last executing test programs: 25.324843005s ago: executing program 3 (id=23): getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000001500)=0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f0000000140), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x2400) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000001080)=0x91b) read$dsp(r2, &(0x7f0000001300)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 19.799344597s ago: executing program 3 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 17.886228463s ago: executing program 3 (id=36): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.720910604s ago: executing program 3 (id=38): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x200814, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0xa, 0x513, &(0x7f0000000800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 11.725988057s ago: executing program 2 (id=44): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r3, 0x0) 10.68712222s ago: executing program 1 (id=45): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000001900), &(0x7f0000000140)=0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x166}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140) setsockopt$inet6_udp_int(r4, 0x11, 0x1, &(0x7f0000001280), 0x4) 10.686992569s ago: executing program 3 (id=47): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) 9.215431759s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './sys_sec/tomoyo/domain_policy\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x7, &(0x7f00000000c0)=0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x103802) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x3}]) 8.675099384s ago: executing program 1 (id=49): futex(&(0x7f0000000580), 0x0, 0x0, &(0x7f0000000600)={0x77359400}, 0x0, 0x0) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) open$dir(&(0x7f0000000580)='./dev/rfcomm0\x00', 0x40000, 0x235) socket$nl_xfrm(0x10, 0x3, 0x6) openat$kvm(0xffffffffffffff9c, 0x0, 0x80102, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r1, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 8.63721855s ago: executing program 3 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@private1={0xfc, 0x1, '\x00', 0xff}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x9, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x1, 0x0, 0xe5}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x24004000) 8.601981727s ago: executing program 0 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.45817928s ago: executing program 1 (id=52): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.45793608s ago: executing program 2 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 5.445155532s ago: executing program 0 (id=61): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000c}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0x1, 0x80, 0x4, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) 4.282266636s ago: executing program 1 (id=55): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r2, &(0x7f0000000400)='PING', 0x4) accept4(r0, 0x0, 0x0, 0x0) close(r2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000800)={0x1, 'lo\x00'}, 0x18) 4.226574136s ago: executing program 2 (id=56): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f00000002c0), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x92fc}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1200, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x1, 0xfffffffffffffffc, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0x4) 4.218194287s ago: executing program 0 (id=64): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$xdp(0x2c, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.161094089s ago: executing program 1 (id=57): r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.15768799s ago: executing program 0 (id=66): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES16=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x41145}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x8000) 2.083418813s ago: executing program 2 (id=58): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @void}, 0x10) r3 = socket(0x10, 0x803, 0x0) socket(0x2, 0xa, 0x300) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) unshare(0x62040200) r4 = socket$alg(0x26, 0x5, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f00000018c0), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1.685838683s ago: executing program 0 (id=59): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1be, &(0x7f0000000480)="$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") mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) 53.82984ms ago: executing program 1 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 24.183396ms ago: executing program 2 (id=62): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x1922, 0x4000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x1912, 0x71, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000480)={{0x8, 0x3, 0x77ba, 0x100, 'syz1\x00', 0xfffffff1}, 0x0, [0x4, 0x5, 0x7, 0x5, 0x1, 0x4, 0x4a, 0x7fffffff, 0x0, 0x5, 0x64, 0xfffffffffffffffa, 0xa, 0x6, 0x1, 0x10000, 0x3, 0x9, 0x400000000, 0x0, 0x7f, 0x5f7a, 0xffffffff00000001, 0xeb, 0x8, 0x4, 0xc, 0x80000000, 0x1, 0x1ff, 0x7fffffffffffffff, 0x4, 0x80, 0x77, 0x2, 0x40, 0x1, 0x5, 0x8, 0x2, 0x7, 0x0, 0x843, 0x8, 0xfffffffffffffff8, 0x6219, 0x4, 0x13, 0x4, 0xffffffffffffff68, 0x80, 