last executing test programs: 9.119460651s ago: executing program 2 (id=241): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="2711", 0x2}], 0x1}, 0x4) 4.354206325s ago: executing program 2 (id=256): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mremap(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000056000/0x2000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x9, 0xc8, "0200", "2daca8", "2ea24e", "e19465", 0x81, 0x8d, 0x0, 0x7, 0x40, 0x7, 0xf, 0xffff, 0x7ffd, 0x464}}}}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) munlockall() 3.392945688s ago: executing program 2 (id=264): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x103e}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)="2711", 0x2}], 0x1}, 0x4) 2.93467031s ago: executing program 3 (id=267): setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x2, "d84d"}, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 2.567695468s ago: executing program 1 (id=269): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000100)='./file0\x00') unshare(0x38060000) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) 2.496512161s ago: executing program 0 (id=270): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) openat$sequencer(0xffffffffffffff9c, 0x0, 0xb80, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 1.67760841s ago: executing program 1 (id=271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x4010012, r0, 0x1000) 1.614557632s ago: executing program 1 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.539701253s ago: executing program 0 (id=273): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x29d51, 0x49841}}, 0x20}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 1.25901494s ago: executing program 1 (id=274): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) 1.104768644s ago: executing program 1 (id=275): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a', 0xd) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 718.689803ms ago: executing program 3 (id=276): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="040000000000000000000000380100"/45) write(r0, &(0x7f0000000138)="00000000000000000080000000000000000000000000000074", 0x19) ioctl(r0, 0xc138fd09, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', 0x0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000300)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000680)=0x1000, r2, 0x0, 0x1, 0x4}}, 0x20) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x12) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000040)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x66}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0) r3 = socket(0x2, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) 668.566474ms ago: executing program 0 (id=277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 649.825574ms ago: executing program 2 (id=278): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xe7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) 646.566675ms ago: executing program 1 (id=279): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000100)='./file0\x00') unshare(0x38060000) openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x101) 450.643399ms ago: executing program 0 (id=280): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 445.683299ms ago: executing program 3 (id=281): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$TCFLSH(r2, 0x400455c8, 0x2) ioctl$TIOCSETD(r2, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0xfc) 443.575459ms ago: executing program 2 (id=282): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0x6, 0x93, 0xfe, 0x0, 0x5f, 0x2b, 0xd6, 0xa6, 0x2, 0x5, 0x2, 0x3}, {0xfffffff8, 0xfffa, 0x0, 0x0, 0x1, 0xf6, 0xce, 0x8, 0x4, 0xfe, 0x4, 0xa6, 0x800000000000000}, {0x4df, 0x30, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0xfe, 0x4, 0x1000000000000000}], 0xcc78}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x40000000000, 0x2, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000, 0x100000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 271.287884ms ago: executing program 0 (id=283): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000e40)={{}, {0x1, 0x1}, [], {}, [], {0x10, 0x6}, {0x20, 0x6}}, 0x24, 0x3) 270.223124ms ago: executing program 3 (id=284): setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040)={0x2, "d84d"}, 0x3) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x0) 136.467827ms ago: executing program 3 (id=285): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(0x0, r1) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x29d51, 0x49841}}, 0x20}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) 48.861619ms ago: executing program 0 (id=286): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sync_file_range(r2, 0x6, 0x800, 0x3) 1.00526ms ago: executing program 3 (id=287): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a', 0xd) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 2 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts. [ 65.499832][ T5757] cgroup: Unknown subsys name 'net' [ 65.666617][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.061268][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.902189][ T5772] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.910908][ T5772] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.930161][ T5772] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.941198][ T5772] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.950384][ T5772] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.957760][ T5772] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.986151][ T5087] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.994080][ T5087] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.002453][ T5087] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.018980][ T5087] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.027575][ T5087] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.036878][ T5087] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.048984][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.060997][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.072107][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.122103][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.125620][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.137627][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.138055][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.153400][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.156285][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.169403][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.179681][ T5087] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.187808][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.497198][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 