last executing test programs: 1m14.973177453s ago: executing program 0 (id=313): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9a82, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@usrquota}, {@nodelalloc}], [{@fsmagic={'fsmagic', 0x3d, 0x3}}, {@smackfshat={'smackfshat', 0x3d, '$:],-}\x12-\x0e)^\''}}, {@appraise_type}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, 'ext4\x00'}}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0) writev(r5, &(0x7f0000002a00), 0x0) sendfile(r1, r0, 0x0, 0xbc44) close(0xffffffffffffffff) 1m11.80537219s ago: executing program 0 (id=320): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) setxattr$incfs_id(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 1m7.496292245s ago: executing program 0 (id=323): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0xc, 0x0, 0x7, 0x400}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 1m2.059755356s ago: executing program 0 (id=333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x1, 0x9, 0x0, 0x8}, 0x20) fsopen(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r6, 0x400, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x6c) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r7, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x4000080) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) rt_tgsigqueueinfo(r0, r2, 0x28, &(0x7f0000000200)={0x2c, 0x4993, 0x8}) 57.392010119s ago: executing program 0 (id=341): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r5, 0x0, 0xd, 0xfffffffffffffffe) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400", @ANYRES16=r7, @ANYBLOB="0100000000000000400100000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x10001}}, 0x30) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f7769666930001a000000000900020073797a3200000000080041007278650014003300776732000000000000000000000000000900020073797a3100000000080041007369770014003300776c616e3000"/136], 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0xa6ffffff}, 0xc004) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) 56.313756236s ago: executing program 0 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0xc, 0x0, 0x7, 0x400}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 41.2601427s ago: executing program 32 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x1ff, 0xc, 0x0, 0x7, 0x400}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 9.961880058s ago: executing program 1 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x5000180) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r4, 0xe, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x890) socket$nl_xfrm(0x10, 0x3, 0x6) 9.958909908s ago: executing program 2 (id=407): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3add, &(0x7f0000000340)={0x0, 0xf5a6, 0x11900, 0x0, 0x4}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r3 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080)) timerfd_create(0x0, 0x0) read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x8}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r5 = openat$vimc2(0xffffff9c, &(0x7f0000001900), 0x2, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000001f00)={0x3}) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0xe1, 0x0, 0x0, @time={0x0, 0x1}, {}, {}, @note={0x0, 0x1, 0x2, 0xe, 0x49c3}}], 0x1c) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x2300, {}, {}, @raw32}], 0xffc8) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x24) 8.119886492s ago: executing program 1 (id=410): r0 = socket(0x10, 0x803, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1}) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r4 = getpid() mlock(&(0x7f00009a7000/0x4000)=nil, 0x4000) r5 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MTDFILEMODE(r5, 0x4d13, 0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r2) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x3, 0x1, 0x8, 0x9, 0xfffffffc, 0x1a000, 0x8, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.963259881s ago: executing program 3 (id=412): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000340)={0x1, &(0x7f0000000280)=[{0x5, 0x2, 0x4, 0x3}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5']) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000000200"], 0x44) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x0, 0x4, 0x88, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x5, &(0x7f0000000200)=[{}, {}, {}, {}, {}], &(0x7f0000000400)=""/136}, &(0x7f0000000580)=0x50) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000140)=0x0) tkill(r6, 0x18) 5.887299137s ago: executing program 3 (id=413): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) syz_mount_image$squashfs(&(0x7f0000000940), &(0x7f00000001c0)='./file1\x00', 0x2000000, &(0x7f0000000300)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYBLOB="948936eed32831d06fd034e3199ea2b26bf1c7cd04b162d88713d4d084b0160a42983eddf857099d0e42ab60a12476dcb87dd8598b6157d6cd8036357f4ee83d25e814a8871d7cbf63039c61da92750b326b19c870a09ebf1f75127cb8311a8fe505264abe55ec8168a2c3c9fc5f07d1580d6fce8a18e308ba6e64aa7eaafcf1a5e21cc8ce87d8f214d7a840860c0a9eb230801a459d40dd3ac64ad528ce8276ec544d2a5aee6653714991be8d1718c5781cd096af859a03f05ef7c2dd35686887d9c1199364f51f14c815ce6ce2950cfa6824f5f4cb4a27ec252cf9fa549cff351fc9bf0701488de3a1ab1c609e7501a172abebacb7ec0be1c91e62d0ae6c9313079b8a7cbe14ec6b2b196a1ed70b028dbe7dae48446a06d2aada1a7b963240c1a5aee0b6c900487c4de738ba42bd7bc76c9faf4292f6ae26912ba7b478e0216e871a3df9b71a579596313af7a140c475e0c9dd62be4d1e8305f3fe094d241e98e95d487d8bca85e192af9a7e6d3d2ab9221098783d2bcae43238e63e426b15e0a4e831b2a61e10878b9cc2029fcd441cadf41a57037bc1ae944585034d6a193dd4cee6ab41b1a7ecfdbb1ae626d6a158ddc8dd6f27488905952f2e468aed79431e6d181f7a7335629be7f0b26808d60e1f241660092577ae1cca8c72d155b8570dd3c7f4d97356859b7cf7d10ccaec02a60f57164aa817d90ad071e4fa2eb67edba2cdd276e2b61712ff41dee11b2bf451913fc118ce70d019dedefc5425", @ANYRESOCT, @ANYRES8, @ANYRESOCT], 0x1, 0x184, &(0x7f0000000700)="$eJzskL9OKkEUxr/ZXfbCLW4uya1oILlGsVCWRY2x0RJ7H0ACKxIX/7AkAqFYYgyFhbH0CXgNE19AC0Os6UwoqKwMZnbODsMzOL9iv51zvnPmnDkNroJfAL5m/SoOEGHiD14ZgwUgy0Rsagh9IH0jvReCF/IdUvyGNBN0e2cV3/daub0c0ovAnH3OBYD0BPsDA9Oo1XjWr/KfYwDcZQOoAR9pAKrHfLeii0QnIGMB/6Il5tLDHfywBqDQbl4Wgm5vo9Gs1L26d+66pR1ny3G23cJJw/cc8bVpL15Oq4DrOgD+XillhASAW/L8pnwMU0ajPFNrbeUN8/+xhIGU/I97MDzJ2vgeE8ARVpEEcB2yRXQsuliIViqDwaRD0VLmE65klNisXvi1IRhYXDaCJXsUJxhQge+5EyRkprQbxqMOSVdIy6Qj5Rk5WXs5YEUd7uiUD+MRW0Vu7CTj/p1Ku91ybfn3N4TSiN/6aCwv92xAo9FoNBqNRqPRaH463wEAAP//Mu15jw==") r1 = openat(0xffffffffffffff9c, 0x0, 0x80000, 0x1) open_by_handle_at(r1, 0x0, 0x40000) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="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", 0x173, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r2, 0x0, 0x58) 5.885299047s ago: executing program 2 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x2, 0x2, 0x1a, {0xa, 0x4e23, 0x9, @private1}}, 0xa0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r4, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}}}}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r6 = io_uring_setup(0xc1c, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}, {0x0}], 0x0}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0}, 0x20) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) capget(0x0, &(0x7f00000002c0)={0x6, 0xfff, 0x5, 0x1, 0xaff, 0x1000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.508284614s ago: executing program 2 (id=415): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BLKPG(r5, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x8000000, 0x1000, 0x1}}) socket(0x2b, 0x80801, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) setuid(0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=0x0, @ANYBLOB="0800b7003e000000080026001b17000008009f00000000000800a10004000000"], 0x3c}}, 0x8800) 3.508024294s ago: executing program 3 (id=416): syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x7e, 0x2fa, &(0x7f0000000000)="$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") 3.506101384s ago: executing program 1 (id=422): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) r5 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000009b80)={0x40000012}) read$FUSE(r4, &(0x7f0000000500)={0x2020}, 0x2020) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x2004, 0x0, 0x0, 0x0, 0x132, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c81968a19c5f20e62120d02200100000000", @ANYRES32=0x0, @ANYBLOB="312400000000000014002b8030001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x89b0, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000040)=@ethtool_eee={0x0, 0x1, 0xb, 0x2, 0x8, 0x2, 0x65, 0x2, [0x3, 0xc]}}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x9, 0xffffffffffffffff}, 0x0) mremap(&(0x7f00008cf000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f00008cf000/0x4000)=nil) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r8) sendmsg$IEEE802154_START_REQ(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 2.04112571s ago: executing program 2 (id=417): syz_emit_ethernet(0x7a, &(0x7f0000000540)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f2a400", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x22eb}, {}, {}, {}, {0x8, 0x22eb, 0x4}}}}}}}, 0x0) 2.02926574s ago: executing program 4 (id=363): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x1c8, 0x98, 0x98, 0x1c8, 0x260, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@loopback, @local, 0x0, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1d, 0x6, 0x8001}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) r4 = socket$inet(0x2, 0xc3207924066164b8, 0x100) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x4000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x3, 0x0, 0xffefffff}) socket$pptp(0x18, 0x1, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r6, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) memfd_create(&(0x7f0000000080)='kTL\x00', 0x6) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f00000004c0)=@ethtool_drvinfo={0x3, "1e7b534dc51b496df12d2eeb5221d10aed62064c9ef269655327cf83e16e92ad", "d352f19c55dd634c0498839a2e7a484a42ade30f4e96ebbb6bf0103eb9cc5b18", "ffabc3ab5d18e1e14b6cacaf85a54b0dd05e22e86c307d11f8fc7a068aa4fa32", "08ba4077a585d93e5743777a67fefe8e42b88b56c354da6b37e4a93d39224574", "7ed0d9c83c7389bada77d1961de264558198d6c47a372d0b42624da1bc7fc9b4", "45e71ff84c02010000365be6", 0x6, 0x15b, 0x6, 0x9, 0x5}}) preadv(r1, 0x0, 0x0, 0x0, 0x0) 1.965729082s ago: executing program 3 (id=418): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x29, 0xa}, 0x20) 1.941777032s ago: executing program 1 (id=419): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e000000000000000380000007000900000000ca75ffffff00000000000000002e"], 0x0, 0x46}, 0x28) 1.301949668s ago: executing program 3 (id=420): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x3010808, &(0x7f0000000040)={[{@nls={'nls', 0x3d, 'cp775'}}, {@nodecompose}, {@umask={'umask', 0x3d, 0x80010000}}, {@nobarrier}]}, 0x2, 0x60a, &(0x7f0000000f80)="$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") 1.233788749s ago: executing program 1 (id=421): syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_le_signaling={{0x14}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x10}, {0xffbd, 0xff46, [0x0, 0xd, 0x8e, 0x9, 0x4, 0x5]}}}}, 0x1d) 1.230978289s ago: executing program 4 (id=423): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000580), 0x4, 0xbc0, &(0x7f0000000b40)="$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") quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000200)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000200), 0x4) pipe(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x400, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@noinit_itable}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x45f, &(0x7f0000001b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = syz_open_procfs(0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000001b00)={0x1, 0x0, 0x3, 0xf, 0x5f, &(0x7f0000001700)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x20004080) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000048000)=0x2000, 0x1fffffff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x18800, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) write$binfmt_elf32(r7, &(0x7f0000000e00)=ANY=[], 0x458) write$binfmt_format(r7, &(0x7f0000000000)='1\x00', 0x2400) pwrite64(r6, 0x0, 0x0, 