last executing test programs: 7.785989586s ago: executing program 3 (id=349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect$uac1(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406624108000010000000109022400020100c032090400000001010000090401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) syz_usb_control_io(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 6.650506602s ago: executing program 1 (id=352): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000001bc0)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001c00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001cc0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001d40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001d80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001dc0)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='\\x01020304 2000000000 0 0 0', 0x1b) 6.646800482s ago: executing program 0 (id=360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="0a001a0008021100000100000a0006"], 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) bind$packet(r4, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r4, &(0x7f0000000500)="0802110000010802110000000800", 0xe) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.111541967s ago: executing program 2 (id=353): socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4604, &(0x7f0000000100)=ANY=[], 0x3, 0x335, &(0x7f0000000140)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1ff) truncate(&(0x7f0000000940)='./file1\x00', 0x3c4c) setns(r3, 0x24020000) syz_mount_image$fuse(0x0, &(0x7f0000000b80)='./file1\x00', 0x2200400, 0x0, 0x0, 0x0, &(0x7f0000001140)="7b9949879690aa2e982cf221688452110cef89ae609441fa1fa82939c833dddae3d8364be1d09e5b1de270cd9b36fa5083f2fada47c82e3d154bb05287ad4aa59f96aac14e0624f2ee4401fd2c75cb9fb9b17cb38d9e55614c360e20fb2d00f6da24dd073d0c8aea3a9770ee65ce30e1baf02a22c253e3bb85") syz_create_resource$binfmt(&(0x7f0000001200)='./tracing\x00') umount2(&(0x7f0000000c00)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 5.597019549s ago: executing program 1 (id=354): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x80003, 0xff) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0xffffffffffffffff, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.510535398s ago: executing program 0 (id=355): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1000006, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000033c0)={'ip6tnl0\x00', &(0x7f0000003400)={'syztnl0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @empty, @empty, 0x40, 0x0, 0x3, 0xfffffffc}}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000001380)={0x2020}, 0x1f8c) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x131000, 0x82) umount2(&(0x7f0000000340)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.285208871s ago: executing program 1 (id=356): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x804010, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX=0x0], 0x1, 0x248, &(0x7f0000000480)="$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") socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/thread-self/fail-nth\x00', 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000009c0)={r1}, 0xc) write(r0, &(0x7f0000000340)='27', 0x2) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0xb, &(0x7f00000003c0)={0x4, 0xfffffffe, 0x4}) signalfd4(0xffffffffffffffff, &(0x7f0000000440)={[0xdcfe]}, 0x8, 0x80800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x5, 0x9, 0x5, 0x5}, {0x0, 0x0, 0x800}, 0x866, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 5.2009235s ago: executing program 0 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) setns(0xc9, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 5.20064723s ago: executing program 2 (id=358): socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000680)='./proc\x00', &(0x7f00000006c0)='proc\x00', 0x208000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000740)='27', 0x2) r1 = memfd_create(&(0x7f0000000780)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9r\xc3E\xf8\x92\xb7-\x0e\xcf|\x89\xc2tc\xc9d\x9eI\xbaVf\xd1fs\xd1w6\x8a\xe9_', 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xa2) execveat(r1, &(0x7f0000000880)='\x00', 0x0, 0x0, 0x1000) 4.141289078s ago: executing program 2 (id=359): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) r5 = openat$dm_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DM_DEV_CREATE(r5, 0xc138fd03, 0x0) ioctl$DM_TABLE_LOAD(r5, 0xc138fd09, 0x0) splice(r3, 0x0, r2, 0x0, 0x2, 0x5) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffe3e) 4.083902004s ago: executing program 3 (id=361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) shmget(0x2, 0x1000, 0x7800010c, &(0x7f0000ffd000/0x1000)=nil) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) write$P9_RSTATu(r3, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 3.868276956s ago: executing program 1 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000db4d0c59695020c51fd4bafcffffff00"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x7}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) userfaultfd(0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xc, 0x0, &(0x7f0000001600)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 3.864759806s ago: executing program 0 (id=370): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) setns(0xc9, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) 3.147129129s ago: executing program 2 (id=363): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x3) fchdir(r2) r3 = fanotify_init(0x2, 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x124) fanotify_mark(r3, 0x1, 0x1023, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x4c, r6, 0x1, 0x70ad28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x54}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x74}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x804) 3.053525719s ago: executing program 3 (id=364): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000001bc0)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001c00)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001c40)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001cc0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001d40), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001d80), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001dc0)=0x6) socket$can_j1939(0x1d, 0x2, 0x7) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='\\x01020304 2000000000 0 0 0', 0x1b) 2.693888455s ago: executing program 0 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x8, 0x80000) fanotify_mark(r4, 0x105, 0x4800003a, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) 2.032659593s ago: executing program 2 (id=366): socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x2d}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040890) alarm(0x6) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000005c0)={0x2, @pix_mp={0x3ff, 0x1, 0x31324d59, 0x4, 0x0, [{0x8, 0xf}, {0x8, 0x29f6ebcd}, {0xd, 0x8}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x4}, {0x6, 0x3}, {0x10001, 0x1800000}], 0x0, 0xd, 0x7, 0x3078182a3427730f, 0x1}}) r2 = socket$kcm(0x10, 0x2, 0x4) recvmsg$kcm(r2, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 2.016968144s ago: executing program 3 (id=367): syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000140)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x32, &(0x7f0000000180)=0x4, 0x4) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.754456381s ago: executing program 1 (id=368): prlimit64(0x0, 0xe, &(0x7f0000000e40)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e80)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000ec0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000f40)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000fc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x6) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000480)=0x9, 0x4) setsockopt$inet6_mreq(r3, 0x29, 0x15, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x4000000, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x6e, 0x0, 0x0) 877.291421ms ago: executing program 0 (id=369): setuid(0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$inet6(0x10, 0x3, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) sendto$inet6(r1, &(0x7f0000000000), 0x0, 0x800, 0x0, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, 0x0, 0x0) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001640)=""/4107, 0x100b}], 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 581.930121ms ago: executing program 2 (id=371): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_usb_connect$uac1(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406624108000010000000109022400020100c032090400000001010000090401"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet(0x2, 0x3, 0x6) syz_usb_control_io(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 580.891211ms ago: executing program 3 (id=372): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000007c0)=0x40000401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3c}}, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 67.178813ms ago: executing program 1 (id=373): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000008c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000940), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000980), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000009c0)=0x6) r3 = socket(0x11, 0x3, 0x200000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth1_to_bond\x00', 0x0}) bind$packet(r3, &(0x7f0000000380)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000003c0)=0xe9, 0x4) sendmsg$netlink(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{0x0, 0xdd12}], 0x1}, 0x20040051) 0s ago: executing program 3 (id=374): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x10800, &(0x7f0000000080)=ANY=[], 0x2, 0x195, &(0x7f0000002440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioprio_get$pid(0x1, r0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.105' (ED25519) to the list of known hosts. [ 83.667522][ T5772] cgroup: Unknown subsys name 'net' [ 83.833840][ T5772] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.568741][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.400309][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.408423][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.417486][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.426594][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.434121][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.443624][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.450904][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.467219][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.474852][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.482475][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.490777][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.500340][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.507834][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.528584][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.536876][ T5794] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.545032][ T5794] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.552918][ T5794] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.567964][ T5096] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.599522][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.611652][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.620361][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.628540][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.637648][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.645034][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.729695][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 87.743481][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 87.759440][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.768351][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.783342][ T5796] (null): rxe_set_mtu: Set mtu to 1024 [ 87.787937][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 87.795145][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.803552][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.810170][ T5796] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 87.825454][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.167625][ T5785] infiniband rxe0: set active [ 88.173603][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.180950][ T5785] infiniband rxe0: added rxe_eth0 [ 88.246294][ T5785] RDS/IB: rxe0: added [ 88.250816][ T5785] smc: adding ib device rxe0 with port count 1 [ 88.266711][ T57] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.273795][ T5785] smc: ib device rxe0 port 1 has pnetid [ 88.299753][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.315230][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.454555][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 88.512403][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 88.683359][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 88.717073][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.870204][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.891787][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.910534][ T5796] bridge_slave_0: entered allmulticast mode [ 88.924756][ T5796] bridge_slave_0: entered promiscuous mode [ 89.050538][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.075606][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.082902][ T5796] bridge_slave_1: entered allmulticast mode [ 89.110127][ T5796] bridge_slave_1: entered promiscuous mode [ 89.137517][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.144761][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.152592][ T5784] bridge_slave_0: entered allmulticast mode [ 89.161465][ T5784] bridge_slave_0: entered promiscuous mode [ 89.169371][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.229947][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.243819][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.251267][ T5784] bridge_slave_1: entered allmulticast mode [ 89.266066][ T5784] bridge_slave_1: entered promiscuous mode [ 89.282244][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.293307][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.301488][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.308880][ T5787] bridge_slave_0: entered allmulticast mode [ 89.318471][ T5787] bridge_slave_0: entered promiscuous mode [ 89.351294][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.375837][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.383158][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.391340][ T5787] bridge_slave_1: entered allmulticast mode [ 89.399294][ T5787] bridge_slave_1: entered promiscuous mode [ 89.463789][ T5796] team0: Port device team_slave_0 added [ 89.486331][ T5796] team0: Port device team_slave_1 added [ 89.512989][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.529147][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.541460][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.556325][ T5798] Bluetooth: hci0: command tx timeout [ 89.572514][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.581969][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.611932][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.637178][ T5798] Bluetooth: hci2: command tx timeout [ 89.642225][ T5790] Bluetooth: hci1: command tx timeout [ 89.666406][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.692338][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.706729][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.713760][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.740465][ T5790] Bluetooth: hci3: command tx timeout [ 89.746319][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.811038][ T5784] team0: Port device team_slave_0 added [ 89.850706][ T5787] team0: Port device team_slave_0 added [ 89.872088][ T5787] team0: Port device team_slave_1 added [ 89.892479][ T5784] team0: Port device team_slave_1 added [ 89.950184][ T5796] hsr_slave_0: entered promiscuous mode [ 89.970616][ T5796] hsr_slave_1: entered promiscuous mode [ 90.157899][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.164932][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.204135][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.220140][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.228871][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.257542][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.273469][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.281256][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.307427][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.327297][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.334409][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.361477][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.388498][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.510763][ T5784] hsr_slave_0: entered promiscuous mode [ 90.517888][ T5784] hsr_slave_1: entered promiscuous mode [ 90.524849][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.537563][ T5784] Cannot create hsr debugfs directory [ 90.622374][ T5787] hsr_slave_0: entered promiscuous mode [ 90.634302][ T5787] hsr_slave_1: entered promiscuous mode [ 90.641746][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.652977][ T5787] Cannot create hsr debugfs directory [ 91.074927][ T5445] infiniband rxe0: set active [ 91.149487][ T175] rxe_eth0 speed is unknown, defaulting to 1000 [ 91.169306][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 91.229971][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.243863][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.264248][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.304962][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.381756][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.425870][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.437945][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.450450][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.461625][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.471168][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.480153][ T5785] bridge_slave_0: entered allmulticast mode [ 91.488877][ T5785] bridge_slave_0: entered promiscuous mode [ 91.497943][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.506104][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.513348][ T5785] bridge_slave_1: entered allmulticast mode [ 91.521784][ T5785] bridge_slave_1: entered promiscuous mode [ 91.589652][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.604314][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.635339][ T5790] Bluetooth: hci0: command tx timeout [ 91.656461][ T5785] team0: Port device team_slave_0 added [ 91.666159][ T5785] team0: Port device team_slave_1 added [ 91.715446][ T5790] Bluetooth: hci1: command tx timeout [ 91.715466][ T5798] Bluetooth: hci2: command tx timeout [ 91.753988][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.761290][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.788483][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.802418][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.809522][ T5798] Bluetooth: hci3: command tx timeout [ 91.815045][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.841242][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.861041][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.890365][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.958600][ T5785] hsr_slave_0: entered promiscuous mode [ 91.969991][ T5785] hsr_slave_1: entered promiscuous mode [ 91.976969][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.984558][ T5785] Cannot create hsr debugfs directory [ 91.990359][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.004519][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.227800][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.343888][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.356810][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.394893][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.402371][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.448945][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.456309][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.496781][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.518160][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.529600][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.540347][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.568572][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.581618][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.614261][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.621499][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.650242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.657561][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.691992][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.718368][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.725602][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.760875][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.768186][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.009292][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.064754][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.102530][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.109751][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.206814][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.214007][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.382342][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.412846][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.449437][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.608043][ T5796] veth0_vlan: entered promiscuous mode [ 93.652636][ T5784] veth0_vlan: entered promiscuous mode [ 93.663062][ T5787] veth0_vlan: entered promiscuous mode [ 93.679536][ T5796] veth1_vlan: entered promiscuous mode [ 93.712363][ T5784] veth1_vlan: entered promiscuous mode [ 93.725596][ T5798] Bluetooth: hci0: command tx timeout [ 93.768970][ T5787] veth1_vlan: entered promiscuous mode [ 93.796109][ T5798] Bluetooth: hci2: command tx timeout [ 93.798061][ T5790] Bluetooth: hci1: command tx timeout [ 93.842742][ T5796] veth0_macvtap: entered promiscuous mode [ 93.860435][ T5796] veth1_macvtap: entered promiscuous mode [ 93.875712][ T5790] Bluetooth: hci3: command tx timeout [ 93.892637][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.907275][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.919288][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.928671][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.938676][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.947504][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.977085][ T5784] veth0_macvtap: entered promiscuous mode [ 94.017995][ T5784] veth1_macvtap: entered promiscuous mode [ 94.043156][ T5787] veth0_macvtap: entered promiscuous mode [ 94.080655][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.094855][ T5787] veth1_macvtap: entered promiscuous mode [ 94.128170][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.142128][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.153868][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.190880][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.198604][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.214412][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.219135][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.234838][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.281495][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.291455][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.303013][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311822][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.329774][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.340823][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.351081][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.363186][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.374818][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.390809][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.403312][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.415225][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.425777][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.437942][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.452104][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.467811][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.498822][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.507918][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.519592][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.528742][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.614574][ T5796] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.694993][ T5785] veth0_vlan: entered promiscuous mode [ 94.742826][ T5785] veth1_vlan: entered promiscuous mode [ 94.796434][ T5902] mmap: syz.0.1 (5902) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.823256][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.826571][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.841367][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.868653][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.943166][ T5785] veth0_macvtap: entered promiscuous mode [ 94.954248][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.974360][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.986980][ T5785] veth1_macvtap: entered promiscuous mode [ 95.013700][ T1334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.029799][ T1334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.053285][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.065695][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.076100][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.086821][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.097251][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.112626][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.128912][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.149372][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.172373][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.184207][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.195418][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.208001][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.218689][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.234388][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.259306][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.281584][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.291355][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.307098][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.509029][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.523818][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.572134][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.587880][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.779923][ T5912] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.807084][ T5790] Bluetooth: hci0: command tx timeout [ 95.875718][ T5790] Bluetooth: hci1: command tx timeout [ 95.877235][ T5798] Bluetooth: hci2: command tx timeout [ 95.955991][ T5798] Bluetooth: hci3: command tx timeout [ 96.405281][ T5929] syz.1.7[5929]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.498147][ T9] cfg80211: failed to load regulatory.db [ 97.701474][ T5946] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.10'. [ 97.727905][ T5946] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 97.785671][ T5946] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 97.830535][ T5946] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10'. [ 98.141687][ T5951] netlink: 'syz.3.9': attribute type 3 has an invalid length. [ 100.074470][ T5976] loop3: detected capacity change from 0 to 256 [ 100.232748][ T5978] netlink: 64 bytes leftover after parsing attributes in process `syz.0.19'. [ 101.433846][ T5986] syzkaller0: entered promiscuous mode [ 101.439775][ T5986] syzkaller0: entered allmulticast mode [ 101.682821][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.213949][ T6016] tipc: Started in network mode [ 102.225380][ T6016] tipc: Node identity ac14140f, cluster identity 4711 [ 102.233326][ T6016] tipc: New replicast peer: 255.255.255.255 [ 102.247839][ T6016] tipc: Enabled bearer , priority 10 [ 102.381990][ T6024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 102.727732][ T6029] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.387064][ T5774] tipc: Node number set to 2886997007 [ 103.594453][ T6041] loop3: detected capacity change from 0 to 128 [ 103.633488][ T6041] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.704512][ T6041] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.733722][ T6039] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 103.789105][ T11] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.865730][ T6047] veth0: entered promiscuous mode [ 103.919900][ T6040] veth0: left promiscuous mode [ 103.995478][ T6051] netlink: 120 bytes leftover after parsing attributes in process `syz.2.34'. [ 104.189969][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 104.249904][ T6055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.276612][ T5798] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 104.286031][ T5798] Bluetooth: hci2: Injecting HCI hardware error event [ 104.294108][ T5798] Bluetooth: hci2: hardware error 0x00 [ 105.148806][ T6055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.438872][ T6073] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 105.613324][ T6073] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 105.665899][ T6077] loop1: detected capacity change from 0 to 512 [ 105.673529][ T6077] journal_path: Lookup failure for './file1' [ 105.683643][ T6077] EXT4-fs: error: could not find journal device path [ 105.811097][ T6079] xt_NFQUEUE: number of total queues is 0 [ 107.155392][ T5798] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 110.761842][ T6125] loop0: detected capacity change from 0 to 128 [ 110.810478][ T6125] ======================================================= [ 110.810478][ T6125] WARNING: The mand mount option has been deprecated and [ 110.810478][ T6125] and is ignored by this kernel. Remove the mand [ 110.810478][ T6125] option from the mount to silence this warning. [ 110.810478][ T6125] ======================================================= [ 110.995747][ T6125] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.067336][ T6131] netlink: 104 bytes leftover after parsing attributes in process `syz.2.54'. [ 111.077506][ T6131] netlink: 144 bytes leftover after parsing attributes in process `syz.2.54'. [ 111.347121][ T6125] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 112.268975][ T6139] netlink: 'syz.3.56': attribute type 8 has an invalid length. [ 112.584413][ T6144] loop1: detected capacity change from 0 to 512 [ 112.667007][ T5796] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.681282][ T6144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.695281][ T6144] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.093692][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.635148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 115.449199][ T6166] xt_ipcomp: unknown flags 1D [ 115.783448][ T5881] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.023494][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.123702][ T5881] usb 1-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 116.254092][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.832467][ T6179] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 117.067233][ T6185] cpuidle: using governor haltpoll [ 117.110807][ T5881] usb 1-1: cannot find UAC_HEADER [ 117.241367][ T5881] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 117.265670][ T6190] warning: `syz.2.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.465386][ T5881] usb 1-1: USB disconnect, device number 2 [ 117.672588][ T6194] loop2: detected capacity change from 0 to 512 [ 117.711202][ T6194] EXT4-fs (loop2): filesystem is read-only [ 117.737647][ T6194] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 117.756955][ T6194] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 119.414318][ T5798] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 120.050896][ T3435] wlan1: Trigger new scan to find an IBSS to join [ 120.741908][ T6233] loop2: detected capacity change from 0 to 512 [ 120.820024][ T6233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.833209][ T6233] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.117088][ T6239] EXT4-fs error (device loop2): ext4_validate_block_bitmap:421: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 122.065306][ T5881] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.227678][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.261849][ T6248] netlink: 'syz.0.92': attribute type 15 has an invalid length. [ 122.315293][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 122.324242][ T5881] usb 4-1: config 0 has no interfaces? [ 122.333837][ T5881] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.353177][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.390898][ T5881] usb 4-1: config 0 descriptor?? [ 122.483614][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 122.508169][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.95'. [ 123.075565][ T49] wlan1: Trigger new scan to find an IBSS to join [ 123.404044][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 123.564377][ T6232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.88'. [ 123.601238][ T23] usb 4-1: USB disconnect, device number 2 [ 124.039336][ T6274] FAULT_INJECTION: forcing a failure. [ 124.039336][ T6274] name failslab, interval 1, probability 0, space 0, times 1 [ 124.066885][ T6274] CPU: 1 PID: 6274 Comm: syz.1.99 Not tainted syzkaller #0 [ 124.074174][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 124.084291][ T6274] Call Trace: [ 124.087621][ T6274] [ 124.090601][ T6274] dump_stack_lvl+0x18c/0x250 [ 124.095365][ T6274] ? show_regs_print_info+0x20/0x20 [ 124.100620][ T6274] ? load_image+0x420/0x420 [ 124.105184][ T6274] ? __might_sleep+0xe0/0xe0 [ 124.109839][ T6274] ? __lock_acquire+0x7eb0/0x7eb0 [ 124.114926][ T6274] should_fail_ex+0x394/0x4c0 [ 124.119663][ T6274] should_failslab+0x9/0x20 [ 124.124237][ T6274] slab_pre_alloc_hook+0x59/0x300 [ 124.129293][ T6274] ? security_sk_alloc+0x4b/0x130 [ 124.134355][ T6274] ? security_sk_alloc+0x4b/0x130 [ 124.139417][ T6274] __kmem_cache_alloc_node+0x53/0x260 [ 124.144825][ T6274] ? security_sk_alloc+0x4b/0x130 [ 124.149887][ T6274] __kmalloc+0xa7/0x240 [ 124.154078][ T6274] security_sk_alloc+0x4b/0x130 [ 124.158968][ T6274] sk_prot_alloc+0x101/0x210 [ 124.163600][ T6274] sk_alloc+0x3a/0x350 [ 124.167709][ T6274] inet6_create+0x7d3/0x1160 [ 124.172330][ T6274] ? inet6_create+0x80/0x1160 [ 124.177041][ T6274] __sock_create+0x49e/0x940 [ 124.181685][ T6274] __sys_socket+0xd7/0x1b0 [ 124.186142][ T6274] __x64_sys_socket+0x7a/0x90 [ 124.190863][ T6274] do_syscall_64+0x55/0xb0 [ 124.195311][ T6274] ? clear_bhb_loop+0x40/0x90 [ 124.200019][ T6274] ? clear_bhb_loop+0x40/0x90 [ 124.204733][ T6274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 124.210680][ T6274] RIP: 0033:0x7fc61259f559 [ 124.215129][ T6274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.234768][ T6274] RSP: 002b:00007fc6134a2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 124.243219][ T6274] RAX: ffffffffffffffda RBX: 00007fc612825fa0 RCX: 00007fc61259f559 [ 124.251215][ T6274] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 124.259206][ T6274] RBP: 00007fc612636b50 R08: 0000000000000000 R09: 0000000000000000 [ 124.267204][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.275199][ T6274] R13: 00007fc612826038 R14: 00007fc612825fa0 R15: 00007fff7b97baf8 [ 124.283210][ T6274] [ 125.877924][ T6285] Unable to allocate crypto cipher with name [ecb(aes)]; rc = [-2] [ 125.886618][ T6285] Error attempting to initialize key TFM cipher with name = [aes]; rc = [-2] [ 125.895561][ T6285] Error attempting to initialize cipher with name = [aes] and key size = [16]; rc = [-2] [ 125.905653][ T6285] Error parsing options; rc = [-22] [ 126.039875][ T1334] wlan1: Trigger new scan to find an IBSS to join [ 126.168295][ T1334] wlan1: Creating new IBSS network, BSSID 6e:53:a7:a2:48:4e [ 127.779640][ T6318] loop0: detected capacity change from 0 to 512 [ 127.792721][ T6318] EXT4-fs: Ignoring removed oldalloc option [ 127.842788][ T6318] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.938819][ T6318] EXT4-fs (loop0): 1 orphan inode deleted [ 127.956993][ T5941] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 127.973328][ T6318] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.989231][ T5941] EXT4-fs error (device loop0): ext4_release_dquot:6994: comm kworker/u4:10: Failed to release dquot type 1 [ 128.013836][ T6318] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.249904][ T5796] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.446147][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 131.784861][ T6359] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 131.905515][ T6363] xt_hashlimit: max too large, truncated to 1048576 [ 132.011492][ T6363] jffs2: notice: (6363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 132.222032][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 133.001386][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.010904][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.297718][ T6441] process 'syz.0.132' launched './file0' with NULL argv: empty string added [ 137.535006][ T6444] loop3: detected capacity change from 0 to 2048 [ 139.399421][ T6444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.585374][ T6444] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 139.802835][ T6459] netlink: 'syz.2.137': attribute type 1 has an invalid length. [ 139.895979][ T6450] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 140.026352][ T6459] veth3: entered allmulticast mode [ 140.034967][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.070255][ T6459] bond1: (slave veth3): Enslaving as an active interface with a down link [ 140.132956][ T6464] bond1: (slave veth0_to_bond): making interface the new active one [ 140.167578][ T6464] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 140.301684][ T6467] Zero length message leads to an empty skb [ 141.964392][ T6487] loop1: detected capacity change from 0 to 4096 [ 141.972533][ T6487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.986169][ T6487] EXT4-fs (loop1): Test dummy encryption mode enabled [ 141.997640][ T6487] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 142.009183][ T6487] EXT4-fs (loop1): group descriptors corrupted! [ 142.740999][ T6508] loop0: detected capacity change from 0 to 128 [ 142.839877][ T6508] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.938155][ T6508] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 143.403484][ T6516] loop1: detected capacity change from 0 to 512 [ 143.426651][ T6516] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.710911][ T5796] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.390794][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.399901][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.409490][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.418548][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.428061][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.437182][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.446749][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.455835][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.466173][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.476056][ T6522] netlink: 124 bytes leftover after parsing attributes in process `syz.3.157'. [ 144.682492][ T6525] loop0: detected capacity change from 0 to 512 [ 147.226400][ T5881] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 147.267845][ T6564] loop1: detected capacity change from 0 to 1024 [ 147.275673][ T6564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.303796][ T6565] FAULT_INJECTION: forcing a failure. [ 147.303796][ T6565] name failslab, interval 1, probability 0, space 0, times 0 [ 147.317385][ T6565] CPU: 1 PID: 6565 Comm: syz.3.167 Not tainted syzkaller #0 [ 147.324731][ T6565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 147.334838][ T6565] Call Trace: [ 147.338172][ T6565] [ 147.341164][ T6565] dump_stack_lvl+0x18c/0x250 [ 147.345943][ T6565] ? show_regs_print_info+0x20/0x20 [ 147.351235][ T6565] ? load_image+0x420/0x420 [ 147.355827][ T6565] ? __might_sleep+0xe0/0xe0 [ 147.360488][ T6565] ? __lock_acquire+0x7eb0/0x7eb0 [ 147.365579][ T6565] should_fail_ex+0x394/0x4c0 [ 147.370330][ T6565] should_failslab+0x9/0x20 [ 147.374886][ T6565] slab_pre_alloc_hook+0x59/0x300 [ 147.379972][ T6565] ? kvmalloc_node+0x70/0x180 [ 147.384703][ T6565] ? kvmalloc_node+0x70/0x180 [ 147.389419][ T6565] __kmem_cache_alloc_node+0x53/0x260 [ 147.394833][ T6565] ? kvmalloc_node+0x70/0x180 [ 147.399547][ T6565] __kmalloc_node+0xa6/0x240 [ 147.404210][ T6565] kvmalloc_node+0x70/0x180 [ 147.408761][ T6565] nf_hook_entries_grow+0x27c/0x720 [ 147.414010][ T6565] __nf_register_net_hook+0x2c9/0x910 [ 147.419447][ T6565] nf_register_net_hook+0xb2/0x190 [ 147.424699][ T6565] nf_register_net_hooks+0x44/0x1b0 [ 147.429944][ T6565] xt_register_table+0x560/0xa00 [ 147.434928][ T6565] ipt_register_table+0x164/0x310 [ 147.439995][ T6565] ? trace_packet+0x4a0/0x4a0 [ 147.444712][ T6565] ? ipt_alloc_initial_table+0x4ff/0x610 [ 147.450379][ T6565] iptable_mangle_table_init+0x41/0x60 [ 147.455894][ T6565] xt_find_table_lock+0x304/0x3e0 [ 147.460984][ T6565] do_ipt_set_ctl+0x2c0/0xe00 [ 147.465731][ T6565] ? ipt_unregister_table_exit+0x230/0x230 [ 147.471598][ T6565] ? trace_contention_end+0x39/0xe0 [ 147.476844][ T6565] ? __mutex_lock+0x30d/0xce0 [ 147.481582][ T6565] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 147.487249][ T6565] ? mutex_unlock+0x10/0x10 [ 147.491785][ T6565] ? aa_sk_perm+0x7bb/0x8e0 [ 147.496356][ T6565] ? aa_af_perm+0x330/0x330 [ 147.500897][ T6565] nf_setsockopt+0x263/0x280 [ 147.505528][ T6565] ? sock_common_recvmsg+0x190/0x190 [ 147.510849][ T6565] do_sock_setsockopt+0x175/0x1a0 [ 147.515916][ T6565] ? __fdget+0x180/0x210 [ 147.520197][ T6565] __x64_sys_setsockopt+0x182/0x200 [ 147.525449][ T6565] do_syscall_64+0x55/0xb0 [ 147.529935][ T6565] ? clear_bhb_loop+0x40/0x90 [ 147.534661][ T6565] ? clear_bhb_loop+0x40/0x90 [ 147.539467][ T6565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 147.545405][ T6565] RIP: 0033:0x7f06c559f559 [ 147.549859][ T6565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.569505][ T6565] RSP: 002b:00007f06c37d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.577973][ T6565] RAX: ffffffffffffffda RBX: 00007f06c5826090 RCX: 00007f06c559f559 [ 147.585981][ T6565] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000006 [ 147.593982][ T6565] RBP: 00007f06c5636b50 R08: 0000000000000078 R09: 0000000000000000 [ 147.601985][ T6565] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 147.609986][ T6565] R13: 00007f06c5826128 R14: 00007f06c5826090 R15: 00007ffe1d8eea68 [ 147.618020][ T6565] [ 147.749851][ T6564] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.763515][ T5881] usb 3-1: not running at top speed; connect to a high speed hub [ 147.774679][ T5881] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.785245][ T5881] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 147.794321][ T5881] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 147.805345][ T5881] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 147.819054][ T5881] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.828307][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.837070][ T5881] usb 3-1: Product: syz [ 147.841373][ T5881] usb 3-1: Manufacturer: syz [ 147.846153][ T5881] usb 3-1: SerialNumber: syz [ 147.943826][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.337972][ T5881] usb 3-1: 0:2 : does not exist [ 148.367098][ T6581] loop1: detected capacity change from 0 to 16 [ 148.403800][ T6581] erofs: Unknown parameter '0x0000000000000003' [ 148.443074][ T5881] usb 3-1: USB disconnect, device number 2 [ 148.453727][ T6446] udevd[6446]: incorrect erofs checksum on /dev/loop1 [ 148.584022][ T6453] udevd[6453]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 148.792406][ T6586] loop1: detected capacity change from 0 to 736 [ 149.288615][ T27] audit: type=1804 audit(1793512812.036:2): pid=6591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.175" name="file1" dev="ramfs" ino=10263 res=1 errno=0 [ 149.868160][ T6594] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[6595] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[6594] [ 151.229451][ T6597] jffs2: notice: (6597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 