacity change from 0 to 512 [ 123.342370][ T6131] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 123.400128][ T6135] loop3: detected capacity change from 0 to 1024 [ 123.423938][ T6131] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 123.456512][ T6131] EXT4-fs (loop2): mount failed [ 123.735109][ T6141] input: syz1 as /devices/virtual/input/input12 [ 123.934672][ T6146] loop0: detected capacity change from 0 to 16 [ 123.957145][ T6146] erofs: (device loop0): mounted with root inode @ nid 36. [ 124.672809][ T6152] input: syz1 as /devices/virtual/input/input13 [ 124.782993][ T6153] loop2: detected capacity change from 0 to 256 [ 124.838351][ T6153] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x190b464b, utbl_chksum : 0xe619d30d) [ 125.226626][ T5820] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 125.365329][ T5820] usb 2-1: USB disconnect, device number 4 [ 125.658920][ T6153] exFAT-fs (loop2): error, broken FAT chain. [ 125.688063][ T6153] exFAT-fs (loop2): Filesystem has been set read-only [ 125.717057][ T6153] exFAT-fs (loop2): error, failed to bmap (inode : ffff888054828160 iblock : 0, err : -5) [ 125.873565][ T6172] loop3: detected capacity change from 0 to 512 [ 125.966790][ T6172] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 126.027088][ T6172] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 126.052738][ T6172] EXT4-fs (loop3): mount failed [ 126.069976][ T6177] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.094318][ T6177] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 126.826590][ T6186] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.843357][ T6185] loop3: detected capacity change from 0 to 16 [ 126.870646][ T6185] erofs: (device loop3): mounted with root inode @ nid 36. [ 126.894226][ T6186] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 126.951447][ T5926] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.140812][ T6190] loop2: detected capacity change from 0 to 1024 [ 127.167886][ T6192] input: syz1 as /devices/virtual/input/input14 [ 127.639406][ T6200] hfsplus: request for non-existent node 1280 in B*Tree [ 127.647384][ T6200] hfsplus: request for non-existent node 1280 in B*Tree [ 127.734134][ T5815] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 127.846420][ T6205] binder: 6204:6205 ioctl 4018620d 0 returned -22 [ 127.926228][ T5815] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.954444][ T5815] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.994787][ T5815] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 128.015509][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.075804][ T5815] hub 3-1:4.0: USB hub found [ 128.111769][ T6207] siw: device registration error -23 [ 129.095997][ T6228] binder: 6226:6228 ioctl 4018620d 0 returned -22 [ 129.419618][ T6238] input: syz1 as /devices/virtual/input/input15 [ 129.979919][ T6250] siw: device registration error -23 [ 130.099611][ T5815] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 130.208376][ T5815] usb 3-1: USB disconnect, device number 5 [ 130.438076][ T6257] binder: 6254:6257 ioctl 4018620d 0 returned -22 [ 130.993071][ T6259] binder: BINDER_SET_CONTEXT_MGR already set [ 131.018525][ T6259] binder: 6258:6259 ioctl 4018620d 200000004a80 returned -16 [ 131.074530][ T6262] binder: 6258:6262 ioctl c0306201 0 returned -14 [ 131.593228][ T6285] loop1: detected capacity change from 0 to 1024 [ 132.115098][ T5820] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 132.355491][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.375872][ T6290] hfsplus: request for non-existent node 1280 in B*Tree [ 132.384806][ T6290] hfsplus: request for non-existent node 1280 in B*Tree [ 132.580678][ T5820] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.595146][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 132.606007][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.680065][ T5820] hub 2-1:4.0: USB hub found [ 133.405086][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 133.740367][ T6332] binder: 6327:6332 ioctl c0306201 0 returned -14 [ 133.830063][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.840103][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.664469][ T5820] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 134.799339][ T5820] usb 2-1: USB disconnect, device number 5 [ 135.228989][ T6362] binder: BINDER_SET_CONTEXT_MGR already set [ 135.242503][ T6362] binder: 6360:6362 ioctl 4018620d 200000004a80 returned -16 [ 135.729915][ T6381] loop1: detected capacity change from 0 to 1024 [ 136.687247][ T5919] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 136.888253][ T5919] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 136.921753][ T5919] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.944742][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 136.988523][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.007270][ T5919] hub 2-1:4.0: USB hub found [ 137.221277][ T6390] hfsplus: request for non-existent node 1280 in B*Tree [ 137.228605][ T6390] hfsplus: request for non-existent node 1280 in B*Tree [ 137.580287][ T6413] syz.0.200 uses obsolete (PF_INET,SOCK_PACKET) [ 138.723599][ T5919] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 138.784245][ T5919] usb 2-1: USB disconnect, device number 6 [ 139.646924][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 140.020855][ T6458] loop2: detected capacity change from 0 to 1024 [ 140.924111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 141.090391][ T5919] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 141.204561][ T6460] hfsplus: request for non-existent node 1280 in B*Tree [ 141.211654][ T6460] hfsplus: request for non-existent node 1280 in B*Tree [ 141.264506][ T5779] Bluetooth: hci3: command 0x0405 tx timeout [ 141.286730][ T5919] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.297846][ T5919] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.307795][ T5919] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 141.317458][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.355182][ T5919] hub 3-1:4.0: USB hub found [ 141.388007][ T6474] Zero length message leads to an empty skb [ 142.966789][ T5919] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 143.005017][ T5919] usb 3-1: USB disconnect, device number 6 [ 143.663468][ T6535] ip_tables: iptables: counters copy to user failed while replacing table [ 144.187642][ T6541] loop3: detected capacity change from 0 to 1024 [ 145.105590][ T9] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 145.467046][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.479273][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.490143][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 145.499675][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.514976][ T9] hub 4-1:4.0: USB hub found [ 145.573342][ T6550] hfsplus: request