0x6) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10080, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1510, &(0x7f0000002e00)="$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") 1.230179739s ago: executing program 2 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 11.236969ms ago: executing program 4 (id=424): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810000a0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x5000180) r3 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) prlimit64(r4, 0xe, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./bus\x00') r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, 0x0, 0x890) socket$nl_xfrm(0x10, 0x3, 0x6) 11.037259ms ago: executing program 1 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000d80)={'veth0_to_bond\x00', 0x0}) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0x541b, 0xf0ff1f00000000) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000180)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xfff3}}}, 0x24}}, 0x40188d0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mincore(&(0x7f0000f0c000/0x3000)=nil, 0xffffffff00000000, &(0x7f0000afaf0a)=""/246) mbind(&(0x7f0000704000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000001c0)=0x4, 0x9, 0x4) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) fcntl$lock(r7, 0x7, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc829fd1e00d96072000000ba89de2b7fb0000e6a180b8785d9600010041eb8109af000000000000002c7f5211e95610ed15c652e300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x0, 0x2000000000001]}}) syz_open_procfs(0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)=[0x0, 0x0], &(0x7f0000000300), 0x0, 0x2, 0x0, 0x0, r8}) 563.179µs ago: executing program 2 (id=433): syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x19d, &(0x7f0000000440)="$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") 0s ago: executing program 3 (id=434): syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000a40)='./file0\x00', 0x208001, &(0x7f0000000080)=ANY=[], 0x9, 0x204, &(0x7f00000003c0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 72.866039][ T5766] cgroup: Unknown subsys name 'net' [ 72.993716][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.369340][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.696053][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.708288][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.716291][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.747610][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.755329][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.762737][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.807713][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.815070][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.838544][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.846279][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.867799][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.889194][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.898720][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.907588][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.915475][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.917571][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.923255][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.934963][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.945586][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.958702][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.966578][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.974169][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.977689][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.989120][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.228649][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 76.408693][ T5781] chnl_net:caif_netlink_parms(): no params data found [ 76.480156][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.488487][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.495720][ T5777] bridge_slave_0: entered allmulticast mode [ 76.503389][ T5777] bridge_slave_0: entered promiscuous mode [ 76.511984][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 76.554482][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.566433][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.574783][ T5777] bridge_slave_1: entered allmulticast mode [ 76.582279][ T5777] bridge_slave_1: entered promiscuous mode [ 76.620067][ T5781] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.627293][ T5781] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.634409][ T5781] bridge_slave_0: entered allmulticast mode [ 76.642995][ T5781] bridge_slave_0: entered promiscuous mode [ 76.650677][ T5781] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.658077][ T5781] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.665205][ T5781] bridge_slave_1: entered allmulticast mode [ 76.672166][ T5781] bridge_slave_1: entered promiscuous mode [ 76.705062][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 76.729760][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.746469][ T5781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.769941][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.809893][ T5781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.831560][ T5777] team0: Port device team_slave_0 added [ 76.849397][ T5777] team0: Port device team_slave_1 added [ 76.873856][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.883360][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.890840][ T5780] bridge_slave_0: entered allmulticast mode [ 76.900145][ T5780] bridge_slave_0: entered promiscuous mode [ 76.908441][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.915507][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.923146][ T5780] bridge_slave_1: entered allmulticast mode [ 76.929906][ T5780] bridge_slave_1: entered promiscuous mode [ 76.984103][ T5781] team0: Port device team_slave_0 added [ 76.992998][ T5781] team0: Port device team_slave_1 added [ 77.008511][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.015484][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.041586][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.055313][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.068120][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.092113][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.099155][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.125166][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.161487][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.168842][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.176026][ T5782] bridge_slave_0: entered allmulticast mode [ 77.183491][ T5782] bridge_slave_0: entered promiscuous mode [ 77.192375][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.199580][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.206836][ T5782] bridge_slave_1: entered allmulticast mode [ 77.214073][ T5782] bridge_slave_1: entered promiscuous mode [ 77.232515][ T5780] team0: Port device team_slave_0 added [ 77.239779][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.246740][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.273213][ T5781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.286244][ T5781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.293585][ T5781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.319767][ T5781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.345247][ T5780] team0: Port device team_slave_1 added [ 77.401881][ T5777] hsr_slave_0: entered promiscuous mode [ 77.409418][ T5777] hsr_slave_1: entered promiscuous mode [ 77.420177][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.461448][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.474148][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.481307][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.507404][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.520045][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.527008][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.553001][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.621655][ T5782] team0: Port device team_slave_0 added [ 77.630514][ T5782] team0: Port device team_slave_1 added [ 77.657634][ T5781] hsr_slave_0: entered promiscuous mode [ 77.663919][ T5781] hsr_slave_1: entered promiscuous mode [ 77.670752][ T5781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.678726][ T5781] Cannot create hsr debugfs directory [ 77.705140][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.713948][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.740025][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.752317][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.759409][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.785447][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.849565][ T5788] Bluetooth: hci0: command tx timeout [ 77.854227][ T5780] hsr_slave_0: entered promiscuous mode [ 77.862736][ T5780] hsr_slave_1: entered promiscuous mode [ 77.868975][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.876520][ T5780] Cannot create hsr debugfs directory [ 77.947924][ T5782] hsr_slave_0: entered promiscuous mode [ 77.954621][ T5782] hsr_slave_1: entered promiscuous mode [ 77.961044][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.969375][ T5782] Cannot create hsr debugfs directory [ 78.007287][ T5788] Bluetooth: hci1: command tx timeout [ 78.018814][ T5788] Bluetooth: hci2: command tx timeout [ 78.087551][ T5788] Bluetooth: hci3: command tx timeout [ 78.248512][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.260091][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.272088][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.291591][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.360541][ T5781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.378326][ T5781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.425040][ T5781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.435505][ T5781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.462197][ T5780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.479834][ T5780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.491835][ T5780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.535325][ T5780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.591432][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.611667][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.621484][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.632770][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.761781][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.791686][ T5781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.823739][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.853464][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.864056][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.871320][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.895352][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.905107][ T5781] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.926309][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.933469][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.950521][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.957697][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.985245][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.992421][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.007013][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.014129][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.025731][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.032883][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.073503][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.133243][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.160732][ T5781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.192260][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.199388][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.249292][ T3441] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.256454][ T3441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.669079][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.712288][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.748963][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.803090][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.822463][ T5781] veth0_vlan: entered promiscuous mode [ 79.828978][ T5780] veth0_vlan: entered promiscuous mode [ 79.844845][ T5781] veth1_vlan: entered promiscuous mode [ 79.865080][ T5780] veth1_vlan: entered promiscuous mode [ 79.918816][ T5777] veth0_vlan: entered promiscuous mode [ 79.927462][ T5788] Bluetooth: hci0: command tx timeout [ 79.944790][ T5781] veth0_macvtap: entered promiscuous mode [ 79.971893][ T5777] veth1_vlan: entered promiscuous mode [ 79.979768][ T5781] veth1_macvtap: entered promiscuous mode [ 80.021933][ T5780] veth0_macvtap: entered promiscuous mode [ 80.033466][ T5782] veth0_vlan: entered promiscuous mode [ 80.044466][ T5780] veth1_macvtap: entered promiscuous mode [ 80.061438][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.073700][ T5782] veth1_vlan: entered promiscuous mode [ 80.088318][ T5788] Bluetooth: hci2: command tx timeout [ 80.088328][ T5089] Bluetooth: hci1: command tx timeout [ 80.103965][ T5777] veth0_macvtap: entered promiscuous mode [ 80.116732][ T5781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.133027][ T5777] veth1_macvtap: entered promiscuous mode [ 80.142114][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.157399][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.167638][ T5089] Bluetooth: hci3: command tx timeout [ 80.176531][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.188261][ T5781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.199179][ T5781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.208842][ T5781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.218311][ T5781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.244817][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.256739][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.268813][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.284472][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.295496][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.305983][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.316493][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.327968][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.344669][ T5780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.353913][ T5780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.365264][ T5780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.374171][ T5780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.389246][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.400331][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.413369][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.424242][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.435691][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.466166][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.478326][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.487064][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.496145][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.528924][ T5782] veth0_macvtap: entered promiscuous mode [ 80.570159][ T5782] veth1_macvtap: entered promiscuous mode [ 80.625833][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.638464][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.650474][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.661673][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.671567][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.682037][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.693362][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.730751][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.742626][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.742945][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.752705][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.752740][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.752751][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.752763][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.754148][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.771073][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.854720][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.863685][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.877852][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.886570][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.937611][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.945470][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.977663][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.986180][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.998838][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.038164][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.062185][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.076790][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.162126][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.197333][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.224144][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.242290][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.376620][ T3441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.419876][ T3441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.236729][ T5089] Bluetooth: hci0: command tx timeout [ 82.241880][ T5788] Bluetooth: hci1: command tx timeout [ 82.243753][ T5089] Bluetooth: hci2: command tx timeout [ 82.249487][ T5788] Bluetooth: hci3: command tx timeout [ 82.509120][ T5856] Zero length message leads to an empty skb [ 83.667741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 84.077296][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 84.272599][ T5865] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.327385][ T5788] Bluetooth: hci3: command tx timeout [ 84.333649][ T5089] Bluetooth: hci2: command tx timeout [ 84.339157][ T5783] Bluetooth: hci0: command tx timeout [ 84.344659][ T5783] Bluetooth: hci1: command tx timeout [ 84.347853][ T5854] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.588392][ T5854] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 84.621774][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.658797][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.666720][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.689144][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.711978][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.726768][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.748981][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.772985][ T5854] usb 1-1: config 0 interface 0 has no altsetting 0 [ 84.782684][ T5854] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 84.812080][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 84.825151][ T5854] usb 1-1: Product: syz [ 84.837569][ T5854] usb 1-1: Manufacturer: syz [ 84.842247][ T5854] usb 1-1: SerialNumber: syz [ 86.198178][ T5854] usb 1-1: config 0 descriptor?? [ 86.205120][ T5854] usb 1-1: can't set config #0, error -71 [ 86.220312][ T5854] usb 1-1: USB disconnect, device number 2 [ 86.890957][ T9] cfg80211: failed to load regulatory.db [ 88.297204][ T5899] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 88.528034][ T5854] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.924440][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 88.937087][ T5854] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 88.957615][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.975874][ T5854] usb 2-1: Product: syz [ 88.980479][ T5854] usb 2-1: Manufacturer: syz [ 88.988044][ T5854] usb 2-1: SerialNumber: syz [ 89.041499][ T5854] usb 2-1: config 0 descriptor?? [ 89.066651][ T5854] gspca_main: sq930x-2.14.0 probing 2770:930c [ 89.561276][ T5854] gspca_sq930x: ucbus_write failed -71 [ 90.147136][ T5854] gspca_sq930x: Sensor ov9630 not yet treated [ 90.153577][ T5854] sq930x: probe of 2-1:0.0 failed with error -22 [ 90.170360][ T5854] usb 2-1: USB disconnect, device number 2 [ 90.931765][ T2203] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 91.291299][ T5932] syz.2.25[5932]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.316281][ T5932] loop2: detected capacity change from 0 to 8 [ 91.517309][ T2203] usb 1-1: Using ep0 maxpacket: 16 [ 91.875208][ T5932] syz.2.25: attempt to access beyond end of device [ 91.875208][ T5932] loop2: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8 [ 91.889955][ T5932] SQUASHFS error: Failed to read block 0xfffffffffffffffc: -5 [ 91.897529][ T5932] unable to read xattr id index table [ 93.252462][ T5772] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.273542][ T2203] usb 1-1: device descriptor read/all, error -71 [ 93.844394][ T5946] loop2: detected capacity change from 0 to 2048 [ 93.941513][ T5946] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 95.001399][ T28] audit: type=1326 audit(1785919523.489:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 95.516253][ T28] audit: type=1326 audit(1785919523.489:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.008635][ T28] audit: type=1326 audit(1785919523.519:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.040856][ T28] audit: type=1326 audit(1785919523.519:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.097385][ T28] audit: type=1326 audit(1785919523.519:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.157598][ T28] audit: type=1326 audit(1785919523.519:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.194865][ T28] audit: type=1326 audit(1785919523.519:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.264418][ T28] audit: type=1326 audit(1785919523.519:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.303124][ T28] audit: type=1326 audit(1785919523.519:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.327068][ T28] audit: type=1326 audit(1785919523.519:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.0.33" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 96.675710][ T5969] ptrace attach of "ci2-linux-6-6-kasan/syz-executor exec"[5780] was attempted by ""[5969] [ 98.015762][ T5974] loop2: detected capacity change from 0 to 32768 [ 98.041271][ T5974] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop2 scanned by syz.2.38 (5974) [ 98.094233][ T5974] BTRFS info (device loop2): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 98.110857][ T5974] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 98.120229][ T5974] BTRFS info (device loop2): using free space tree [ 98.217935][ T5974] BTRFS info (device loop2): enabling ssd optimizations [ 98.249937][ T5974] BTRFS info (device loop2): auto enabling async discard [ 98.740217][ T6011] null_blk: disk nullb1 created [ 100.312451][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.46'. [ 100.555420][ T6009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 100.589286][ T5782] BTRFS info (device loop2): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 103.399373][ T6039] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 103.472345][ T6031] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.507615][ T6041] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3574616936 (457550967808 ns) > initial count (31031043456 ns). Using initial count to start timer. [ 103.631640][ T6031] syz.3.49 (6031) used greatest stack depth: 20040 bytes left [ 103.933644][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 106.730671][ T6075] loop1: detected capacity change from 0 to 32768 [ 106.758313][ T6075] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop1 scanned by syz.1.56 (6075) [ 106.804606][ T6075] BTRFS info (device loop1): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 106.816809][ T6075] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 106.829825][ T6075] BTRFS info (device loop1): using free space tree [ 107.111645][ T6075] BTRFS info (device loop1): enabling ssd optimizations [ 107.142353][ T6075] BTRFS info (device loop1): auto enabling async discard [ 107.469476][ T6123] ======================================================= [ 107.469476][ T6123] WARNING: The mand mount option has been deprecated and [ 107.469476][ T6123] and is ignored by this kernel. Remove the mand [ 107.469476][ T6123] option from the mount to silence this warning. [ 107.469476][ T6123] ======================================================= [ 107.504391][ C1] vkms_vblank_simulate: vblank timer overrun [ 108.084910][ T5777] BTRFS info (device loop1): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 108.332496][ T5984] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 9 /dev/loop1 scanned by udevd (5984) [ 110.851960][ T6143] warning: `syz.2.