last executing test programs: 8m21.316890245s ago: executing program 2 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c8ac) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000e, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000000)={0x3e, 0x2, 0x457f1c9146f8f874, "464905e100000000000000007f00000000000000000000000000000000000100", 0x584e4f53}) close(r3) socket$rds(0x15, 0x5, 0x0) 8m19.264658732s ago: executing program 2 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="64796e2c00c4bc028f592e8a95ba6d714e5521b2ebaa7d62e247bf1747f678a5e047976018da7aef126ec8cafd7aa358004bf31c125ed3f7d8aa9d5667ece18c5ff94e4565d911659ac5e6077427f7c6e452b290130ca55a7b6ec2e71430c3b0aa902a6c882ec84d36f0825a85a8a6049d76c42c79f3f8152bdad122f460179d5316c420ec48fa349de9070c"]) 8m17.90358654s ago: executing program 2 (id=41): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000001c0)=0x264, 0x23b) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_COPY(0xffffffffffffffff, 0x3b83, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'lo\x00'}) setsockopt$inet_buf(r2, 0x0, 0x23, &(0x7f00000007c0)="2df8423cdd4e85a8c9f6657764d9278a483125136df213f8d4eb2bf09b83b7f74b424251ac3c7f57c6e0fee87bd34672578064cd4c845b4f026874d67d053d9b2ad78bc2928afd1aaee655470e3f9e341d9f57e942fea4b30911e0b63eaee5950e3e16cc5e090a088740845e1ec3e12ad404fb4e0c3b5b793102d221fe45b73fc189f91a315cb7e48e41002d2e667e23a43136e255d67bcf3cb80f4d8a30dcffaf0b308fdb27ad1f887c1c38904d351f7fb1b1be9c899ab39e4a004371ec03a18f83c0266daa29befb9c8a8eac5943e14e048f4a7c8054a0a4112372bb38e1d4ef5c210f2766c40958a6287b7065735270c5d2cb08f0e5c57bddac40b50c7efceaec7763c4958e76e5fcb15a9fa054320cc8a8d6521a02fe5b13b14759142cbd8dbd56cf6d783b8df8d95e123a76701bee604fec1a198e083245a27e23e1828dbf55d86f8aa8233475be0010380f89648e7b89444a4097379cd2b69619f0edc83a58f6dfaaf9fa84ed6a46bd87e381fba77d42d9e681b37ef49725b0c4b3651a3961ab323bf696b9d8514b76c27e715d735aa355ec598f84400d96ad315568f726bdc8b7ca33f84dfbe761b7e79279e961a4edad2d4efce43b654e1c46f7c8c10c596d28a383a7a82b071ecb8640fe823d0f2770a5d645d74a35ae23729a56c73f413157608cc9da2f130b3de05f549165d814ca4683756db954ec340dee486ae37424575e9df99772d715b18448ccdf835544309c6eedd36e7ce4953af11543a53f309b4564a84f1f6286dc6af3e1df31815b388c9fbbddc003bd4c42d50f9c0c5f616649043ab842703303f9fdc2b6ea9a86221f927308bd377710aa4df3b75dd1b76793cfe9602d014a1b6f407b35f95f6c64d1bef1cf6f195be1413fdacd3deaceef1566d8795ff280a0830a26bc9a9d2ef8b7964698214d28c87c00199b35fe1d35dfea733d6b9654a5edcf8a86967ea70bb56ee6015fdb9d9f66cd27872878704bb738568425c0c46cdf28219cc508a77964fffcd8aafd281d113e7fc00b372a59cd5cbbd4184b62dd89f1befaf97624872edc5c06923f61956dbc5e039d9568f0f2f4a3feead68c7d82430dc71c9432c0e0f95197e2721b869e87ea5b62437cb1dbc62ce96ff90a91ee7ed26447358aac1c99044c6043d542154cc8d13c5290829e51a91483e97f2eb1b5287f62de2b69572ecab596efb1e90f78faaca361fe4bb7ae0858056e9217b1fe7f007f05a70a8296cd4573df49a32f9cfe08f24f2fdadc0c4ceaa8ce2c9558b25ac82d8dd7e808a46f0bbf0171a3820698e511730db9a0dacabb57225d60d80664a817bf43677677221010212d6e95da98c4de8d5d5104b0f2d46ca5992582e8c8cf056b5257cd6ab74b1c4b71882044425bfe713be370fbb8d42af574eb9b839cf21aaf8c16b25ce0fbe1aef99333f1e8e5b8c22deeba262957edf3f74927e7a6c0a78a43963eefd8de6339f2d3754a041a2089bcd64488a17d9e003ea2c69c0a286b8ab42187209d771e1e1c7d2b444612a5798deb39e67334606b80b5a169de2daa501dd70514bf6268701e8c1cf9200bf48736890750c53c8daba03532db577d02e7929bb9a48277d5e904cd08c6422440b0a1ed6f2ae5eda8fabcb497117c2f8a4d88bc7a97ea0cee651a6f6b684f66288ef320ed435db17cf3046aa144bd828098952d4b13e388f3ce3308adcbbdc279cf27d73760d750115a3d9daf110f91244bf12f10f67f62eec787db645db506bad35b67bea5e4163d9cecf4934601ddf92d69f279b693d92152bef1ebb51fd1f137e46c01269a4b923653e663bd777e6360cde25ca12789338b925d164f6ecf3818d6facf9573fe9f27a5d1fc97e7ca22c80321d540604b7ac61d4fe0465d156095e3827e42f5b5c281fba56eea3f3f88c900bbc795ec0673c201ee72006d7bc2134110cba812a938f5eea1cf2ac13da02747178259e7a8afa8323ebd1d37b9c17f986d61e58ef271df7af34bdb2b8a59ca5dbe87747746307d3cd2015fe3b8821bd0260d23ac6ef66d94cc2494e8b14553f84a4eb7f8f4a02ddc14e29bf160e47ee44ddb546ce8f785e6e4072ccb3dc721d9a96e04a54b2f5bfd6c39ad1a02e15425ce3c5ce027311b5de08dbe26e29391bc630c2db1a317af406efb2b2c135006e609cd4471ebfc7fb397f7505d3691349f5be42336aa6dbfa5e9c0fc82560bc1b1d2934f76942eccb01545df1f743a8a6fa36486e0904910b0c5163ff3e53b5eab741c8e158b41efb2b8d37c3877c4edac95df5f3ed763bb142e9757cff802b5b7bbe1f1eddaf96b0b29d519c1140505a97fffa48776e22bc864ebd445e2c65dfd8c9f23d685a8ee4af9dbc745a34476a1208efe5cac108d5da63791edd004e6b697a4fba8d8b2b133de3bdf8d8d08a0f3d53acc8614de14f9b1c645a0dc387bddff9a14f4869f41630fef3a18f347761a9df15dcc41d2fb53efab49510bee690e49d454f24d46ec10947eb5dda45069109f662769ce8d4c8ac948dc254e7186b1aaa669de2d961c19e1b2b9aeacace533321db0cc65ba2f876062b512d606b80cd6bbbc744804aa5c54fbcf8da6a1fdf1c2c812b2655cb5a71472fbe5d94795f22d49499d1e2c3505440c181cec12a450252ab06837dd00e09e6df24e29afa959aebc79abd10eb7a178ec0ed63258cf98145d097a20658bc8227944e8f92ddb00791573a2279e88fdc4fbd39e68abca7ed3cd006f504cc63e2a3f38dda63828f81f6383b31f2d0b33cc9077d1759a05a17e2d91011c9ab49fa6dfa95a50a04ab0be7e4d75be09cdb5c9dc8782400480925f5881bca42ed27f212c27f4da73e0e37b83804f3d214def9ecad6d4aad64b2796bd4b9a23ca83be11f4616e60c020901dc312955f3b2218af5e308e6ba269d100619f5d7f5b7330fc7ca319922b90320f878999c4eaa0138f8d2ef2daf8e0617adb6007a4a30217960215d26ffac7cc2e1ea93ae380ba9535d398de786a04f9fe5bfaedb4cd6ca3016f392b6cf3f9ad1d699c9b64b79198d7eecb29df5e4f053dd2f2241890b3a062746e65e1f409a22b63d39da9ec15a00e0198b823849c7f64fff604ec374e4e1303efb8d9c6563e9a61e28bb140fe7f11a777b0a293e5bed77ea25a17da423aca23606fd32a52c083701a6bfa87a5dd75c0a0bd60564ac9af6305c358ead231a19d216a499d010d31832e07659279cb5be972ca38501401727ae02d60cb7ff32630b7a7d8918de2cc9165234dd4fe62faf181ee7700b3f6cbe94926737335d3def4fe0dc7e67f696c155626fdc0bf821f3794976109452e246d54cb6bc03d8fbfd9df3ae044072935cecdae4e90b397954ce0ba22d90b6733558778c82f0b83de11f9e74fff1caea068392883d0e74d56ba1ee5d852272ccace360155933ff2fa8d01a22f986b25c0f9463a29c3ed089c32021407dfe5cc6b3e1638f95f942a1309e67200b977cac8ae9c1430213d925a2c20dbcb7d167c694ac91a69b2209ced03f6a1604cec937a512a7368ce7cbb26d9f993c7a3c3661d8ceb3ad0864fc756b9a89aea3c56c3df23062c61e0e7972d743c8915141bd5da32f37f532cd1a40a94c6180260483464f52dff5b6cfe4b849e012d41dd320b0f5d9281be0174a441a34cd28fc1b07174185f08304128ffb066773e114779dfc2edd1fb54cf40e0af472b6f0b41edc0b1a5bd92edb8afdc5995ad89112c6b9de68169f078d24fc58bf7ba407a426a282a45eae6b3ea48bae20fa0658ab8d11d1040c5b984f700e4cafad3b110698536b45467fbecf6a6ce7f297fdc9a0ffae5002101eade2bdb840ab104720fceac13ea1478fab9b4f5cafeace75fdc04b27625c29b51e29dc53e0293588ccfc52b34e606e62dd1fa4af88bb82dd600af512a656c7542041c6fde2f953edb87d145eecaf12a9427e6275ec9ef71cc1f87bbbbc3d527f264b02efa9b1c2d15506b52b636bdbda4bf52abe24b824469abe81e20b3075045da9da7c96ee40dd558939d", 0xb22) sendmsg$nl_route_sched(r3, 0x0, 0x800) sendto$inet(r2, &(0x7f00000017c0)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000001980), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 8m14.051938679s ago: executing program 2 (id=46): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x200080d0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r6, &(0x7f0000000840)=""/102392, 0x18ff8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000019980)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f0000019ec0)={0x10, 0x1}) 8m12.162302471s ago: executing program 2 (id=48): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) lstat(0x0, &(0x7f00000002c0)) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004004}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000040000000030a01040000000000000000020000000900010073797a30000000000900030073797a3000000000140004800800014000000003080002400000000098000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000036c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c8c5a5caa4d79aab8b68f677b50070078ec184795aa99ebf8f943577e", @ANYBLOB], 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 8m7.220579051s ago: executing program 2 (id=58): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f000001bf80)=0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f000001c000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) 7m50.72088689s ago: executing program 32 (id=58): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000f40)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x0, 0x0) read$msr(r2, &(0x7f0000002e40)=""/102368, 0x18fe0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f000001bf80)=0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f000001c000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x102, 0x0) 15.107320232s ago: executing program 4 (id=713): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000f80)=0x90000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000011c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000001200)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000001240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001280), 0x0, 0x0) read$msr(r4, &(0x7f00000012c0)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x403, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000fc0)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000001000)={{@local}, 0xfff, 0xffffffffffffffff, 0x0, 0x7, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) 15.050724677s ago: executing program 1 (id=714): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="adcd1a9a3fc36e", 0x7) accept4$alg(r0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000a80)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r5, &(0x7f000001c480)=""/102392, 0x18ff8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x16, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) 13.219119052s ago: executing program 1 (id=715): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 13.159211959s ago: executing program 3 (id=716): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xb2e45000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000000200)=""/102368, 0x18fe0) gettid() timer_create(0x0, 0x0, &(0x7f0000019240)) prlimit64(r1, 0xb, 0x0, &(0x7f0000000140)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000192c0)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000019380)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000019400)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) pselect6(0x40, &(0x7f0000019440)={0xe, 0xffffffffffffffff, 0x8, 0x7fffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff30c, 0x5}, &(0x7f0000019480)={0x4, 0x0, 0x0, 0xbd, 0x3, 0x0, 0xfffffffffffffffe, 0x3ff}, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, 0x0) 11.728145914s ago: executing program 3 (id=717): r0 = socket$kcm(0x11, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) write$P9_RLINK(r1, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) openat$sw_sync(0xffffff9c, &(0x7f0000000280), 0x105600, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002800)={0x1, @pix={0x0, 0x4, 0xa0363159, 0x2, 0x0, 0xffffffff, 0x0, 0x8000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002940)='./debug\x00', &(0x7f0000002980)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000002b00)='1', 0x1) r5 = syz_open_dev$dvb_demux(&(0x7f0000002b40), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_START(r5, 0x6f29) 9.680180241s ago: executing program 4 (id=720): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000140)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffe41) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 9.667666682s ago: executing program 1 (id=721): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = fsopen(&(0x7f0000000340)='overlay\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000140)) r3 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000200)={0x100, r4}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r5 = inotify_init() r6 = inotify_add_watch(r5, &(0x7f0000000280)='.\x00', 0x25000001) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) poll(&(0x7f0000000440)=[{r7, 0x5510}], 0x1, 0xa) inotify_rm_watch(r5, r6) close(r4) 9.460315103s ago: executing program 3 (id=723): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x236, &(0x7f0000000240)="$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") ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000480)) socket$inet_tcp(0x2, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000005, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000005c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000640), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000680), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000006c0)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 9.438974915s ago: executing program 1 (id=724): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f00000066c0)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000004540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES32, @ANYBLOB=',group_']) read$FUSE(r4, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x4eb36, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000300)={0x1, 0x2, 0x1, 0x0, 0x8}) 6.857941166s ago: executing program 1 (id=726): mkdirat(0xffffffffffffff9c, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r2, &(0x7f0000000c40)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x8, &(0x7f0000019c40)=0x40003) mknodat$null(0xffffffffffffffff, 0x0, 0x1d4e, 0x103) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffff0300ffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000000000000004400050000010000000000000008000000000000000000003c00"], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r4 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20004048, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) getsockopt$inet_int(r4, 0x0, 0xe, 0x0, &(0x7f00000004c0)=0x3) 6.620064391s ago: executing program 0 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000380)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x33b, 0x0, @default, @val, @void}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x80, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x1, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)={0x3c, r7, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.969240716s ago: executing program 3 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480), 0x651, 0x0) recvmmsg(r1, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000500)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r3 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./pipefs\x00', 0x1ff) bind$unix(r3, &(0x7f0000000200)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r4, &(0x7f00000002c0)='1', 0x1) 4.604986174s ago: executing program 4 (id=729): socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000580)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000005c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000640)) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) write(0xffffffffffffffff, &(0x7f0000000780)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 4.600450275s ago: executing program 3 (id=730): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000f40)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./proc\x00', &(0x7f0000000fc0)='proc\x00', 0x0, 0x0) r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x2, 0x0) ioctl$SET_ARRAY_INFO(r0, 0x125f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./proc/mtrr\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x6}, 0x10) fsmount(0xffffffffffffffff, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xfcc0) symlink(0x0, 0x0) write(r1, &(0x7f0000000080)="64697361626c653d303030309aa0691c2980c3fbd9302073697a653d30373429fa1e05974325449bae7871303030303020747970653d7772690d002d63", 0xff8d) 4.5460519s ago: executing program 0 (id=731): r0 = socket$kcm(0x11, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) write$P9_RLINK(r1, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) openat$sw_sync(0xffffff9c, &(0x7f0000000280), 0x105600, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002800)={0x1, @pix={0x0, 0x4, 0xa0363159, 0x2, 0x0, 0xffffffff, 0x0, 0x8000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002940)='./debug\x00', &(0x7f0000002980)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000002b00)='1', 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000002b80)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) 4.320054473s ago: executing program 0 (id=732): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc5", 0x97}) 4.319811263s ago: executing program 4 (id=733): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0xff, 0x523, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@arena={0x21, 0x0, 0x0, 0x38, 0x20000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0x3, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x1c, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0xfd8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0x3000000, @empty, 0x3}}}, 0x88) 2.066433321s ago: executing program 1 (id=734): timer_create(0x3, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) keyctl$chown(0x4, 0x0, 0xee01, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r3, &(0x7f00000004c0)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/4096, 0x11fff}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) fchdir(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) 2.047704943s ago: executing program 0 (id=735): socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f0000000240)={0x2001}, 0x18, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x202000, 0x20) syz_io_uring_setup(0xf00, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 1.730454225s ago: executing program 4 (id=736): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r3, &(0x7f0000005640)=ANY=[@ANYRES16=r5], 0x69) close(r3) execve(&(0x7f0000010340)='./file0\x00', 0x0, 0x0) 1.727772615s ago: executing program 0 (id=737): ioperm(0x4, 0x8, 0x5) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) connect$inet6(r0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001880)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001900)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001980), 0x651, 0x0) recvmmsg(r3, &(0x7f00000019c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001a00)=0x6) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0x8, &(0x7f0000001b80)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000001bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r5}, &(0x7f0000001c40), &(0x7f0000001c80)=r6}, 0x20) 1.702655388s ago: executing program 3 (id=738): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbff, {0x60, 0x0, 0x0, r8, {}, {0xfff1, 0xa}, {0x1, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}, @TCA_FQ_CODEL_TARGET={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x10) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@add_del={0x2, 0x0}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x0) 443.675515ms ago: executing program 0 (id=739): socket(0x10, 0x3, 0x0) socket(0x1e, 0x805, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000340), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000400)={'syz_tun\x00', 0x0}) r4 = syz_open_dev$cec(&(0x7f0000000080), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f0000000340)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe5, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c82900100000001e00", "00000000030000000010e809", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r4, 0xc0386105, &(0x7f00000004c0)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) 0s ago: executing program 4 (id=740): r0 = socket$kcm(0x11, 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) write$P9_RLINK(r1, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) openat$sw_sync(0xffffff9c, &(0x7f0000000280), 0x105600, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) read$FUSE(0xffffffffffffffff, &(0x7f00000007c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000002800)={0x1, @pix={0x0, 0x4, 0xa0363159, 0x2, 0x0, 0xffffffff, 0x0, 0x8000}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002900)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002940)='./debug\x00', &(0x7f0000002980)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002ac0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000002b00)='1', 0x1) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000002b80)={0x2, 0x0, 0x3, 0x14}) ioctl$DVB_DEMUX_DMX_START(0xffffffffffffffff, 0x6f29) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. syzkaller login: [ 79.486309][ T5773] cgroup: Unknown subsys name 'net' [ 79.625590][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.337036][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.058815][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.068077][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.076142][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.084723][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.090883][ T5794] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.099992][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.102913][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.108302][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.123041][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.126397][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.138141][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.145654][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.154288][ T5098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.162639][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 83.170157][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.177760][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.186948][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.194497][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.244047][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.253080][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.261461][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.271893][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.280616][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.288034][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.351478][ T5788] (null): rxe_set_mtu: Set mtu to 1024 [ 83.363163][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 83.372284][ T5796] (null): rxe_set_mtu: Set mtu to 1024 [ 83.379391][ T5796] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.395213][ T5784] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.402363][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.410090][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 83.415871][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 83.424575][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.465604][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.705977][ T5788] infiniband rxe0: set active [ 83.714470][ T5788] infiniband rxe0: added rxe_eth0 [ 83.721778][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.801967][ T5788] RDS/IB: rxe0: added [ 83.806674][ T5788] smc: adding ib device rxe0 with port count 1 [ 83.814884][ T5788] smc: ib device rxe0 port 1 has pnetid [ 83.823069][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.849798][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.083546][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 84.116764][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.163771][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 84.183206][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 84.406020][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.517554][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.524782][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.537077][ T5784] bridge_slave_0: entered allmulticast mode [ 84.562691][ T5784] bridge_slave_0: entered promiscuous mode [ 84.623882][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.643574][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.666966][ T5784] bridge_slave_1: entered allmulticast mode [ 84.674708][ T5784] bridge_slave_1: entered promiscuous mode [ 84.744660][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.752071][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.759474][ T5786] bridge_slave_0: entered allmulticast mode [ 84.768661][ T5786] bridge_slave_0: entered promiscuous mode [ 84.793172][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.802785][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.810494][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.828963][ T5796] bridge_slave_0: entered allmulticast mode [ 84.836030][ T5796] bridge_slave_0: entered promiscuous mode [ 84.850933][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.861696][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.869151][ T5796] bridge_slave_1: entered allmulticast mode [ 84.876745][ T5796] bridge_slave_1: entered promiscuous mode [ 84.890687][ T5788] rxe_eth0 speed is unknown, defaulting to 1000 [ 84.902093][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.909567][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.917004][ T5786] bridge_slave_1: entered allmulticast mode [ 84.942492][ T5786] bridge_slave_1: entered promiscuous mode [ 84.983818][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.091801][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.105646][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.125374][ T5784] team0: Port device team_slave_0 added [ 85.136380][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.168789][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.184351][ T5784] team0: Port device team_slave_1 added [ 85.228314][ T5798] Bluetooth: hci0: command tx timeout [ 85.253288][ T5796] team0: Port device team_slave_0 added [ 85.313693][ T5796] team0: Port device team_slave_1 added [ 85.319624][ T5798] Bluetooth: hci2: command tx timeout [ 85.325344][ T5798] Bluetooth: hci1: command tx timeout [ 85.332418][ T5786] team0: Port device team_slave_0 added [ 85.345382][ T5786] team0: Port device team_slave_1 added [ 85.379301][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.386327][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.387559][ T5798] Bluetooth: hci3: command tx timeout [ 85.419668][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.479791][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.486840][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.513737][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.526467][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.534838][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.561292][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.602342][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.610502][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.637624][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.661917][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.669689][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.696190][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.716165][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.723863][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.753657][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.853480][ T5784] hsr_slave_0: entered promiscuous mode [ 85.864991][ T5784] hsr_slave_1: entered promiscuous mode [ 85.913877][ T5786] hsr_slave_0: entered promiscuous mode [ 85.924456][ T5786] hsr_slave_1: entered promiscuous mode [ 85.932043][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.944534][ T5786] Cannot create hsr debugfs directory [ 86.014152][ T1192] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.064007][ T5796] hsr_slave_0: entered promiscuous mode [ 86.071287][ T5796] hsr_slave_1: entered promiscuous mode [ 86.078182][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.085772][ T5796] Cannot create hsr debugfs directory [ 86.430812][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 86.735870][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.755168][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.769747][ T5788] bridge_slave_0: entered allmulticast mode [ 86.781381][ T5788] bridge_slave_0: entered promiscuous mode [ 86.790242][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.802700][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.811675][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.821566][ T5788] bridge_slave_1: entered allmulticast mode [ 86.830315][ T5788] bridge_slave_1: entered promiscuous mode [ 86.861929][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.881255][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.894871][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.904315][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.000260][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.021294][ T5447] infiniband rxe0: set active [ 87.095293][ T5788] team0: Port device team_slave_0 added [ 87.119102][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 87.189342][ T5788] team0: Port device team_slave_1 added [ 87.245795][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.291587][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.307655][ T5798] Bluetooth: hci0: command tx timeout [ 87.318136][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.340395][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.360342][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.373951][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.382740][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.416921][ T5798] Bluetooth: hci1: command tx timeout [ 87.418278][ T5794] Bluetooth: hci2: command tx timeout [ 87.427809][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.450903][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.467250][ T5794] Bluetooth: hci3: command tx timeout [ 87.474159][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.506797][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.515743][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.551833][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.573508][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.724842][ T5788] hsr_slave_0: entered promiscuous mode [ 87.731670][ T5788] hsr_slave_1: entered promiscuous mode [ 87.738156][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.745792][ T5788] Cannot create hsr debugfs directory [ 87.871763][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.002525][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.054264][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.061678][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.072842][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.080061][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.096156][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.106920][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.196005][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.212790][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.239475][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.246677][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.260889][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.289583][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.308815][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.315979][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.338569][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.349524][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.373496][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.380694][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.392624][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.399793][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.566957][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.764778][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.844815][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.874332][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.881547][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.933379][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.946427][ T2994] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.953673][ T2994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.121328][ T5784] veth0_vlan: entered promiscuous mode [ 89.178375][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.193414][ T5784] veth1_vlan: entered promiscuous mode [ 89.210787][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.323724][ T5784] veth0_macvtap: entered promiscuous mode [ 89.354374][ T5786] veth0_vlan: entered promiscuous mode [ 89.380228][ T5784] veth1_macvtap: entered promiscuous mode [ 89.388066][ T5794] Bluetooth: hci0: command tx timeout [ 89.428262][ T5796] veth0_vlan: entered promiscuous mode [ 89.450102][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.466029][ T5786] veth1_vlan: entered promiscuous mode [ 89.471958][ T5794] Bluetooth: hci1: command tx timeout [ 89.478235][ T5798] Bluetooth: hci2: command tx timeout [ 