last executing test programs: 17.894162171s ago: executing program 2 (id=103): r0 = shmget(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, 0x0, 0x0) shmctl$SHM_STAT(r0, 0xd, 0x0) 16.663289785s ago: executing program 2 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x21, 0x5, 0x1}, 0x50) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002c80)={0x2020}, 0x2020) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, 0x0) bpf$MAP_UPDATE_CONST_STR(0x15, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), 0x0}, 0x20) 15.443239358s ago: executing program 2 (id=109): syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x40, 0x3d, 0x26, 0x20, 0xa5c, 0x2033, 0x166d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfc, 0x80, 0x80, 0x10, [{{0x9, 0x4, 0x61, 0x94, 0x0, 0xbf, 0x7c, 0x33, 0x8}}]}}]}}, 0x0) 14.183358053s ago: executing program 1 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000000900"], 0x24}}, 0x0) 13.031171295s ago: executing program 3 (id=114): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file2\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c6163746976655f6c6f67733d362c6661756c745f696e6a656374696f6e3d303030303030303030303030303030303132363600006c6c6f635f6d08006e6f61636c2c686561702c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c636f6d70726573735f63616368652c6a71666d743d7666736f6c642c006c27715578049a57a70544af8735aac0ef19142df79cebff54cc2c2975122bd1a6c9ddce762d"], 0x0, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@private=0xa010104, 0x4e20, 0x4, 0x1000401}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 12.887230118s ago: executing program 0 (id=116): socket$netlink(0x10, 0x3, 0x8000000004) init_module(&(0x7f0000000b00)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x4, 0x1, 0xf, 0x3, 0x3e, 0x7, 0x76, 0x40, 0xb4, 0x4, 0x9, 0x38, 0x1, 0x5, 0x4, 0x4}, [{0x6474e551, 0x6, 0x1000, 0xffffffffffffff81, 0x2, 0x2, 0xce1afc2, 0x4ad0}]}, 0x78, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x100}, {0x6}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11.661628952s ago: executing program 0 (id=117): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000010000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket(0xa, 0x3, 0x3a) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, 0x0, 0x0) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB]) socket$inet_smc(0x2b, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff, 0x2}}) 11.379664627s ago: executing program 2 (id=118): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioprio_get$pid(0x1, r0) 10.043349603s ago: executing program 0 (id=119): r0 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x1000, &(0x7f00000008c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000e00)=[&(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x6, 0xa, r0, 0x0, 0x0, 0x2, 0x0, 0x2}]) 9.704114131s ago: executing program 1 (id=120): syz_open_dev$sndctrl(&(0x7f0000000380), 0x1ff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) getitimer(0x0, &(0x7f0000000040)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, 0x0, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r3, 0x110, 0x1, &(0x7f0000000300)='GPL\x00', 0x4) fsopen(&(0x7f0000000540)='jfs\x00', 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0], 0x74}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs(0x0, 0x0) 9.639446512s ago: executing program 0 (id=121): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e3659902362e, 0x100000, 0x0, 0x7ffff, 0x7, 0x20000, 0x0, 0x0, 0x7}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r0, 0x0) r1 = syz_io_uring_setup(0x24fa, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.063372883s ago: executing program 0 (id=122): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edc01"], 0x0) r1 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x1c881, 0x8, 0xd1, 0x0, r0}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.114877021s ago: executing program 3 (id=123): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x9e0eadae347b960d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002940)=""/102400, 0x19000) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000015000103000000c2000000000100"], 0x14}}, 0x0) write$nci(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="610507080207060109e30540227b6444550156d30cffa3051084b560927956a21c48a563cfc60e9bf2e2f38428e8dcf10da71b3e1a5e6a19a15ee3eaed81fa0f63360e26d6b43363750156c068d68f986b7b610c6a25bba1abfc436c53a62c456920f62c1dbaa2"], 0x67) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) 7.835465707s ago: executing program 1 (id=124): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000000)={@id={0x2, 0x0, @c}}) sendto$inet6(r0, &(0x7f0000000380)="a65c", 0x2, 0x4008000, &(0x7f0000000100)={0xa, 0x4e20, 0x8, @private2, 0x3ff}, 0x1c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet6(r0, &(0x7f0000000200)={&(0x7f0000000040)={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xcfd}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)='S', 0x1}], 0x1}, 0x4000090) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r2, 0x5}, 0x8) 7.487341004s ago: executing program 2 (id=125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.65349839s ago: executing program 1 (id=126): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r0}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000100), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r4, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{0x0}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r6) syz_open_procfs$namespace(r1, &(0x7f0000000400)='ns/ipc\x00') write$binfmt_aout(r4, 0x0, 0xfdef) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000300)=0x1) 6.63284887s ago: executing program 3 (id=127): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) uname(0x0) unshare(0x22020400) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 4.359209524s ago: executing program 1 (id=128): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x63, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902510002040800070904880400f7f98a060724060000d2cf0524001c620d240f01000000000200050002090403080353ee970509050f0300040609fe09050d00000402070e00"/99], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) 4.301625665s ago: executing program 0 (id=129): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000180)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x10, 0x6db, 0x64, 0x0, 0x4, 0xb05, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) r2 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x4048081) close(0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fremovexattr(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="74e756000000000000"]) 4.281061546s ago: executing program 2 (id=130): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getpid() mmap(&(0x7f00002eb000/0x4000)=nil, 0x4000, 0x2000000, 0x2010, 0xffffffffffffffff, 0xc8cfe000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_open_dev$video(0x0, 0x8, 0x1) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000000)={0xb, @raw_data="06fc9f6ec851f71e0e7ec0b7c15d3ca318ba169cb54078963aa0792702fe413efd18f6274d170e33ce14b272a279618971e3c218a475c8ad776f090f53ef4ec4b8415f11ea3ac0f385a4be33a0f93c36d3eb964b84c7073aaef853b8e8b4717ca6081a226b31059abf59d8ca5a49113f28099dc0cdcb7f2d36366493ab9ad6b89a2a4ccaab61535776a916a299137374d31b44d820bae5b26e45313f876f16369004d5e11e26223681d898888072bce3b43d200579a7411e174b150f4ca8f69ca745da93b3fa55a6"}) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0x8004b707, 0x0) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4) 2.391369743s ago: executing program 3 (id=131): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, 0x0) 2.02540523s ago: executing program 3 (id=132): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x2008000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bc, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x40000, 0x100) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f00000000c0)={0x7, 0x11, 0x0, 0x17, 0x4, 0x0, 0x5, 0x149, 0x1}) 668.22µs ago: executing program 1 (id=133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_exit\x00', r1, 0x0, 0x4000000000000004}, 0x18) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1600) 0s ago: executing program 3 (id=141): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000000101"], 0x64}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 83.325233][ T5779] cgroup: Unknown subsys name 'net' [ 83.461877][ T5779] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.173851][ T5779] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.440791][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.449991][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.458243][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.467832][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.476739][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 87.484226][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.503153][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.524777][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.542577][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.561503][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.573744][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.591978][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.599945][ T5796] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.659784][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.667875][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.676568][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.676703][ T5795] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.686372][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.699208][ T5804] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 87.703347][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 87.707893][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.714797][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.727938][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 87.737337][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.418861][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 88.494173][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 88.524542][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 88.618444][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 88.678044][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.685633][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.694189][ T5790] bridge_slave_0: entered allmulticast mode [ 88.701644][ T5790] bridge_slave_0: entered promiscuous mode [ 88.719107][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.726345][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.733640][ T5790] bridge_slave_1: entered allmulticast mode [ 88.740645][ T5790] bridge_slave_1: entered promiscuous mode [ 88.817236][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.826009][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.833967][ T5794] bridge_slave_0: entered allmulticast mode [ 88.841080][ T5794] bridge_slave_0: entered promiscuous mode [ 88.873831][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.889845][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.897077][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.904642][ T5798] bridge_slave_0: entered allmulticast mode [ 88.914680][ T5798] bridge_slave_0: entered promiscuous mode [ 88.923424][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.930594][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.938499][ T5794] bridge_slave_1: entered allmulticast mode [ 88.945684][ T5794] bridge_slave_1: entered promiscuous mode [ 88.959505][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.982957][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.990165][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.997676][ T5798] bridge_slave_1: entered allmulticast mode [ 89.005247][ T5798] bridge_slave_1: entered promiscuous mode [ 89.087543][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.128954][ T5790] team0: Port device team_slave_0 added [ 89.137759][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.162125][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.174120][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.183967][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.192361][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.199673][ T5800] bridge_slave_0: entered allmulticast mode [ 89.206948][ T5800] bridge_slave_0: entered promiscuous mode [ 89.215970][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.223186][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.230490][ T5800] bridge_slave_1: entered allmulticast mode [ 89.238117][ T5800] bridge_slave_1: entered promiscuous mode [ 89.246564][ T5790] team0: Port device team_slave_1 added [ 89.320441][ T5798] team0: Port device team_slave_0 added [ 89.330255][ T5798] team0: Port device team_slave_1 added [ 89.361986][ T5794] team0: Port device team_slave_0 added [ 89.391420][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.398539][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.426578][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.440498][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.447968][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.474098][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.501850][ T5794] team0: Port device team_slave_1 added [ 89.510238][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.530402][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.607917][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.615212][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.641609][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.653826][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.660904][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.687804][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.702786][ T5801] Bluetooth: hci0: command tx timeout [ 89.720814][ T5800] team0: Port device team_slave_0 added [ 89.732261][ T5800] team0: Port device team_slave_1 added [ 89.738880][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.746454][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.773207][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.784183][ T5795] Bluetooth: hci1: command tx timeout [ 89.790309][ T5801] Bluetooth: hci3: command tx timeout [ 89.796986][ T5795] Bluetooth: hci2: command tx timeout [ 89.796992][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.808796][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.835964][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.913121][ T5790] hsr_slave_0: entered promiscuous mode [ 89.919774][ T5790] hsr_slave_1: entered promiscuous mode [ 89.944163][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.951335][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.977427][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.993981][ T5798] hsr_slave_0: entered promiscuous mode [ 90.000627][ T5798] hsr_slave_1: entered promiscuous mode [ 90.007353][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.016950][ T5798] Cannot create hsr debugfs directory [ 90.047303][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.054465][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.080794][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.157782][ T5794] hsr_slave_0: entered promiscuous mode [ 90.165037][ T5794] hsr_slave_1: entered promiscuous mode [ 90.171442][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.179049][ T5794] Cannot create hsr debugfs directory [ 90.300438][ T5800] hsr_slave_0: entered promiscuous mode [ 90.307207][ T5800] hsr_slave_1: entered promiscuous mode [ 90.314166][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.322192][ T5800] Cannot create hsr debugfs directory [ 90.669428][ T5798] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.703982][ T5798] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.716864][ T5798] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.728696][ T5798] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.808438][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.823821][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.835508][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.856908][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.939363][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.964099][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.974767][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.009128][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.092922][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.112133][ T5800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.124135][ T5800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.135784][ T5800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.147564][ T5800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.213799][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.275890][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.283326][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.317747][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.336322][ T3506] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.343535][ T3506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.416861][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.437822][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.465120][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.472460][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.501766][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.540078][ T2907] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.547377][ T2907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.568197][ T2907] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.575493][ T2907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.606451][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.613924][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.720165][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.775228][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.782335][ T5795] Bluetooth: hci0: command tx timeout [ 91.810559][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.817886][ T3545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.848063][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.855345][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.874789][ T5795] Bluetooth: hci3: command tx timeout [ 91.878512][ T5801] Bluetooth: hci2: command tx timeout [ 91.880244][ T5795] Bluetooth: hci1: command tx timeout [ 92.045415][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.074766][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.217444][ T5798] veth0_vlan: entered promiscuous mode [ 92.261845][ T5798] veth1_vlan: entered promiscuous mode [ 92.340078][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.354421][ T1186] cfg80211: failed to load regulatory.db [ 92.395152][ T5798] veth0_macvtap: entered promiscuous mode [ 92.426461][ T5798] veth1_macvtap: entered promiscuous mode [ 92.478421][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.500337][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.529716][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.539645][ T5794] veth0_vlan: entered promiscuous mode [ 92.563171][ T5798] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.573297][ T5798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.583509][ T5798] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.592367][ T5798] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609985][ T5794] veth1_vlan: entered promiscuous mode [ 92.710007][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.763333][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.782595][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.811724][ T5794] veth0_macvtap: entered promiscuous mode [ 92.819713][ T5790] veth0_vlan: entered promiscuous mode [ 92.852278][ T5794] veth1_macvtap: entered promiscuous mode [ 92.866996][ T5790] veth1_vlan: entered promiscuous mode [ 92.885550][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.893815][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.945923][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.968023][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.980838][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.020679][ T5790] veth0_macvtap: entered promiscuous mode [ 93.044315][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.058690][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.079329][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.104224][ T5794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.115204][ T5794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.129235][ T5794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.138174][ T5794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169789][ T5800] veth0_vlan: entered promiscuous mode [ 93.195028][ T5800] veth1_vlan: entered promiscuous mode [ 93.214793][ T5790] veth1_macvtap: entered promiscuous mode [ 93.389373][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.406157][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.420476][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.432489][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.444427][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.568746][ T5885] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 93.822403][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.887090][ T5795] Bluetooth: hci0: command tx timeout [ 93.945525][ T5795] Bluetooth: hci2: command tx timeout [ 93.952751][ T5795] Bluetooth: hci3: command tx timeout [ 93.958533][ T5795] Bluetooth: hci1: command tx timeout [ 94.193480][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.205129][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.232229][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.264847][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.285081][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.299049][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.307901][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.326185][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.399050][ T5800] veth0_macvtap: entered promiscuous mode [ 94.430061][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.451689][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.461333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.468531][ T5800] veth1_macvtap: entered promiscuous mode [ 95.049795][ T5889] vivid-000: disconnect [ 95.058340][ T5888] 9pnet_fd: Insufficient options for proto=fd [ 95.066857][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.068262][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.085334][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.097033][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.110802][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.121904][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.132513][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.143537][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.156525][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.189501][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.212812][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.224038][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.227087][ T5886] vivid-000: reconnect [ 95.235159][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.262552][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.282142][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.322872][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.395991][ T5800] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.405575][ T5800] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.425633][ T5800] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.439812][ T5800] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.725329][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.733440][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.806527][ T5899] overlayfs: missing 'lowerdir' [ 96.127958][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.272179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.652949][ T5801] Bluetooth: hci0: command tx timeout [ 96.658407][ T5795] Bluetooth: hci1: command tx timeout [ 96.658455][ T5793] Bluetooth: hci3: command tx timeout [ 96.664412][ T5795] Bluetooth: hci2: command tx timeout [ 96.741152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.886085][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.907982][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.946568][ T5902] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7'. [ 96.991462][ T3545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.005714][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.046392][ T3545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.149919][ T3506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.170126][ T3506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.414032][ T5912] syz.3.4[5912]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 97.461885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 97.867855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.877634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.970874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.072339][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.737634][ T5925] loop1: detected capacity change from 0 to 256 [ 98.835428][ T5925] exfat: Deprecated parameter 'utf8' [ 98.902076][ T5926] loop0: detected capacity change from 0 to 2048 [ 99.075465][ T5925] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d) [ 99.089317][ T5926] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.157485][ T5912] loop3: detected capacity change from 0 to 32768 [ 99.303956][ T5912] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.333727][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.465556][ T5912] XFS (loop3): Ending clean mount [ 99.626699][ T5912] XFS (loop3): Quotacheck needed: Please wait. [ 100.547125][ T5912] XFS (loop3): Quotacheck: Done. [ 100.596271][ T5800] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 100.846297][ T5950] loop2: detected capacity change from 0 to 2048 [ 100.911093][ T5950] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 100.997451][ T5950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.807507][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.063339][ T5967] syzkaller1: entered promiscuous mode [ 102.070739][ T5967] syzkaller1: entered allmulticast mode [ 103.378317][ T5981] loop3: detected capacity change from 0 to 4096 [ 103.426276][ T5981] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 104.059360][ T5978] loop0: detected capacity change from 0 to 4096 [ 104.122501][ T5978] ntfs3: Unexpected value for 'prealloc' [ 104.248521][ T5803] I/O error, dev loop0, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.285928][ T5981] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 104.331737][ T5981] ntfs3: loop3: Failed to load $Extend (-22). [ 104.338067][ T5981] ntfs3: loop3: Failed to initialize $Extend. [ 104.546747][ T5897] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 105.421835][ T5897] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 105.893091][ T5994] can0: slcan on ptm0. [ 105.938453][ T5992] fido_id[5992]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 105.963912][ T6003] ======================================================= [ 105.963912][ T6003] WARNING: The mand mount option has been deprecated and [ 105.963912][ T6003] and is ignored by this kernel. Remove the mand [ 105.963912][ T6003] option from the mount to silence this warning. [ 105.963912][ T6003] ======================================================= [ 106.761726][ T5843] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.848028][ T5993] can0 (unregistered): slcan off ptm0. [ 107.013844][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 107.038630][ T5843] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 107.052970][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.093521][ T5843] usb 3-1: config 0 descriptor?? [ 107.369937][ T5843] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 107.454635][ T6016] loop1: detected capacity change from 0 to 40427 [ 107.494343][ T6016] F2FS-fs (loop1): build fault injection attr: rate: 14, type: 0x7ffff [ 107.498424][ T5843] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 107.562488][ T5843] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 107.580756][ T5843] usb 3-1: media controller created [ 107.734233][ T5843] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.932680][ T5843] DVB: Unable to find symbol dib7000p_attach() [ 107.952949][ T5843] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 108.201085][ T5843] rc_core: IR keymap rc-dib0700-rc5 not found [ 108.223482][ T5843] Registered IR keymap rc-empty [ 108.274139][ T5843] dvb-usb: could not initialize remote control. [ 108.288291][ T5843] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 108.303770][ T6018] loop0: detected capacity change from 0 to 32768 [ 108.348010][ T6018] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.39 (6018) [ 108.551994][ T5843] usb 3-1: USB disconnect, device number 2 [ 109.048493][ T5843] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 109.317418][ T6014] loop3: detected capacity change from 0 to 32768 [ 109.392911][ T6018] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 109.453797][ T6018] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 109.463807][ T6018] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 109.481053][ T6018] BTRFS info (device loop0): use zstd compression, level 3 [ 109.488427][ T6018] BTRFS info (device loop0): using free space tree [ 109.505666][ T6014] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 109.817885][ T6018] BTRFS info (device loop0): enabling ssd optimizations [ 109.840344][ T6014] XFS (loop3): Ending clean mount [ 109.859163][ T6018] BTRFS info (device loop0): auto enabling async discard [ 110.120818][ T6073] loop2: detected capacity change from 0 to 40427 [ 110.150304][ T6073] F2FS-fs (loop2): invalid crc value [ 110.159685][ T6014] XFS (loop3): Quotacheck needed: Please wait. [ 110.216287][ T6073] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.285737][ T6073] F2FS-fs (loop2): Start checkpoint disabled! [ 110.311249][ T6073] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 110.496579][ T6080] syz.2.44: attempt to access beyond end of device [ 110.496579][ T6080] loop2: rw=2049, sector=77824, nr_sectors = 984 limit=40427 [ 110.673477][ T28] audit: type=1800 audit(1757903712.203:2): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.44" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 110.866550][ T5790] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 110.878600][ T6014] XFS (loop3): Quotacheck: Done. [ 111.112160][ T5800] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.219430][ T2974] kworker/u4:11: attempt to access beyond end of device [ 111.219430][ T2974] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 111.269945][ T2974] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 111.316048][ T2974] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 111.324468][ T5792] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 9 /dev/loop0 scanned by udevd (5792) [ 111.455806][ T6086] kAFS: No cell specified [ 113.247195][ T6104] loop2: detected capacity change from 0 to 256 [ 113.492732][ T6106] loop7: detected capacity change from 0 to 7 [ 113.524140][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.533617][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.651548][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.660766][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.676274][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.685506][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.701380][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.710612][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.720515][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.729800][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.781315][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.790619][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.820971][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 113.830208][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 113.869094][ T6106] ldm_validate_partition_table(): Disk read failed. [ 114.017084][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.026387][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.045961][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.055192][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.072360][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.081695][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 114.097418][ T6106] Dev loop7: unable to read RDB block 0 [ 114.296713][ T6106] loop7: unable to read partition table [ 114.332728][ T6106] loop7: partition table beyond EOD, truncated [ 114.371390][ T6106] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 116.187233][ T6119] Zero length message leads to an empty skb [ 117.447290][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 117.462504][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 117.478056][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.58'. [ 117.679857][ T6139] loop2: detected capacity change from 0 to 164 [ 118.081410][ T1186] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 118.332736][ T6135] loop1: detected capacity change from 0 to 4096 [ 118.343274][ T6135] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 118.352961][ T1186] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 118.353017][ T1186] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.353036][ T1186] usb 1-1: config 0 has no interface number 0 [ 118.353083][ T1186] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 118.353106][ T1186] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.361439][ T1186] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 118.361467][ T1186] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.361488][ T1186] usb 1-1: Product: syz [ 118.361502][ T1186] usb 1-1: Manufacturer: syz [ 118.361516][ T1186] usb 1-1: SerialNumber: syz [ 118.422825][ T1186] usb 1-1: config 0 descriptor?? [ 118.523012][ T6135] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 120.095721][ T6138] loop0: detected capacity change from 0 to 1764 [ 121.313560][ T6155] loop2: detected capacity change from 0 to 1024 [ 121.351231][ T6155] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.371484][ T6155] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 121.406036][ T1186] usbtouchscreen: probe of 1-1:0.117 failed with error -71 [ 121.448940][ T6155] EXT4-fs (loop2): orphan cleanup on readonly fs [ 121.475830][ T6155] EXT4-fs error (device loop2): __ext4_get_inode_loc:4483: comm syz.2.65: Invalid inode table block 0 in block_group 0 [ 121.478139][ T1186] usb 1-1: USB disconnect, device number 2 [ 121.561480][ T6155] EXT4-fs (loop2): Remounting filesystem read-only [ 121.568102][ T6155] Quota error (device loop2): write_blk: dquota write failed [ 121.612470][ T6155] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 121.645863][ T6155] EXT4-fs (loop2): 1 truncate cleaned up [ 121.702200][ T6155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 121.825796][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.911192][ T5843] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.266157][ T5843] usb 4-1: unable to get BOS descriptor or descriptor too short [ 122.384418][ T5843] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 122.507734][ T5843] usb 4-1: can't read configurations, error -71 [ 123.049496][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 123.371132][ T55] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 123.383495][ T6189] loop2: detected capacity change from 0 to 1024 [ 123.553623][ T6189] hfsplus: bad catalog entry