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.687243][ T5788] Bluetooth: hci0: command tx timeout [ 114.541991][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 114.756454][ T6182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.518263][ T6189] loop2: detected capacity change from 0 to 4096 [ 116.160819][ T6189] EXT4-fs: Ignoring removed oldalloc option [ 116.321144][ T6189] EXT4-fs (loop2): Test dummy encryption mode enabled [ 116.530590][ T6189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.252852][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.278970][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.79'. [ 117.381568][ T6205] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.976813][ T6209] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 118.593173][ T6211] bond1: entered promiscuous mode [ 118.599408][ T6211] dummy0: entered promiscuous mode [ 118.978497][ T6224] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.047212][ T6211] bond1: entered allmulticast mode [ 119.056302][ T6211] dummy0: entered allmulticast mode [ 120.520216][ T6252] loop1: detected capacity change from 0 to 4096 [ 120.636273][ T6259] bridge0: entered promiscuous mode [ 120.636964][ T6259] vlan2: entered promiscuous mode [ 121.834177][ T6269] loop2: detected capacity change from 0 to 512 [ 121.864886][ T6269] EXT4-fs (loop2): Test dummy encryption mode enabled [ 122.396055][ T6269] EXT4-fs error (device loop2): ext4_orphan_get:1404: inode #15: comm syz.2.91: inode has both inline data and extents flags [ 122.447710][ T6269] EXT4-fs error (device loop2): ext4_orphan_get:1409: comm syz.2.91: couldn't read orphan inode 15 (err -117) [ 122.490992][ T6269] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.074546][ T6291] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 124.367166][ C0] sched: RT throttling activated [ 124.850559][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.875575][ T6311] bridge_slave_0: left allmulticast mode [ 125.938510][ T6311] bridge_slave_0: left promiscuous mode [ 125.969360][ T6311] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.056359][ T6321] loop3: detected capacity change from 0 to 512 [ 126.545510][ T6311] bridge_slave_1: left allmulticast mode [ 126.549324][ T6321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.553370][ T6311] bridge_slave_1: left promiscuous mode [ 126.563738][ T6321] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.694131][ T6311] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.964231][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.022895][ T6311] bond0: (slave bond_slave_0): Releasing backup interface [ 127.072704][ T6311] bond0: (slave bond_slave_1): Releasing backup interface [ 127.105480][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.124375][ T6311] team0: Port device team_slave_0 removed [ 127.189072][ T6311] team0: Port device team_slave_1 removed [ 127.203871][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.212778][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.229520][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.240497][ T6311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.248973][ T6311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.312687][ T6332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.071725][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eb0cc00: rx timeout, send abort [ 129.539922][ T6364] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 129.581274][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805eb0cc00: abort rx timeout. Force session deactivation [ 130.157235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 130.925772][ T6380] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.368345][ T6374] batadv0: entered promiscuous mode [ 131.374122][ T6374] vlan2: entered promiscuous mode [ 132.717274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 133.042194][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.474605][ T6407] ubi0: attaching mtd0 [ 134.491460][ T6407] ubi0: scanning is finished [ 134.496134][ T6407] ubi0: empty MTD device detected [ 134.972086][ T6408] nvmet: adding nsid 1 to subsystem testnqn [ 135.020727][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 135.020740][ T28] audit: type=1800 audit(1785919563.449:25): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="attr_allow_any_host" dev="configfs" ino=8982 res=0 errno=0 [ 135.093650][ T6407] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 135.179073][ T28] audit: type=1800 audit(1785919563.499:26): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="device_path" dev="configfs" ino=8984 res=0 errno=0 [ 135.262622][ T6414] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 135.284124][ T28] audit: type=1800 audit(1785919563.509:27): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="buffered_io" dev="configfs" ino=8985 res=0 errno=0 [ 135.328896][ T28] audit: type=1800 audit(1785919563.509:28): pid=6408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="enable" dev="configfs" ino=8986 res=0 errno=0 [ 135.391553][ T6408] nvme_fabrics: missing parameter 'transport=%s' [ 135.398568][ T6408] nvme_fabrics: missing parameter 'nqn=%s' [ 135.408210][ T28] audit: type=1800 audit(1785919563.699:29): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.120" name="addr_trtype" dev="configfs" ino=9006 res=0 errno=0 [ 135.451924][ T6414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.464951][ T6420] bond1: (slave geneve2): making interface the new active one [ 135.499764][ T6420] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 135.522172][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz.2.122'. [ 137.427721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 137.850011][ T6440] Bluetooth: MGMT ver 1.22 [ 137.854826][ T6440] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 138.223481][ T6447] ntfs3: loop2: try to read out of volume at offset 0x0 [ 139.372159][ T6454] loop2: detected capacity change from 0 to 40427 [ 139.761149][ T6454] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.769412][ T6454] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.784315][ T6454] F2FS-fs (loop2): invalid crc value [ 139.795740][ T6454] F2FS-fs (loop2): Found nat_bits in checkpoint [ 139.848723][ T6454] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 139.855959][ T6454] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.288109][ T6471] syz.2.130: attempt to access beyond end of device [ 140.288109][ T6471] loop2: rw=34817, sector=77824, nr_sectors = 32 limit=40427 [ 141.322307][ T28] audit: type=1800 audit(1785919569.799:30): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="local" dev="configfs" ino=9068 res=0 errno=0 [ 141.377388][ T28] audit: type=1800 audit(1785919569.829:31): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.136" name="scan_secs" dev="configfs" ino=9070 res=0 errno=0 [ 141.545775][ T28] audit: type=1800 audit(1785919570.029:32): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="idVendor" dev="configfs" ino=9723 res=0 errno=0 [ 141.608054][ T28] audit: type=1800 audit(1785919570.059:33): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="idProduct" dev="configfs" ino=9724 res=0 errno=0 [ 141.661386][ T6484] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 141.678820][ T28] audit: type=1800 audit(1785919570.069:34): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="process_ump" dev="configfs" ino=9728 res=0 errno=0 [ 141.700273][ T6484] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 141.719476][ T6486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.726908][ T6486] IPv6: NLM_F_CREATE should be set when creating new route [ 141.734170][ T6486] IPv6: NLM_F_CREATE should be set when creating new route [ 141.741382][ T6486] IPv6: NLM_F_CREATE should be set when creating new route [ 141.769142][ T6486] process 'syz.1.139' launched '/dev/fd/-1' with NULL argv: empty string added [ 141.807276][ T28] audit: type=1800 audit(1785919570.079:35): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="direction" dev="configfs" ino=9729 res=0 errno=0 [ 141.837747][ T6484] udc dummy_udc.0: failed to start g1: -22 [ 141.860292][ T6484] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 141.899264][ T6484] UDC core: g1: couldn't find an available UDC or it's busy [ 141.915828][ T28] audit: type=1800 audit(1785919570.089:36): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="active" dev="configfs" ino=9734 res=0 errno=0 [ 141.962109][ T28] audit: type=1800 audit(1785919570.119:37): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="direction" dev="configfs" ino=9737 res=0 errno=0 [ 141.982668][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.007753][ T28] audit: type=1800 audit(1785919570.119:38): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="active" dev="configfs" ino=9738 res=0 errno=0 [ 142.023799][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.049959][ T6488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.055573][ T28] audit: type=1800 audit(1785919570.139:39): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.138" name="UDC" dev="configfs" ino=9740 res=0 errno=0 [ 142.065481][ T6488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.547626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 144.267680][ T6490] tipc: Started in network mode [ 144.367292][ T6490] tipc: Node identity 7f000001, cluster identity 4711 [ 144.376626][ T6490] tipc: Enabled bearer , priority 10 [ 145.500723][ T5816] tipc: Node number set to 2130706433 [ 148.462796][ T6544] fuse: Bad value for 'fd' [ 149.687094][ T28] audit: type=1800 audit(1785919578.169:40): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.155" name="local" dev="configfs" ino=9189 res=0 errno=0 [ 150.032456][ T28] audit: type=1800 audit(1785919578.209:41): pid=6560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.155" name="scan_secs" dev="configfs" ino=9191 res=0 errno=0 [ 150.619683][ T6571] loop0: detected capacity change from 0 to 64 [ 150.957005][ T6571] syz.0.157: attempt to access beyond end of device [ 150.957005][ T6571] loop0: rw=2049, sector=159, nr_sectors = 1 limit=64 [ 150.970986][ T6571] Buffer I/O error on dev loop0, logical block 159, lost async page write [ 150.980290][ T6571] syz.0.157: attempt to access beyond end of device [ 150.980290][ T6571] loop0: rw=2049, sector=160, nr_sectors = 1 limit=64 [ 150.993817][ T6571] Buffer I/O error on dev loop0, logical block 160, lost async page write [ 151.002761][ T6571] syz.0.157: attempt to access beyond end of device [ 151.002761][ T6571] loop0: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 151.016224][ T6571] Buffer I/O error on dev loop0, logical block 161, lost async page write [ 151.025103][ T6571] syz.0.157: attempt to access beyond end of device [ 151.025103][ T6571] loop0: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 151.038592][ T6571] Buffer I/O error on dev loop0, logical block 162, lost async page write [ 151.047618][ T6571] syz.0.157: attempt to access beyond end of device [ 151.047618][ T6571] loop0: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 151.061080][ T6571] Buffer I/O error on dev loop0, logical block 163, lost async page write [ 151.069945][ T6571] syz.0.157: attempt to access beyond end of device [ 151.069945][ T6571] loop0: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 151.083385][ T6571] Buffer I/O error on dev loop0, logical block 167, lost async page write [ 151.092260][ T6571] syz.0.157: attempt to access beyond end of device [ 151.092260][ T6571] loop0: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 151.105675][ T6571] Buffer I/O error on dev loop0, logical block 169, lost async page write [ 151.114651][ T6571] syz.0.157: attempt to access beyond end of device [ 151.114651][ T6571] loop0: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 151.128082][ T6571] Buffer I/O error on dev loop0, logical block 171, lost async page write [ 151.137663][ T6571] syz.0.157: attempt to access beyond end of device [ 151.137663][ T6571] loop0: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 151.151359][ T6571] Buffer I/O error on dev loop0, logical block 172, lost async page write [ 151.160302][ T6571] syz.0.157: attempt to access beyond end of device [ 151.160302][ T6571] loop0: rw=2049, sector=173, nr_sectors = 