89.517207][ T5796] veth1_vlan: entered promiscuous mode [ 89.529601][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.563834][ T5798] Bluetooth: hci3: command tx timeout [ 89.584374][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.616704][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.634481][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.643437][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.661952][ T5786] veth0_macvtap: entered promiscuous mode [ 89.706294][ T5786] veth1_macvtap: entered promiscuous mode [ 89.772562][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.783038][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.797100][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.810242][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.855861][ T5796] veth0_macvtap: entered promiscuous mode [ 89.874798][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.889948][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.902141][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.915881][ T5796] veth1_macvtap: entered promiscuous mode [ 89.952175][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.961643][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.970998][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.980276][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.024103][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.035712][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.073704][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.084335][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.095337][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.106506][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.120197][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.154569][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.165724][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.176336][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.191530][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.203039][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.229088][ T5788] veth0_vlan: entered promiscuous mode [ 90.248088][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.255985][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.265750][ T5788] veth1_vlan: entered promiscuous mode [ 90.281644][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.291518][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.300662][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.309612][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.451613][ T5784] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.481456][ T5788] veth0_macvtap: entered promiscuous mode [ 90.496598][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.533737][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.544827][ T5788] veth1_macvtap: entered promiscuous mode [ 90.627478][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.635539][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.646505][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.659291][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.669936][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.681066][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.691087][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.714227][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.743537][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.844453][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.862057][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.875321][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.888461][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.902235][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.919839][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.936558][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.964635][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.983964][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997955][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.007128][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.019685][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.028953][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.599323][ T5798] Bluetooth: hci0: command tx timeout [ 91.604828][ T5798] Bluetooth: hci2: command tx timeout [ 91.610437][ T5794] Bluetooth: hci1: command tx timeout [ 91.627607][ T5798] Bluetooth: hci3: command tx timeout [ 91.809003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.817506][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.106210][ T789] cfg80211: failed to load regulatory.db [ 92.829779][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.867767][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.157335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 96.287551][ T5930] syz.3.7[5930]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.314503][ T5930] loop3: detected capacity change from 0 to 8 [ 97.391377][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.478458][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.609998][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 98.878253][ T5935] loop1: detected capacity change from 0 to 512 [ 98.902080][ T5935] EXT4-fs: Mount option(s) incompatible with ext3 [ 100.047299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 101.002590][ T5874] rxe_eth0 speed is unknown, defaulting to 1000 [ 102.607294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 102.667397][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.617149][ C0] sched: RT throttling activated [ 104.225237][ T5961] loop3: detected capacity change from 0 to 164 [ 104.286440][ T5961] ======================================================= [ 104.286440][ T5961] WARNING: The mand mount option has been deprecated and [ 104.286440][ T5961] and is ignored by this kernel. Remove the mand [ 104.286440][ T5961] option from the mount to silence this warning. [ 104.286440][ T5961] ======================================================= [ 105.211770][ T5969] rock: directory entry would overflow storage [ 105.218506][ T5969] rock: sig=0x4f50, size=4, remaining=3 [ 105.224156][ T5969] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 107.728036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.137626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 108.602132][ T9] IPVS: starting estimator thread 0... [ 109.273833][ T5986] IPVS: using max 17 ests per chain, 40800 per kthread [ 110.668233][ T6006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.817578][ T5874] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 114.147925][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.293631][ T5874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.364439][ T5874] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 114.375007][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.397804][ T5874] usb 4-1: config 0 descriptor?? [ 114.415879][ T5874] hub 4-1:0.0: USB hub found [ 115.623292][ T5874] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 115.638611][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 115.646581][ T5874] usbhid: probe of 4-1:0.0 failed with error -71 [ 115.703107][ T5874] usb 4-1: USB disconnect, device number 2 [ 117.967276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 119.756644][ T6066] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.647286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 127.751408][ T6118] syzkaller0: entered promiscuous mode [ 127.756952][ T6118] syzkaller0: entered allmulticast mode [ 127.827273][ T6120] tipc: Started in network mode [ 127.833120][ T6120] tipc: Node identity 4a18e87096a, cluster identity 4711 [ 128.430703][ T6123] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 129.636304][ T6120] tipc: Enabled bearer , priority 0 [ 129.967633][ T6117] tipc: Resetting bearer [ 130.002377][ T6117] tipc: Disabling bearer [ 130.915702][ T6135] tipc: Enabled bearer , priority 0 [ 130.949171][ T6135] syzkaller0: entered promiscuous mode [ 130.964072][ T6135] syzkaller0: entered allmulticast mode [ 130.973287][ T6134] Zero length message leads to an empty skb [ 131.070430][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.49'. [ 131.965119][ T6142] tipc: Resetting bearer [ 131.991918][ T6133] tipc: Resetting bearer [ 132.018840][ T6133] tipc: Disabling bearer [ 133.346907][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.354037][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.440999][ T6161] loop1: detected capacity change from 0 to 1024 [ 135.577622][ T5871] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.983627][ T5871] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 137.997265][ T5871] usb 1-1: can't read configurations, error -71 [ 138.121324][ T6183] FAT-fs (nullb0): bogus number of reserved sectors [ 138.137326][ T6183] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 138.679618][ T6193] FAULT_INJECTION: forcing a failure. [ 138.679618][ T6193] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 138.699422][ T6193] CPU: 1 PID: 6193 Comm: syz.0.63 Not tainted syzkaller #0 [ 138.706688][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 138.716806][ T6193] Call Trace: [ 138.720119][ T6193] [ 138.723078][ T6193] dump_stack_lvl+0x18c/0x250 [ 138.727808][ T6193] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 138.733484][ T6193] ? show_regs_print_info+0x20/0x20 [ 138.738727][ T6193] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 138.744431][ T6193] should_fail_ex+0x394/0x4c0 [ 138.749162][ T6193] prepare_alloc_pages+0x1e1/0x5b0 [ 138.754359][ T6193] __alloc_pages+0x134/0x460 [ 138.759017][ T6193] ? zone_statistics+0x170/0x170 [ 138.764002][ T6193] ? alloc_pages+0x4e1/0x740 [ 138.768638][ T6193] ? __init_waitqueue_head+0xa8/0x140 [ 138.774057][ T6193] get_zeroed_page+0x17/0x40 [ 138.778682][ T6193] rds_cong_from_addr+0xd5/0x360 [ 138.783656][ T6193] rds_cong_get_maps+0x53/0xb0 [ 138.788461][ T6193] __rds_conn_create+0x987/0x1fe0 [ 138.793529][ T6193] ? __rds_conn_create+0x2f3/0x1fe0 [ 138.798762][ T6193] ? rds_conn_create+0x60/0x60 [ 138.803569][ T6193] rds_conn_create_outgoing+0x43/0x60 [ 138.808994][ T6193] rds_sendmsg+0xf98/0x1db0 [ 138.813554][ T6193] ? rds_send_sndbuf_remove+0x230/0x230 [ 138.819143][ T6193] ? aa_af_perm+0x330/0x330 [ 138.823686][ T6193] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 138.830149][ T6193] ? aa_sock_msg_perm+0x94/0x150 [ 138.835127][ T6193] ? apparmor_socket_sendmsg+0x8e/0x330 [ 138.840718][ T6193] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 138.846049][ T6193] ? security_socket_sendmsg+0x80/0xa0 [ 138.851560][ T6193] ? rds_send_sndbuf_remove+0x230/0x230 [ 138.857190][ T6193] ____sys_sendmsg+0x61b/0x980 [ 138.862013][ T6193] ? __sys_sendmsg_sock+0x30/0x30 [ 138.867076][ T6193] ? __import_iovec+0x3fa/0x850 [ 138.871974][ T6193] ? import_iovec+0x73/0xa0 [ 138.876515][ T6193] ___sys_sendmsg+0x2a6/0x360 [ 138.881249][ T6193] ? __sys_sendmsg+0x2b0/0x2b0 [ 138.886061][ T6193] ? rds_bind+0x391/0x870 [ 138.890481][ T6193] __se_sys_sendmsg+0x1d0/0x2c0 [ 138.895362][ T6193] ? __x64_sys_sendmsg+0x80/0x80 [ 138.900345][ T6193] ? lockdep_hardirqs_on+0x98/0x150 [ 138.905583][ T6193] do_syscall_64+0x55/0xb0 [ 138.910034][ T6193] ? clear_bhb_loop+0x40/0x90 [ 138.914786][ T6193] ? clear_bhb_loop+0x40/0x90 [ 138.919502][ T6193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.925536][ T6193] RIP: 0033:0x7fb5b53a8f19 [ 138.929985][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.949618][ T6193] RSP: 002b:00007fb5b61bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.958058][ T6193] RAX: ffffffffffffffda RBX: 00007fb5b5625fa0 RCX: 00007fb5b53a8f19 [ 138.966060][ T6193] RDX: 0000000004000000 RSI: 0000200000000500 RDI: 0000000000000005 [ 138.974060][ T6193] RBP: 00007fb5b5437f6d R08: 0000000000000000 R09: 0000000000000000 [ 138.982057][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.990057][ T6193] R13: 00007fb5b5626038 R14: 00007fb5b5625fa0 R15: 00007ffd4b1d6ef8 [ 138.998079][ T6193] [ 140.416083][ T6210] capability: warning: `syz.3.64' uses deprecated v2 capabilities in a way that may be insecure [ 140.478491][ T6210] loop3: detected capacity change from 0 to 1024 [ 141.283097][ T6180] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 141.999351][ T6212] loop1: detected capacity change from 0 to 1024 [ 142.020125][ T6212] hfsplus: unable to change nls mapping [ 142.026079][ T6212] hfsplus: unable to parse mount options [ 143.229527][ T6216] netlink: 'syz.0.68': attribute type 8 has an invalid length. [ 144.678884][ T6228] x86/PAT: syz.3.71:6228 freeing invalid memtype [mem 0xfe004000-0xfe005fff] [ 145.269540][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.276740][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.283632][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.290477][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.297328][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.304146][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.311016][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.317871][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.324713][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.331642][ T6227] tc action pedit offset must be on 32 bit boundaries [ 145.338684][ T6227] 0: reclassify loop, rule prio 0, protocol 800 [ 145.611414][ T6231] syzkaller0: entered promiscuous mode [ 145.621522][ T6231] syzkaller0: entered allmulticast mode [ 146.797683][ T6236] 9pnet_fd: Insufficient options for proto=fd [ 148.687218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 152.275728][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 152.297606][ T5098] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 152.307962][ T5098] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 152.317617][ T5098] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 152.331995][ T5098] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 152.339827][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.807244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 154.534096][ T6259] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.942981][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.012367][ T6269] loop1: detected capacity change from 0 to 512 [ 155.183027][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.311018][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.333414][ T6269] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 155.363648][ T6269] FAT-fs (loop1): Filesystem has been set read-only [ 155.575354][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.588230][ T6269] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 156.507259][ T5098] Bluetooth: hci4: command tx timeout [ 157.269647][ T6259] chnl_net:caif_netlink_parms(): no params data found [ 158.484929][ T6293] loop3: detected capacity change from 0 to 1024 [ 158.552207][ T6293] EXT4-fs: Ignoring removed orlov option [ 158.612061][ T6293] EXT4-fs: Ignoring removed bh option [ 158.724990][ T6296] loop0: detected capacity change from 0 to 64 [ 158.747399][ T5098] Bluetooth: hci4: command tx timeout [ 158.819453][ T6293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.381333][ T6317] ip_tables: iptables: counters copy to user failed while replacing table [ 160.746799][ T6319] loop0: detected capacity change from 0 to 256 [ 160.828148][ T5098] Bluetooth: hci4: command tx timeout [ 160.852588][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.946347][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.963885][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.009284][ T6259] bridge_slave_0: entered allmulticast mode [ 161.016870][ T6259] bridge_slave_0: entered promiscuous mode [ 161.094535][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.137562][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.218588][ T6259] bridge_slave_1: entered allmulticast mode [ 161.226105][ T6259] bridge_slave_1: entered promiscuous mode [ 162.632591][ T6259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.692288][ T6259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.959677][ T5098] Bluetooth: hci4: command tx timeout [ 163.105854][ T6259] team0: Port device team_slave_0 added [ 163.162197][ T6259] team0: Port device team_slave_1 added [ 163.454079][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.502915][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.603676][ T6259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.687526][ T28] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 163.803636][ T6259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.842837][ T6259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.917861][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.939448][ T28] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.967454][ T6259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.065293][ T28] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 165.867334][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.875397][ T28] usb 1-1: Product: syz [ 165.937247][ T28] usb 1-1: Manufacturer: syz [ 165.941929][ T28] usb 1-1: SerialNumber: syz [ 166.126461][ T28] usb 1-1: USB disconnect, device number 4 [ 166.238560][ T6259] hsr_slave_0: entered promiscuous mode [ 166.270108][ T6259] hsr_slave_1: entered promiscuous mode [ 166.303177][ T6259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.318807][ T6259] Cannot create hsr debugfs directory [ 168.692489][ T11] hsr_slave_0: left promiscuous mode [ 168.743082][ T11] hsr_slave_1: left promiscuous mode [ 168.797768][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.809332][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.839385][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.872262][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.888387][ T11] bridge_slave_1: left allmulticast mode [ 168.907612][ T11] bridge_slave_1: left promiscuous mode [ 168.914339][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.953889][ T11] bridge_slave_0: left allmulticast mode [ 168.970607][ T11] bridge_slave_0: left promiscuous mode [ 168.976418][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.069593][ T11] veth1_macvtap: left promiscuous mode [ 169.075620][ T11] veth0_macvtap: left promiscuous mode [ 169.097655][ T11] veth1_vlan: left promiscuous mode [ 169.103279][ T11] veth0_vlan: left promiscuous mode [ 172.147924][ T6384] loop0: detected capacity change from 0 to 512 [ 172.867399][ T6384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.977369][ T6384] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.484122][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.735697][ T6485] ip_tables: iptables: counters copy to user failed while replacing table [ 180.825138][ T6485] Bluetooth: ISO socket layer initialized [ 182.303695][ T11] team0 (unregistering): Port device team_slave_1 removed [ 182.452873][ T11] team0 (unregistering): Port device team_slave_0 removed [ 182.608575][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.798514][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.839673][ T6493] FAULT_INJECTION: forcing a failure. [ 182.839673][ T6493] name failslab, interval 1, probability 0, space 0, times 1 [ 182.875448][ T6493] CPU: 1 PID: 6493 Comm: syz.1.108 Not tainted syzkaller #0 [ 182.882816][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 182.892923][ T6493] Call Trace: [ 182.896245][ T6493] [ 182.899228][ T6493] dump_stack_lvl+0x18c/0x250 [ 182.903971][ T6493] ? show_regs_print_info+0x20/0x20 [ 182.909223][ T6493] ? load_image+0x420/0x420 [ 182.913783][ T6493] ? __might_sleep+0xe0/0xe0 [ 182.918458][ T6493] ? __lock_acquire+0x7eb0/0x7eb0 [ 182.923548][ T6493] should_fail_ex+0x394/0x4c0 [ 182.927394][ T5798] Bluetooth: hci4: command 0x2044 tx timeout [ 182.928273][ T6493] should_failslab+0x9/0x20 [ 182.938832][ T6493] slab_pre_alloc_hook+0x59/0x300 [ 182.943918][ T6493] ? snd_seq_prioq_new+0x47/0x90 [ 182.948913][ T6493] __kmem_cache_alloc_node+0x53/0x260 [ 182.954340][ T6493] ? snd_seq_prioq_new+0x47/0x90 [ 182.959334][ T6493] kmalloc_trace+0x2a/0xe0 [ 182.963830][ T6493] snd_seq_prioq_new+0x47/0x90 [ 182.968650][ T6493] snd_seq_queue_alloc+0x13b/0x740 [ 182.973816][ T6493] ? snd_seq_ioctl_set_client_info+0x610/0x610 [ 182.979588][ T5098] Bluetooth: hci4: Opcode 0x2044 failed: -110 [ 182.980012][ T6493] snd_seq_ioctl_create_queue+0x7f/0x3b0 [ 182.986349][ T5098] Bluetooth: hci4: Unable to create PA: -110 [ 182.991992][ T6493] ? snd_seq_ioctl_unsubscribe_port+0x6e0/0x6e0 [ 182.992032][ T6493] snd_seq_oss_open+0x658/0xf10 [ 182.992073][ T6493] ? snd_seq_oss_delete_client+0x50/0x50 [ 182.992135][ T6493] ? trace_raw_output_contention_end+0xd0/0xd0 [ 182.992177][ T6493] ? soundcore_open+0x274/0x4c0 [ 182.992202][ T6493] ? odev_open+0x5c/0xa0 [ 182.992225][ T6493] ? __lock_acquire+0x7eb0/0x7eb0 [ 182.992256][ T6493] ? snd_seq_oss_process_event+0x29b0/0x29b0 [ 182.992282][ T6493] ? async_call_lookup_ports+0x20/0x20 [ 182.992306][ T6493] ? do_raw_spin_unlock+0x121/0x230 [ 182.992340][ T6493] ? soundcore_open+0x310/0x4c0 [ 182.992367][ T6493] odev_open+0x67/0xa0 [ 182.992392][ T6493] chrdev_open+0x58c/0x600 [ 182.992422][ T6493] ? cd_forget+0x160/0x160 [ 182.992453][ T6493] ? fsnotify_perm+0x3ed/0x5e0 [ 182.992483][ T6493] do_dentry_open+0x880/0x14b0 [ 182.992516][ T6493] ? cd_forget+0x160/0x160 [ 182.992547][ T6493] path_openat+0x284f/0x3270 [ 182.992594][ T6493] ? do_sys_openat2+0xda/0x1d0 [ 182.992621][ T6493] ? __x64_sys_openat+0x139/0x160 [ 182.992652][ T6493] ? verify_lock_unused+0x140/0x140 [ 182.992678][ T6493] ? do_filp_open+0x430/0x430 [ 182.992722][ T6493] do_filp_open+0x1f2/0x430 [ 183.113466][ T6493] ? vfs_tmpfile+0x620/0x620 [ 183.118145][ T6493] ? _raw_spin_unlock+0x28/0x40 [ 183.123048][ T6493] ? alloc_fd+0x590/0x640 [ 183.127451][ T6493] do_sys_openat2+0x134/0x1d0 [ 183.132186][ T6493] ? do_sys_open+0xe0/0xe0 [ 183.136664][ T6493] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 183.142730][ T6493] ? lock_chain_count+0x20/0x20 [ 183.147637][ T6493] __x64_sys_openat+0x139/0x160 [ 183.152558][ T6493] do_syscall_64+0x55/0xb0 [ 183.157040][ T6493] ? clear_bhb_loop+0x40/0x90 [ 183.161777][ T6493] ? clear_bhb_loop+0x40/0x90 [ 183.166512][ T6493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.172546][ T6493] RIP: 0033:0x7fc704ba8f19 [ 183.177006][ T6493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.196660][ T6493] RSP: 002b:00007fc705aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.205127][ T6493] RAX: ffffffffffffffda RBX: 00007fc704e25fa0 RCX: 00007fc704ba8f19 [ 183.213142][ T6493] RDX: 0000000000080200 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 183.221199][ T6493] RBP: 00007fc704c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 183.229215][ T6493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.237233][ T6493] R13: 00007fc704e26038 R14: 00007fc704e25fa0 R15: 00007fff01dcfe58 [ 183.245273][ T6493] [ 184.820809][ T11] bond0 (unregistering): Released all slaves [ 185.116073][ T6510] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 185.197410][ T6510] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 186.314122][ T6259] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.603929][ T6531] warning: `syz.0.116' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 187.248608][ T6259] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.922537][ T6259] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.424134][ T6259] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.268839][ T6259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.342760][ T6259] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.424016][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.431276][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.444461][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453980][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473969][ T6571] loop0: detected capacity change from 0 to 512 [ 194.529695][ T6571] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.122: bad orphan inode 15 [ 194.566039][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.573269][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.591452][ T6571] ext4_test_bit(bit=14, block=5) = 0 [ 194.618496][ T6571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.749244][ T6259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.073566][ T6584] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.122: bg 0: block 13: invalid block bitmap [ 196.774633][ T6259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.086464][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.547819][ T6608] xt_hashlimit: max too large, truncated to 1048576 [ 197.566279][ T6608] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 198.322936][ T6606] loop1: detected capacity change from 0 to 512 [ 198.818235][ T6606] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.127: bad orphan inode 15 [ 198.991829][ T6606] ext4_test_bit(bit=14, block=5) = 0 [ 199.177839][ T6606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.421039][ T6606] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 199.569013][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.131219][ T6259] veth0_vlan: entered promiscuous mode [ 203.808922][ T6259] veth1_vlan: entered promiscuous mode [ 205.851098][ T6259] veth0_macvtap: entered promiscuous mode [ 205.903192][ T6259] veth1_macvtap: entered promiscuous mode [ 205.918218][ T6656] loop0: detected capacity change from 0 to 512 [ 206.853302][ T6656] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.134: bad orphan inode 15 [ 206.887733][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.898337][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.909069][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.919920][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.930301][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.942023][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.947308][ T6656] ext4_test_bit(bit=14, block=5) = 0 [ 206.979533][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.016390][ T6656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.445008][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 207.445030][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 207.969136][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.361543][ T6656] EXT4-fs error (device loop0): ext4_validate_block_bitmap:430: comm syz.0.134: bg 0: block 13: invalid block bitmap [ 209.492504][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.557710][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.597401][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.632702][ T6259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.648302][ T6259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.852905][ T6259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.920616][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.008534][ T6259] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.074520][ T6259] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.112165][ T6259] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.868150][ T6259] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.705315][ T6742] xt_hashlimit: size too large, truncated to 1048576 [ 213.713704][ T6742] xt_hashlimit: max too large, truncated to 1048576 [ 213.720788][ T6742] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 215.317749][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 215.332962][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 215.340861][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 215.350007][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 215.408717][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 215.417030][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 215.704710][ T6752] rxe_eth0 speed is unknown, defaulting to 1000 [ 215.799886][ T6259] syz-executor (6259) used greatest stack depth: 20680 bytes left [ 215.986268][ T6433] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.917286][ T5798] Bluetooth: hci1: command tx timeout [ 217.961079][ T6433] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.026594][ T6762] loop3: detected capacity change from 0 to 512 [ 218.173323][ T6762] EXT4-fs error (device loop3): ext4_orphan_get:1434: comm syz.3.137: bad orphan inode 15 [ 218.360824][ T6762] ext4_test_bit(bit=14, block=5) = 0 [ 218.372750][ T6433] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.428877][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.915787][ T6762] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 219.064876][ T6767] loop0: detected capacity change from 0 to 256 [ 219.720369][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.947312][ T5798] Bluetooth: hci1: command tx timeout [ 220.771251][ T6433] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.158078][ T6752] chnl_net:caif_netlink_parms(): no params data found [ 223.437297][ T5798] Bluetooth: hci1: command tx timeout [ 224.819626][ T6805] sctp: failed to load transform for md5: -2 [ 225.241019][ T6752] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.292369][ T6752] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.324838][ T6752] bridge_slave_0: entered allmulticast mode [ 225.353334][ T6752] bridge_slave_0: entered promiscuous mode [ 225.354729][ T5798] Bluetooth: hci2: unexpected event 0x0e length: 0 < 3 [ 225.380816][ T6752] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.532637][ T5798] Bluetooth: hci1: command tx timeout [ 225.582962][ T6752] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.601569][ T6752] bridge_slave_1: entered allmulticast mode [ 226.184438][ T6752] bridge_slave_1: entered promiscuous mode [ 228.292593][ T6823] loop0: detected capacity change from 0 to 512 [ 228.418082][ T6823] EXT4-fs error (device loop0): ext4_orphan_get:1434: comm syz.0.151: bad orphan inode 15 [ 228.459054][ T6823] ext4_test_bit(bit=14, block=5) = 0 [ 228.465867][ T6823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.646541][ T6823] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 228.725791][ T6752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.773258][ T6752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.834994][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.261555][ T6752] team0: Port device team_slave_0 added [ 230.530343][ T6752] team0: Port device team_slave_1 added [ 231.446586][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.466530][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.587173][ T6752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.697843][ T6752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.725211][ T6752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.797476][ T6752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.138496][ T6752] hsr_slave_0: entered promiscuous mode [ 234.156258][ T6871] loop0: detected capacity change from 0 to 128 [ 234.166320][ T6752] hsr_slave_1: entered promiscuous mode [ 234.275999][ T6752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.428857][ T6752] Cannot create hsr debugfs directory [ 234.525595][ T6871] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.953397][ T6871] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.219954][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.766554][ T6433] hsr_slave_0: left promiscuous mode [ 238.491348][ T6907] ftl_cs: FTL header not found. [ 238.537054][ T6907] block2mtd: mtd1: [/dev/loop0] erase_size = 4KiB [4096] [ 240.418574][ T6433] hsr_slave_1: left promiscuous mode [ 240.716160][ T6925] loop1: detected capacity change from 0 to 4096 [ 240.757261][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.764784][ T6433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.820138][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.224860][ T6927] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 241.277442][ T6433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.725696][ T6433] bridge_slave_1: left allmulticast mode [ 241.767203][ T6433] bridge_slave_1: left promiscuous mode [ 241.833621][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.877840][ T6433] bridge_slave_0: left allmulticast mode [ 241.883568][ T6433] bridge_slave_0: left promiscuous mode [ 241.889432][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.978883][ T6433] veth1_macvtap: left promiscuous mode [ 241.984487][ T6433] veth0_macvtap: left promiscuous mode [ 242.027593][ T6433] veth1_vlan: left promiscuous mode [ 242.033017][ T6433] veth0_vlan: left promiscuous mode [ 242.039155][ T6933] loop3: detected capacity change from 0 to 4096 [ 242.046679][ T6933] EXT4-fs: Ignoring removed nobh option [ 242.301322][ T6933] EXT4-fs: Ignoring removed bh option [ 242.322575][ T6933] EXT4-fs (loop3): Test dummy encryption mode enabled [ 242.381828][ T6933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.338859][ T6940] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 245.370720][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.530446][ T6433] team0 (unregistering): Port device team_slave_1 removed [ 246.732422][ T6433] team0 (unregistering): Port device team_slave_0 removed [ 246.776968][ T6433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.821881][ T6433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.113389][ T6433] bond0 (unregistering): Released all slaves [ 249.447513][ T6996] FAULT_INJECTION: forcing a failure. [ 249.447513][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 249.502085][ T6996] CPU: 1 PID: 6996 Comm: syz.0.177 Not tainted syzkaller #0 [ 249.509460][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 249.519583][ T6996] Call Trace: [ 249.522990][ T6996] [ 249.525972][ T6996] dump_stack_lvl+0x18c/0x250 [ 249.530721][ T6996] ? show_regs_print_info+0x20/0x20 [ 249.535979][ T6996] ? load_image+0x420/0x420 [ 249.540528][ T6996] ? __might_sleep+0xe0/0xe0 [ 249.545165][ T6996] ? __lock_acquire+0x7eb0/0x7eb0 [ 249.550228][ T6996] ? mark_lock+0x94/0x320 [ 249.554632][ T6996] should_fail_ex+0x394/0x4c0 [ 249.559376][ T6996] should_failslab+0x9/0x20 [ 249.563922][ T6996] slab_pre_alloc_hook+0x59/0x300 [ 249.569000][ T6996] kmem_cache_alloc+0x5a/0x2d0 [ 249.573813][ T6996] ? mas_alloc_nodes+0x2f8/0x8c0 [ 249.578814][ T6996] mas_alloc_nodes+0x2f8/0x8c0 [ 249.583647][ T6996] mas_preallocate+0xa1f/0x1170 [ 249.588560][ T6996] ? lockdep_softirqs_off+0x440/0x440 [ 249.593990][ T6996] ? mas_destroy+0x20a0/0x20a0 [ 249.598822][ T6996] ? vma_iter_config+0xe6/0x270 [ 249.603728][ T6996] __split_vma+0x2dd/0xc20 [ 249.608211][ T6996] ? mmap_write_unlock+0x160/0x160 [ 249.613397][ T6996] do_vmi_align_munmap+0x3a3/0x16a0 [ 249.618754][ T6996] ? do_vmi_munmap+0x2d0/0x2d0 [ 249.623583][ T6996] ? mtree_range_walk+0x68c/0x7b0 [ 249.628683][ T6996] ? mas_find_setup+0x47f/0x590 [ 249.633594][ T6996] do_vmi_munmap+0x252/0x2d0 [ 249.638258][ T6996] __vm_munmap+0x19e/0x3c0 [ 249.642751][ T6996] ? vm_munmap+0x20/0x20 [ 249.647051][ T6996] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 249.653099][ T6996] ? syscall_enter_from_user_mode+0x25/0x80 [ 249.659051][ T6996] __x64_sys_munmap+0x60/0x70 [ 249.663798][ T6996] do_syscall_64+0x55/0xb0 [ 249.668263][ T6996] ? clear_bhb_loop+0x40/0x90 [ 249.673003][ T6996] ? clear_bhb_loop+0x40/0x90 [ 249.677740][ T6996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 249.683690][ T6996] RIP: 0033:0x7fb5b53a8f19 [ 249.688155][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.707811][ T6996] RSP: 002b:00007fb5b619b028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 249.716277][ T6996] RAX: ffffffffffffffda RBX: 00007fb5b5626090 RCX: 00007fb5b53a8f19 [ 249.724318][ T6996] RDX: 0000000000000000 RSI: 0000000000c5059c RDI: 00007fb5b2fd6000 [ 249.732356][ T6996] RBP: 00007fb5b5437f6d R08: 0000000000000000 R09: 0000000000000000 [ 249.740376][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.748391][ T6996] R13: 00007fb5b5626128 R14: 00007fb5b5626090 R15: 00007ffd4b1d6ef8 [ 249.756434][ T6996] [ 250.156262][ T6752] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.183727][ T6752] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.237506][ T6752] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.262734][ T6752] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 250.570269][ T6752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.771736][ T6752] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.909395][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.916612][ T6448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.938629][ T7017] sctp: failed to load transform for md5: -2 [ 251.989375][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.996630][ T6448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.353775][ T7045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.671970][ T6752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.827287][ T5913] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 255.872932][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.879428][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.043697][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 256.052687][ T5913] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 256.070735][ T5913] usb 4-1: config 179 has no interface number 0 [ 256.088343][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 256.120035][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 256.153981][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 256.178487][ T5913] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 256.194911][ T5913] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 256.215924][ T5913] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 256.236230][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.301362][ T7057] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 257.250293][ T6752] veth0_vlan: entered promiscuous mode [ 259.705476][ T6752] veth1_vlan: entered promiscuous mode [ 259.788882][ T5874] usb 4-1: USB disconnect, device number 3 [ 259.790422][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 259.803089][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 259.955596][ T7100] FAULT_INJECTION: forcing a failure. [ 259.955596][ T7100] name failslab, interval 1, probability 0, space 0, times 0 [ 259.970692][ T6752] veth0_macvtap: entered promiscuous mode [ 259.997816][ T7100] CPU: 0 PID: 7100 Comm: syz.1.187 Not tainted syzkaller #0 [ 260.005214][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 260.015316][ T7100] Call Trace: [ 260.018640][ T7100] [ 260.021612][ T7100] dump_stack_lvl+0x18c/0x250 [ 260.026356][ T7100] ? show_regs_print_info+0x20/0x20 [ 260.031608][ T7100] ? load_image+0x420/0x420 [ 260.036174][ T7100] ? __might_sleep+0xe0/0xe0 [ 260.040825][ T7100] ? __lock_acquire+0x7eb0/0x7eb0 [ 260.045909][ T7100] ? mark_lock+0x94/0x320 [ 260.050320][ T7100] should_fail_ex+0x394/0x4c0 [ 260.055100][ T7100] should_failslab+0x9/0x20 [ 260.059663][ T7100] slab_pre_alloc_hook+0x59/0x300 [ 260.064752][ T7100] kmem_cache_alloc+0x5a/0x2d0 [ 260.069556][ T7100] ? mas_alloc_nodes+0x2f8/0x8c0 [ 260.074557][ T7100] mas_alloc_nodes+0x2f8/0x8c0 [ 260.079400][ T7100] mas_preallocate+0xa1f/0x1170 [ 260.084306][ T7100] ? lockdep_softirqs_off+0x440/0x440 [ 260.089732][ T7100] ? mas_destroy+0x20a0/0x20a0 [ 260.094571][ T7100] ? vma_iter_config+0xe6/0x270 [ 260.099485][ T7100] __split_vma+0x2dd/0xc20 [ 260.103975][ T7100] ? mmap_write_unlock+0x160/0x160 [ 260.109180][ T7100] do_vmi_align_munmap+0x3a3/0x16a0 [ 260.114461][ T7100] ? do_vmi_munmap+0x2d0/0x2d0 [ 260.119328][ T7100] ? mtree_range_walk+0x68c/0x7b0 [ 260.122541][ T6752] veth1_macvtap: entered promiscuous mode [ 260.124422][ T7100] ? mas_find_setup+0x47f/0x590 [ 260.135140][ T7100] do_vmi_munmap+0x252/0x2d0 [ 260.139795][ T7100] __vm_munmap+0x19e/0x3c0 [ 260.144258][ T7100] ? vm_munmap+0x20/0x20 [ 260.148562][ T7100] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 260.154589][ T7100] ? syscall_enter_from_user_mode+0x25/0x80 [ 260.160522][ T7100] __x64_sys_munmap+0x60/0x70 [ 260.165239][ T7100] do_syscall_64+0x55/0xb0 [ 260.169691][ T7100] ? clear_bhb_loop+0x40/0x90 [ 260.174428][ T7100] ? clear_bhb_loop+0x40/0x90 [ 260.179139][ T7100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.185083][ T7100] RIP: 0033:0x7fc704ba8f19 [ 260.189528][ T7100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.209179][ T7100] RSP: 002b:00007fc705a86028 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 260.217632][ T7100] RAX: ffffffffffffffda RBX: 00007fc704e26090 RCX: 00007fc704ba8f19 [ 260.225636][ T7100] RDX: 0000000000000000 RSI: 0000000000c5059c RDI: 00007fc7027d6000 [ 260.233651][ T7100] RBP: 00007fc704c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 260.241733][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.249751][ T7100] R13: 00007fc704e26128 R14: 00007fc704e26090 R15: 00007fff01dcfe58 [ 260.257772][ T7100] [ 260.286945][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.311820][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.331809][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.353056][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.427193][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.452760][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.480362][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.574174][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.673161][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.916156][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.099194][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.201582][ T6752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.301897][ T6752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.341675][ T6752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.352881][ T6752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.362015][ T6752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.472149][ T6752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.521797][ T6752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.569664][ T6448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.613268][ T6448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.786605][ T7111] loop3: detected capacity change from 0 to 32768 [ 262.800094][ T7111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.191 (7111) [ 262.868898][ T7111] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 262.879653][ T7111] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 262.888539][ T7111] BTRFS info (device loop3): setting nodatasum [ 262.894756][ T7111] BTRFS info (device loop3): force zlib compression, level 3 [ 262.902611][ T7111] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 262.913222][ T7111] BTRFS info (device loop3): use lzo compression, level 0 [ 262.920665][ T7111] BTRFS info (device loop3): turning on flush-on-commit [ 262.927750][ T7111] BTRFS info (device loop3): enabling auto defrag [ 262.935142][ T7111] BTRFS info (device loop3): max_inline at 4096 [ 262.941627][ T7111] BTRFS info (device loop3): using free space tree [ 263.175790][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.205447][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.420178][ T7111] BTRFS info (device loop3): enabling ssd optimizations [ 264.040652][ T27] audit: type=1800 audit(1794293640.924:2): pid=7111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.191" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 264.224062][ T7149] loop1: detected capacity change from 0 to 256 [ 268.480908][ T5796] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 268.593920][ T7178] loop1: detected capacity change from 0 to 512 [ 268.687323][ T7178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.745226][ T7178] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 268.790328][ T7178] EXT4-fs (loop1): orphan cleanup on readonly fs [ 268.796784][ T7178] EXT4-fs error (device loop1): ext4_orphan_get:1434: comm syz.1.198: bad orphan inode 15 [ 268.877491][ T7178] ext4_test_bit(bit=14, block=5) = 0 [ 268.941024][ T7178] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 270.968374][ T7184] sctp: failed to load transform for md5: -2 [ 270.998945][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.473901][ T5798] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 273.605359][ T7217] bridge_slave_0: left allmulticast mode [ 273.611861][ T7217] bridge_slave_0: left promiscuous mode [ 273.628466][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.648078][ T7217] bridge_slave_1: left allmulticast mode [ 273.654862][ T7217] bridge_slave_1: left promiscuous mode [ 273.665418][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.681362][ T7217] bond0: (slave bond_slave_0): Releasing backup interface [ 273.715942][ T7217] bond0: (slave bond_slave_1): Releasing backup interface [ 273.783926][ T7217] team0: Port device team_slave_0 removed [ 273.872185][ T7217] team0: Port device team_slave_1 removed [ 273.931704][ T27] audit: type=1326 audit(1794293650.837:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 273.933740][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.007779][ T27] audit: type=1326 audit(1794293650.867:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.041878][ T27] audit: type=1326 audit(1794293650.867:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.069304][ T27] audit: type=1326 audit(1794293650.867:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.096663][ T27] audit: type=1326 audit(1794293650.867:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.122751][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.181960][ T7217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.266832][ T27] audit: type=1326 audit(1794293650.867:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.292853][ T7217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.572020][ T27] audit: type=1326 audit(1794293650.867:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.604521][ T27] audit: type=1326 audit(1794293650.867:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5b536974e code=0x7ffc0000 [ 274.639774][ T27] audit: type=1326 audit(1794293650.867:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb5b536974e code=0x7ffc0000 [ 274.665304][ T27] audit: type=1326 audit(1794293650.867:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.0.211" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7ffc0000 [ 274.737627][ T7220] team0: Port device xfrm0 added [ 274.746192][ T7221] tipc: Started in network mode [ 274.757121][ T7221] tipc: Node identity 1e45f4f64603, cluster identity 4711 [ 274.764767][ T7221] tipc: Enabled bearer , priority 0 [ 275.888546][ T7239] loop4: detected capacity change from 0 to 256 [ 275.900088][ T28] tipc: Node number set to 1481045238 [ 277.667983][ T7256] process 'syz.3.209' launched './file0' with NULL argv: empty string added [ 279.403634][ T7262] jffs2: notice: (7262) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 279.652279][ T5798] Bluetooth: hci3: unexpected event 0x0e length: 0 < 3 [ 280.416419][ T7276] block2mtd: error: cannot open device /dev/loop0 [ 281.184587][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 281.184603][ T27] audit: type=1326 audit(1794293658.087:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 281.307346][ T27] audit: type=1326 audit(1794293658.087:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 281.526665][ T27] audit: type=1326 audit(1794293658.087:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 282.219009][ T27] audit: type=1326 audit(1794293658.087:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 282.379301][ T27] audit: type=1326 audit(1794293658.087:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 282.503096][ T27] audit: type=1326 audit(1794293658.127:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 283.276206][ T27] audit: type=1326 audit(1794293658.127:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 284.236850][ T27] audit: type=1326 audit(1794293658.177:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fe0f6974e code=0x7ffc0000 [ 284.584601][ T27] audit: type=1326 audit(1794293658.177:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fe0f6974e code=0x7ffc0000 [ 284.719608][ T7303] loop4: detected capacity change from 0 to 1024 [ 284.828580][ T27] audit: type=1326 audit(1794293658.177:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7280 comm="syz.4.216" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 286.611257][ T7303] hfsplus: catalog searching failed [ 290.255118][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 290.255157][ T27] audit: type=1800 audit(1794293667.137:60): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.223" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 291.577513][ T5900] IPVS: starting estimator thread 0... [ 291.717528][ T7339] IPVS: using max 26 ests per chain, 62400 per kthread [ 291.856615][ T5798] Bluetooth: hci3: unexpected event 0x0e length: 0 < 3 [ 292.807782][ T27] audit: type=1326 audit(1794293669.717:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.0.226" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5b53a8f19 code=0x0 [ 309.683420][ T7470] loop3: detected capacity change from 0 to 256 [ 311.631896][ T27] audit: type=1800 audit(1794293688.537:62): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.249" name="zoned" dev="configfs" ino=11857 res=0 errno=0 [ 311.934693][ T27] audit: type=1800 audit(1794293688.667:63): pid=7467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.249" name="power" dev="configfs" ino=12333 res=0 errno=0 [ 312.004662][ T7467] null_blk: disk nullb1 created [ 316.233010][ T7509] UBIFS error (pid: 7509): cannot open "(null)", error -22 [ 317.313157][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.329023][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.757929][ T5798] Bluetooth: hci2: unexpected event 0x0e length: 0 < 3 [ 328.085853][ T5798] Bluetooth: hci1: unexpected event 0x0e length: 0 < 3 [ 329.972218][ T7606] syz.4.274 (7606) used greatest stack depth: 19528 bytes left [ 332.086094][ T27] audit: type=1326 audit(1794293708.987:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7609 comm="syz.3.275" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03f07a8f19 code=0x0 [ 334.778086][ T7644] UBIFS error (pid: 7644): cannot open "(null)", error -22 [ 335.447268][ T28] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 335.684388][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 335.709465][ T28] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.740558][ T28] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 336.050275][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.658386][ T28] usb 2-1: config 0 descriptor?? [ 337.277507][ T7655] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.285452][ T7655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.293134][ T7655] IPv6: NLM_F_CREATE should be set when creating new route [ 338.252155][ T28] hub 2-1:0.0: USB hub found [ 338.403208][ T28] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 338.427903][ T28] usbhid 2-1:0.0: can't add hid device: -71 [ 338.434958][ T28] usbhid: probe of 2-1:0.0 failed with error -71 [ 338.488529][ T28] usb 2-1: USB disconnect, device number 2 [ 338.501180][ T7662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.555074][ T7665] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 340.615239][ T5098] Bluetooth: hci1: command 0x0406 tx timeout [ 342.926198][ T7689] loop1: detected capacity change from 0 to 8 [ 343.004190][ T7688] loop3: detected capacity change from 0 to 2048 [ 343.561297][ T7691] SQUASHFS error: Failed to read block 0x4de: -5 [ 343.572927][ T7691] SQUASHFS error: Failed to read block 0x4de: -5 [ 343.590308][ T27] audit: type=1800 audit(1794293720.487:65): pid=7691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.296" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 343.947341][ T7648] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 344.731746][ T7702] loop3: detected capacity change from 0 to 512 [ 344.752811][ T7702] EXT4-fs error (device loop3): ext4_iget_extra_inode:4752: inode #15: comm syz.3.299: corrupted in-inode xattr: invalid ea_ino [ 344.776709][ T7702] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.299: couldn't read orphan inode 15 (err -117) [ 344.796141][ T7702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.517739][ T27] audit: type=1326 audit(1794293722.327:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 345.658308][ T27] audit: type=1326 audit(1794293722.337:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 345.779620][ T27] audit: type=1326 audit(1794293722.357:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 345.841058][ T7715] netlink: 'syz.4.300': attribute type 30 has an invalid length. [ 345.894283][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.936215][ T27] audit: type=1326 audit(1794293722.357:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 346.822874][ T7705] sctp: failed to load transform for md5: -2 [ 346.841075][ T27] audit: type=1326 audit(1794293722.367:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 346.897150][ T27] audit: type=1326 audit(1794293722.377:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 347.037891][ T27] audit: type=1326 audit(1794293722.377:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 347.183597][ T27] audit: type=1326 audit(1794293722.387:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 347.284568][ T27] audit: type=1326 audit(1794293722.387:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7708 comm="syz.4.300" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 347.310129][ T7725] xt_policy: too many policy elements [ 352.247587][ T7752] netlink: 64 bytes leftover after parsing attributes in process `syz.3.310'. [ 360.893317][ T7793] bridge1: entered promiscuous mode [ 372.432087][ T7843] loop1: detected capacity change from 0 to 32768 [ 372.646950][ T7843] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 373.076865][ T7843] XFS (loop1): Ending clean mount [ 373.101416][ T7843] XFS (loop1): Quotacheck needed: Please wait. [ 373.292494][ T7843] XFS (loop1): Quotacheck: Done. [ 373.480199][ T7862] loop3: detected capacity change from 0 to 512 [ 373.982111][ T7862] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 374.166240][ T7862] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.334: invalid indirect mapped block 256 (level 1) [ 374.273634][ T7862] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.334: invalid indirect mapped block 2683928664 (level 1) [ 374.300752][ T7862] EXT4-fs (loop3): 1 truncate cleaned up [ 374.308484][ T7862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.325954][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.340495][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 379.708992][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.773798][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.123867][ T7913] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 382.928673][ T5798] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 384.405758][ T7940] bridge_slave_0: left allmulticast mode [ 384.441629][ T7940] bridge_slave_0: left promiscuous mode [ 384.474428][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.588606][ T7940] bridge_slave_1: left allmulticast mode [ 384.597790][ T7940] bridge_slave_1: left promiscuous mode [ 384.607542][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.643969][ T7952] loop1: detected capacity change from 0 to 512 [ 384.671717][ T7952] EXT4-fs error (device loop1): ext4_iget_extra_inode:4752: inode #15: comm syz.1.353: corrupted in-inode xattr: invalid ea_ino [ 384.698797][ T7952] EXT4-fs error (device loop1): ext4_orphan_get:1413: comm syz.1.353: couldn't read orphan inode 15 (err -117) [ 384.717790][ T7940] bond0: (slave bond_slave_0): Releasing backup interface [ 384.731741][ T7952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.773165][ T7940] bond0: (slave bond_slave_1): Releasing backup interface [ 384.893392][ T7940] team0: Port device team_slave_0 removed [ 384.979645][ T7940] team0: Port device team_slave_1 removed [ 385.015034][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.022718][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.032461][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.040566][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.564897][ T7946] team0: Port device xfrm0 added [ 385.609893][ T7949] tipc: Started in network mode [ 385.614916][ T7949] tipc: Node identity 36770c20397d, cluster identity 4711 [ 385.669483][ T7949] tipc: Enabled bearer , priority 0 [ 385.776598][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.933399][ T7966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.358'. [ 386.673577][ T5913] tipc: Node number set to 252316704 [ 386.679753][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 386.679768][ T27] audit: type=1326 audit(1794293763.437:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc704ba8f19 code=0x7ffc0000 [ 386.757199][ T27] audit: type=1326 audit(1794293763.457:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc704ba8f19 code=0x7ffc0000 [ 386.817295][ T27] audit: type=1326 audit(1794293763.477:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc704ba8f19 code=0x7ffc0000 [ 386.884820][ T27] audit: type=1326 audit(1794293763.477:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc704ba8f19 code=0x7ffc0000 [ 386.966682][ T27] audit: type=1326 audit(1794293763.487:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc704ba8f19 code=0x7ffc0000 [ 387.017778][ T27] audit: type=1326 audit(1794293763.507:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc704ba8bab code=0x7ffc0000 [ 387.041980][ T27] audit: type=1326 audit(1794293763.507:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc704ba8bab code=0x7ffc0000 [ 387.079894][ T27] audit: type=1326 audit(1794293763.507:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc704ba8bab code=0x7ffc0000 [ 387.110085][ T27] audit: type=1326 audit(1794293763.507:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc704ba8bab code=0x7ffc0000 [ 387.139046][ T27] audit: type=1326 audit(1794293763.547:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7968 comm="syz.1.359" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc704ba8bab code=0x7ffc0000 [ 387.722023][ T7984] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[7985] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[7984] [ 392.745462][ T8010] bridge_slave_0: left allmulticast mode [ 392.752225][ T8010] bridge_slave_0: left promiscuous mode [ 392.758548][ T8010] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.777782][ T8010] bridge_slave_1: left allmulticast mode [ 392.783530][ T8010] bridge_slave_1: left promiscuous mode [ 392.798385][ T8010] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.830058][ T8010] bond0: (slave bond_slave_0): Releasing backup interface [ 392.852763][ T8010] bond0: (slave bond_slave_1): Releasing backup interface [ 393.117157][ T8010] team0: Port device team_slave_0 removed [ 395.228924][ T8010] team0: Port device team_slave_1 removed [ 395.252846][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.261967][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.998859][ T8010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.006345][ T8010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.427251][ T8041] loop3: detected capacity change from 0 to 32768 [ 397.503251][ T8013] team0: Port device xfrm0 added [ 397.602779][ T8041] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 397.654032][ T8041] XFS (loop3): Ending clean mount [ 397.674542][ T8041] XFS (loop3): Quotacheck needed: Please wait. [ 397.684864][ T8015] tipc: Started in network mode [ 397.715378][ T8015] tipc: Node identity 0256eca07085, cluster identity 4711 [ 397.766480][ T8015] tipc: Enabled bearer , priority 0 [ 397.837546][ T8041] XFS (loop3): Quotacheck: Done. [ 398.262230][ T5798] Bluetooth: hci3: unexpected event for opcode 0x040d [ 398.887299][ T28] tipc: Node number set to 1926491296 [ 399.042413][ T5796] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 401.305318][ T8070] loop3: detected capacity change from 0 to 16 [ 402.249042][ T8070] erofs: (device loop3): mounted with root inode @ nid 36. [ 406.815533][ T8098] fuse: Bad value for 'fd' [ 416.292375][ T8146] loop1: detected capacity change from 0 to 128 [ 416.511273][ T8146] FAT-fs (loop1): Directory bread(block 1048) failed [ 416.577189][ T8146] FAT-fs (loop1): Directory bread(block 1049) failed [ 416.604804][ T8146] FAT-fs (loop1): Directory bread(block 1050) failed [ 416.631669][ T8146] FAT-fs (loop1): Directory bread(block 1051) failed [ 416.652561][ T8146] FAT-fs (loop1): Directory bread(block 1052) failed [ 416.690555][ T8146] FAT-fs (loop1): Directory bread(block 1053) failed [ 416.724179][ T8146] FAT-fs (loop1): Directory bread(block 1054) failed [ 416.768171][ T8146] FAT-fs (loop1): Directory bread(block 1055) failed [ 417.899823][ T8160] FAT-fs (loop1): Directory bread(block 1048) failed [ 417.907064][ T8160] FAT-fs (loop1): Directory bread(block 1049) failed [ 421.837710][ T8182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 421.913912][ T8182] bond0: entered promiscuous mode [ 421.966152][ T8182] macvlan2: entered promiscuous mode [ 421.988823][ T8182] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 422.043974][ T8182] bond0: left promiscuous mode [ 422.297798][ T27] kauditd_printk_skb: 61 callbacks suppressed [ 422.297816][ T27] audit: type=1326 audit(1794293799.167:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8177 comm="syz.0.397" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5b53a8f19 code=0x7fc00000 [ 424.139264][ T5798] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 426.958524][ T8208] overlayfs: failed to resolve './bus': -2 [ 429.827774][ T5798] Bluetooth: hci2: unexpected event for opcode 0x040d [ 430.169168][ T5798] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 430.313433][ T8238] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 431.165125][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 437.858423][ T27] audit: type=1326 audit(1794293814.767:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 438.156303][ T27] audit: type=1326 audit(1794293814.807:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 438.983170][ T27] audit: type=1326 audit(1794293814.807:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 439.011840][ T27] audit: type=1326 audit(1794293814.807:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 439.107658][ T27] audit: type=1326 audit(1794293814.807:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8bab code=0x7ffc0000 [ 439.170394][ T27] audit: type=1326 audit(1794293814.807:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8bab code=0x7ffc0000 [ 439.429518][ T27] audit: type=1326 audit(1794293814.807:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8bab code=0x7ffc0000 [ 440.164634][ T27] audit: type=1326 audit(1794293814.817:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8bab code=0x7ffc0000 [ 440.194238][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.194677][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.224412][ T8307] program syz.3.440 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.947510][ T27] audit: type=1326 audit(1794293814.817:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8bab code=0x7ffc0000 [ 442.009991][ T27] audit: type=1326 audit(1794293814.827:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.4.435" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9fe0fa8bab code=0x7ffc0000 [ 448.967514][ T8376] mmap: syz.0.454 (8376) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 452.320711][ T8394] loop3: detected capacity change from 0 to 512 [ 452.331211][ T8394] EXT4-fs error (device loop3): __ext4_iget:5117: inode #2: block 131072: comm syz.3.460: invalid block [ 452.378040][ T8394] EXT4-fs (loop3): get root inode failed [ 452.387212][ T8394] EXT4-fs (loop3): mount failed [ 454.081593][ T8408] loop3: detected capacity change from 0 to 128 [ 455.771259][ T8422] block device autoloading is deprecated and will be removed. [ 455.787156][ T8422] md: md0 stopped. [ 456.591356][ T8425] loop1: detected capacity change from 0 to 512 [ 460.734241][ T8447] loop1: detected capacity change from 0 to 512 [ 461.642800][ T8447] EXT4-fs error (device loop1): __ext4_iget:5117: inode #2: block 131072: comm syz.1.474: invalid block [ 461.736068][ T8447] EXT4-fs (loop1): get root inode failed [ 461.777380][ T8447] EXT4-fs (loop1): mount failed [ 462.219496][ T8460] loop1: detected capacity change from 0 to 128 [ 465.284904][ T8475] loop1: detected capacity change from 0 to 512 [ 465.340587][ T8454] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 466.411893][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 466.411911][ T27] audit: type=1326 audit(1794293843.127:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.4.483" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fe0fa8f19 code=0x0 [ 467.113405][ T8483] loop3: detected capacity change from 0 to 8 [ 468.519757][ T8487] loop3: detected capacity change from 0 to 1024 [ 468.575908][ T8487] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 468.650961][ T8487] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 468.720719][ T8487] EXT4-fs (loop3): invalid journal inode [ 468.726771][ T8487] EXT4-fs (loop3): can't get journal size [ 468.739982][ T8487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.480786][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.332605][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.541925][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 478.297898][ T8548] loop1: detected capacity change from 0 to 128 [ 481.356308][ T8560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.504'. [ 