0x5, 0x39b, 0x2, 0x800, 0x0, 0x21, 0xb, 0x9, 0x5, 0x4, 0x7fffffff, 0x0, 0x4, 0x1, 0x100000001, 0x3ff, 0x1, 0x9, 0x92, 0x100, 0x9, 0x9554, 0x1, 0x6, 0x3, 0x87a, 0x6, 0x10063b, 0x40, 0x2, 0xffffffffffffffff, 0x6, 0x3, 0x4004, 0x3, 0x85a4, 0x9, 0x378, 0x3, 0x10000, 0xb147, 0x4, 0x1ff, 0x2c14, 0x2, 0xb1, 0x8b5b, 0x0, 0x2, 0xca89, 0x7, 0x1e9, 0x7, 0x669c6cf9, 0x1, 0x6, 0xffffffffffffffff, 0x2, 0x1, 0xfffffffffffffffe, 0x6, 0x6, 0x6, 0xc43, 0x0, 0x1, 0x2, 0x8, 0x7, 0x5, 0x80000000, 0x7, 0x1, 0xcb, 0x0, 0x7fff, 0xf7a]}) r1 = syz_usb_connect(0x0, 0x5a, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) 0s ago: executing program 0 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x80001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x930, 0x380000b, 0x11, r4, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="fb0149dd033be3ac4e37c4005a9614fbff67521ce16f8f09449a5a836bdf31295400000000000000000000000000000000000000000000000000000000000000000000eaff000800", 0x0, 0x35) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000040)) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.94' (ED25519) to the list of known hosts. [ 78.641189][ T5762] cgroup: Unknown subsys name 'net' [ 78.753391][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.441375][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.167152][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.184008][ T5782] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.192821][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.201535][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.209407][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.216885][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.226371][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.236050][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.243886][ T5086] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.251969][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.259971][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.268560][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.276651][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.284292][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.294243][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.298398][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.309882][ T5787] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.318635][ T5086] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.327404][ T5086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.349975][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.357433][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.367209][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.380680][ T5086] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.389312][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.887854][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 82.918414][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 83.022990][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.068870][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 83.120122][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.127418][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.137367][ T5779] bridge_slave_0: entered allmulticast mode [ 83.144819][ T5779] bridge_slave_0: entered promiscuous mode [ 83.161607][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.168813][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.176319][ T5774] bridge_slave_0: entered allmulticast mode [ 83.183765][ T5774] bridge_slave_0: entered promiscuous mode [ 83.202286][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.209558][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.217437][ T5774] bridge_slave_1: entered allmulticast mode [ 83.224980][ T5774] bridge_slave_1: entered promiscuous mode [ 83.232760][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.240201][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.247630][ T5779] bridge_slave_1: entered allmulticast mode [ 83.255528][ T5779] bridge_slave_1: entered promiscuous mode [ 83.348045][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.365225][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.399242][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.430532][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.450698][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.458688][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.468647][ T5775] bridge_slave_0: entered allmulticast mode [ 83.476222][ T5775] bridge_slave_0: entered promiscuous mode [ 83.524315][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.531584][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.539203][ T5775] bridge_slave_1: entered allmulticast mode [ 83.546890][ T5775] bridge_slave_1: entered promiscuous mode [ 83.558373][ T5774] team0: Port device team_slave_0 added [ 83.567555][ T5774] team0: Port device team_slave_1 added [ 83.576728][ T5779] team0: Port device team_slave_0 added [ 83.595574][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.602740][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.610308][ T5780] bridge_slave_0: entered allmulticast mode [ 83.617888][ T5780] bridge_slave_0: entered promiscuous mode [ 83.652181][ T5779] team0: Port device team_slave_1 added [ 83.658743][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.666318][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.673539][ T5780] bridge_slave_1: entered allmulticast mode [ 83.680742][ T5780] bridge_slave_1: entered promiscuous mode [ 83.701510][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.768877][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.791030][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.801392][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.827596][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.840124][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.847511][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.874290][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.888487][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.920359][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.927494][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.953964][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.965963][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.972944][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.000583][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.014465][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.042386][ T5775] team0: Port device team_slave_0 added [ 84.089305][ T5775] team0: Port device team_slave_1 added [ 84.134474][ T5780] team0: Port device team_slave_0 added [ 84.149150][ T5774] hsr_slave_0: entered promiscuous mode [ 84.156244][ T5774] hsr_slave_1: entered promiscuous mode [ 84.176144][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.183150][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.209715][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.223358][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.230501][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.256523][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.269757][ T5780] team0: Port device team_slave_1 added [ 84.355001][ T5086] Bluetooth: hci0: command tx timeout [ 84.365019][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.372002][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.398728][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.416282][ T5779] hsr_slave_0: entered promiscuous mode [ 84.422751][ T5779] hsr_slave_1: entered promiscuous mode [ 84.429358][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.434465][ T5783] Bluetooth: hci1: command tx timeout [ 84.438891][ T5779] Cannot create hsr debugfs directory [ 84.442941][ T5783] Bluetooth: hci2: command tx timeout [ 84.454183][ T5086] Bluetooth: hci3: command tx timeout [ 84.498515][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.505895][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.532122][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.573256][ T5775] hsr_slave_0: entered promiscuous mode [ 84.580170][ T5775] hsr_slave_1: entered promiscuous mode [ 84.587091][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.594846][ T5775] Cannot create hsr debugfs directory [ 84.672243][ T5780] hsr_slave_0: entered promiscuous mode [ 84.679569][ T5780] hsr_slave_1: entered promiscuous mode [ 84.686138][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.693723][ T5780] Cannot create hsr debugfs directory [ 84.982371][ T5774] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.995636][ T5774] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.029349][ T5774] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.041259][ T5774] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.154789][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.165821][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.176621][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.190875][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.293059][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.312651][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.323771][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.357224][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.429963][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.440822][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.451773][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.479033][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.528815][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.560879][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.583907][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.591284][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.649342][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.656542][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.719522][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.738168][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.772259][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.799345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.806587][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.816546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.823723][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.878430][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.908162][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.940118][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.947394][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.019891][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.027599][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.060468][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.099035][ T5775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.119981][ T5775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.149291][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.156571][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.181890][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.189146][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.419570][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.435569][ T5783] Bluetooth: hci0: command tx timeout [ 86.504950][ T5783] Bluetooth: hci2: command tx timeout [ 86.510443][ T5783] Bluetooth: hci3: command tx timeout [ 86.516656][ T5086] Bluetooth: hci1: command tx timeout [ 86.597882][ T5774] veth0_vlan: entered promiscuous mode [ 86.649812][ T5774] veth1_vlan: entered promiscuous mode [ 86.762410][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.812045][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.829615][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.839965][ T5774] veth0_macvtap: entered promiscuous mode [ 86.866770][ T5774] veth1_macvtap: entered promiscuous mode [ 86.902959][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.963454][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.019381][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.030464][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.043001][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.052345][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.108715][ T5779] veth0_vlan: entered promiscuous mode [ 87.133750][ T5775] veth0_vlan: entered promiscuous mode [ 87.189490][ T5779] veth1_vlan: entered promiscuous mode [ 87.242390][ T5775] veth1_vlan: entered promiscuous mode [ 87.270211][ T5780] veth0_vlan: entered promiscuous mode [ 87.339158][ T5780] veth1_vlan: entered promiscuous mode [ 87.382999][ T5775] veth0_macvtap: entered promiscuous mode [ 87.410160][ T5779] veth0_macvtap: entered promiscuous mode [ 87.420574][ T3414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.440441][ T5775] veth1_macvtap: entered promiscuous mode [ 87.453434][ T3414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.492901][ T5779] veth1_macvtap: entered promiscuous mode [ 87.557884][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.576233][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.606927][ T5780] veth0_macvtap: entered promiscuous mode [ 87.626208][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.647382][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.666220][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.675418][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.694214][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.708932][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.719710][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.731665][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.767857][ T5780] veth1_macvtap: entered promiscuous mode [ 87.777847][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.789356][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.802968][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.824500][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.849591][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.860384][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.871821][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.896813][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.934342][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.947402][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.957932][ T5838] syz.2.3[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.957935][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.977876][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.988331][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.999685][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.012650][ T5838] loop2: detected capacity change from 0 to 512 [ 88.013267][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.043128][ T5838] EXT4-fs: Ignoring removed orlov option [ 88.052186][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.068549][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.080110][ T5838] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.097265][ T5838] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.103545][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.144920][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.157691][ T5838] EXT4-fs error (device loop2): ext4_ext_check_inode:532: inode #16: comm syz.2.3: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 88.178789][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.199191][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.202164][ T5838] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.3: couldn't read orphan inode 16 (err -117) [ 88.210739][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.231297][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.241547][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.253630][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.268916][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.307262][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.316891][ T5838] EXT4-fs (loop2): 1 orphan inode deleted [ 