for non-existent node 1280 in B*Tree [ 145.580877][ T6550] hfsplus: request for non-existent node 1280 in B*Tree [ 145.784183][ T6568] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 145.816168][ T6568] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 146.835786][ T6586] netlink: 44 bytes leftover after parsing attributes in process `syz.0.260'. [ 146.852707][ T6586] ------------[ cut here ]------------ [ 146.858868][ T6586] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 146.894480][ T6586] WARNING: CPU: 1 PID: 6586 at net/sched/cls_u32.c:855 u32_change+0x1df2/0x2860 [ 146.904370][ T6586] Modules linked in: [ 146.908749][ T6586] CPU: 1 PID: 6586 Comm: syz.0.260 Not tainted syzkaller #0 [ 146.916558][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.927006][ T6586] RIP: 0010:u32_change+0x1df2/0x2860 [ 146.933085][ T6586] Code: f8 eb 59 e8 30 6e cf f8 c6 05 75 09 bf 05 01 b9 10 00 00 00 48 c7 c7 80 5b c8 8b 4c 89 f6 48 c7 c2 00 5c c8 8b e8 ce 3a 99 f8 <0f> 0b e9 10 ef ff ff e8 02 6e cf f8 eb 24 e8 fb 6d cf f8 c6 05 ef [ 146.954118][ T6586] RSP: 0018:ffffc9000f87ed60 EFLAGS: 00010246 [ 146.961078][ T6586] RAX: 0f9bc5458d5a9700 RBX: ffff88801c7f6000 RCX: 0000000000080000 [ 146.971340][ T6586] RDX: ffffc9000d7ba000 RSI: 0000000000007061 RDI: 0000000000007062 [ 146.980208][ T6586] RBP: ffffc9000f87eef8 R08: ffffc9000f87e967 R09: 1ffff92001f0fd2c [ 146.988390][ T6586] R10: dffffc0000000000 R11: fffff52001f0fd2d R12: 1ffff92001f0fdbc [ 146.996853][ T6586] R13: ffff888024d01ce8 R14: 0000000000000020 R15: 0000000000000001 [ 147.004958][ T6586] FS: 00007fad9ca446c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 147.014915][ T6586] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.021989][ T6586] CR2: 0000200000006040 CR3: 000000002debd000 CR4: 00000000003506e0 [ 147.030840][ T6586] Call Trace: [ 147.034366][ T6586] [ 147.037802][ T6586] ? u32_get+0x370/0x370 [ 147.042232][ T6586] tc_new_tfilter+0x1109/0x1840 [ 147.047335][ T6586] ? tcf_proto_signal_destroying+0x240/0x240 [ 147.053565][ T6586] ? rcu_read_unlock+0x8c/0xa0 [ 147.058493][ T6586] ? tcf_proto_signal_destroying+0x240/0x240 [ 147.065433][ T6586] ? tcf_proto_signal_destroying+0x240/0x240 [ 147.072815][ T6586] rtnetlink_rcv_msg+0x892/0xf90 [ 147.078837][ T6586] ? rtnetlink_rcv_msg+0x220/0xf90 [ 147.084398][ T6586] ? rtnetlink_bind+0x80/0x80 [ 147.089980][ T6586] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 147.096569][ T6586] ? lock_chain_count+0x20/0x20 [ 147.102028][ T6586] ? __local_bh_enable_ip+0x13a/0x1c0 [ 147.108248][ T6586] ? lockdep_hardirqs_on+0x98/0x150 [ 147.113878][ T6586] ? __local_bh_enable_ip+0x13a/0x1c0 [ 147.119499][ T6586] ? _local_bh_enable+0xa0/0xa0 [ 147.124840][ T6586] ? __dev_queue_xmit+0x275/0x3640 [ 147.130374][ T6586] ? __dev_queue_xmit+0x1bc2/0x3640 [ 147.136106][ T6586] ? __dev_queue_xmit+0x275/0x3640 [ 147.141870][ T6586] ? ref_tracker_free+0x686/0x830 [ 147.147310][ T6586] netlink_rcv_skb+0x235/0x4c0 [ 147.152352][ T6586] ? rtnetlink_bind+0x80/0x80 [ 147.157505][ T6586] ? netlink_ack+0x1160/0x1160 [ 147.162683][ T6586] ? __lock_acquire+0x7d80/0x7d80 [ 147.168582][ T6586] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.174850][ T6586] netlink_unicast+0x7b1/0x930 [ 147.180049][ T6586] netlink_sendmsg+0x8d0/0xbf0 [ 147.185175][ T6586] ? netlink_getsockopt+0x590/0x590 [ 147.190436][ T6586] ? apparmor_socket_sendmsg+0x8e/0x330 [ 147.196102][ T6586] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.201617][ T6586] ? security_socket_sendmsg+0x80/0xa0 [ 147.207178][ T6586] ? netlink_getsockopt+0x590/0x590 [ 147.212994][ T6586] ____sys_sendmsg+0x61b/0x980 [ 147.218166][ T6586] ? __asan_memset+0x22/0x40 [ 147.222975][ T6586] ? __sys_sendmsg_sock+0x30/0x30 [ 147.228606][ T6586] ? __import_iovec+0x5f2/0x850 [ 147.233689][ T6586] ? import_iovec+0x73/0xa0 [ 147.238492][ T6586] ___sys_sendmsg+0x2a6/0x360 [ 147.243441][ T6586] ? __sys_sendmsg+0x2b0/0x2b0 [ 147.249338][ T6586] __sys_sendmmsg+0x2ca/0x510 [ 147.254437][ T6586] ? __ia32_sys_sendmsg+0x90/0x90 [ 147.259931][ T6586] ? __ia32_sys_get_robust_list+0x110/0x110 [ 147.267909][ T6586] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 147.276256][ T6586] ? lock_chain_count+0x20/0x20 [ 147.281970][ T6586] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.287856][ T6586] do_syscall_64+0x55/0xb0 [ 147.292441][ T6586] ? clear_bhb_loop+0x40/0x90 [ 147.297816][ T6586] ? clear_bhb_loop+0x40/0x90 [ 147.302816][ T6586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.309217][ T6586] RIP: 0033:0x7fad9bb9e0d9 [ 147.314460][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.337353][ T6586] RSP: 002b:00007fad9ca44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.347103][ T6586] RAX: ffffffffffffffda RBX: 00007fad9be25fa0 RCX: 00007fad9bb9e0d9 [ 147.356886][ T6586] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 147.366971][ T6586] RBP: 00007fad9bc35024 R08: 0000000000000000 R09: 0000000000000000 [ 147.378190][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.387335][ T6586] R13: 00007fad9be26038 R14: 00007fad9be25fa0 R15: 00007ffdda157428 [ 147.396216][ T6586] [ 147.399980][ T6586] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.409897][ T6586] CPU: 1 PID: 6586 Comm: syz.0.260 Not tainted syzkaller #0 [ 147.419320][ T6586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.432175][ T6586] Call Trace: [ 147.435693][ T6586] [ 147.439079][ T6586] dump_stack_lvl+0x18c/0x250 [ 147.445181][ T6586] ? show_regs_print_info+0x20/0x20 [ 147.450880][ T6586] ? load_image+0x420/0x420 [ 147.456197][ T6586] panic+0x2ca/0x720 [ 147.461026][ T6586] ? bpf_jit_dump+0xd0/0xd0 [ 147.468307][ T6586] __warn+0x2e0/0x470 [ 147.474309][ T6586] ? u32_change+0x1df2/0x2860 [ 147.481064][ T6586] ? u32_change+0x1df2/0x2860 [ 147.488824][ T6586] report_bug+0x2be/0x4f0 [ 147.494264][ T6586] ? u32_change+0x1df2/0x2860 [ 147.501129][ T6586] ? u32_change+0x1df2/0x2860 [ 147.508553][ T6586] ? u32_change+0x1df4/0x2860 [ 147.515236][ T6586] handle_bug+0xcf/0x120 [ 147.520716][ T6586] exc_invalid_op+0x1a/0x50 [ 147.526769][ T6586] asm_exc_invalid_op+0x1a/0x20 [ 147.534351][ T6586] RIP: 0010:u32_change+0x1df2/0x2860 [ 147.541115][ T6586] Code: f8 eb 59 e8 30 6e cf f8 c6 05 75 09 bf 05 01 b9 10 00 00 00 48 c7 c7 80 5b c8 8b 4c 89 f6 48 c7 c2 00 5c c8 8b e8 ce 3a 99 f8 <0f> 0b e9 10 ef ff ff e8 02 6e cf f8 eb 24 e8 fb 6d cf f8 c6 05 ef [ 147.554034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 147.579333][ T6586] RSP: 0018:ffffc9000f87ed60 EFLAGS: 00010246 [ 147.586782][ T6586] RAX: 0f9bc5458d5a9700 RBX: ffff88801c7f6000 RCX: 0000000000080000 [ 147.596299][ T6586] RDX: ffffc9000d7ba000 RSI: 0000000000007061 RDI: 0000000000007062 [ 147.606982][ T6586] RBP: ffffc9000f87eef8 R08: ffffc9000f87e967 R09: 1ffff92001f0fd2c [ 147.616721][ T6586] R10: dffffc0000000000 R11: fffff52001f0fd2d R12: 1ffff92001f0fdbc [ 