1 limit=64 [ 151.173810][ T6571] Buffer I/O error on dev loop0, logical block 173, lost async page write [ 151.698369][ T6576] mmap: syz.0.160 (6576) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 151.841129][ T6579] tipc: Started in network mode [ 151.877531][ T6579] tipc: Node identity 72a30273171, cluster identity 4711 [ 151.895087][ T6579] tipc: Enabled bearer , priority 0 [ 151.943964][ T6584] syzkaller0: entered promiscuous mode [ 151.970331][ T6584] syzkaller0: entered allmulticast mode [ 151.997625][ T6578] tipc: Resetting bearer [ 152.071835][ T6578] tipc: Disabling bearer [ 153.355926][ T6608] loop3: detected capacity change from 0 to 512 [ 153.414362][ T6612] loop2: detected capacity change from 0 to 128 [ 153.437970][ T6608] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 155.044187][ T28] audit: type=1326 audit(1785919583.169:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.068407][ T6618] netlink: 'syz.0.167': attribute type 4 has an invalid length. [ 155.076049][ T6618] netlink: 17 bytes leftover after parsing attributes in process `syz.0.167'. [ 155.233151][ T28] audit: type=1326 audit(1785919583.169:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.258036][ T28] audit: type=1326 audit(1785919583.169:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.341425][ T28] audit: type=1326 audit(1785919583.169:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.466012][ T28] audit: type=1326 audit(1785919583.169:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.598671][ T28] audit: type=1326 audit(1785919583.169:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.661499][ T28] audit: type=1326 audit(1785919583.169:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.716693][ T28] audit: type=1326 audit(1785919583.169:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.778935][ T6628] loop3: detected capacity change from 0 to 512 [ 155.783950][ T28] audit: type=1326 audit(1785919583.169:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.810248][ T6628] EXT4-fs (loop3): Test dummy encryption mode enabled [ 155.831090][ T28] audit: type=1326 audit(1785919583.169:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6611 comm="syz.2.166" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6d239e019 code=0x7ffc0000 [ 155.832897][ T6628] EXT4-fs error (device loop3): ext4_orphan_get:1404: inode #15: comm syz.3.168: inode has both inline data and extents flags [ 155.882861][ T6628] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.168: couldn't read orphan inode 15 (err -117) [ 155.911383][ T6628] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.344540][ T6640] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 158.980970][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.118378][ T6660] loop3: detected capacity change from 0 to 1024 [ 161.791199][ T6666] loop3: detected capacity change from 0 to 512 [ 161.839758][ T6666] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.852795][ T6666] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 161.863025][ T6666] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.175: Corrupt directory, running e2fsck is recommended [ 161.883891][ T6666] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 161.893168][ T6666] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.175: corrupted in-inode xattr: e_name out of bounds [ 161.914249][ T6666] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.175: couldn't read orphan inode 15 (err -117) [ 161.931848][ T6666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.973690][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.686592][ T6644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.996073][ T6678] loop2: detected capacity change from 0 to 1024 [ 163.437245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 165.080879][ T6693] loop0: detected capacity change from 0 to 512 [ 166.007487][ T6693] EXT4-fs (loop0): Test dummy encryption mode enabled [ 166.105984][ T6693] EXT4-fs error (device loop0): ext4_orphan_get:1404: inode #15: comm syz.0.182: inode has both inline data and extents flags [ 166.278690][ T6693] EXT4-fs error (device loop0): ext4_orphan_get:1409: comm syz.0.182: couldn't read orphan inode 15 (err -117) [ 167.040451][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.594963][ T6705] loop2: detected capacity change from 0 to 736 [ 168.841709][ T5781] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.008556][ T6709] loop3: detected capacity change from 0 to 8 [ 169.041958][ T6709] SQUASHFS error: Unable to read inode 0x11f [ 170.270243][ T6645] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 172.997675][ T6737] tipc: Enabling of bearer rejected, failed to enable media [ 177.214391][ T6786] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 178.053428][ T6786] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.119004][ T6801] bond1: (slave geneve2): making interface the new active one [ 178.159177][ T6801] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 178.169714][ T6799] tipc: Started in network mode [ 178.174631][ T6799] tipc: Node identity 4, cluster identity 4711 [ 178.180933][ T6799] tipc: Node number set to 4 [ 178.646194][ T6808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.196'. [ 179.288737][ T6808] syz.1.196 (6808) used greatest stack depth: 16616 bytes left [ 179.368850][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 179.368864][ T28] audit: type=1800 audit(1785919607.859:65): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="attr_allow_any_host" dev="configfs" ino=10220 res=0 errno=0 [ 179.380785][ T6811] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 179.437272][ T28] audit: type=1800 audit(1785919607.859:66): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="device_path" dev="configfs" ino=10221 res=0 errno=0 [ 179.470239][ T28] audit: type=1800 audit(1785919607.859:67): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="enable" dev="configfs" ino=10222 res=0 errno=0 [ 179.489071][ T6811] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 179.490833][ T28] audit: type=1800 audit(1785919607.869:68): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="addr_trtype" dev="configfs" ino=10223 res=0 errno=0 [ 179.694384][ T28] audit: type=1800 audit(1785919607.959:69): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="addr_adrfam" dev="configfs" ino=10620 res=0 errno=0 [ 180.559994][ T6811] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store [ 180.560961][ T6811] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 180.571663][ T28] audit: type=1800 audit(1785919609.049:70): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="addr_traddr" dev="configfs" ino=10234 res=0 errno=0 [ 180.571705][ T28] audit: type=1800 audit(1785919609.049:71): pid=6811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="addr_trsvcid" dev="configfs" ino=10235 res=0 errno=0 [ 182.117311][ T6831] syz.1.210 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 184.952151][ T6844] netlink: 'syz.3.213': attribute type 12 has an invalid length. [ 184.966716][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 186.968585][ T6857] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 186.981243][ T6857] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 188.130086][ T6863] loop3: detected capacity change from 0 to 128 [ 188.175818][ T6863] ext4: Unknown parameter 'fsmagic' [ 188.282223][ T6868] loop2: detected capacity change from 0 to 4096 [ 188.315933][ T6868] ext4: Unknown parameter 'fsname' [ 188.929714][ T6874] can0: slcan on ttyS3. [ 189.218818][ T6864] can0 (unregistered): slcan off ttyS3. [ 189.375380][ T5816] IPVS: starting estimator thread 0... [ 189.551300][ T6883] IPVS: using max 17 ests per chain, 40800 per kthread [ 190.201741][ T6889] loop0: detected capacity change from 0 to 32768 [ 190.391684][ T6889] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 191.262567][ T28] audit: type=1800 audit(1785919619.469:72): pid=6901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=17059 res=0 errno=0 [ 191.603617][ T5781] ocfs2: Unmounting device (7,0) on (node local) [ 192.305900][ T6926] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 192.378945][ T6926] team0: Port device dummy0 added [ 195.309239][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.790886][ T6976] capability: warning: `syz.3.238' uses 32-bit capabilities (legacy support in use) [ 198.389348][ T6973] slcan: can't register candev [ 198.395220][ T6973] Falling back ldisc for ttyS3. [ 198.887578][ T6986] syz.2.240 uses obsolete (PF_INET,SOCK_PACKET) [ 202.009780][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 202.015857][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 202.023369][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 202.023813][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 205.727666][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.3.242'. [ 206.257792][ T7034] program syz.0.249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.058540][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.066133][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.458601][ T28] audit: type=1326 audit(1785919635.919:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 207.577421][ T28] audit: type=1326 audit(1785919635.919:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 207.603012][ T28] audit: type=1326 audit(1785919635.919:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 207.627702][ T28] audit: type=1326 audit(1785919635.919:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 207.671969][ T28] audit: type=1326 audit(1785919635.919:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 208.271147][ T28] audit: type=1326 audit(1785919635.919:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 208.337323][ T28] audit: type=1326 audit(1785919635.929:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 208.408661][ T28] audit: type=1326 audit(1785919635.929:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 209.507224][ T28] audit: type=1326 audit(1785919635.929:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 209.675271][ T28] audit: type=1326 audit(1785919635.929:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.1.250" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92af59e019 code=0x7ffc0000 [ 211.527072][ T7067] loop3: detected capacity change from 0 to 2048 [ 212.002826][ T7072] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.490285][ T7076] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 213.034660][ T7082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.260'. [ 213.070908][ T7087] loop3: detected capacity change from 0 to 128 [ 213.597377][ T2203] IPVS: starting estimator thread 0... [ 213.712570][ T7096] IPVS: using max 19 ests per chain, 45600 per kthread [ 213.719979][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 213.720023][ T28] audit: type=1326 audit(1785919642.179:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 214.406646][ T28] audit: type=1326 audit(1785919642.179:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 214.468414][ T28] audit: type=1326 audit(1785919642.179:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 214.537292][ T28] audit: type=1326 audit(1785919642.179:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 214.771083][ T7109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.458348][ T28] audit: type=1326 audit(1785919642.179:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 215.506939][ T28] audit: type=1326 audit(1785919642.189:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 215.531996][ T28] audit: type=1326 audit(1785919642.189:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 215.559181][ T7114] loop2: detected capacity change from 0 to 512 [ 215.598667][ T7114] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.621968][ T28] audit: type=1326 audit(1785919642.189:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 215.676812][ T7116] fuse: Bad value for 'user_id' [ 215.726261][ T28] audit: type=1326 audit(1785919642.189:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 215.881854][ T28] audit: type=1326 audit(1785919642.189:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7086 comm="syz.3.261" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c7b9e019 code=0x7ffc0000 [ 216.077589][ T174] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 217.194595][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 