69.618221][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 69.681892][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 69.725473][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.733353][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.740824][ T5773] bridge_slave_0: entered allmulticast mode [ 69.747645][ T5773] bridge_slave_0: entered promiscuous mode [ 69.783330][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.790663][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.797803][ T5773] bridge_slave_1: entered allmulticast mode [ 69.804812][ T5773] bridge_slave_1: entered promiscuous mode [ 69.821999][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 69.849820][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.857091][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.864643][ T5770] bridge_slave_0: entered allmulticast mode [ 69.871434][ T5770] bridge_slave_0: entered promiscuous mode [ 69.888394][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.895733][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.903695][ T5770] bridge_slave_1: entered allmulticast mode [ 69.911172][ T5770] bridge_slave_1: entered promiscuous mode [ 69.929277][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.941475][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.017008][ T5773] team0: Port device team_slave_0 added [ 70.029610][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.044019][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.059570][ T5773] team0: Port device team_slave_1 added [ 70.116183][ T5770] team0: Port device team_slave_0 added [ 70.126402][ T5770] team0: Port device team_slave_1 added [ 70.143869][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.151704][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.158912][ T5777] bridge_slave_0: entered allmulticast mode [ 70.165846][ T5777] bridge_slave_0: entered promiscuous mode [ 70.194966][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.202184][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.228126][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.240562][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.247688][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.257189][ T5777] bridge_slave_1: entered allmulticast mode [ 70.264111][ T5777] bridge_slave_1: entered promiscuous mode [ 70.299613][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.306638][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.335022][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.356277][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.363353][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.390029][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.401781][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.408950][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.416446][ T5775] bridge_slave_0: entered allmulticast mode [ 70.423460][ T5775] bridge_slave_0: entered promiscuous mode [ 70.432029][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.439155][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.447465][ T5775] bridge_slave_1: entered allmulticast mode [ 70.454346][ T5775] bridge_slave_1: entered promiscuous mode [ 70.471036][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.483655][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.493415][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.500604][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.527753][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.590313][ T5777] team0: Port device team_slave_0 added [ 70.598800][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.634445][ T5777] team0: Port device team_slave_1 added [ 70.645230][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.677495][ T5773] hsr_slave_0: entered promiscuous mode [ 70.684424][ T5773] hsr_slave_1: entered promiscuous mode [ 70.715449][ T5770] hsr_slave_0: entered promiscuous mode [ 70.722091][ T5770] hsr_slave_1: entered promiscuous mode [ 70.728168][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.736081][ T5770] Cannot create hsr debugfs directory [ 70.793756][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.803064][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.829476][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.842365][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.849343][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.875556][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.890732][ T5775] team0: Port device team_slave_0 added [ 70.928147][ T5775] team0: Port device team_slave_1 added [ 71.000874][ T5779] Bluetooth: hci0: command tx timeout [ 71.006503][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.014676][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.040777][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.061054][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.068035][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.096778][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.132783][ T5777] hsr_slave_0: entered promiscuous mode [ 71.139319][ T5777] hsr_slave_1: entered promiscuous mode [ 71.145604][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.153268][ T5777] Cannot create hsr debugfs directory [ 71.160184][ T5779] Bluetooth: hci1: command tx timeout [ 71.227120][ T5775] hsr_slave_0: entered promiscuous mode [ 71.234279][ T5775] hsr_slave_1: entered promiscuous mode [ 71.240969][ T5779] Bluetooth: hci2: command tx timeout [ 71.241046][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.246583][ T5779] Bluetooth: hci3: command tx timeout [ 71.254636][ T5775] Cannot create hsr debugfs directory [ 71.484014][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.505880][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.517525][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.542214][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.601921][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.617165][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.630581][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.651148][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.657705][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.666021][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.748120][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.757887][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.768873][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.782581][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.855073][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.865134][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.874875][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.886953][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.925835][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.000900][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.019223][ T1070] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.026596][ T1070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.053519][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.060641][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.139842][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.157241][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.207791][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.222959][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.246613][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.253816][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.267370][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.274510][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.294428][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.313979][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.321166][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.337052][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.344258][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.419482][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.457574][ T4769] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.464895][ T4769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.508489][ T4769] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.515756][ T4769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.695729][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.797192][ T5770] veth0_vlan: entered promiscuous mode [ 72.818670][ T5770] veth1_vlan: entered promiscuous mode [ 72.896839][ T5770] veth0_macvtap: entered promiscuous mode [ 72.937452][ T5770] veth1_macvtap: entered promiscuous mode [ 72.982772][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.007947][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.021685][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.047648][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.058161][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.067160][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.076085][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.085055][ T5779] Bluetooth: hci0: command tx timeout [ 73.097802][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.197955][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.241380][ T5779] Bluetooth: hci1: command tx timeout [ 73.265019][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.275353][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.297902][ T5777] veth0_vlan: entered promiscuous mode [ 73.319797][ T5773] veth0_vlan: entered promiscuous mode [ 73.320758][ T5772] Bluetooth: hci2: command tx timeout [ 73.331009][ T5779] Bluetooth: hci3: command tx timeout [ 73.354053][ T5777] veth1_vlan: entered promiscuous mode [ 73.364776][ T5775] veth0_vlan: entered promiscuous mode [ 73.379458][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.383754][ T5775] veth1_vlan: entered promiscuous mode [ 73.394330][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.429043][ T5773] veth1_vlan: entered promiscuous mode [ 73.514275][ T5777] veth0_macvtap: entered promiscuous mode [ 73.526094][ T5777] veth1_macvtap: entered promiscuous mode [ 73.568059][ T5775] veth0_macvtap: entered promiscuous mode [ 73.593675][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.609013][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.624640][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.642060][ T5773] veth0_macvtap: entered promiscuous mode [ 73.664382][ T5775] veth1_macvtap: entered promiscuous mode [ 73.677881][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.692605][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.708479][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.736583][ T5773] veth1_macvtap: entered promiscuous mode [ 73.758616][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.769109][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.778204][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.787151][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.817785][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.845312][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.856867][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.863709][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.875160][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.902401][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.928406][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.940860][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.954495][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.965490][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.978464][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.031277][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.060074][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.068985][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.083593][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.104884][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.115570][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.133050][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.146338][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.159605][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.176477][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.188691][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.244682][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.261764][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.275225][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.287204][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.301215][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.315001][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.333687][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.377394][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.391339][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.402381][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.413363][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.433171][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.459027][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.563097][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.581037][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.628600][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.665429][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.698418][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.743215][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.803900][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.830279][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.888764][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.916958][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.161500][ T5779] Bluetooth: hci0: command tx timeout [ 75.320393][ T5779] Bluetooth: hci1: command tx timeout [ 75.400183][ T5779] Bluetooth: hci3: command tx timeout [ 75.405748][ T5779] Bluetooth: hci2: command tx timeout [ 75.421070][ T5858] syz.0.1[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 75.474107][ T5858] loop0: detected capacity change from 0 to 1024 [ 77.129883][ T5861] loop2: detected capacity change from 0 to 1024 [ 77.313997][ T5779] Bluetooth: hci0: command tx timeout [ 77.492811][ T5779] Bluetooth: hci1: command tx timeout [ 77.498983][ T5779] Bluetooth: hci2: command tx timeout [ 77.515926][ T5779] Bluetooth: hci3: command tx timeout [ 78.077914][ T5875] binder: BINDER_SET_CONTEXT_MGR already set [ 78.100491][ T5875] binder: 5874:5875 ioctl 4018620d 2000000002c0 returned -16 [ 78.613633][ T5881] tty tty27: ldisc open failed (-12), clearing slot 26 [ 78.888743][ T5889] overlayfs: overlapping lowerdir path [ 80.200392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.609973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 80.932487][ T5906] loop2: detected capacity change from 0 to 1024 [ 81.907278][ T5911] rt1719: probe of 0-0049 failed with error -5 [ 81.915781][ T5911] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 81.942917][ T5911] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 82.036374][ T5911] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 82.130043][ T5891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 82.822415][ T5914] loop2: detected capacity change from 0 to 32768 [ 82.844118][ T5914] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.23 (5914) [ 82.880226][ T5914] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 82.890667][ T5914] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 82.899402][ T5914] BTRFS info (device loop2): turning on sync discard [ 82.906348][ T5914] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 82.915963][ T5914] BTRFS info (device loop2): use zstd compression, level 3 [ 82.923838][ T5914] BTRFS info (device loop2): turning on async discard [ 82.930884][ T5914] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 82.941826][ T5914] BTRFS info (device loop2): trying to use backup root at mount time [ 82.950099][ T5914] BTRFS info (device loop2): enabling auto defrag [ 82.956907][ T5914] BTRFS info (device loop2): using free space tree [ 83.060129][ T5928] fuse: Bad value for 'fd' [ 83.073350][ T59] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 83.099684][ T5914] BTRFS error (device loop2): failed to load root extent [ 83.107047][ T5914] BTRFS warning (device loop2): try to load backup roots slot 1 [ 83.118594][ T59] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 83.167496][ T5914] BTRFS warning (device loop2): couldn't read tree root [ 83.175565][ T5914] BTRFS warning (device loop2): try to load backup roots slot 2 [ 83.184729][ T4769] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 83.215149][ T5914] BTRFS warning (device loop2): couldn't read tree root [ 83.222222][ T5914] BTRFS warning (device loop2): try to load backup roots slot 3 [ 83.240989][ T5914] BTRFS info (device loop2): enabling ssd optimizations [ 83.251753][ T5914] BTRFS info (device loop2): rebuilding free space tree [ 83.306156][ T5914] BTRFS info (device loop2): checking UUID tree [ 83.345167][ T5934] binder: BINDER_SET_CONTEXT_MGR already set [ 83.373413][ T5934] binder: 5931:5934 ioctl 4018620d 2000000002c0 returned -16 [ 84.277895][ T5943] netlink: 17023 bytes leftover after parsing attributes in process `syz.0.27'. [ 84.358981][ T5775] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.548947][ T5764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (5764) [ 85.320276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.731529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 85.870639][ T1208] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.264298][ T788] cfg80211: failed to load regulatory.db [ 87.380136][ T1208] usb 4-1: Using ep0 maxpacket: 32 [ 87.425118][ T1208] usb 4-1: device descriptor read/all, error -71 [ 87.676091][ T5966] syzkaller0: entered promiscuous mode [ 87.694495][ T5966] syzkaller0: entered allmulticast mode [ 88.277061][ T5971] block device autoloading is deprecated and will be removed. [ 89.361828][ T5984] netlink: 17023 bytes leftover after parsing attributes in process `syz.3.39'. [ 90.400884][ T5961] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 90.703851][ T5996] binder: 5994:5996 ioctl c0306201 200000000640 returned -14 [ 90.770012][ T28] audit: type=1800 audit(1786342353.108:2): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="zoned" dev="configfs" ino=6993 res=0 errno=0 [ 90.837077][ T28] audit: type=1800 audit(1786342353.118:3): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="memory_backed" dev="configfs" ino=6994 res=0 errno=0 [ 90.910038][ T28] audit: type=1800 audit(1786342353.128:4): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="zone_nr_conv" dev="configfs" ino=6995 res=0 errno=0 [ 91.000171][ T28] audit: type=1800 audit(1786342353.128:5): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.46" name="power" dev="configfs" ino=6996 res=0 errno=0 [ 91.077432][ T5998] null_blk: disk nullb1 created [ 93.000336][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 93.167100][ T6014] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.49'. [ 94.760516][ T6023] ======================================================= [ 94.760516][ T6023] WARNING: The mand mount option has been deprecated and [ 94.760516][ T6023] and is ignored by this kernel. Remove the mand [ 94.760516][ T6023] option from the mount to silence this warning. [ 94.760516][ T6023] ======================================================= [ 95.489134][ T28] audit: type=1800 audit(1786342357.828:6): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="zoned" dev="configfs" ino=7098 res=0 errno=0 [ 95.528030][ T28] audit: type=1800 audit(1786342357.858:7): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="memory_backed" dev="configfs" ino=7099 res=0 errno=0 [ 95.580224][ T28] audit: type=1800 audit(1786342357.868:8): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="zone_nr_conv" dev="configfs" ino=7100 res=0 errno=0 [ 95.668233][ T28] audit: type=1800 audit(1786342357.868:9): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.57" name="power" dev="configfs" ino=7101 res=0 errno=0 [ 95.718040][ T6035] loop4: detected capacity change from 0 to 7 [ 95.729027][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.738523][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 95.761526][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.770756][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 95.814142][ T6035] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 95.839281][ T6035] Buffer I/O error on dev loop4, logical block 0, async page read [ 97.040836][ T6035] ldm_validate_partition_table(): Disk read failed. [ 97.047710][ T6035] Dev loop4: unable to read RDB block 0 [ 97.054279][ T6035] loop4: unable to read partition table [ 97.060491][ T6035] loop4: partition table beyond EOD, truncated [ 97.086494][ T6035] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 98.120431][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.971079][ T6060] loop3: detected capacity change from 0 to 1024 [ 99.931538][ T28] audit: type=1800 audit(1786342362.278:10): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="zoned" dev="configfs" ino=7132 res=0 errno=0 [ 99.944916][ T55] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 99.973079][ T55] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 100.003761][ T28] audit: type=1800 audit(1786342362.278:11): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="memory_backed" dev="configfs" ino=7133 res=0 errno=0 [ 100.870174][ T28] audit: type=1800 audit(1786342362.278:12): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="zone_nr_conv" dev="configfs" ino=7134 res=0 errno=0 [ 100.910762][ T28] audit: type=1800 audit(1786342362.288:13): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.67" name="power" dev="configfs" ino=7135 res=0 errno=0 [ 102.981387][ T6092] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 103.313712][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 103.321623][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 103.355401][ T27] libceph: connect (1)[c::]:6789 error -101 [ 103.366054][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 103.584966][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 103.594350][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 103.608879][ T28] audit: type=1800 audit(1786342365.948:14): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="zoned" dev="configfs" ino=9301 res=0 errno=0 [ 103.633441][ T27] libceph: connect (1)[c::]:6789 error -101 [ 103.633484][ T28] audit: type=1800 audit(1786342365.978:15): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="memory_backed" dev="configfs" ino=8259 res=0 errno=0 [ 103.642258][ T1149] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 103.671240][ T28] audit: type=1800 audit(1786342365.978:16): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="zone_nr_conv" dev="configfs" ino=8260 res=0 errno=0 [ 103.673907][ T1149] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 103.701502][ T28] audit: type=1800 audit(1786342365.978:17): pid=6110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.79" name="power" dev="configfs" ino=8261 res=0 errno=0 [ 103.702598][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 104.991243][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 104.997326][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 105.001672][ T27] libceph: connect (1)[c::]:6789 error -101 [ 105.020859][ T27] libceph: mon0 (1)[c::]:6789 connect error [ 105.030067][ T6073] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.055029][ T6098] ceph: No mds server is up or the cluster is laggy [ 105.055066][ T6101] ceph: No mds server is up or the cluster is laggy [ 105.432258][ T6120] loop0: detected capacity change from 0 to 1024 [ 106.230525][ T788] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.275548][ T28] audit: type=1800 audit(1786342368.618:18): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name="zoned" dev="configfs" ino=9334 res=0 errno=0 [ 106.304534][ T1149] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 106.315966][ T1149] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 106.325699][ T28] audit: type=1800 audit(1786342368.618:19): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name="memory_backed" dev="configfs" ino=9335 res=0 errno=0 [ 106.347023][ T28] audit: type=1800 audit(1786342368.648:20): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name="zone_nr_conv" dev="configfs" ino=9336 res=0 errno=0 [ 106.368176][ T28] audit: type=1800 audit(1786342368.648:21): pid=6128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.88" name="power" dev="configfs" ino=9337 res=0 errno=0 [ 106.401078][ T6130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.86'. [ 106.460084][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 106.476083][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.521863][ T788] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 106.538699][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.560297][ T788] usb 3-1: Product: syz [ 106.564532][ T788] usb 3-1: Manufacturer: syz [ 106.569142][ T788] usb 3-1: SerialNumber: syz [ 106.604431][ T788] usb 3-1: config 0 descriptor?? [ 106.638850][ T788] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.668980][ T788] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 106.747109][ T6136] overlayfs: missing 'lowerdir' [ 106.913948][ T6143] syzkaller0: entered promiscuous mode [ 106.919483][ T6143] syzkaller0: entered allmulticast mode [ 107.243577][ T788] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 107.370948][ T6150] loop4: detected capacity change from 0 to 7 [ 107.378977][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.388243][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.402612][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.411904][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.421730][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.430928][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.439591][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.448901][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.457094][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.466320][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.475614][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.484789][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.494373][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.503611][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.511673][ T6150] ldm_validate_partition_table(): Disk read failed. [ 107.519622][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 107.528833][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.538056][ T6150] Dev loop4: unable to read RDB block 0 [ 107.547779][ T6150] loop4: unable to read partition table [ 107.554576][ T6150] loop4: partition table beyond EOD, truncated [ 107.570652][ T6150] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 107.852890][ T6154] loop0: detected capacity change from 0 to 1024 [ 108.160355][ T788] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 108.253795][ T788] em28xx 3-1:0.0: board has no eeprom [ 108.700674][ T788] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.708574][ T788] em28xx 