88.326469][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.339286][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.354408][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.382604][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.417158][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.432002][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.442023][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.451254][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.514342][ T5783] Bluetooth: hci0: command tx timeout [ 88.551660][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.594285][ T51] Bluetooth: hci1: command tx timeout [ 88.599771][ T51] Bluetooth: hci2: command tx timeout [ 88.606634][ T5783] Bluetooth: hci3: command tx timeout [ 88.671065][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.679117][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.774268][ T1080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.782185][ T1080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.913432][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.941508][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.944384][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.960781][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.062574][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.104715][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.113819][ T5850] process 'syz.1.2' launched './file1' with NULL argv: empty string added [ 89.170109][ T5853] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.194381][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.202275][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.560408][ T27] audit: type=1800 audit(1790660720.704:2): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7" name="(" dev="sda1" ino=2043 res=0 errno=0 [ 91.694042][ C0] sched: RT throttling activated [ 91.714142][ T5086] Bluetooth: hci0: command tx timeout [ 91.715416][ T5783] Bluetooth: hci3: command tx timeout [ 91.719602][ T5086] Bluetooth: hci2: command tx timeout [ 91.728061][ T51] Bluetooth: hci1: command tx timeout [ 92.085031][ T5876] loop3: detected capacity change from 0 to 512 [ 92.394136][ T5876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.705928][ T9] cfg80211: failed to load regulatory.db [ 94.635253][ T5885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 94.800067][ T5883] sctp: failed to load transform for md5: -2 [ 95.086042][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.232678][ T5913] netlink: 'syz.3.19': attribute type 2 has an invalid length. [ 96.549173][ T5915] loop0: detected capacity change from 0 to 8192 [ 96.642364][ T5915] loop0: p1 p2 p3 [ 96.666887][ T5915] loop0: partition table partially beyond EOD, truncated [ 96.683032][ T5915] loop0: p1 start 68157184 is beyond EOD, truncated [ 96.695710][ T5922] loop3: detected capacity change from 0 to 1024 [ 96.721799][ T5922] ======================================================= [ 96.721799][ T5922] WARNING: The mand mount option has been deprecated and [ 96.721799][ T5922] and is ignored by this kernel. Remove the mand [ 96.721799][ T5922] option from the mount to silence this warning. [ 96.721799][ T5922] ======================================================= [ 96.816227][ T5922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.970260][ T27] audit: type=1804 audit(1790660728.114:3): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.21" name="/newroot/4/file0/bus" dev="loop3" ino=861 res=1 errno=0 [ 97.246497][ T5928] netlink: 'syz.1.22': attribute type 3 has an invalid length. [ 97.278525][ T5928] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.22'. [ 97.843048][ T5790] udevd[5790]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 98.266064][ T5789] udevd[5789]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 98.706813][ T5938] loop1: detected capacity change from 0 to 512 [ 98.898010][ T5938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.796820][ T27] audit: type=1326 audit(1790660730.944:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5935 comm="syz.3.23" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4927b9e159 code=0x0 [ 99.834898][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.0.25'. [ 100.700051][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.982381][ T5951] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 101.407690][ T5953] bridge0: port 3(netdevsim0) entered blocking state [ 101.424209][ T5953] bridge0: port 3(netdevsim0) entered disabled state [ 101.434227][ T5953] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 101.454473][ T5953] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 101.463201][ T5953] bridge0: port 3(netdevsim0) entered blocking state [ 101.470308][ T5953] bridge0: port 3(netdevsim0) entered forwarding state [ 101.512939][ T5954] netlink: 'syz.1.27': attribute type 10 has an invalid length. [ 101.537971][ T5954] bridge0: port 3(netdevsim0) entered disabled state [ 101.545287][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.553398][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.701915][ T5954] bridge0: port 3(netdevsim0) entered blocking state [ 101.708838][ T5954] bridge0: port 3(netdevsim0) entered forwarding state [ 101.716887][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.724132][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.731664][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.739407][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.767218][ T5954] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 102.050077][ T5958] syzkaller0: entered promiscuous mode [ 102.087364][ T5958] syzkaller0: entered allmulticast mode [ 102.131521][ T5958] TC_ACT_REPEAT abuse ? [ 105.710794][ T27] audit: type=1326 audit(1790660736.854:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5972 comm="syz.2.42" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f352cd9e159 code=0x0 [ 107.333389][ T5991] loop3: detected capacity change from 0 to 512 [ 107.359571][ T5992] loop1: detected capacity change from 0 to 1024 [ 108.307281][ T6000] loop2: detected capacity change from 0 to 512 [ 108.685646][ T5992] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.754250][ T5991] EXT4-fs error (device loop3): ext4_quota_enable:7144: inode #4: comm syz.3.38: casefold flag without casefold feature [ 108.808480][ T6000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.609980][ T5991] EXT4-fs (loop3): Remounting filesystem read-only [ 109.679921][ T5991] EXT4-fs warning (device loop3): ext4_enable_quotas:7188: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.723305][ T5991] EXT4-fs (loop3): mount failed [ 109.779777][ T27] audit: type=1804 audit(1790660740.904:6): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.39" name="/newroot/10/file0/bus" dev="loop1" ino=861 res=1 errno=0 [ 111.280087][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.461483][ T6028] loop3: detected capacity change from 0 to 8 [ 114.428431][ T5780] SQUASHFS error: Unable to read directory block [629:1f] [ 114.459889][ T5780] SQUASHFS error: Unable to read directory block [629:1f] [ 116.018376][ T1080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.198107][ T1080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.367717][ T1080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.498464][ T1080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.593489][ T6072] netlink: 12 bytes leftover after parsing attributes in process `syz.2.53'. [ 118.810000][ T1080] hsr_slave_0: left promiscuous mode [ 118.817077][ T5836] IPVS: starting estimator thread 0... [ 118.825090][ T1080] hsr_slave_1: left promiscuous mode [ 118.834346][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.841821][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.858776][ T1080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.866492][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.875628][ T1080] bridge_slave_1: left allmulticast mode [ 118.881484][ T1080] bridge_slave_1: left promiscuous mode [ 118.909156][ T1080] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.928396][ T1080] bridge_slave_0: left allmulticast mode [ 118.935357][ T1080] bridge_slave_0: left promiscuous mode [ 118.941251][ T1080] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.949208][ T6088] IPVS: using max 17 ests per chain, 40800 per kthread [ 118.987872][ T1080] veth1_macvtap: left promiscuous mode [ 119.000654][ T1080] veth0_macvtap: left promiscuous mode [ 119.015400][ T1080] veth1_vlan: left promiscuous mode [ 119.037227][ T1080] veth0_vlan: left promiscuous mode [ 119.173574][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.186132][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.194933][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.205513][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.214618][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.222113][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 120.238631][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 120.278875][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 120.316834][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.357727][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.636416][ T1080] bond0 (unregistering): Released all slaves [ 120.960162][ T6104] macsec0: entered promiscuous mode [ 120.985070][ T6104] macvlan2: entered promiscuous mode [ 121.048483][ T6107] syz.2.58 uses obsolete (PF_INET,SOCK_PACKET) [ 121.508058][ T5783] Bluetooth: hci2: command tx timeout [ 121.913285][ T6128] loop0: detected capacity change from 0 to 8 [ 122.546905][ T6093] chnl_net:caif_netlink_parms(): no params data found [ 122.690293][ T5775] SQUASHFS error: Unable to read directory block [629:1f] [ 122.764500][ T5775] SQUASHFS error: Unable to read directory block [629:1f] [ 123.135618][ T6093] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.142882][ T6093] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.153571][ T6093] bridge_slave_0: entered allmulticast mode [ 123.162224][ T6093] bridge_slave_0: entered promiscuous mode [ 123.197812][ T789] ------------[ cut here ]------------ [ 123.203500][ T789] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 123.217081][ T789] WARNING: CPU: 0 PID: 789 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 123.227225][ T789] Modules linked in: [ 123.231209][ T789] CPU: 0 PID: 789 Comm: kworker/0:2 Not tainted syzkaller #0 [ 123.238766][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.248941][ T789] Workqueue: events delete_netdev [ 123.254415][ T789] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 123.260289][ T789] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 123.280338][ T789] RSP: 0018:ffffc90003b5f840 EFLAGS: 00010246 [ 123.286572][ T789] RAX: 60a4600caf3cf100 