217.212194][ T174] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 217.232542][ T174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 217.263050][ T174] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 217.299726][ T174] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 217.327346][ T174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.348841][ T174] usb 4-1: config 0 descriptor?? [ 219.519517][ T7148] loop0: detected capacity change from 0 to 128 [ 220.057192][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 220.607387][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 220.607402][ T28] audit: type=1326 audit(1785919648.739:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 220.725281][ T28] audit: type=1326 audit(1785919648.739:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 221.123036][ T7159] Invalid ELF header len 8 [ 221.813870][ T28] audit: type=1326 audit(1785919648.739:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 222.912585][ T28] audit: type=1326 audit(1785919648.739:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.020523][ T28] audit: type=1326 audit(1785919648.739:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.048656][ T28] audit: type=1326 audit(1785919648.749:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.076963][ T28] audit: type=1326 audit(1785919648.749:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.147309][ T28] audit: type=1326 audit(1785919648.749:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.625533][ T28] audit: type=1326 audit(1785919648.749:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.905920][ T28] audit: type=1326 audit(1785919648.749:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.0.274" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f164099e019 code=0x7ffc0000 [ 223.979124][ T7177] loop2: detected capacity change from 0 to 128 [ 224.008746][ T7177] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 224.049193][ T7177] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.740763][ T174] hdpvr 4-1:0.0: unexpected answer of status request, len -110 [ 227.754622][ T174] hdpvr 4-1:0.0: device init failed [ 227.762071][ T174] hdpvr: probe of 4-1:0.0 failed with error -12 [ 228.105120][ T5815] usb 4-1: USB disconnect, device number 2 [ 236.501169][ T7247] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 236.579228][ T7247] team0: Port device dummy0 added [ 238.906359][ T7256] loop0: detected capacity change from 0 to 32768 [ 238.920880][ T7256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.303 (7256) [ 239.280583][ T7256] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.291041][ T7256] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 239.300037][ T7256] BTRFS info (device loop0): use zlib compression, level 3 [ 239.307492][ T7256] BTRFS info (device loop0): turning on sync discard [ 239.314213][ T7256] BTRFS info (device loop0): using free space tree [ 239.447477][ T7256] BTRFS info (device loop0): enabling ssd optimizations [ 240.191479][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 240.192507][ T28] audit: type=1800 audit(1785919668.663:142): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.303" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 240.222343][ C1] vkms_vblank_simulate: vblank timer overrun [ 240.913849][ T5781] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 241.064959][ T6645] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop0 scanned by udevd (6645) [ 241.139398][ T7301] futex_wake_op: syz.3.307 tries to shift op by 144; fix this program [ 242.745656][ T7313] futex_wake_op: syz.0.308 tries to shift op by 144; fix this program [ 243.753956][ T7317] bio_check_eod: 5 callbacks suppressed [ 243.753991][ T7317] syz.0.309: attempt to access beyond end of device [ 243.753991][ T7317] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 243.772560][ T7317] FAT-fs (nbd0): unable to read boot sector [ 243.830530][ T7317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.309'. [ 244.521967][ T7320] loop0: detected capacity change from 0 to 128 [ 245.983480][ T7326] 9pnet_fd: Insufficient options for proto=fd [ 246.676821][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.298'. [ 246.685906][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.307'. [ 247.737936][ T7336] set match dimension is over the limit! [ 248.171119][ T7337] loop0: detected capacity change from 0 to 128 [ 248.204276][ T7337] ext4: Unknown parameter 'fsmagic' [ 250.055684][ T5089] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 252.253287][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.271159][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.281302][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.291859][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.332522][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.342695][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.352846][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.362967][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.373116][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 252.383238][ C1] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 254.333311][ T7369] loop3: detected capacity change from 0 to 764 [ 255.867845][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.910288][ T7420] Device name cannot be null; rc = [-22] [ 259.982036][ T7421] loop3: detected capacity change from 0 to 64 [ 260.435533][ T7422] loop2: detected capacity change from 0 to 256 [ 261.286649][ T7430] netlink: 'syz.3.334': attribute type 4 has an invalid length. [ 262.573071][ T7432] loop2: detected capacity change from 0 to 2048 [ 262.670513][ T7432] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.683519][ T7432] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.732592][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 263.231399][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 263.477047][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.495553][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4 [ 263.582842][ T7446] futex_wake_op: syz.1.337 tries to shift op by 144; fix this program [ 263.617116][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.666657][ T23] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 263.734676][ T23] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 263.767801][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.802093][ T23] usb 3-1: Product: syz [ 263.806475][ T23] usb 3-1: Manufacturer: syz [ 263.825871][ T23] usb 3-1: SerialNumber: syz [ 263.965099][ T23] usb-storage 3-1:1.0: USB Mass Storage device detected [ 264.192793][ T23] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 264.210616][ T23] scsi host1: usb-storage 3-1:1.0 [ 264.226067][ T23] usb 3-1: USB disconnect, device number 2 [ 264.238032][ T9] usb 4-1: string descriptor 0 read error: -71 [ 264.257077][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 264.287102][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.394579][ T9] usb 4-1: config 0 descriptor?? [ 264.429822][ T9] usb 4-1: can't set config #0, error -71 [ 264.441569][ T7453] loop3: detected capacity change from 0 to 128 [ 264.451235][ T9] usb 4-1: USB disconnect, device number 3 [ 265.481977][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.978395][ T7479] ISOFS: Unable to identify CD-ROM format. [ 269.483154][ T7488] loop2: detected capacity change from 0 to 128 [ 269.496460][ T7488] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 269.680594][ T7488] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 270.491058][ T49] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 272.269414][ T7502] loop2: detected capacity change from 0 to 4096 [ 272.607310][ T7502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.615777][ T7502] EXT4-fs (loop2): Test dummy encryption mode enabled [ 272.634943][ T7502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.992386][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.052803][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.353'. [ 275.609706][ T7536] zram0: detected capacity change from 0 to 8 [ 276.075516][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.359'. [ 277.400201][ T7546] syz.3.360(7546): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 280.786470][ T7560] bridge0: port 3(erspan0) entered blocking state [ 280.793849][ T7560] bridge0: port 3(erspan0) entered disabled state [ 280.804116][ T7560] erspan0: entered allmulticast mode [ 280.812870][ T7560] erspan0: entered promiscuous mode [ 280.820482][ T7561] erspan0: left allmulticast mode [ 280.825544][ T7561] erspan0: left promiscuous mode [ 280.831465][ T7561] bridge0: port 3(erspan0) entered disabled state [ 281.332782][ T7575] futex_wake_op: syz.3.366 tries to shift op by 144; fix this program [ 282.024823][ T7576] loop2: detected capacity change from 0 to 8 [ 282.035714][ T7575] loop3: detected capacity change from 0 to 256 [ 282.079673][ T7576] SQUASHFS error: lzo decompression failed, data probably corrupt [ 282.087792][ T7576] SQUASHFS error: Failed to read block 0x91: -5 [ 282.094051][ T7576] SQUASHFS error: Unable to read metadata cache entry [8f] [ 282.101388][ T7576] SQUASHFS error: Unable to read inode 0x11f [ 282.145967][ T7575] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 282.309415][ T28] audit: type=1800 audit(1785919710.754:143): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.366" name="file1" dev="loop3" ino=1048600 res=0 errno=0 [ 282.374691][ T7577] syz.3.366: attempt to access beyond end of device [ 282.374691][ T7577] loop3: rw=0, sector=256, nr_sectors = 8 limit=256 [ 282.453037][ T7571] syz.3.366: attempt to access beyond end of device [ 282.453037][ T7571] loop3: rw=524288, sector=5320, nr_sectors = 256 limit=256 [ 282.456968][ T7575] syz.3.366: attempt to access beyond end of device [ 282.456968][ T7575] loop3: rw=524288, sector=664, nr_sectors = 256 limit=256 [ 282.467889][ T7571] syz.3.366: attempt to access beyond end of device [ 282.467889][ T7571] loop3: rw=0, sector=5448, nr_sectors = 8 limit=256 [ 282.482504][ T7575] syz.3.366: attempt to access beyond end of device [ 282.482504][ T7575] loop3: rw=524288, sector=920, nr_sectors = 256 limit=256 [ 282.497127][ T7571] syz.3.366: attempt to access beyond end of device [ 282.497127][ T7571] loop3: rw=0, sector=5448, nr_sectors = 8 limit=256 [ 282.507883][ T7575] syz.3.366: attempt to access beyond end of device [ 282.507883][ T7575] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 282.523117][ T7571] syz.3.366: attempt to access beyond end of device [ 282.523117][ T7571] loop3: rw=0, sector=5448, nr_sectors = 8 limit=256 [ 282.534871][ T7575] syz.3.366: attempt to access beyond end of device [ 282.534871][ T7575] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 282.561035][ T7575] syz.3.366: attempt to access beyond end of device [ 282.561035][ T7575] loop3: rw=0, sector=664, nr_sectors = 8 limit=256 [ 283.550788][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 283.565849][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 283.575389][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 283.589224][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 283.611064][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 283.619683][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.050497][ T7602] loop3: detected capacity change from 0 to 128 [ 285.687331][ T5089] Bluetooth: hci4: command tx timeout [ 287.743109][ T7581] chnl_net:caif_netlink_parms(): no params data found [ 287.767855][ T5089] Bluetooth: hci4: command tx timeout [ 290.002833][ T7634] loop3: detected capacity change from 0 to 32768 [ 290.027299][ T5089] Bluetooth: hci4: command tx timeout [ 290.054068][ T7634] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 290.115675][ T139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.293095][ T7618] tipc: Started in network mode [ 290.299679][ T7618] tipc: Node identity 1000001, cluster identity 4369 [ 290.309412][ T7618] tipc: Node number set to 16777217 [ 291.008214][ T7618] tipc: Cannot configure node identity twice [ 291.020555][ T6645] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 291.089465][ T7581] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.099981][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.109951][ T7581] bridge_slave_0: entered allmulticast mode [ 291.129909][ T7581] bridge_slave_0: entered promiscuous