3-1:0.0: dvb set to bulk mode. [ 108.754083][ T27] em28xx 3-1:0.0: Binding DVB extension [ 108.796346][ T788] usb 3-1: USB disconnect, device number 2 [ 108.873952][ T788] em28xx 3-1:0.0: Disconnecting em28xx [ 108.978944][ T27] em28xx 3-1:0.0: Registering input extension [ 109.010391][ T788] em28xx 3-1:0.0: Closing input extension [ 109.072800][ T788] em28xx 3-1:0.0: Freeing device [ 109.191508][ T28] audit: type=1800 audit(1786342371.538:22): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="zoned" dev="configfs" ino=8315 res=0 errno=0 [ 109.218975][ T1149] blk_print_req_error: 12 callbacks suppressed [ 109.218990][ T1149] I/O error, dev nullb1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 109.240412][ T1149] buffer_io_error: 12 callbacks suppressed [ 109.240424][ T1149] Buffer I/O error on dev nullb1, logical block 0, lost async page write [ 109.322929][ T6172] overlayfs: missing 'lowerdir' [ 109.324136][ T28] audit: type=1800 audit(1786342371.558:23): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="memory_backed" dev="configfs" ino=8316 res=0 errno=0 [ 109.372506][ T28] audit: type=1800 audit(1786342371.558:24): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="zone_nr_conv" dev="configfs" ino=8317 res=0 errno=0 [ 109.398972][ T28] audit: type=1800 audit(1786342371.558:25): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.98" name="power" dev="configfs" ino=8318 res=0 errno=0 [ 109.531286][ T6176] Zero length message leads to an empty skb [ 109.737379][ T6179] syzkaller0: entered promiscuous mode [ 109.746304][ T6138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.753237][ T6179] syzkaller0: entered allmulticast mode [ 109.962945][ T6182] loop4: detected capacity change from 0 to 7 [ 109.980799][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 109.990048][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.008152][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.017398][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.029322][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.038573][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.047878][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.057119][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.145937][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.155211][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.182793][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.192173][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.201330][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.210558][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.226477][ T6182] ldm_validate_partition_table(): Disk read failed. [ 110.246895][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.256192][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.265295][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.274542][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 110.286398][ T6182] Dev loop4: unable to read RDB block 0 [ 110.297261][ T6182] loop4: unable to read partition table [ 110.310445][ T6189] loop2: detected capacity change from 0 to 1024 [ 110.406384][ T6182] loop4: partition table beyond EOD, truncated [ 110.557095][ T6182] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 111.443401][ T6208] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.113'. [ 111.670637][ T6218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.114'. [ 111.680435][ T6219] loop4: detected capacity change from 0 to 7 [ 111.691345][ T6219] ldm_validate_partition_table(): Disk read failed. [ 111.700030][ T6219] Dev loop4: unable to read RDB block 0 [ 111.707459][ T6214] syzkaller0: entered promiscuous mode [ 111.716123][ T6219] loop4: unable to read partition table [ 111.724524][ T6214] syzkaller0: entered allmulticast mode [ 111.733126][ T6219] loop4: partition table beyond EOD, truncated [ 111.745240][ T6219] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 112.541944][ T6236] overlay: Unknown parameter '/' [ 112.818141][ T6242] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.125'. [ 112.850817][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.1.126'. [ 112.861508][ T6246] loop4: detected capacity change from 0 to 7 [ 112.875881][ T6246] ldm_validate_partition_table(): Disk read failed. [ 112.896319][ T6246] Dev loop4: unable to read RDB block 0 [ 112.972029][ T6246] loop4: unable to read partition table [ 112.987249][ T6246] loop4: partition table beyond EOD, truncated [ 113.003099][ T6246] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 113.398139][ T6258] overlay: Unknown parameter '/' [ 113.579425][ T6270] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.136'. [ 114.769015][ T6293] overlay: Unknown parameter '/' [ 115.210212][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 115.424228][ T788] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.435014][ T788] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 115.445810][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 115.458946][ T788] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 115.468312][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.486600][ T6297] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 115.496836][ T788] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 115.504572][ T788] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 115.520103][ T788] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 115.529639][ T788] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 115.543395][ T788] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 115.566373][ T788] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 115.583789][ T788] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 115.615152][ T788] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 115.977581][ T1208] usb 3-1: USB disconnect, device number 3 [ 116.007653][ T1208] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 116.037060][ T1208] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 116.056225][ T1208] keyspan 3-1:1.0: device disconnected [ 116.501756][ T6263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 117.060460][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.154'. [ 117.151370][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 117.162527][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 117.430749][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 117.445007][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 117.462013][ T5772] block nbd0: Receive control failed (result -32) [ 117.524018][ T6310] block nbd0: shutting down sockets [ 117.971792][ T6324] ceph: No mds server is up or the cluster is laggy [ 117.991388][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 118.016920][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 118.247251][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 