147.627854][ T6586] R13: ffff888024d01ce8 R14: 0000000000000020 R15: 0000000000000001 [ 147.637724][ T6586] ? u32_get+0x370/0x370 [ 147.642812][ T6586] tc_new_tfilter+0x1109/0x1840 [ 147.647928][ T6586] ? tcf_proto_signal_destroying+0x240/0x240 [ 147.655127][ T6586] ? rcu_read_unlock+0x8c/0xa0 [ 147.660588][ T6586] ? tcf_proto_signal_destroying+0x240/0x240 [ 147.667792][ T6586] ? tcf_proto_signal_destroying+0x240/0x240 [ 147.675912][ T6586] rtnetlink_rcv_msg+0x892/0xf90 [ 147.681988][ T6586] ? rtnetlink_rcv_msg+0x220/0xf90 [ 147.688297][ T6586] ? rtnetlink_bind+0x80/0x80 [ 147.693505][ T6586] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 147.700267][ T6586] ? lock_chain_count+0x20/0x20 [ 147.706702][ T6586] ? __local_bh_enable_ip+0x13a/0x1c0 [ 147.713701][ T6586] ? lockdep_hardirqs_on+0x98/0x150 [ 147.719938][ T6586] ? __local_bh_enable_ip+0x13a/0x1c0 [ 147.726755][ T6586] ? _local_bh_enable+0xa0/0xa0 [ 147.733074][ T6586] ? __dev_queue_xmit+0x275/0x3640 [ 147.739224][ T6586] ? __dev_queue_xmit+0x1bc2/0x3640 [ 147.744938][ T6586] ? __dev_queue_xmit+0x275/0x3640 [ 147.750873][ T6586] ? ref_tracker_free+0x686/0x830 [ 147.756419][ T6586] netlink_rcv_skb+0x235/0x4c0 [ 147.761424][ T6586] ? rtnetlink_bind+0x80/0x80 [ 147.766788][ T6586] ? netlink_ack+0x1160/0x1160 [ 147.771968][ T6586] ? __lock_acquire+0x7d80/0x7d80 [ 147.777611][ T6586] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.783109][ T6586] netlink_unicast+0x7b1/0x930 [ 147.790243][ T6586] netlink_sendmsg+0x8d0/0xbf0 [ 147.796483][ T6586] ? netlink_getsockopt+0x590/0x590 [ 147.802107][ T6586] ? apparmor_socket_sendmsg+0x8e/0x330 [ 147.808798][ T6586] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.814773][ T6586] ? security_socket_sendmsg+0x80/0xa0 [ 147.820915][ T6586] ? netlink_getsockopt+0x590/0x590 [ 147.827047][ T6586] ____sys_sendmsg+0x61b/0x980 [ 147.833014][ T6586] ? __asan_memset+0x22/0x40 [ 147.838105][ T6586] ? __sys_sendmsg_sock+0x30/0x30 [ 147.843993][ T6586] ? __import_iovec+0x5f2/0x850 [ 147.849534][ T6586] ? import_iovec+0x73/0xa0 [ 147.855482][ T6586] ___sys_sendmsg+0x2a6/0x360 [ 147.861982][ T6586] ? __sys_sendmsg+0x2b0/0x2b0 [ 147.869133][ T6586] __sys_sendmmsg+0x2ca/0x510 [ 147.875463][ T6586] ? __ia32_sys_sendmsg+0x90/0x90 [ 147.882709][ T6586] ? __ia32_sys_get_robust_list+0x110/0x110 [ 147.890472][ T6586] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 147.897394][ T6586] ? lock_chain_count+0x20/0x20 [ 147.902903][ T6586] __x64_sys_sendmmsg+0xa0/0xb0 [ 147.908409][ T6586] do_syscall_64+0x55/0xb0 [ 147.912984][ T6586] ? clear_bhb_loop+0x40/0x90 [ 147.917731][ T6586] ? clear_bhb_loop+0x40/0x90 [ 147.923248][ T6586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.930843][ T6586] RIP: 0033:0x7fad9bb9e0d9 [ 147.936004][ T6586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.962378][ T6586] RSP: 002b:00007fad9ca44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 147.971485][ T6586] RAX: ffffffffffffffda RBX: 00007fad9be25fa0 RCX: 00007fad9bb9e0d9 [ 147.981130][ T6586] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 147.990902][ T6586] RBP: 00007fad9bc35024 R08: 0000000000000000 R09: 0000000000000000 [ 147.999442][ T6586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.007892][ T6586] R13: 00007fad9be26038 R14: 00007fad9be25fa0 R15: 00007ffdda157428 [ 148.017327][ T6586] [ 148.021040][ T6586] Kernel Offset: disabled [ 148.026010][ T6586] Rebooting in 86400 seconds..