mode [ 291.150179][ T7627] tipc: Enabling of bearer rejected, failed to enable media [ 291.232554][ T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.302238][ T7581] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.320387][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.342928][ T7581] bridge_slave_1: entered allmulticast mode [ 291.365853][ T7581] bridge_slave_1: entered promiscuous mode [ 291.738127][ T7643] loop3: detected capacity change from 0 to 16 [ 292.095996][ T5089] Bluetooth: hci4: command tx timeout [ 292.221393][ T7643] erofs: (device loop3): mounted with root inode @ nid 36. [ 292.437490][ T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.573145][ T7652] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 292.885894][ T5089] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 292.905389][ T7652] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 292.929245][ T7581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.951467][ T28] audit: type=1800 audit(1785919721.364:144): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.377" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 293.035019][ T7662] overlayfs: failed to clone lowerpath [ 293.132492][ T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.174661][ T7664] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 293.184573][ T7581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.454712][ T7581] team0: Port device team_slave_0 added [ 293.463436][ T7581] team0: Port device team_slave_1 added [ 293.802564][ T7673] 9pnet_fd: Insufficient options for proto=fd [ 293.885010][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.892129][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.919139][ T7581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.931962][ T7581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 293.939260][ T7581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.975630][ T7581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.938622][ T7581] hsr_slave_0: entered promiscuous mode [ 294.960119][ T7581] hsr_slave_1: entered promiscuous mode [ 294.972717][ T7581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.980438][ T7581] Cannot create hsr debugfs directory [ 295.409090][ T7689] loop2: detected capacity change from 0 to 32768 [ 295.460885][ T7689] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 296.730185][ T7692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.384'. [ 296.815877][ T6645] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 297.025920][ T7703] futex_wake_op: syz.2.387 tries to shift op by 144; fix this program [ 297.744472][ T7710] loop3: detected capacity change from 0 to 256 [ 301.086549][ T7732] 9pnet_fd: Insufficient options for proto=fd [ 302.425901][ T7746] futex_wake_op: syz.1.392 tries to shift op by 144; fix this program [ 302.466814][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.392'. [ 303.130565][ T7744] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 303.185911][ T7744] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 303.206626][ T7744] udc dummy_udc.0: failed to start g1: -22 [ 303.236248][ T7744] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 303.333328][ T7744] UDC core: g1: couldn't find an available UDC or it's busy [ 304.027997][ T7753] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 304.038026][ T7753] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 304.047743][ T7753] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 304.113995][ T7581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.238518][ T7581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.386423][ T7755] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 305.188174][ T7581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.217319][ T7581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.226833][ T7795] 9pnet_fd: Insufficient options for proto=fd [ 307.593329][ T7581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.829531][ T7801] loop3: detected capacity change from 0 to 8 [ 307.974069][ T7806] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 307.980972][ T7806] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 307.989993][ T7806] vhci_hcd vhci_hcd.0: Device attached [ 308.075728][ T7581] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.477031][ T1210] usb 38-1: SetAddress Request (2) to port 0 [ 308.595782][ T1210] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 308.694318][ T7807] vhci_hcd: connection closed [ 308.740270][ T1140] vhci_hcd: stop threads [ 308.891299][ T1140] vhci_hcd: release socket [ 308.942395][ T139] hsr_slave_0: left promiscuous mode [ 308.970274][ T1140] vhci_hcd: disconnect device [ 309.052360][ T139] hsr_slave_1: left promiscuous mode [ 309.158367][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.217556][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.262861][ T139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.270437][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.305621][ T139] bridge_slave_1: left allmulticast mode [ 309.319180][ T139] bridge_slave_1: left promiscuous mode [ 309.327351][ T139] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.353119][ T139] bridge_slave_0: left allmulticast mode [ 309.359149][ T139] bridge_slave_0: left promiscuous mode [ 309.364889][ T139] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.770591][ T7822] Device name cannot be null; rc = [-22] [ 310.351032][ T139] veth1_macvtap: left promiscuous mode [ 310.357095][ T139] veth0_macvtap: left promiscuous mode [ 310.366314][ T139] veth1_vlan: left promiscuous mode [ 310.372813][ T139] veth0_vlan: left promiscuous mode [ 310.584131][ T139] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 310.593618][ T139] dummy0 (unregistering): left promiscuous mode [ 310.600215][ T139] dummy0 (unregistering): left allmulticast mode [ 310.606890][ T139] bond1 (unregistering): Released all slaves [ 311.061791][ T139] team0 (unregistering): Port device team_slave_1 removed [ 311.107968][ T139] team0 (unregistering): Port device team_slave_0 removed [ 311.149890][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.195052][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.536338][ T139] bond0 (unregistering): Released all slaves [ 311.643185][ T3441] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.650396][ T3441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.768906][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.776034][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.974756][ T7581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.056814][ T7837] loop3: detected capacity change from 0 to 1024 [ 313.329050][ T7837] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.684926][ T5780] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.804575][ T1210] usb 38-1: device descriptor read/8, error -110 [ 314.689056][ T1210] usb usb38-port1: attempt power cycle [ 315.086965][ T7581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.091546][ T139] IPVS: stop unused estimator thread 0... [ 315.352819][ T1210] usb usb38-port1: unable to enumerate USB device [ 316.026447][ T7877] loop3: detected capacity change from 0 to 8 [ 317.329311][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.439147][ T7581] veth0_vlan: entered promiscuous mode [ 317.496452][ T7581] veth1_vlan: entered promiscuous mode [ 317.633167][ T7581] veth0_macvtap: entered promiscuous mode [ 317.658088][ T7581] veth1_macvtap: entered promiscuous mode [ 317.708631][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.725501][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.748988][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.769227][ T7581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.783056][ T7581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.801885][ T7581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.816532][ T7581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.829839][ T7581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.858672][ T7581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.879952][ T7581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.160142][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.187092][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.304455][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.366754][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.388131][ T7898] loop3: detected capacity change from 0 to 256 [ 318.475445][ T7898] FAT-fs (loop3): bogus number of FAT sectors [ 318.733040][ T7898] FAT-fs (loop3): Can't find a valid FAT filesystem [ 318.810699][ T7907] Device name cannot be null; rc = [-22] [ 318.843207][ T7907] loop2: detected capacity change from 0 to 64 [ 318.906083][ T7906] mmap: syz.1.422 (7906): VmData 26103808 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 320.655021][ T7930] loop3: detected capacity change from 0 to 1024 [ 320.674403][ T7930] hfsplus: umask requires a value [ 320.680239][ T7930] hfsplus: unable to parse mount options [ 320.797999][ T7927] loop4: detected capacity change from 0 to 4096 [ 320.868310][ T7927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.347741][ T28] audit: type=1800 audit(1785919749.599:145): pid=7944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.423" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 321.770593][ T7581] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.835864][ T7951] loop2: detected capacity change from 0 to 8 [ 321.915508][ T7951] SQUASHFS error: lzo decompression failed, data probably corrupt [ 321.952515][ T7951] SQUASHFS error: Failed to read block 0x91: -5 [ 321.984132][ T7951] SQUASHFS error: Unable to read metadata cache entry [8f] [ 321.991399][ T7951] SQUASHFS error: Unable to read inode 0x11f [ 322.015429][ T7954] loop3: detected capacity change from 0 to 64 [ 322.268203][ T7954] MINIX-fs: file system does not have enough imap blocks allocated. Refusing to mount. [ 323.311573][ C1] ------------[ cut here ]------------ [ 323.317516][ C1] WARNING: CPU: 1 PID: 7959 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 323.327772][ C1] Modules linked in: [ 323.331694][ C1] CPU: 1 PID: 7959 Comm: syz.4.424 Not tainted syzkaller #0 [ 323.339084][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.349202][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 323.355663][ C1] Code: f7 4c 89 ef e8 70 5b ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 ab 6f 7c f7 0f 0b e9 61 f8 ff ff e8 9f 6f 7c f7 <0f> 0b e9 85 fb ff ff e8 93 6f 7c f7 48 c7 c7 60 bd 65 8e 4c 89 e6 [ 323.375414][ C1] RSP: 0000:ffffc900001f0a18 EFLAGS: 00010246 [ 323.381641][ C1] RAX: ffffffff8a0b01e1 RBX: dffffc0000000000 RCX: ffff888026f89e00 [ 323.389681][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.397703][ C1] RBP: 0000000000000000 R08: ffff888026f89e00 R09: 0000000000000003 [ 323.405701][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d6c6440 [ 323.413749][ C1] R13: ffff88807f759424 R14: ffff88805d6c6930 R15: ffff88807f759400 [ 323.421789][ C1] FS: 00007fa22bc9b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 323.430772][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.437370][ C1] CR2: 0000001b2dd11ff8 CR3: 000000007c48d000 CR4: 00000000003506e0 [ 323.445395][ C1] Call Trace: [ 323.448765][ C1] [ 323.451664][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 323.457329][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 323.462852][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 323.469649][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 323.475317][ C1] __iterate_interfaces+0x225/0x4c0 [ 323.480537][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 323.486835][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 323.494081][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 323.500343][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 323.507427][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 323.512664][ C1] ? hw_scan_work+0xf10/0xf10 [ 323.517429][ C1] __hrtimer_run_queues+0x525/0xc10 [ 323.522737][ C1] ? hrtimer_interrupt+0x980/0x980 [ 323.527936][ C1] ? read_tsc+0x9/0x20 [ 323.532088][ C1] hrtimer_run_softirq+0x177/0x290 [ 323.537289][ C1] handle_softirqs+0x27d/0x820 [ 323.542110][ C1] ? read_tsc+0x9/0x20 [ 323.546212][ C1] ? ktime_get+0x24b/0x280 [ 323.550717][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 323.555518][ C1] ? do_softirq+0x1a0/0x1a0 [ 