118.421248][ T6355] fuse: Bad value for 'user_id' [ 119.199215][ T788] libceph: connect (1)[c::]:6789 error -101 [ 119.209704][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 119.418105][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 119.491177][ T788] libceph: connect (1)[c::]:6789 error -101 [ 119.497275][ T788] libceph: mon0 (1)[c::]:6789 connect error [ 119.511011][ T6384] fuse: Bad value for 'user_id' [ 119.593560][ T6381] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 119.614325][ T6381] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 119.622832][ T6381] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 119.631824][ T6381] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 119.640658][ T6381] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 119.648801][ T6381] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 119.657350][ T6381] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 119.667655][ T6381] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 119.676538][ T6381] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 119.684973][ T6381] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 119.992965][ T5772] block nbd0: Receive control failed (result -32) [ 120.004201][ T6367] block nbd0: shutting down sockets [ 120.024406][ T5807] libceph: connect (1)[c::]:6789 error -101 [ 120.025321][ T6369] ceph: No mds server is up or the cluster is laggy [ 120.030744][ T5807] libceph: mon0 (1)[c::]:6789 connect error [ 120.621917][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 120.626823][ T6410] fuse: Bad value for 'user_id' [ 120.698707][ T6412] loop4: detected capacity change from 0 to 7 [ 120.714042][ C1] blk_print_req_error: 45 callbacks suppressed [ 120.714058][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.729552][ C1] buffer_io_error: 45 callbacks suppressed [ 120.729567][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.753610][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.762867][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.776592][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.785842][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.794547][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.803833][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.812126][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.821473][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.830531][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.839760][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.848422][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.857762][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.865866][ T6412] ldm_validate_partition_table(): Disk read failed. [ 120.879317][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.888575][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.897319][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.906562][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.914825][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 120.924084][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.940585][ T6412] Dev loop4: unable to read RDB block 0 [ 120.956782][ T6412] loop4: unable to read partition table [ 120.965214][ T6412] loop4: partition table beyond EOD, truncated [ 120.982800][ T6412] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 121.763948][ T6435] fuse: Bad value for 'fd' [ 121.786693][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 121.882297][ T6438] tipc: Enabling of bearer rejected, failed to enable media [ 121.893607][ T6438] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 121.901774][ T6438] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 121.968843][ T6418] block nbd2: shutting down sockets [ 122.415410][ T6457] tipc: Enabling of bearer rejected, failed to enable media [ 122.427278][ T6457] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 122.435690][ T6457] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 122.898725][ T11] Bluetooth: (null): Too short H5 packet [ 123.010826][ T11] Bluetooth: (null): Invalid header checksum [ 123.093641][ T11] Bluetooth: (null): Invalid header checksum [ 123.189214][ T11] Bluetooth: (null): Invalid header checksum [ 123.299090][ T11] Bluetooth: (null): Too short H5 packet [ 123.328389][ T6460] Process accounting resumed [ 123.350247][ T11] Bluetooth: (null): Invalid header checksum [ 123.352370][ T6464] netlink: 'syz.3.209': attribute type 10 has an invalid length. [ 123.370529][ T11] Bluetooth: (null): Invalid header checksum [ 123.409230][ T6464] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.224403][ T6493] tipc: Enabling of bearer rejected, failed to enable media [ 124.240803][ T6493] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 124.249739][ T6493] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 124.295360][ T5772] block nbd2: Receive control failed (result -32) [ 124.295696][ T6466] block nbd2: shutting down sockets [ 124.880619][ T6506] loop2: detected capacity change from 0 to 1024 [ 125.750920][ T6512] tipc: Enabling of bearer rejected, failed to enable media [ 125.762066][ T6512] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 125.770749][ T6512] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 125.973461][ T6518] loop4: detected capacity change from 0 to 7 [ 126.017243][ C1] blk_print_req_error: 10 callbacks suppressed [ 126.017259][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.032768][ C1] buffer_io_error: 10 callbacks suppressed [ 126.032781][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.055430][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.064711][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.084074][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.093466][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.120879][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.130176][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.207922][ T6518] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.419282][ T6518] Buffer I/O error on dev loop4, logical block 0, async page read [ 126.775255][ T6518] ldm_validate_partition_table(): Disk read failed. [ 126.866234][ T6518] Dev loop4: unable to read RDB block 0 [ 126.897099][ T6518] loop4: unable to read partition table [ 126.925784][ T6518] loop4: partition table beyond EOD, truncated [ 126.932927][ T6518] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 127.239350][ T6544] loop0: detected capacity change from 0 to 1024 [ 128.049756][ T6548] syzkaller0: entered promiscuous mode [ 128.055368][ T6548] syzkaller0: entered allmulticast mode [ 128.266929][ T6556] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 128.310291][ T6556] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 128.460536][ T6560] device-mapper: ioctl: name not supplied