151.421861][ T6604] loop0: detected capacity change from 0 to 8 [ 151.617539][ T6604] SQUASHFS error: zstd decompression error: 10 [ 151.624048][ T6604] SQUASHFS error: zstd decompression failed, data probably corrupt [ 151.652115][ T6604] SQUASHFS error: Failed to read block 0x4ea: -5 [ 151.659018][ T6604] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 151.671361][ T6604] SQUASHFS error: Unable to read inode 0x11f [ 153.775543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 154.185220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 155.655904][ T6621] loop1: detected capacity change from 0 to 256 [ 155.778280][ T6621] gretap0: entered promiscuous mode [ 155.837630][ T6621] __nla_validate_parse: 17 callbacks suppressed [ 155.837650][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.178'. [ 155.886161][ T6621] gretap0: left promiscuous mode [ 156.007884][ T6623] loop2: detected capacity change from 0 to 16 [ 156.069389][ T6623] erofs: (device loop2): mounted with root inode @ nid 36. [ 156.344775][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.3.184'. [ 156.433683][ T6631] loop3: detected capacity change from 0 to 512 [ 156.549624][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.189'. [ 156.723823][ T6631] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.014895][ T6631] ext4 filesystem being mounted at /43/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.149897][ T6637] bridge1: entered promiscuous mode [ 157.320785][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.468634][ T6643] loop0: detected capacity change from 0 to 2048 [ 157.529639][ T6643] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 157.556489][ T6645] loop2: detected capacity change from 0 to 1024 [ 157.597993][ T6645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 157.625326][ T6645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 157.953723][ T6645] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 158.247849][ T6645] System zones: 0-1, 3-36 [ 158.329207][ T6645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.237657][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 159.481309][ T23] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 159.632158][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.025519][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.036134][ T23] usb 3-1: config 1 has no interface number 0 [ 160.042298][ T23] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 160.053664][ T23] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 160.070074][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.079225][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.087353][ T23] usb 3-1: Product: syz [ 160.091559][ T23] usb 3-1: Manufacturer: syz [ 160.105181][ T23] usb 3-1: SerialNumber: syz [ 160.189321][ T23] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 160.211125][ T23] cdc_ncm 3-1:1.1: bind() failure [ 160.617965][ T23] usb 3-1: USB disconnect, device number 3 [ 162.004391][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.518952][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.555677][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.576611][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.599975][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.623368][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.645210][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.665537][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.676499][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.689253][ T6701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.701054][ T6701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.425115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 165.766186][ T6327] wlan1: Trigger new scan to find an IBSS to join [ 166.067524][ T6726] syzkaller0: entered promiscuous mode [ 166.085241][ T6726] syzkaller0: entered allmulticast mode [ 166.101645][ T6730] tipc: Enabled bearer , priority 0 [ 166.122543][ T6721] tipc: Resetting bearer [ 166.316397][ T6721] tipc: Disabling bearer [ 166.998733][ T6748] (null): rxe_set_mtu: Set mtu to 1024 [ 167.770172][ T6748] infiniband syz0: set down [ 167.774766][ T6748] infiniband syz0: added bond0 [ 167.781506][ T6748] syz0: rxe_create_cq: returned err = -12 [ 167.787683][ T6748] infiniband syz0: Couldn't create ib_mad CQ [ 167.793996][ T6748] infiniband syz0: Couldn't open port 1 [ 167.822309][ T6748] RDS/IB: syz0: added [ 167.826907][ T6748] smc: adding ib device syz0 with port count 1 [ 167.833123][ T6748] smc: ib device syz0 port 1 has pnetid [ 167.934209][ T6751] loop2: detected capacity change from 0 to 2048 [ 168.016794][ T6751] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 169.041557][ T6429] wlan1: Trigger new scan to find an IBSS to join [ 170.262615][ T6330] wlan1: Creating new IBSS network, BSSID ba:ba:6c:7e:e0:3d [ 173.259739][ T6804] loop3: detected capacity change from 0 to 128 [ 173.828161][ T6804] FAT-fs (loop3): bogus sectors per cluster 0 [ 173.834387][ T6804] FAT-fs (loop3): Can't find a valid FAT filesystem [ 174.270110][ T6812] loop1: detected capacity change from 0 to 2048 [ 174.299379][ T6812] UDF-fs: bad mount option "ÿÿÿÿÿÿ" or missing value [ 180.526122][ T6879] loop2: detected capacity change from 0 to 128 [ 180.545670][ T6879] FAT-fs (loop2): bogus sectors per cluster 0 [ 180.551849][ T6879] FAT-fs (loop2): Can't find a valid FAT filesystem [ 180.884518][ T6882] syzkaller0: entered promiscuous mode [ 180.916382][ T6882] syzkaller0: entered allmulticast mode [ 181.002075][ T6882] tipc: Started in network mode [ 181.223361][ T6882] tipc: Node identity 2e82c3c3d19a, cluster identity 4711 [ 181.381152][ T6882] tipc: Enabled bearer , priority 0 [ 181.674954][ T6881] tipc: Resetting bearer [ 181.934902][ T6881] tipc: Disabling bearer [ 183.502089][ T6908] syz0: rxe_newlink: already configured on bond0 [ 184.287243][ T6914] loop1: detected capacity change from 0 to 8 [ 184.409747][ T6914] SQUASHFS error: zstd decompression error: 10 [ 184.696855][ T6914] SQUASHFS error: zstd decompression failed, data probably corrupt [ 184.864880][ T6914] SQUASHFS error: Failed to read block 0x4ea: -5 [ 185.045374][ T6914] SQUASHFS error: Unable to read metadata cache entry [4e8] [ 185.093599][ T6914] SQUASHFS error: Unable to read inode 0x11f [ 186.397314][ T6934] syzkaller0: entered promiscuous mode [ 186.402932][ T6934] syzkaller0: entered allmulticast mode [ 186.433663][ T6934] tipc: Started in network mode [ 186.445158][ T6934] tipc: Node identity 4a93b0f129e1, cluster identity 4711 [ 186.453764][ T6934] tipc: Enabled bearer , priority 0 [ 186.471873][ T6933] tipc: Resetting bearer [ 186.513148][ T6933] tipc: Disabling bearer [ 189.431085][ T6974] pimreg: entered allmulticast mode [ 190.513546][ T6979] pimreg: left allmulticast mode [ 193.275113][ C0] sched: RT throttling activated [ 194.477829][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.719136][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.861171][ T28] IPVS: starting estimator thread 0... [ 194.995988][ T7006] IPVS: using max 18 ests per chain, 43200 per kthread [ 195.053936][ T7016] loop2: detected capacity change from 0 to 512 [ 195.081224][ T7016] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.130012][ T7016] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1158: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 195.157128][ T5798] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 195.214832][ T7016] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.271: bg 0: block 248: padding at end of block bitmap is not set [ 195.253610][ T7016] Quota error (device loop2): write_blk: dquota write failed [ 195.276072][ T7016] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 195.293821][ T7016] EXT4-fs error (device loop2): ext4_acquire_dquot:6958: comm syz.2.271: Failed to acquire dquot type 1 [ 195.335204][ T7016] EXT4-fs (loop2): 1 truncate cleaned up [ 195.342771][ T7016] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 195.540111][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 196.221663][ T7027] loop2: detected capacity change from 0 to 512 [ 196.260154][ T7027] EXT4-fs: Ignoring removed oldalloc option [ 196.370346][ T7027] EXT4-fs (loop2): 1 orphan inode deleted [ 196.395435][ T7027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.409778][ T6431] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 196.410187][ T7027] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.450814][ T6431] EXT4-fs error (device loop2): ext4_release_dquot:6994: comm kworker/u4:16: Failed to release dquot type 1 [ 196.563587][ T7041] bridge2: entered promiscuous mode [ 196.575264][ T7041] bridge2: entered allmulticast mode [ 196.601017][ T7041] team0: Port device bridge2 added [ 196.619033][ T7042] bridge0: port 3(team0) entered blocking state [ 196.631483][ T7042] bridge0: port 3(team0) entered disabled state [ 196.641313][ T7042] team0: entered allmulticast mode [ 196.651923][ T7042] team_slave_0: entered allmulticast