323.560096][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 323.565325][ C1] __irq_exit_rcu+0xd3/0x190 [ 323.569264][ T49] ------------[ cut here ]------------ [ 323.569954][ C1] ? irq_exit_rcu+0x20/0x20 [ 323.575687][ T49] WARNING: CPU: 0 PID: 49 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 323.580220][ C1] irq_exit_rcu+0x9/0x20 [ 323.591079][ T49] Modules linked in: [ 323.595238][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 323.599185][ T49] CPU: 0 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 323.604857][ C1] [ 323.604867][ C1] [ 323.612282][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.612297][ T49] Workqueue: phy9 ieee80211_csa_finalize_work [ 323.615212][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.618130][ T49] [ 323.618140][ T49] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 323.628211][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 323.628234][ C1] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 323.628247][ C1] RSP: 0000:ffffc9000d0272a0 EFLAGS: 00000286 [ 323.628275][ C1] RAX: 8060fb49ef903b00 RBX: 0000000000000000 RCX: 8060fb49ef903b00 [ 323.628288][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 323.628300][ C1] RBP: ffffc9000d0272f0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 323.628313][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff888026f89e00 [ 323.628327][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8164f8e0 [ 323.628342][ C1] ? requeue_task_rt+0x400/0x400 [ 323.628380][ C1] __schedule+0x15b6/0x4660 [ 323.634498][ T49] Code: 48 89 df e8 d4 44 d0 f7 e9 d6 fc ff ff e8 7a c2 77 f7 eb 24 e8 73 c2 77 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 62 c2 77 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 54 c2 77 f7 48 8b 7c 24 08 4c 8b 74 [ 323.640425][ C1] ? asan.module_dtor+0x20/0x20 [ 323.640452][ C1] ? mark_lock+0x94/0x320 [ 323.640490][ C1] schedule+0xbd/0x170 [ 323.640511][ C1] schedule_timeout+0xc1/0x2d0 [ 323.640541][ C1] ? console_conditional_schedule+0x40/0x40 [ 323.640567][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 323.640600][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 323.640631][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 323.640704][ C1] ? unix_find_other+0x8e0/0x8e0 [ 323.640724][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 323.640749][ C1] ? wake_bit_function+0x200/0x200 [ 323.640773][ C1] ? __rwlock_init+0x150/0x150 [ 323.640797][ C1] ? skb_copy_datagram_from_iter+0x643/0x6f0 [ 323.643134][ T49] RSP: 0018:ffffc90000b9f9c0 EFLAGS: 00010293 [ 323.650452][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 323.650508][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 323.650553][ C1] ? unix_dgram_poll+0x680/0x680 [ 323.656395][ T49] [ 323.675988][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 323.676074][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 323.676098][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 323.676124][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 323.676146][ C1] ? unix_dgram_poll+0x680/0x680 [ 323.676171][ C1] ____sys_sendmsg+0x61b/0x980 [ 323.682374][ T49] RAX: ffffffff8a0fab12 RBX: 0000000000000001 RCX: ffff88801969da00 [ 323.690351][ C1] ? __asan_memset+0x22/0x40 [ 323.698419][ T49] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 323.706360][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 323.714351][ T49] RBP: dffffc0000000000 R08: ffff88805d6c562f R09: 1ffff1100bad8ac5 [ 323.722361][ C1] ? __import_iovec+0x3fa/0x850 [ 323.727313][ T49] R10: dffffc0000000000 R11: ffffed100bad8ac6 R12: 0000000000000001 [ 323.731851][ C1] ? import_iovec+0x73/0xa0 [ 323.751922][ T49] R13: ffff88805d6c6659 R14: ffff88807e2e2d48 R15: ffff88801e3ef700 [ 323.756329][ C1] ___sys_sendmsg+0x2a6/0x360 [ 323.760634][ T49] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 323.764725][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 323.764785][ C1] ? __might_fault+0xc6/0x120 [ 323.769535][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.775435][ C1] ? __might_fault+0xaa/0x120 [ 323.780437][ T49] CR2: 00007fa22adeb700 CR3: 000000007c48d000 CR4: 00000000003506f0 [ 323.785646][ C1] __sys_sendmmsg+0x2ca/0x510 [ 323.785677][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 323.790684][ T49] Call Trace: [ 323.795645][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 323.800650][ T49] [ 323.805783][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.810527][ T49] ieee80211_link_use_reserved_context+0x37b/0x5c0 [ 323.816511][ C1] ? lock_chain_count+0x20/0x20 [ 323.816541][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 323.816564][ C1] do_syscall_64+0x55/0xb0 [ 323.816583][ C1] ? clear_bhb_loop+0x40/0x90 [ 323.816605][ C1] ? clear_bhb_loop+0x40/0x90 [ 323.816624][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.816644][ C1] RIP: 0033:0x7fa22ad9e019 [ 323.816674][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.816689][ C1] RSP: 002b:00007fa22bc9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.822756][ T49] ieee80211_csa_finalize+0x571/0xeb0 [ 323.827959][ C1] RAX: ffffffffffffffda RBX: 00007fa22b025fa0 RCX: 00007fa22ad9e019 [ 323.827975][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000008 [ 323.827990][ C1] RBP: 00007fa22ae3500c R08: 0000000000000000 R09: 0000000000000000 [ 323.833075][ T49] ? mutex_lock_nested+0x20/0x20 [ 323.838016][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.838029][ C1] R13: 00007fa22b026038 R14: 00007fa22b025fa0 R15: 00007ffc5e9fb378 [ 323.840345][ T49] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.846747][ C1] [ 323.852306][ T49] ? ieee80211_csa_finalize_work+0x140/0x140 [ 323.857571][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 323.857581][ C1] CPU: 1 PID: 7959 Comm: syz.4.424 Not tainted syzkaller #0 [ 323.857599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.857609][ C1] Call Trace: [ 323.857618][ C1] [ 323.857624][ C1] dump_stack_lvl+0x18c/0x250 [ 323.857650][ C1] ? show_regs_print_info+0x20/0x20 [ 323.857670][ C1] ? load_image+0x420/0x420 [ 323.857748][ C1] panic+0x2ca/0x720 [ 323.857779][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 323.857817][ C1] __warn+0x2e0/0x470 [ 323.857840][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 323.857868][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 323.857893][ C1] report_bug+0x2be/0x4f0 [ 323.857976][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 323.858002][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 323.858026][ C1] ? __ieee80211_beacon_get+0x1143/0x1520 [ 323.858052][ C1] handle_bug+0xcf/0x120 [ 323.858079][ C1] exc_invalid_op+0x1a/0x50 [ 323.858099][ C1] asm_exc_invalid_op+0x1a/0x20 [ 323.858118][ C1] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 323.858145][ C1] Code: f7 4c 89 ef e8 70 5b ba f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 ab 6f 7c f7 0f 0b e9 61 f8 ff ff e8 9f 6f 7c f7 <0f> 0b e9 85 fb ff ff e8 93 6f 7c f7 48 c7 c7 60 bd 65 8e 4c 89 e6 [ 323.858160][ C1] RSP: 0000:ffffc900001f0a18 EFLAGS: 00010246 [ 323.858177][ C1] RAX: ffffffff8a0b01e1 RBX: dffffc0000000000 RCX: ffff888026f89e00 [ 323.858191][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.858202][ C1] RBP: 0000000000000000 R08: ffff888026f89e00 R09: 0000000000000003 [ 323.858214][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805d6c6440 [ 323.858225][ C1] R13: ffff88807f759424 R14: ffff88805d6c6930 R15: ffff88807f759400 [ 323.858256][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 323.858287][ C1] ? __ieee80211_beacon_get+0x1141/0x1520 [ 323.858312][ C1] ? __ieee80211_beacon_get+0x36/0x1520 [ 323.858346][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 323.858376][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 323.858411][ C1] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 323.858442][ C1] __iterate_interfaces+0x225/0x4c0 [ 323.858462][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 323.858484][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 323.858507][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 323.858528][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 323.858553][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 323.858573][ C1] ? hw_scan_work+0xf10/0xf10 [ 323.858597][ C1] __hrtimer_run_queues+0x525/0xc10 [ 323.858635][ C1] ? hrtimer_interrupt+0x980/0x980 [ 323.858654][ C1] ? read_tsc+0x9/0x20 [ 323.858683][ C1] hrtimer_run_softirq+0x177/0x290 [ 323.858709][ C1] handle_softirqs+0x27d/0x820 [ 323.858727][ C1] ? read_tsc+0x9/0x20 [ 323.858745][ C1] ? ktime_get+0x24b/0x280 [ 323.858768][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 323.858791][ C1] ? do_softirq+0x1a0/0x1a0 [ 323.858814][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 323.858840][ C1] __irq_exit_rcu+0xd3/0x190 [ 323.858863][ C1] ? irq_exit_rcu+0x20/0x20 [ 323.858893][ C1] irq_exit_rcu+0x9/0x20 [ 323.858910][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 323.858934][ C1] [ 323.858940][ C1] [ 323.858947][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.858967][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 323.858987][ C1] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 323.859000][ C1] RSP: 0000:ffffc9000d0272a0 EFLAGS: 00000286 [ 323.859015][ C1] RAX: 8060fb49ef903b00 RBX: 0000000000000000 RCX: 8060fb49ef903b00 [ 323.859027][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 323.859040][ C1] RBP: ffffc9000d0272f0 R08: ffffffff8e8c7aef R09: 1ffffffff1d18f5d [ 323.859054][ C1] R10: dffffc0000000000 R11: fffffbfff1d18f5e R12: ffff888026f89e00 [ 323.859067][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8164f8e0 [ 323.859079][ C1] ? requeue_task_rt+0x400/0x400 [ 323.859116][ C1] __schedule+0x15b6/0x4660 [ 323.859160][ C1] ? asan.module_dtor+0x20/0x20 [ 323.859184][ C1] ? mark_lock+0x94/0x320 [ 323.859219][ C1] schedule+0xbd/0x170 [ 323.859240][ C1] schedule_timeout+0xc1/0x2d0 [ 323.859272][ C1] ? console_conditional_schedule+0x40/0x40 [ 323.859299][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 323.859328][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 323.859356][ C1] unix_wait_for_peer+0x1f6/0x2f0 [ 323.859380][ C1] ? unix_find_other+0x8e0/0x8e0 [ 323.859397][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 323.859421][ C1] ? wake_bit_function+0x200/0x200 [ 323.859441][ C1] ? __rwlock_init+0x150/0x150 [ 323.859463][ C1] ? skb_copy_datagram_from_iter+0x643/0x6f0 [ 323.859495][ C1] ? bpf_lsm_unix_may_send+0x9/0x10 [ 323.859521][ C1] unix_dgram_sendmsg+0xee4/0x16e0 [ 323.859560][ C1] ? unix_dgram_poll+0x680/0x680 [ 323.859578][ C1] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 323.859612][ C1] ? apparmor_socket_sendmsg+0x8e/0x330 [ 323.859633][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 323.859655][ C1] ? security_socket_sendmsg+0x80/0xa0 [ 323.859672][ C1] ? unix_dgram_poll+0x680/0x680 [ 323.859705][ C1] ____sys_sendmsg+0x61b/0x980 [ 323.859732][ C1] ? __asan_memset+0x22/0x40 [ 323.859755][ C1] ? __sys_sendmsg_sock+0x30/0x30 [ 323.859773][ C1] ? __import_iovec+0x3fa/0x850 [ 323.859806][ C1] ? import_iovec+0x73/0xa0 [ 323.859834][ C1] ___sys_sendmsg+0x2a6/0x360 [ 323.859859][ C1] ? __sys_sendmsg+0x2b0/0x2b0 [ 323.859918][ C1] ? __might_fault+0xc6/0x120 [ 323.859935][ C1] ? __might_fault+0xaa/0x120 [ 323.859956][ C1] __sys_sendmmsg+0x2ca/0x510 [ 323.859981][ C1] ? __ia32_sys_sendmsg+0x90/0x90 [ 323.860010][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 323.860042][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 323.860066][ C1] ? lock_chain_count+0x20/0x20 [ 323.860094][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 323.860117][ C1] do_syscall_64+0x55/0xb0 [ 323.860134][ C1] ? clear_bhb_loop+0x40/0x90 [ 323.860153][ C1] ? clear_bhb_loop+0x40/0x90 [ 323.860173][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.860192][ C1] RIP: 0033:0x7fa22ad9e019 [ 323.860209][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.860222][ C1] RSP: 002b:00007fa22bc9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.860240][ C1] RAX: ffffffffffffffda RBX: 00007fa22b025fa0 RCX: 00007fa22ad9e019 [ 323.860258][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000008 [ 323.860269][ C1] RBP: 00007fa22ae3500c R08: 0000000000000000 R09: 0000000000000000 [ 323.860280][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.860291][ C1] R13: 00007fa22b026038 R14: 00007fa22b025fa0 R15: 00007ffc5e9fb378 [ 323.860318][ C1] [ 323.863239][ C1] Kernel Offset: disabled