when creating device [ 129.340530][ T6573] loop1: detected capacity change from 0 to 1024 [ 132.625806][ T6554] tipc: Enabling of bearer rejected, failed to enable media [ 132.762632][ T6589] device-mapper: ioctl: name not supplied when creating device [ 132.795919][ T6592] binder: 6590:6592 ioctl c0306201 0 returned -14 [ 132.806858][ T6592] binder: 6590:6592 ioctl c0306201 200000000640 returned -14 [ 132.958450][ T6598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.258'. [ 133.068825][ T5772] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 133.083469][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.090385][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.899296][ T6616] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 133.935178][ T6616] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 133.937932][ T6614] syzkaller0: entered promiscuous mode [ 133.977838][ T6614] syzkaller0: entered allmulticast mode [ 133.992646][ T6620] binder: 6619:6620 ioctl c0306201 0 returned -14 [ 133.999583][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 134.032408][ T6620] binder: 6619:6620 ioctl c0306201 200000000640 returned -14 [ 134.137880][ T6622] device-mapper: ioctl: name not supplied when creating device [ 134.307273][ T6626] netlink: 40 bytes leftover after parsing attributes in process `syz.3.267'. [ 135.655884][ T6638] create_pit_timer: 28 callbacks suppressed [ 135.655899][ T6638] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 136.207377][ T6649] tipc: Enabling of bearer rejected, failed to enable media [ 136.260804][ T6649] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 136.269485][ T6649] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 136.420522][ T6652] device-mapper: ioctl: name not supplied when creating device [ 136.862149][ T6671] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 136.875755][ T6677] jffs2: notice: (6677) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 137.051296][ T5773] ------------[ cut here ]------------ [ 137.057134][ T5773] kernel BUG at fs/jffs2/nodelist.c:462! [ 137.081711][ T5773] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 137.087825][ T5773] CPU: 1 PID: 5773 Comm: syz-executor Not tainted syzkaller #0 [ 137.095362][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 137.105419][ T5773] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 137.111326][ T5773] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 f2 fe 07 ff e9 42 fe ff ff e8 d8 7b af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 137.131025][ T5773] RSP: 0018:ffffc9000485fa98 EFLAGS: 00010293 [ 137.137084][ T5773] RAX: ffffffff82d7f648 RBX: ffff88807cfa6000 RCX: ffff88807c470000 [ 137.145048][ T5773] RDX: 0000000000000000 RSI: ffff88807cfa6000 RDI: ffff8880259dc000 [ 137.153009][ T5773] RBP: 0000000000000006 R08: ffff8880259dc36b R09: 1ffff11004b3b86d [ 137.160974][ T5773] R10: dffffc0000000000 R11: ffffed1004b3b86e R12: ffff88807cfa6000 [ 137.168937][ T5773] R13: dffffc0000000000 R14: ffff88807cfa6020 R15: ffff8880259dc000 [ 137.176903][ T5773] FS: 000055558f57b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 137.185827][ T5773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.192399][ T5773] CR2: 000055558d9a34e8 CR3: 000000006172b000 CR4: 00000000003506e0 [ 137.200368][ T5773] Call Trace: [ 137.203642][ T5773] [ 137.206566][ T5773] ? jffs2_do_clear_inode+0x314/0x390 [ 137.211934][ T5773] jffs2_do_clear_inode+0x31f/0x390 [ 137.217122][ T5773] ? jffs2_statfs+0x370/0x370 [ 137.221789][ T5773] evict+0x4b7/0x8a0 [ 137.225681][ T5773] ? xa_load+0x64/0x2e0 [ 137.229828][ T5773] ? proc_nr_inodes+0x230/0x230 [ 137.234668][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 137.239865][ T5773] ? do_raw_spin_unlock+0x121/0x230 [ 137.245061][ T5773] evict_inodes+0x64a/0x6e0 [ 137.249569][ T5773] ? clear_inode+0x150/0x150 [ 137.254150][ T5773] ? jffs2_sync_fs+0x97/0xa0 [ 137.258733][ T5773] generic_shutdown_super+0x97/0x2b0 [ 137.264009][ T5773] kill_mtd_super+0x23/0x70 [ 137.268511][ T5773] jffs2_kill_sb+0x96/0xb0 [ 137.272924][ T5773] deactivate_locked_super+0x97/0x100 [ 137.278286][ T5773] cleanup_mnt+0x3d7/0x460 [ 137.282695][ T5773] task_work_run+0x1d4/0x260 [ 137.287280][ T5773] ? task_work_cancel+0x220/0x220 [ 137.292307][ T5773] ? exit_to_user_mode_loop+0x3b/0x110 [ 137.297764][ T5773] exit_to_user_mode_loop+0xe6/0x110 [ 137.303049][ T5773] exit_to_user_mode_prepare+0xee/0x180 [ 137.308591][ T5773] syscall_exit_to_user_mode+0x1a/0x50 [ 137.314133][ T5773] do_syscall_64+0x61/0xb0 [ 137.318540][ T5773] ? clear_bhb_loop+0x40/0x90 [ 137.323210][ T5773] ? clear_bhb_loop+0x40/0x90 [ 137.327873][ T5773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.333755][ T5773] RIP: 0033:0x7f32d399f317 [ 137.338174][ T5773] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 137.357772][ T5773] RSP: 002b:00007ffe24e11da8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 137.366177][ T5773] RAX: 0000000000000000 RBX: 00007f32d3a34474 RCX: 00007f32d399f317 [ 137.374138][ T5773] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe24e11e60 [ 137.382099][ T5773] RBP: 00007ffe24e11e60 R08: 00007ffe24e12e60 R09: 00000000ffffffff [ 137.390060][ T5773] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe24e12ef0 [ 137.398023][ T5773] R13: 00007f32d3a34474 R14: 0000000000021708 R15: 00007ffe24e12f30 [ 137.405993][ T5773] [ 137.409023][ T5773] Modules linked in: [ 137.509718][ T6689] tipc: Enabling of bearer rejected, failed to enable media [ 137.531215][ T6689] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 137.539219][ T5773] ---[ end trace 0000000000000000 ]--- [ 137.556685][ T5773] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 137.577374][ T6689] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 137.580292][ T5773] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 f2 fe 07 ff e9 42 fe ff ff e8 d8 7b af fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 137.615746][ T5773] RSP: 0018:ffffc9000485fa98 EFLAGS: 00010293 [ 137.642638][ T5773] RAX: ffffffff82d7f648 RBX: ffff88807cfa6000 RCX: ffff88807c470000 [ 137.651774][ T5773] RDX: 0000000000000000 RSI: ffff88807cfa6000 RDI: ffff8880259dc000 [ 137.664206][ T5773] RBP: 0000000000000006 R08: ffff8880259dc36b R09: 1ffff11004b3b86d [ 137.681683][ T5773] R10: dffffc0000000000 R11: ffffed1004b3b86e R12: ffff88807cfa6000 [ 137.695392][ T5773] R13: dffffc0000000000 R14: ffff88807cfa6020 R15: ffff8880259dc000 [ 137.703814][ T5773] FS: 000055558f57b500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 137.712885][ T5773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.719511][ T5773] CR2: 000020000000f000 CR3: 000000006172b000 CR4: 00000000003506e0 [ 137.730014][ T5773] Kernel panic - not syncing: Fatal exception [ 137.736223][ T5773] Kernel Offset: disabled [ 137.740536][ T5773] Rebooting in 86400 seconds..