482.338955][ T8564] bridge0: port 3(syz_tun) entered blocking state [ 482.345639][ T8564] bridge0: port 3(syz_tun) entered disabled state [ 482.377448][ T8564] syz_tun: entered allmulticast mode [ 482.401894][ T8564] syz_tun: entered promiscuous mode [ 482.420937][ T8564] bridge0: port 3(syz_tun) entered blocking state [ 482.427762][ T8564] bridge0: port 3(syz_tun) entered forwarding state [ 482.507385][ T8564] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 482.612388][ T8564] bridge0: port 3(syz_tun) entered disabled state [ 482.681772][ T8564] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.713649][ T8564] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.688559][ T27] audit: type=1800 audit(1794293861.587:218): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.508" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 486.312620][ T8587] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5796] was attempted by "ci2-linux-6-6-kasan/syz-executor exec"[8587] [ 486.331337][ T5798] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 486.367010][ C1] hrtimer: interrupt took 51472 ns [ 486.496762][ T27] audit: type=1326 audit(1794293863.397:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.573703][ T27] audit: type=1326 audit(1794293863.427:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.633166][ T27] audit: type=1326 audit(1794293863.427:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.683539][ T27] audit: type=1326 audit(1794293863.427:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.737219][ T27] audit: type=1326 audit(1794293863.427:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.783960][ T27] audit: type=1326 audit(1794293863.427:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.846939][ T27] audit: type=1326 audit(1794293863.427:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 486.945870][ T27] audit: type=1326 audit(1794293863.427:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fe0f6974e code=0x7ffc0000 [ 487.167699][ T27] audit: type=1326 audit(1794293863.437:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fe0f6974e code=0x7ffc0000 [ 489.856752][ T27] audit: type=1326 audit(1794293863.437:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 489.881020][ T27] audit: type=1326 audit(1794293863.437:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 489.905537][ T27] audit: type=1326 audit(1794293863.437:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 489.939495][ T27] audit: type=1326 audit(1794293863.437:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 490.058387][ T27] audit: type=1326 audit(1794293863.437:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 490.082566][ T27] audit: type=1326 audit(1794293863.437:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 490.127130][ T27] audit: type=1326 audit(1794293863.437:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 490.207378][ T27] audit: type=1326 audit(1794293863.447:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 490.249348][ T8607] loop1: detected capacity change from 0 to 4096 [ 490.272301][ T27] audit: type=1326 audit(1794293863.447:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 490.307075][ T8611] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 491.109889][ T27] audit: type=1326 audit(1794293863.457:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8590 comm="syz.4.511" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9fe0fa8f19 code=0x7ffc0000 [ 491.415335][ T8617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 491.658819][ T8621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.521'. [ 492.163720][ T8627] ip6t_REJECT: ECHOREPLY is not supported [ 498.927793][ T5798] Bluetooth: hci3: unexpected event for opcode 0x2003 [ 502.034003][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.040995][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.085881][ T8687] loop1: detected capacity change from 0 to 8192 [ 502.103774][ T8687] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ0xffffffffffffffff" or missing value [ 503.718422][ T8702] FAULT_INJECTION: forcing a failure. [ 503.718422][ T8702] name failslab, interval 1, probability 0, space 0, times 0 [ 503.787122][ T8702] CPU: 1 PID: 8702 Comm: syz.1.549 Not tainted syzkaller #0 [ 503.794531][ T8702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 503.804678][ T8702] Call Trace: [ 503.808006][ T8702] [ 503.810981][ T8702] dump_stack_lvl+0x18c/0x250 [ 503.815744][ T8702] ? show_regs_print_info+0x20/0x20 [ 503.821003][ T8702] ? load_image+0x420/0x420 [ 503.825560][ T8702] ? __lock_acquire+0x7eb0/0x7eb0 [ 503.830653][ T8702] should_fail_ex+0x394/0x4c0 [ 503.835395][ T8702] should_failslab+0x9/0x20 [ 503.839946][ T8702] slab_pre_alloc_hook+0x59/0x300 [ 503.845025][ T8702] kmem_cache_alloc_lru+0x4d/0x2c0 [ 503.850212][ T8702] ? __d_alloc+0x31/0x710 [ 503.854600][ T8702] ? __might_sleep+0xe0/0xe0 [ 503.859255][ T8702] __d_alloc+0x31/0x710 [ 503.863464][ T8702] ? hashlen_string+0x54/0x110 [ 503.868293][ T8702] d_alloc_name+0xbb/0x320 [ 503.872768][ T8702] ? d_alloc_pseudo+0x70/0x70 [ 503.877491][ T8702] ? down_write+0x16e/0x200 [ 503.882135][ T8702] ? down_read_killable+0x340/0x340 [ 503.887421][ T8702] ? do_raw_spin_unlock+0x121/0x230 [ 503.892681][ T8702] ? _raw_spin_unlock+0x28/0x40 [ 503.897569][ T8702] devpts_fill_super+0x559/0x8e0 [ 503.902551][ T8702] ? devpts_kill_sb+0x70/0x70 [ 503.907283][ T8702] mount_nodev+0x56/0xf0 [ 503.911561][ T8702] legacy_get_tree+0xea/0x180 [ 503.916269][ T8702] ? devpts_pty_kill+0x290/0x290 [ 503.921248][ T8702] vfs_get_tree+0x8c/0x280 [ 503.925695][ T8702] do_new_mount+0x24a/0xa60 [ 503.930244][ T8702] __se_sys_mount+0x2e7/0x3d0 [ 503.934954][ T8702] ? __x64_sys_mount+0xc0/0xc0 [ 503.939761][ T8702] ? lockdep_hardirqs_on+0x98/0x150 [ 503.944982][ T8702] ? __x64_sys_mount+0x20/0xc0 [ 503.949785][ T8702] do_syscall_64+0x55/0xb0 [ 503.954239][ T8702] ? clear_bhb_loop+0x40/0x90 [ 503.958952][ T8702] ? clear_bhb_loop+0x40/0x90 [ 503.963671][ T8702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 503.969601][ T8702] RIP: 0033:0x7fc704ba8f19 [ 503.974064][ T8702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.993739][ T8702] RSP: 002b:00007fc705aa7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 504.002195][ T8702] RAX: ffffffffffffffda RBX: 00007fc704e25fa0 RCX: 00007fc704ba8f19 [ 504.010199][ T8702] RDX: 0000200000000680 RSI: 0000200000000840 RDI: 0000000000000000 [ 504.018209][ T8702] RBP: 00007fc704c37f6d R08: 0000000000000000 R09: 0000000000000000 [ 504.026233][ T8702] R10: 00000000022008d0 R11: 0000000000000246 R12: 0000000000000000 [ 504.034232][ T8702] R13: 00007fc704e26038 R14: 00007fc704e25fa0 R15: 00007fff01dcfe58 [ 504.042354][ T8702] [ 504.065646][ T8702] devpts: Unable to alloc dentry for ptmx node [ 504.864722][ T8708] loop3: detected capacity change from 0 to 4096 [ 505.100650][ T8711] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 516.312752][ T8754] ip_tables: iptables: counters copy to user failed while replacing table [ 517.743494][ T8765] ecryptfs_parse_options: eCryptfs doesn't support cipher: aes [ 517.751717][ T8765] Error parsing options; rc = [-22] [ 518.358286][ T8765] vlan0: entered promiscuous mode [ 518.372652][ T8765] team0: Device vlan0 is of different type [ 524.458192][ T8821] capability: warning: `syz.0.567' uses 32-bit capabilities (legacy support in use) [ 525.829160][ T8819] netlink: 16 bytes leftover after parsing attributes in process `syz.1.569'. [ 528.649097][ T8841] loop1: detected capacity change from 0 to 8 [ 530.451736][ T8849] tipc: Resetting bearer [ 530.500549][ T8849] tipc: Resetting bearer [ 531.371610][ T6464] tipc: Resetting bearer [ 535.616738][ T8878] syz.0.582 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 538.198557][ T8897] loop3: detected capacity change from 0 to 512 [ 538.829513][ T8897] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 538.901449][ T8897] EXT4-fs (loop3): 1 truncate cleaned up [ 538.912076][ T8897] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 539.588379][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 539.588407][ T27] audit: type=1800 audit(1700006407.060:248): pid=8905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.584" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 540.795916][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.793383][ T8920] jffs2: notice: (8920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 543.130300][ T8927] x_tables: ip_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 545.092254][ T8934] loop3: detected capacity change from 0 to 128 [ 545.101647][ T8934] FAT-fs (loop3): Directory bread(block 1048) failed [ 545.108998][ T8934] FAT-fs (loop3): Directory bread(block 1049) failed [ 545.115860][ T8934] FAT-fs (loop3): Directory bread(block 1050) failed [ 545.123159][ T8934] FAT-fs (loop3): Directory bread(block 1051) failed [ 545.130312][ T8934] FAT-fs (loop3): Directory bread(block 1052) failed [ 545.137383][ T8934] FAT-fs (loop3): Directory bread(block 1053) failed [ 545.144254][ T8934] FAT-fs (loop3): Directory bread(block 1054) failed [ 545.151787][ T8934] FAT-fs (loop3): Directory bread(block 1055) failed [ 545.505195][ T8937] FAT-fs (loop3): Directory bread(block 1048) failed [ 545.512310][ T8937] FAT-fs (loop3): Directory bread(block 1049) failed [ 552.512262][ T8998] bridge0: port 1(syz_tun) entered blocking state [ 552.522902][ T8998] bridge0: port 1(syz_tun) entered disabled state [ 552.534819][ T8998] syz_tun: entered allmulticast mode [ 552.545723][ T8998] syz_tun: entered promiscuous mode [ 552.555478][ T8998] bridge0: port 1(syz_tun) entered blocking state [ 552.562133][ T8998] bridge0: port 1(syz_tun) entered forwarding state [ 552.940049][ T8998] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 553.497387][ T8998] bridge0: port 1(syz_tun) entered disabled state [ 553.539818][ T8998] tipc: Resetting bearer [ 553.552956][ T8998] tipc: Resetting bearer [ 553.750102][ T2946] tipc: Resetting bearer [ 556.012240][ T9015] loop3: detected capacity change from 0 to 1024 [ 557.186872][ T9021] loop1: detected capacity change from 0 to 512 [ 557.208274][ T9021] EXT4-fs: Ignoring removed nobh option [ 557.285102][ T9021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.473309][ T9021] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 558.295079][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.589147][ T9062] loop1: detected capacity change from 0 to 32768 [ 562.422491][ T9062] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 562.623258][ T9062] XFS (loop1): Ending clean mount [ 562.645504][ T9062] XFS (loop1): Quotacheck needed: Please wait. [ 563.411438][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.418300][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.625963][ T9062] XFS (loop1): Quotacheck: Done. [ 564.723743][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 564.845862][ T9091] syz.3.640 uses obsolete (PF_INET,SOCK_PACKET) [ 567.323828][ T9102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 569.673154][ T9115] bridge0: port 1(syz_tun) entered blocking state [ 569.692904][ T9115] bridge0: port 1(syz_tun) entered disabled state [ 569.708882][ T9115] syz_tun: entered allmulticast mode [ 569.715859][ T9115] syz_tun: entered promiscuous mode [ 569.723182][ T9115] bridge0: port 1(syz_tun) entered blocking state [ 569.729814][ T9115] bridge0: port 1(syz_tun) entered forwarding state [ 569.770515][ T9115] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 569.842382][ T9115] bridge0: port 1(syz_tun) entered disabled state [ 569.859939][ T23] kernel write not supported for file /input/event2 (pid: 23 comm: kworker/1:0) [ 569.877410][ T9120] ip_tables: iptables: counters copy to user failed while replacing table [ 569.901734][ T9115] tipc: Resetting bearer [ 569.918614][ T9115] tipc: Resetting bearer [ 570.028406][ T6464] tipc: Resetting bearer [ 574.579934][ T9156] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 577.839352][ T9183] netlink: 'syz.0.661': attribute type 4 has an invalid length. [ 577.847671][ T9183] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.661'. [ 580.079326][ T9194] ip_tables: iptables: counters copy to user failed while replacing table [ 580.381323][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.434167][ T5871] wlan1: authenticate with 08:02:11:00:00:00 [ 580.473557][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.484872][ T5871] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 580.517428][ T137] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 580.534831][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.064943][ T6464] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 582.077305][ T6464] wlan1: authentication with 08:02:11:00:00:00 timed out [ 582.750520][ T9219] tty tty23: ldisc open failed (-12), clearing slot 22 [ 586.370274][ T9241] ip_tables: iptables: counters copy to user failed while replacing table [ 586.910141][ T9244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 593.449373][ T9298] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 596.461852][ T9307] ip_tables: iptables: counters copy to user failed while replacing table [ 597.286313][ T9309] ip_tables: iptables: counters copy to user failed while replacing table [ 597.855275][ T9313] md: array md0 already initialised! [ 598.493079][ T9318] md/raid10:md0: not enough operational mirrors. [ 598.524888][ T9318] md: pers->run() failed ... [ 598.911772][ T9334] xt_SECMARK: invalid mode: 2 [ 602.026789][ T9350] netlink: 'syz.0.701': attribute type 10 has an invalid length. [ 602.038808][ T9350] team0: Device virt_wifi0 is of different type [ 602.872360][ T9352] bond2: entered allmulticast mode [ 602.904252][ T9352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 602.967163][ T9356] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 602.978277][ T9356] macvlan2: entered allmulticast mode [ 602.983675][ T9356] bond0: entered allmulticast mode [ 603.002975][ T9356] bond2: (slave macvlan2): Enslaving as a backup interface with a down link [ 603.087258][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 603.126896][ T9352] ip6gretap1: entered allmulticast mode [ 603.144374][ T9352] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 603.179621][ T137] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 603.220868][ T9352] netlink: 14 bytes leftover after parsing attributes in process `syz.4.704'. [ 603.301487][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 603.324319][ T23] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 603.335280][ T50] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 603.348048][ T23] usb 2-1: config 0 has no interface number 0 [ 603.365884][ T23] usb 2-1: config 0 interface 184 has no altsetting 0 [ 603.413311][ T23] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 603.435997][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.461496][ T9352] bond0 (unregistering): left allmulticast mode [ 603.475324][ T23] usb 2-1: Product: syz [ 603.510531][ T23] usb 2-1: Manufacturer: syz [ 603.532955][ T23] usb 2-1: SerialNumber: syz [ 603.558083][ T9352] bond2: (slave macvlan2): Releasing backup interface [ 603.565228][ T9352] bond2: (slave macvlan2): the permanent HWaddr of slave - 3e:a6:4e:6b:ae:66 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 603.610939][ T23] usb 2-1: config 0 descriptor?? [ 603.621616][ T23] smsc75xx v1.0.0 [ 603.638905][ T9352] macvlan2 (unregistering): left allmulticast mode [ 603.772923][ T9352] bond0 (unregistering): Released all slaves [ 604.438710][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 604.474639][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 606.631115][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 606.674942][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 606.697268][ T23] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 606.710871][ T23] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 606.713285][ T9385] fuse: Bad value for 'fd' [ 606.724986][ T23] usb 2-1: USB disconnect, device number 3 [ 606.787232][ T9385] usb usb1: usbfs: process 9385 (syz.3.711) did not claim interface 0 before use [ 612.166874][ T9411] overlayfs: missing 'lowerdir' [ 612.375390][ T9419] loop3: detected capacity change from 0 to 128 [ 612.456247][ T9419] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.558551][ T9419] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.600705][ T9433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.718083][ T9433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.766585][ T9433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 615.814999][ T5796] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.741300][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 616.779632][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 616.790166][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 616.801933][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 616.811631][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 617.233024][ T27] audit: type=1326 audit(1700006484.710:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 617.300640][ T27] audit: type=1326 audit(1700006484.710:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 617.367115][ T27] audit: type=1326 audit(1700006484.740:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 617.438848][ T27] audit: type=1326 audit(1700006484.740:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 618.008719][ T27] audit: type=1326 audit(1700006484.740:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 619.664913][ T27] audit: type=1326 audit(1700006484.740:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 619.727757][ T27] audit: type=1326 audit(1700006484.740:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 619.797406][ T27] audit: type=1326 audit(1700006484.740:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 619.847044][ T27] audit: type=1326 audit(1700006484.750:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 619.897338][ T27] audit: type=1326 audit(1700006484.750:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9443 comm="syz.3.730" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03f07a8f19 code=0x7ffc0000 [ 621.798117][ T6435] ------------[ cut here ]------------ [ 621.804456][ T6435] WARNING: CPU: 0 PID: 6435 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.815924][ T6435] Modules linked in: [ 621.820332][ T6435] CPU: 0 PID: 6435 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 621.828519][ T6435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 621.838857][ T6435] Workqueue: phy9 ieee80211_csa_finalize_work [ 621.845003][ T6435] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.852441][ T6435] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 621.872259][ T6435] RSP: 0018:ffffc900036679b8 EFLAGS: 00010293 [ 621.879398][ C0] ------------[ cut here ]------------ [ 621.879433][ C0] WARNING: CPU: 0 PID: 6435 at net/mac80211/tx.c:5135 __ieee80211_beacon_get+0x1141/0x1520 [ 621.879472][ C0] Modules linked in: [ 621.879489][ C0] CPU: 0 PID: 6435 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 621.879513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 621.879529][ C0] Workqueue: phy9 ieee80211_csa_finalize_work [ 621.879556][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 621.879580][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 621.879600][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 621.879624][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff888032195a00 [ 621.879643][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.879662][ C0] RBP: 0000000000000000 R08: ffff888032195a00 R09: 0000000000000003 [ 621.879678][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b2da420 [ 621.879697][ C0] R13: ffff888066ff0c24 R14: ffff88805b2da910 R15: ffff888066ff0c00 [ 621.879714][ C0] FS: 0000000000000000(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 621.879734][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 621.879752][ C0] CR2: 00007f9fe1227dac CR3: 000000003066c000 CR4: 00000000003506f0 [ 621.879773][ C0] Call Trace: [ 621.879783][ C0] [ 621.879793][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 621.879831][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 621.879861][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 621.879897][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 621.879935][ C0] __iterate_interfaces+0x225/0x4c0 [ 621.879965][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 621.879994][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 621.880025][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 621.880054][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 621.880090][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 621.880115][ C0] ? hw_scan_work+0xf10/0xf10 [ 621.880141][ C0] __hrtimer_run_queues+0x525/0xc10 [ 621.880199][ C0] ? hrtimer_interrupt+0x980/0x980 [ 621.880224][ C0] ? read_tsc+0x9/0x20 [ 621.880258][ C0] hrtimer_run_softirq+0x177/0x290 [ 621.880291][ C0] handle_softirqs+0x27d/0x820 [ 621.880315][ C0] ? read_tsc+0x9/0x20 [ 621.880340][ C0] ? ktime_get+0x24b/0x280 [ 621.880372][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 621.880402][ C0] ? do_softirq+0x1a0/0x1a0 [ 621.880432][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 621.880468][ C0] __irq_exit_rcu+0xd3/0x190 [ 621.880494][ C0] ? irq_exit_rcu+0x20/0x20 [ 621.880528][ C0] irq_exit_rcu+0x9/0x20 [ 621.880550][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 621.880586][ C0] [ 621.880595][ C0] [ 621.880606][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.880640][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 621.880673][ C0] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 621.880693][ C0] RSP: 0018:ffffc90003667360 EFLAGS: 00000293 [ 621.880717][ C0] RAX: ffffffff816c4df8 RBX: ffffc900036674df RCX: ffff888032195a00 [ 621.880736][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.880751][ C0] RBP: ffffc900036674b0 R08: ffffffff92223507 R09: 1ffffffff24446a0 [ 621.880770][ C0] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffff8e8c2440 [ 621.880788][ C0] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 621.880814][ C0] ? console_flush_all+0x878/0xcf0 [ 621.880858][ C0] ? console_flush_all+0x10b/0xcf0 [ 621.880898][ C0] ? is_console_locked+0x20/0x20 [ 621.880929][ C0] ? lock_chain_count+0x20/0x20 [ 621.880961][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 621.880997][ C0] console_unlock+0xad/0x350 [ 621.881030][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 621.881057][ C0] ? vprintk_emit+0x53d/0x610 [ 621.881092][ C0] ? irq_work_queue+0xc3/0x140 [ 621.881126][ C0] vprintk_emit+0x497/0x610 [ 621.881159][ C0] ? printk_sprint+0x460/0x460 [ 621.881196][ C0] ? _printk+0xde/0x130 [ 621.881237][ C0] _printk+0xde/0x130 [ 621.881262][ C0] ? copy_from_kernel_nofault+0x194/0x2f0 [ 621.881302][ C0] ? load_image+0x420/0x420 [ 621.881325][ C0] ? show_opcodes+0x146/0x170 [ 621.881369][ C0] __show_regs+0x77/0x600 [ 621.881394][ C0] ? dump_stack_print_info+0xf5/0x150 [ 621.881428][ C0] show_regs+0x44/0x90 [ 621.881459][ C0] __warn+0x160/0x470 [ 621.881479][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.881519][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.881553][ C0] report_bug+0x2be/0x4f0 [ 621.881583][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.881635][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.881671][ C0] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 621.881707][ C0] handle_bug+0xcf/0x120 [ 621.881739][ C0] exc_invalid_op+0x1a/0x50 [ 621.881770][ C0] asm_exc_invalid_op+0x1a/0x20 [ 621.881800][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.881837][ C0] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 621.881856][ C0] RSP: 0018:ffffc900036679b8 EFLAGS: 00010293 [ 621.881880][ C0] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888032195a00 [ 621.881897][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 621.881912][ C0] RBP: dffffc0000000000 R08: ffff88805b2d960f R09: 1ffff1100b65b2c1 [ 621.881929][ C0] R10: dffffc0000000000 R11: ffffed100b65b2c2 R12: 0000000000000001 [ 621.881946][ C0] R13: ffff888026cdacd0 R14: ffff888026cdad48 R15: ffff88802fd9ca30 [ 621.881972][ C0] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 621.882015][ C0] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 621.882064][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 621.882106][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 621.882131][ C0] ? mutex_lock_nested+0x20/0x20 [ 621.882155][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 621.882191][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 621.882217][ C0] ? read_lock_is_recursive+0x20/0x20 [ 621.882255][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 621.882279][ C0] ? process_scheduled_works+0x975/0x1600 [ 621.882313][ C0] process_scheduled_works+0xa60/0x1600 [ 621.882376][ C0] ? worker_attach_to_pool+0x370/0x370 [ 621.882414][ C0] ? assign_work+0x3cc/0x5d0 [ 621.882451][ C0] worker_thread+0xa5e/0xfe0 [ 621.882511][ C0] kthread+0x2fa/0x390 [ 621.882535][ C0] ? pr_cont_work+0x550/0x550 [ 621.882566][ C0] ? kthread_blkcg+0xd0/0xd0 [ 621.882591][ C0] ret_from_fork+0x48/0x80 [ 621.882619][ C0] ? kthread_blkcg+0xd0/0xd0 [ 621.882644][ C0] ret_from_fork_asm+0x11/0x20 [ 621.882691][ C0] [ 621.882704][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 621.882715][ C0] CPU: 0 PID: 6435 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 621.882737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 621.882750][ C0] Workqueue: phy9 ieee80211_csa_finalize_work [ 621.882772][ C0] Call Trace: [ 621.882780][ C0] [ 621.882788][ C0] dump_stack_lvl+0x18c/0x250 [ 621.882820][ C0] ? show_regs_print_info+0x20/0x20 [ 621.882848][ C0] ? load_image+0x420/0x420 [ 621.882886][ C0] panic+0x2ca/0x720 [ 621.882912][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 621.882943][ C0] ? ret_from_fork_asm+0x11/0x20 [ 621.882976][ C0] __warn+0x2e0/0x470 [ 621.882995][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 621.883020][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 621.883042][ C0] report_bug+0x2be/0x4f0 [ 621.883069][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 621.883092][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 621.883113][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 621.883134][ C0] handle_bug+0xcf/0x120 [ 621.883161][ C0] exc_invalid_op+0x1a/0x50 [ 621.883199][ C0] asm_exc_invalid_op+0x1a/0x20 [ 621.883226][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 621.883248][ C0] Code: f7 4c 89 ef e8 90 08 b1 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 5b aa 72 f7 0f 0b e9 61 f8 ff ff e8 4f aa 72 f7 <0f> 0b e9 85 fb ff ff e8 43 aa 72 f7 48 c7 c7 a0 f3 66 8f 4c 89 e6 [ 621.883265][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 621.883283][ C0] RAX: ffffffff8a153451 RBX: dffffc0000000000 RCX: ffff888032195a00 [ 621.883299][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.883313][ C0] RBP: 0000000000000000 R08: ffff888032195a00 R09: 0000000000000003 [ 621.883326][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805b2da420 [ 621.883340][ C0] R13: ffff888066ff0c24 R14: ffff88805b2da910 R15: ffff888066ff0c00 [ 621.883364][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 621.883393][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 621.883435][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 621.883469][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 621.883496][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 621.883531][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 621.883566][ C0] __iterate_interfaces+0x225/0x4c0 [ 621.883593][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 621.883619][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 621.883649][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 621.883674][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 621.883707][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 621.883730][ C0] ? hw_scan_work+0xf10/0xf10 [ 621.883754][ C0] __hrtimer_run_queues+0x525/0xc10 [ 621.883800][ C0] ? hrtimer_interrupt+0x980/0x980 [ 621.883823][ C0] ? read_tsc+0x9/0x20 [ 621.883857][ C0] hrtimer_run_softirq+0x177/0x290 [ 621.883888][ C0] handle_softirqs+0x27d/0x820 [ 621.883910][ C0] ? read_tsc+0x9/0x20 [ 621.883931][ C0] ? ktime_get+0x24b/0x280 [ 621.883961][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 621.883988][ C0] ? do_softirq+0x1a0/0x1a0 [ 621.884015][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 621.884048][ C0] __irq_exit_rcu+0xd3/0x190 [ 621.884071][ C0] ? irq_exit_rcu+0x20/0x20 [ 621.884102][ C0] irq_exit_rcu+0x9/0x20 [ 621.884123][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 621.884156][ C0] [ 621.884163][ C0] [ 621.884172][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 621.884209][ C0] RIP: 0010:console_flush_all+0x883/0xcf0 [ 621.884237][ C0] Code: ed 01 00 00 e8 be 90 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 af 90 1b 00 eb 06 e8 a8 90 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 621.884256][ C0] RSP: 0018:ffffc90003667360 EFLAGS: 00000293 [ 621.884274][ C0] RAX: ffffffff816c4df8 RBX: ffffc900036674df RCX: ffff888032195a00 [ 621.884291][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 621.884309][ C0] RBP: ffffc900036674b0 R08: ffffffff92223507 R09: 1ffffffff24446a0 [ 621.884325][ C0] R10: dffffc0000000000 R11: fffffbfff24446a1 R12: ffffffff8e8c2440 [ 621.884342][ C0] R13: 1ffffffff1bf975c R14: ffffffff8e8c2498 R15: dffffc0000000000 [ 621.884366][ C0] ? console_flush_all+0x878/0xcf0 [ 621.884407][ C0] ? console_flush_all+0x10b/0xcf0 [ 621.884446][ C0] ? is_console_locked+0x20/0x20 [ 621.884472][ C0] ? lock_chain_count+0x20/0x20 [ 621.884502][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 621.884535][ C0] console_unlock+0xad/0x350 [ 621.884565][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 621.884590][ C0] ? vprintk_emit+0x53d/0x610 [ 621.884624][ C0] ? irq_work_queue+0xc3/0x140 [ 621.884654][ C0] vprintk_emit+0x497/0x610 [ 621.884684][ C0] ? printk_sprint+0x460/0x460 [ 621.884712][ C0] ? _printk+0xde/0x130 [ 621.884748][ C0] _printk+0xde/0x130 [ 621.884771][ C0] ? copy_from_kernel_nofault+0x194/0x2f0 [ 621.884808][ C0] ? load_image+0x420/0x420 [ 621.884829][ C0] ? show_opcodes+0x146/0x170 [ 621.884871][ C0] __show_regs+0x77/0x600 [ 621.884894][ C0] ? dump_stack_print_info+0xf5/0x150 [ 621.884926][ C0] show_regs+0x44/0x90 [ 621.884954][ C0] __warn+0x160/0x470 [ 621.884972][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.885008][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.885040][ C0] report_bug+0x2be/0x4f0 [ 621.885066][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.885098][ C0] ? ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.885130][ C0] ? ieee80211_vif_use_reserved_switch+0x1133/0x2950 [ 621.885162][ C0] handle_bug+0xcf/0x120 [ 621.885197][ C0] exc_invalid_op+0x1a/0x50 [ 621.885225][ C0] asm_exc_invalid_op+0x1a/0x20 [ 621.885250][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x1131/0x2950 [ 621.885283][ C0] Code: 48 89 df e8 61 02 c7 f7 e9 e7 fc ff ff e8 c7 f9 6d f7 eb 24 e8 c0 f9 6d f7 c7 04 24 f4 ff ff ff e9 d9 f5 ff ff e8 af f9 6d f7 <0f> 0b 0f 0b e9 c4 f5 ff ff e8 a1 f9 6d f7 48 8b 7c 24 08 4c 8b 74 [ 621.885301][ C0] RSP: 0018:ffffc900036679b8 EFLAGS: 00010293 [ 621.885316][ C0] RAX: ffffffff8a19e0f5 RBX: 0000000000000001 RCX: ffff888032195a00 [ 621.885328][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 621.885337][ C0] RBP: dffffc0000000000 R08: ffff88805b2d960f R09: 1ffff1100b65b2c1 [ 621.885350][ C0] R10: dffffc0000000000 R11: ffffed100b65b2c2 R12: 0000000000000001 [ 621.885361][ C0] R13: ffff888026cdacd0 R14: ffff888026cdad48 R15: ffff88802fd9ca30 [ 621.885379][ C0] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 621.885410][ C0] ? ieee80211_vif_use_reserved_switch+0xd35/0x2950 [ 621.885445][ C0] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 621.885474][ C0] ieee80211_csa_finalize+0x571/0xeb0 [ 621.885491][ C0] ? mutex_lock_nested+0x20/0x20 [ 621.885508][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 621.885528][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 621.885544][ C0] ? read_lock_is_recursive+0x20/0x20 [ 621.885570][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 621.885586][ C0] ? process_scheduled_works+0x975/0x1600 [ 621.885609][ C0] process_scheduled_works+0xa60/0x1600 [ 621.885652][ C0] ? worker_attach_to_pool+0x370/0x370 [ 621.885679][ C0] ? assign_work+0x3cc/0x5d0 [ 621.885707][ C0] worker_thread+0xa5e/0xfe0 [ 621.885748][ C0] kthread+0x2fa/0x390 [ 621.885764][ C0] ? pr_cont_work+0x550/0x550 [ 621.885785][ C0] ? kthread_blkcg+0xd0/0xd0 [ 621.885802][ C0] ret_from_fork+0x48/0x80 [ 621.885821][ C0] ? kthread_blkcg+0xd0/0xd0 [ 621.885838][ C0] ret_from_fork_asm+0x11/0x20 [ 621.885871][ C0] [ 621.886467][ C0] Kernel Offset: disabled