RBX: ffffffff8bc599a0 RCX: ffff8880212f0000 [ 123.294653][ T789] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 123.302672][ T789] RBP: 0000000000000058 R08: ffffc90003b5f447 R09: 1ffff9200076be88 [ 123.311343][ T789] R10: dffffc0000000000 R11: fffff5200076be89 R12: 1ffffffff178b230 [ 123.319483][ T789] R13: dffffc0000000000 R14: ffff888076b1b1f0 R15: ffff888030072c20 [ 123.327583][ T789] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 123.336613][ T789] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.343240][ T789] CR2: 0000001b2dd17ff8 CR3: 0000000060ed1000 CR4: 00000000003506f0 [ 123.351341][ T789] Call Trace: [ 123.354708][ T789] [ 123.357675][ T789] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 123.363809][ T789] netdev_queue_update_kobjects+0x3e1/0x480 [ 123.369908][ T789] netdev_unregister_kobject+0x108/0x250 [ 123.375870][ T789] unregister_netdevice_many_notify+0x1449/0x1910 [ 123.382691][ T789] ? __rwlock_init+0x150/0x150 [ 123.387552][ T789] ? unregister_netdevice_many+0x20/0x20 [ 123.393242][ T789] ? do_raw_spin_unlock+0x121/0x230 [ 123.398577][ T789] ? __mutex_lock+0x923/0xc80 [ 123.403311][ T789] ? __mutex_lock+0x4d2/0xc80 [ 123.408082][ T789] unregister_netdevice_queue+0x2e9/0x330 [ 123.413866][ T789] ? list_netdevice+0x730/0x730 [ 123.418828][ T789] ? read_lock_is_recursive+0x20/0x20 [ 123.424343][ T789] lowpan_unregister_netdev+0x1c/0x30 [ 123.429779][ T789] unregister_dev+0x70/0x1a0 [ 123.434487][ T789] ? process_scheduled_works+0x975/0x1600 [ 123.440271][ T789] process_scheduled_works+0xa60/0x1600 [ 123.445970][ T789] ? worker_attach_to_pool+0x370/0x370 [ 123.451494][ T789] ? assign_work+0x3cc/0x5d0 [ 123.456234][ T789] worker_thread+0xa5e/0xfe0 [ 123.460899][ T789] ? _raw_spin_unlock+0x40/0x40 [ 123.465861][ T789] ? __kthread_parkme+0x71/0x1c0 [ 123.470865][ T789] kthread+0x2fa/0x390 [ 123.475037][ T789] ? pr_cont_work+0x550/0x550 [ 123.480007][ T789] ? kthread_blkcg+0xd0/0xd0 [ 123.484759][ T789] ret_from_fork+0x48/0x80 [ 123.489238][ T789] ? kthread_blkcg+0xd0/0xd0 [ 123.493892][ T789] ret_from_fork_asm+0x11/0x20 [ 123.498821][ T789] [ 123.501894][ T789] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 123.509224][ T789] CPU: 0 PID: 789 Comm: kworker/0:2 Not tainted syzkaller #0 [ 123.516633][ T789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.526735][ T789] Workqueue: events delete_netdev [ 123.531827][ T789] Call Trace: [ 123.535145][ T789] [ 123.538116][ T789] dump_stack_lvl+0x18c/0x250 [ 123.542869][ T789] ? show_regs_print_info+0x20/0x20 [ 123.548123][ T789] ? load_image+0x420/0x420 [ 123.552687][ T789] panic+0x2ca/0x720 [ 123.556636][ T789] ? bpf_jit_dump+0xd0/0xd0 [ 123.561173][ T789] ? ret_from_fork_asm+0x11/0x20 [ 123.566151][ T789] __warn+0x2e0/0x470 [ 123.570157][ T789] ? sysfs_remove_group+0x17b/0x290 [ 123.575389][ T789] ? sysfs_remove_group+0x17b/0x290 [ 123.580616][ T789] report_bug+0x2be/0x4f0 [ 123.585006][ T789] ? sysfs_remove_group+0x17b/0x290 [ 123.590231][ T789] ? sysfs_remove_group+0x17b/0x290 [ 123.595486][ T789] ? sysfs_remove_group+0x17d/0x290 [ 123.600714][ T789] handle_bug+0xcf/0x120 [ 123.604987][ T789] exc_invalid_op+0x1a/0x50 [ 123.609520][ T789] asm_exc_invalid_op+0x1a/0x20 [ 123.614397][ T789] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 123.620226][ T789] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 123.639852][ T789] RSP: 0018:ffffc90003b5f840 EFLAGS: 00010246 [ 123.645941][ T789] RAX: 60a4600caf3cf100 RBX: ffffffff8bc599a0 RCX: ffff8880212f0000 [ 123.653930][ T789] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 123.661917][ T789] RBP: 0000000000000058 R08: ffffc90003b5f447 R09: 1ffff9200076be88 [ 123.669908][ T789] R10: dffffc0000000000 R11: fffff5200076be89 R12: 1ffffffff178b230 [ 123.677902][ T789] R13: dffffc0000000000 R14: ffff888076b1b1f0 R15: ffff888030072c20 [ 123.685913][ T789] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 123.692017][ T789] netdev_queue_update_kobjects+0x3e1/0x480 [ 123.697939][ T789] netdev_unregister_kobject+0x108/0x250 [ 123.703599][ T789] unregister_netdevice_many_notify+0x1449/0x1910 [ 123.710048][ T789] ? __rwlock_init+0x150/0x150 [ 123.714841][ T789] ? unregister_netdevice_many+0x20/0x20 [ 123.720496][ T789] ? do_raw_spin_unlock+0x121/0x230 [ 123.725723][ T789] ? __mutex_lock+0x923/0xc80 [ 123.730427][ T789] ? __mutex_lock+0x4d2/0xc80 [ 123.735136][ T789] unregister_netdevice_queue+0x2e9/0x330 [ 123.740881][ T789] ? list_netdevice+0x730/0x730 [ 123.745755][ T789] ? read_lock_is_recursive+0x20/0x20 [ 123.751154][ T789] lowpan_unregister_netdev+0x1c/0x30 [ 123.756553][ T789] unregister_dev+0x70/0x1a0 [ 123.761166][ T789] ? process_scheduled_works+0x975/0x1600 [ 123.766915][ T789] process_scheduled_works+0xa60/0x1600 [ 123.772516][ T789] ? worker_attach_to_pool+0x370/0x370 [ 123.778012][ T789] ? assign_work+0x3cc/0x5d0 [ 123.782669][ T789] worker_thread+0xa5e/0xfe0 [ 123.787306][ T789] ? _raw_spin_unlock+0x40/0x40 [ 123.792186][ T789] ? __kthread_parkme+0x71/0x1c0 [ 123.797159][ T789] kthread+0x2fa/0x390 [ 123.801255][ T789] ? pr_cont_work+0x550/0x550 [ 123.805960][ T789] ? kthread_blkcg+0xd0/0xd0 [ 123.810578][ T789] ret_from_fork+0x48/0x80 [ 123.815021][ T789] ? kthread_blkcg+0xd0/0xd0 [ 123.819641][ T789] ret_from_fork_asm+0x11/0x20 [ 123.824454][ T789] [ 123.827646][ T789] Kernel Offset: disabled [ 123.832080][ T789] Rebooting in 86400 seconds..