mode [ 196.671889][ T7042] team_slave_1: entered allmulticast mode [ 196.707327][ T7042] team0: entered promiscuous mode [ 196.722838][ T7042] team_slave_0: entered promiscuous mode [ 196.733350][ T7042] team_slave_1: entered promiscuous mode [ 196.752970][ T7042] bridge0: port 3(team0) entered blocking state [ 196.761141][ T7042] bridge0: port 3(team0) entered forwarding state [ 196.799515][ T7047] netlink: 550 bytes leftover after parsing attributes in process `syz.3.282'. [ 196.812504][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.119859][ T7053] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 198.489090][ T7073] loop0: detected capacity change from 0 to 8 [ 198.510262][ T7073] squashfs image failed sanity check [ 199.275876][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.285252][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.294367][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.303582][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.314386][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.323938][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.335090][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.344979][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.356274][ T7081] netlink: 124 bytes leftover after parsing attributes in process `syz.1.292'. [ 199.433251][ T5798] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 199.552622][ T5798] Bluetooth: hci3: Injecting HCI hardware error event [ 199.569381][ T5798] Bluetooth: hci3: hardware error 0x00 [ 200.798847][ T7098] tipc: Failed to remove unknown binding: 66,0,0/0:4038036538/4038036540 [ 200.808488][ T7098] tipc: Failed to remove unknown binding: 66,0,0/0:4038036538/4038036539 [ 200.818620][ T7098] tipc: Failed to remove unknown binding: 66,0,0/0:4038036538/4038036540 [ 200.827758][ T7098] tipc: Failed to remove unknown binding: 66,0,0/0:4038036538/4038036539 [ 200.912602][ T7101] syz_tun: entered allmulticast mode [ 200.938701][ T7101] syz_tun: left allmulticast mode [ 201.144035][ T7114] loop2: detected capacity change from 0 to 8 [ 201.161507][ T7114] squashfs image failed sanity check [ 201.468753][ T7116] loop0: detected capacity change from 0 to 256 [ 201.730320][ T5798] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 202.505718][ T7133] __nla_validate_parse: 17 callbacks suppressed [ 202.505760][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.522214][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.533091][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.542284][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.553249][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.562629][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.573797][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.583063][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.594075][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 202.603385][ T7133] netlink: 124 bytes leftover after parsing attributes in process `syz.0.306'. [ 204.500397][ T7151] loop1: detected capacity change from 0 to 8 [ 204.628051][ T7151] squashfs image failed sanity check [ 206.697768][ T7175] syz.3.320 uses obsolete (PF_INET,SOCK_PACKET) [ 206.759265][ T7180] syz0: rxe_newlink: already configured on bond0 [ 207.645920][ T7182] __nla_validate_parse: 16 callbacks suppressed [ 207.645960][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.661918][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.672796][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.682084][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.692833][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.702221][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.713553][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.722830][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.734125][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 207.743991][ T7182] netlink: 124 bytes leftover after parsing attributes in process `syz.2.318'. [ 209.382500][ T7201] syzkaller0: entered promiscuous mode [ 209.395212][ T7201] syzkaller0: entered allmulticast mode [ 210.887673][ T7211] netlink: 'syz.0.337': attribute type 1 has an invalid length. [ 210.897548][ T7215] loop3: detected capacity change from 0 to 8 [ 210.965758][ T7215] squashfs image failed sanity check [ 211.079422][ T7218] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 211.102840][ T7217] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.176700][ T7225] loop2: detected capacity change from 0 to 1024 [ 211.184637][ T7225] EXT4-fs: inline encryption not supported [ 211.222304][ T7225] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 211.325599][ T6667] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 211.381065][ T7225] EXT4-fs error (device loop2): ext4_map_blocks:720: inode #3: block 1: comm syz.2.333: lblock 1 mapped to illegal pblock 1 (length 1) [ 211.448126][ T7211] macvlan2: entered promiscuous mode [ 211.457384][ T7225] EXT4-fs (loop2): Remounting filesystem read-only [ 211.464177][ T7225] Quota error (device loop2): write_blk: dquota write failed [ 211.474970][ T7225] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 211.477060][ T7211] macvlan2: entered allmulticast mode [ 211.496871][ T7225] EXT4-fs (loop2): 1 orphan inode deleted [ 211.523578][ T7225] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.586467][ T6667] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.709428][ T7211] bond1: entered promiscuous mode [ 211.793941][ T6667] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 211.823956][ T7211] bridge3: entered promiscuous mode [ 211.844540][ T6667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.855803][ T7211] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.108358][ T7211] bond1: left promiscuous mode [ 212.132267][ T5784] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.148249][ T7211] bridge3: left promiscuous mode [ 212.208179][ T5798] Bluetooth: hci1: command 0x0406 tx timeout [ 212.208214][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 212.372122][ T6667] usb 2-1: cannot find UAC_HEADER [ 213.087192][ T6667] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 213.207982][ T7224] udevd[7224]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.273763][ T6667] usb 2-1: USB disconnect, device number 2 [ 214.681686][ T7251] syzkaller0: entered promiscuous mode [ 214.712030][ T7251] syzkaller0: entered allmulticast mode [ 215.448519][ T7253] bridge_slave_0: left allmulticast mode [ 215.503139][ T7253] bridge_slave_0: left promiscuous mode [ 215.540713][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.649279][ T7253] bridge_slave_1: left allmulticast mode [ 215.655191][ T7253] bridge_slave_1: left promiscuous mode [ 215.661065][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.681232][ T7253] bond0: (slave bond_slave_0): Releasing backup interface [ 215.700959][ T7253] bond0: (slave bond_slave_1): Releasing backup interface [ 215.799861][ T7260] loop3: detected capacity change from 0 to 8 [ 216.118152][ T7253] team0: Port device team_slave_0 removed [ 216.137929][ T7260] squashfs image failed sanity check [ 216.531288][ T7253] team0: Port device team_slave_1 removed [ 216.597447][ T7253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.604978][ T7253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.018438][ T7256] team0: Mode changed to "broadcast" [ 218.135220][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 218.440978][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.550056][ T5899] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 1.00 [ 218.705232][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.556589][ T5797] Bluetooth: hci0: command 0x0406 tx timeout [ 219.815257][ T5899] usb 4-1: cannot find UAC_HEADER [ 219.924617][ T5899] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 219.984685][ T5899] usb 4-1: USB disconnect, device number 3 [ 219.998059][ T7292] loop2: detected capacity change from 0 to 128 [ 220.049006][ T7292] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 220.106146][ T7292] FAT-fs (loop2): error, corrupted file size (i_pos 548, 512) [ 220.123251][ T7292] FAT-fs (loop2): Filesystem has been set read-only [ 220.133363][ T7294] Bluetooth: MGMT ver 1.22 [ 220.187141][ T7292] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 220.314546][ T7298] loop1: detected capacity change from 0 to 256 [ 220.331318][ T7298] FAT-fs (loop1): bogus sectors per cluster 0 [ 220.355400][ T7298] FAT-fs (loop1): Can't find a valid FAT filesystem [ 220.423767][ T7298] FAULT_INJECTION: forcing a failure. [ 220.423767][ T7298] name failslab, interval 1, probability 0, space 0, times 0 [ 220.437206][ T7298] CPU: 1 PID: 7298 Comm: syz.1.356 Not tainted syzkaller #0 [ 220.444654][ T7298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 220.454786][ T7298] Call Trace: [ 220.458138][ T7298] [ 220.461137][ T7298] dump_stack_lvl+0x18c/0x250 [ 220.465892][ T7298] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.472107][ T7298] ? show_regs_print_info+0x20/0x20 [ 220.477392][ T7298] ? load_image+0x420/0x420 [ 220.482018][ T7298] ? xfrm_pol_bin_obj+0x150/0x150 [ 220.487131][ T7298] should_fail_ex+0x394/0x4c0 [ 220.492669][ T7298] should_failslab+0x9/0x20 [ 220.497243][ T7298] slab_pre_alloc_hook+0x59/0x300 [ 220.502347][ T7298] ? xfrm_policy_inexact_alloc_bin+0x1af/0x1610 [ 220.508769][ T7298] ? xfrm_policy_inexact_alloc_bin+0x3d3/0x1610 [ 220.515102][ T7298] __kmem_cache_alloc_node+0x53/0x260 [ 220.520553][ T7298] ? xfrm_policy_inexact_alloc_bin+0x3d3/0x1610 [ 220.526976][ T7298] kmalloc_trace+0x2a/0xe0 [ 220.531488][ T7298] xfrm_policy_inexact_alloc_bin+0x3d3/0x1610 [ 220.537645][ T7298] ? xfrm_policy_inexact_alloc_bin+0x1af/0x1610 [ 220.543974][ T7298] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 220.550089][ T7298] ? __lock_acquire+0x7eb0/0x7eb0 [ 220.555222][ T7298] ? jhash2+0x2f0/0x2f0 [ 220.559435][ T7298] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 220.565495][ T7298] ? do_raw_spin_lock+0x11f/0x2b0 [ 220.570570][ T7298] xfrm_policy_inexact_insert+0x25/0x13a0 [ 220.576344][ T7298] ? policy_hash_bysel+0x1c4/0x920 [ 220.581531][ T7298] xfrm_policy_insert+0x113/0x940 [ 220.586608][ T7298] xfrm_add_policy+0x2ef/0x800 [ 220.591423][ T7298] ? xfrm_dump_sa_done+0xd0/0xd0 [ 220.596405][ T7298] ? __nla_parse+0x40/0x50 [ 220.600871][ T7298] xfrm_user_rcv_msg+0x81e/0xac0 [ 220.605956][ T7298] ? xfrm_netlink_rcv+0x90/0x90 [ 220.610971][ T7298] ? __mutex_trylock_common+0x160/0x270 [ 220.616567][ T7298] netlink_rcv_skb+0x235/0x4c0 [ 220.621363][ T7298] ? xfrm_netlink_rcv+0x90/0x90 [ 220.626260][ T7298] ? netlink_ack+0x1160/0x1160 [ 220.631084][ T7298] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.636320][ T7298] ? __lock_acquire+0x7eb0/0x7eb0 [ 220.641391][ T7298] xfrm_netlink_rcv+0x79/0x90 [ 220.646108][ T7298] netlink_unicast+0x856/0x9e0 [ 220.650927][ T7298] netlink_sendmsg+0x8d0/0xbf0 [ 220.655727][ T7298] ? netlink_getsockopt+0x590/0x590 [ 220.660963][ T7298] ? apparmor_socket_sendmsg+0x8e/0x330 [ 220.666555][ T7298] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 220.671874][ T7298] ? security_socket_sendmsg+0x80/0xa0 [ 220.677369][ T7298] ? netlink_getsockopt+0x590/0x590 [ 220.682602][ T7298] ____sys_sendmsg+0x61b/0x980 [ 220.687407][ T7298] ? __asan_memset+0x22/0x40 [ 220.692038][ T7298] ? __sys_sendmsg_sock+0x30/0x30 [ 220.697096][ T7298] ? __import_iovec+0x5f2/0x850 [ 220.701989][ T7298] ? import_iovec+0x73/0xa0 [ 220.706538][ T7298] ___sys_sendmsg+0x2a6/0x360 [ 220.711289][ T7298] ? __sys_sendmsg+0x2b0/0x2b0 [ 220.716147][ T7298] __se_sys_sendmsg+0x1d0/0x2c0 [ 220.721040][ T7298] ? __x64_sys_sendmsg+0x80/0x80 [ 220.726038][ T7298] ? lockdep_hardirqs_on+0x98/0x150 [ 220.731275][ T7298] do_syscall_64+0x55/0xb0 [ 220.735729][ T7298] ? clear_bhb_loop+0x40/0x90 [ 220.740456][ T7298] ? clear_bhb_loop+0x40/0x90 [ 220.745175][ T7298] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 220.751111][ T7298] RIP: 0033:0x7fc61259f559 [ 220.755560][ T7298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.775225][ T7298] RSP: 002b:00007fc6134a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.783677][ T7298] RAX: ffffffffffffffda RBX: 00007fc612825fa0 RCX: 00007fc61259f559 [ 220.791715][ T7298] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000006 [ 220.799723][ T7298] RBP: 00007fc612636b50 R08: 0000000000000000 R09: 0000000000000000 [ 220.807730][ T7298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.815736][ T7298] R13: 00007fc612826038 R14: 00007fc612825fa0 R15: 00007fff7b97baf8 [ 220.823764][ T7298] [ 220.883859][ T7305] syz0: rxe_newlink: already configured on bond0 [ 222.211185][ T7318] syz0: rxe_newlink: already configured on bond0 [ 222.295358][ T6429] wlan1: Trigger new scan to find an IBSS to join [ 225.407484][ T144] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:02:01 [ 225.434511][ T144] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:02:01 [ 225.466189][ T6330] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:00:01 [ 225.474099][ T6330] wlan1: Creating new IBSS network, BSSID 00:00:00:00:00:01 [ 225.502862][ T42] ------------[ cut here ]------------ [ 225.509129][ T42] WARNING: CPU: 0 PID: 42 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3cb/0x430 [ 225.519003][ T42] Modules linked in: [ 225.522987][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 225.530545][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.541153][ T42] Workqueue: cfg80211 cfg80211_event_work [ 225.547107][ T42] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 225.553369][ T42] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7e 83 90 f7 0f 0b eb bf e8 75 83 90 f7 <0f> 0b eb b6 e8 6c 83 90 f7 0f 0b e9 e2 fd ff ff e8 60 83 90 f7 0f [ 225.573381][ T42] RSP: 0018:ffffc90000b2fa40 EFLAGS: 00010293 [ 225.579783][ T42] RAX: ffffffff89f75b2b RBX: dffffc0000000000 RCX: ffff88801a2c1e00 [ 225.588040][ T42] RDX: 0000000000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 225.596168][ T42] RBP: ffffc90000b2faf8 R08: ffffffff9222356f R09: 1ffffffff24446ad [ 225.604253][ T42] R10: dffffc0000000000 R11: fffffbfff24446ae R12: ffff88805c7bcd50 [ 225.612382][ T42] R13: ffff88807d14b698 R14: 1ffff92000165f4c R15: 0000000000000003 [ 225.620495][ T42] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 225.629823][ T42] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.636623][ T42] CR2: 00007f06c57f4158 CR3: 00000000616aa000 CR4: 00000000003506f0 [ 225.644718][ T42] Call Trace: [ 225.648135][ T42] [ 225.651129][ T42] ? trace_rdev_return_void+0x1c0/0x1c0 [ 225.656847][ T42] cfg80211_process_wdev_events+0x396/0x500 [ 225.662887][ T42] cfg80211_process_rdev_events+0xa1/0x110 [ 225.668870][ T42] cfg80211_event_work+0x2f/0x40 [ 225.673884][ T42] ? process_scheduled_works+0x975/0x1600 [ 225.679759][ T42] process_scheduled_works+0xa60/0x1600 [ 225.685510][ T42] ? worker_attach_to_pool+0x370/0x370 [ 225.691061][ T42] ? assign_work+0x3cc/0x5d0 [ 225.695854][ T42] worker_thread+0xa5e/0xfe0 [ 225.700586][ T42] kthread+0x2fa/0x390 [ 225.704734][ T42] ? pr_cont_work+0x550/0x550 [ 225.709596][ T42] ? kthread_blkcg+0xd0/0xd0 [ 225.714257][ T42] ret_from_fork+0x48/0x80 [ 225.718939][ T42] ? kthread_blkcg+0xd0/0xd0 [ 225.723604][ T42] ret_from_fork_asm+0x11/0x20 [ 225.728574][ T42] [ 225.731652][ T42] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 225.738981][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 225.746441][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 225.756682][ T42] Workqueue: cfg80211 cfg80211_event_work [ 225.762519][ T42] Call Trace: [ 225.765853][ T42] [ 225.768834][ T42] dump_stack_lvl+0x18c/0x250 [ 225.773589][ T42] ? show_regs_print_info+0x20/0x20 [ 225.778854][ T42] ? load_image+0x420/0x420 [ 225.783439][ T42] panic+0x2ca/0x720 [ 225.787413][ T42] ? bpf_jit_dump+0xd0/0xd0 [ 225.792037][ T42] ? ret_from_fork_asm+0x11/0x20 [ 225.797093][ T42] __warn+0x2e0/0x470 [ 225.801692][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 225.807504][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 225.813108][ T42] report_bug+0x2be/0x4f0 [ 225.817487][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 225.823079][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 225.828706][ T42] ? __cfg80211_ibss_joined+0x3cd/0x430 [ 225.834302][ T42] handle_bug+0xcf/0x120 [ 225.838594][ T42] exc_invalid_op+0x1a/0x50 [ 225.843143][ T42] asm_exc_invalid_op+0x1a/0x20 [ 225.848050][ T42] RIP: 0010:__cfg80211_ibss_joined+0x3cb/0x430 [ 225.854259][ T42] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 7e 83 90 f7 0f 0b eb bf e8 75 83 90 f7 <0f> 0b eb b6 e8 6c 83 90 f7 0f 0b e9 e2 fd ff ff e8 60 83 90 f7 0f [ 225.874170][ T42] RSP: 0018:ffffc90000b2fa40 EFLAGS: 00010293 [ 225.880279][ T42] RAX: ffffffff89f75b2b RBX: dffffc0000000000 RCX: ffff88801a2c1e00 [ 225.888313][ T42] RDX: 0000000000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 225.896585][ T42] RBP: ffffc90000b2faf8 R08: ffffffff9222356f R09: 1ffffffff24446ad [ 225.904591][ T42] R10: dffffc0000000000 R11: fffffbfff24446ae R12: ffff88805c7bcd50 [ 225.912600][ T42] R13: ffff88807d14b698 R14: 1ffff92000165f4c R15: 0000000000000003 [ 225.920620][ T42] ? __cfg80211_ibss_joined+0x3cb/0x430 [ 225.926256][ T42] ? trace_rdev_return_void+0x1c0/0x1c0 [ 225.931854][ T42] cfg80211_process_wdev_events+0x396/0x500 [ 225.937807][ T42] cfg80211_process_rdev_events+0xa1/0x110 [ 225.943664][ T42] cfg80211_event_work+0x2f/0x40 [ 225.948642][ T42] ? process_scheduled_works+0x975/0x1600 [ 225.954409][ T42] process_scheduled_works+0xa60/0x1600 [ 225.960373][ T42] ? worker_attach_to_pool+0x370/0x370 [ 225.965887][ T42] ? assign_work+0x3cc/0x5d0 [ 225.970529][ T42] worker_thread+0xa5e/0xfe0 [ 225.975186][ T42] kthread+0x2fa/0x390 [ 225.979386][ T42] ? pr_cont_work+0x550/0x550 [ 225.984108][ T42] ? kthread_blkcg+0xd0/0xd0 [ 225.988752][ T42] ret_from_fork+0x48/0x80 [ 225.993235][ T42] ? kthread_blkcg+0xd0/0xd0 [ 225.997880][ T42] ret_from_fork_asm+0x11/0x20 [ 226.002710][ T42] [ 226.006383][ T42] Kernel Offset: disabled [ 226.010835][ T42] Rebooting in 86400 seconds..