type [ 123.591804][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 123.604041][ T55] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 123.641922][ T55] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 123.669645][ T3506] hfsplus: b-tree write err: -5, ino 4 [ 123.683018][ T55] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 123.718862][ T55] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 123.757883][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.786045][ T55] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 123.841095][ T55] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 123.869990][ T55] usb 2-1: Product: syz [ 123.892023][ T55] usb 2-1: Manufacturer: syz [ 123.908362][ T55] usb 2-1: SerialNumber: syz [ 123.954097][ T55] usb 2-1: config 0 descriptor?? [ 124.008014][ T55] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 124.779684][ T55] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 124.963424][ T6199] loop0: detected capacity change from 0 to 32768 [ 127.011352][ T28] audit: type=1800 audit(1757903727.173:3): pid=6207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.79" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 127.092767][ T6198] sctp: failed to load transform for md5: -2 [ 127.596990][ T6217] syz.2.84 uses obsolete (PF_INET,SOCK_PACKET) [ 127.824365][ T1186] usb 2-1: USB disconnect, device number 2 [ 127.859958][ T1186] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 129.164641][ T6224] loop3: detected capacity change from 0 to 32768 [ 130.552258][ T28] audit: type=1800 audit(1757903731.433:4): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.87" name="file1" dev="loop3" ino=9 res=0 errno=0 [ 130.883176][ T6234] Driver unsupported XDP return value 0 on prog (id 8) dev N/A, expect packet loss! [ 133.306305][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.316634][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.703762][ T6264] loop2: detected capacity change from 0 to 512 [ 133.831151][ T28] audit: type=1326 audit(1757903735.583:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 133.856068][ T6268] loop0: detected capacity change from 0 to 512 [ 133.990182][ T6268] EXT4-fs: Ignoring removed oldalloc option [ 134.052530][ T28] audit: type=1326 audit(1757903735.583:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.079975][ T28] audit: type=1326 audit(1757903735.593:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.787036][ T6268] EXT4-fs (loop0): 1 truncate cleaned up [ 134.794056][ T6264] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.806990][ T6264] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.817607][ T28] audit: type=1326 audit(1757903735.593:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.852501][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.874786][ T28] audit: type=1326 audit(1757903735.593:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.971127][ T28] audit: type=1326 audit(1757903735.593:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.971183][ T28] audit: type=1326 audit(1757903735.593:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.971230][ T28] audit: type=1326 audit(1757903735.593:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.971274][ T28] audit: type=1326 audit(1757903735.593:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 134.971318][ T28] audit: type=1326 audit(1757903735.593:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6267 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210798eba9 code=0x7ffc0000 [ 135.824393][ T5798] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.097659][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.585586][ T6281] loop3: detected capacity change from 0 to 32768 [ 138.681419][ T55] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 138.911029][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 138.960872][ T55] usb 3-1: config 252 has an invalid interface number: 97 but max is 0 [ 138.979281][ T55] usb 3-1: config 252 has no interface number 0 [ 139.009551][ T55] usb 3-1: config 252 interface 97 has no altsetting 0 [ 139.042751][ T55] usb 3-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=16.6d [ 139.065160][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.065406][ T5795] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 139.083049][ T5795] Bluetooth: hci3: Injecting HCI hardware error event [ 139.091770][ T5801] Bluetooth: hci3: hardware error 0x00 [ 139.118545][ T6305] netlink: 32 bytes leftover after parsing attributes in process `syz.0.111'. [ 139.133678][ T55] usb 3-1: Product: syz [ 139.161090][ T55] usb 3-1: Manufacturer: syz [ 139.165862][ T55] usb 3-1: SerialNumber: syz [ 139.499878][ T55] usb 3-1: USB disconnect, device number 3 [ 139.714444][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 139.714482][ T28] audit: type=1800 audit(1757903741.483:56): pid=6311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.104" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 140.775339][ T6316] Invalid ELF header type: 3 != 1 [ 141.266213][ T5801] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 144.449492][ T6339] netlink: 84 bytes leftover after parsing attributes in process `syz.1.120'. [ 144.464810][ T6339] overlayfs: overlapping lowerdir path [ 144.487968][ T28] audit: type=1326 audit(1757903746.273:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.1.120" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba7dd8eba9 code=0x0 [ 144.689712][ T6326] loop3: detected capacity change from 0 to 40427 [ 144.723008][ T6326] F2FS-fs (loop3): build fault injection attr: rate: 694, type: 0x7ffff [ 145.013183][ T6326] F2FS-fs (loop3): invalid crc value [ 145.117631][ T6326] F2FS-fs (loop3): Found nat_bits in checkpoint [ 145.221702][ T1186] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.334513][ T6326] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 145.441051][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 145.482720][ T1186] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.556758][ T1186] usb 1-1: can't read configurations, error -61 [ 145.751077][ T1186] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 145.964714][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 145.985913][ T1186] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 145.996549][ T1186] usb 1-1: can't read configurations, error -61 [ 146.005968][ T1186] usb usb1-port1: attempt power cycle [ 146.484908][ T1186] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.763872][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 146.821281][ T1186] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 146.848295][ T1186] usb 1-1: can't read configurations, error -61 [ 147.078910][ T1186] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 147.277578][ T1186] usb 1-1: Using ep0 maxpacket: 32 [ 147.303682][ T1186] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 147.312251][ T1186] usb 1-1: can't read configurations, error -61 [ 147.318855][ T1186] usb usb1-port1: unable to enumerate USB device [ 149.217376][ T2965] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.278352][ T2965] Bluetooth: hci4: Frame reassembly failed (-84) [ 149.746819][ T6383] ubi31: attaching mtd0 [ 149.755162][ T6383] ubi31: scanning is finished [ 149.759903][ T6383] ubi31: empty MTD device detected [ 150.551539][ T6383] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 150.559179][ T6383] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 150.566522][ T6383] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 150.573609][ T6383] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 150.582269][ T6383] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 150.589147][ T6383] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 150.597281][ T6383] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2959754018 [ 150.607853][ T6383] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 150.619290][ T6384] ubi31: background thread "ubi_bgt31d" started, PID 6384 [ 151.141921][ T5801] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 151.402868][ T1186] libceph: connect (1)[c::]:6789 error -101 [ 151.409863][ T1186] libceph: mon0 (1)[c::]:6789 connect error [ 151.439782][ T6379] ceph: No mds server is up or the cluster is laggy [ 151.900238][ T6391] loop3: detected capacity change from 0 to 128 [ 151.937859][ T6391] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 152.013565][ T6391] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.598571][ T28] audit: type=1800 audit(1757903755.333:58): pid=6394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.132" name="file0" dev="loop3" ino=1048594 res=0 errno=0 [ 153.729747][ T2907] ------------[ cut here ]------------ [ 153.734734][ T6382] ------------[ cut here ]------------ [ 153.735990][ T2907] WARNING: CPU: 1 PID: 2907 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.741641][ T6382] WARNING: CPU: 0 PID: 6382 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.741699][ T6382] Modules linked in: [ 153.741730][ T6382] CPU: 0 PID: 6382 Comm: syz.2.130 Not tainted syzkaller #0 [ 153.741752][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.741770][ T6382] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.741806][ T6382] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 153.741826][ T6382] RSP: 0018:ffffc9000c4d6e20 EFLAGS: 00010283 [ 153.741848][ T6382] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: 0000000000080000 [ 153.741864][ T6382] RDX: ffffc9000c809000 RSI: 0000000000009f07 RDI: 0000000000009f08 [ 153.741881][ T6382] RBP: dffffc0000000000 R08: ffffffff90da75c7 R09: 1ffffffff21b4eb8 [ 153.741899][ T6382] R10: dffffc0000000000 R11: fffffbfff21b4eb9 R12: 0000000000000001 [ 153.741916][ T6382] R13: ffff88805e21e5d9 R14: ffff88801eabac70 R15: ffff88801eabace8 [ 153.741934][ T6382] FS: 00007f56470e96c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 153.741954][ T6382] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.741970][ T6382] CR2: 00007f67da371000 CR3: 0000000078366000 CR4: 00000000003506f0 [ 153.741991][ T6382] Call Trace: [ 153.742000][ T6382] [ 153.742033][ T6382] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 153.742075][ T6382] ieee80211_csa_finalize+0x59a/0xf00 [ 153.742107][ T6382] ? ieee80211_csa_finalize_work+0x140/0x140 [ 153.742131][ T6382] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 153.753700][ T2907] Modules linked in: [ 153.764276][ T6382] ieee80211_channel_switch+0xa8a/0xe30 [ 153.764328][ T6382] ? ieee80211_csa_finalize+0xf00/0xf00 [ 153.764361][ T6382] ? mutex_lock_nested+0x20/0x20 [ 153.764396][ T6382] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 153.764438][ T6382] rdev_channel_switch+0xeb/0x240 [ 153.764474][ T6382] nl80211_channel_switch+0xa07/0x1040 [ 153.768394][ T2907] [ 153.768406][ T2907] CPU: 1 PID: 2907 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 153.775839][ T6382] ? genl_family_rcv_msg_doit+0xb9/0x2f0 [ 153.775899][ T6382] ? nl80211_set_coalesce+0x1310/0x1310 [ 153.775974][ T6382] ? __nla_parse+0x40/0x50 [ 153.776013][ T6382] ? nl80211_pre_doit+0x4f1/0x930 [ 153.776054][ T6382] genl_family_rcv_msg_doit+0x209/0x2f0 [ 153.776092][ T6382] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 153.776134][ T6382] ? bpf_lsm_capable+0x9/0x10 [ 153.776166][ T6382] ? security_capable+0x89/0xb0 [ 153.776202][ T6382] genl_rcv_msg+0x60b/0x790 [ 153.788356][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.788379][ T2907] Workqueue: events_unbound cfg80211_wiphy_work [ 153.788421][ T2907] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.788460][ T2907] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 153.788480][ T2907] RSP: 0018:ffffc9000bd37200 EFLAGS: 00010287 [ 153.788503][ T2907] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: 0000000000100000 [ 153.788521][ T2907] RDX: ffffc9001885c000 RSI: 00000000000039d3 RDI: 00000000000039d4 [ 153.788537][ T2907] RBP: dffffc0000000000 R08: ffffffff90da75c7 R09: 1ffffffff21b4eb8 [ 153.788554][ T2907] R10: dffffc0000000000 R11: fffffbfff21b4eb9 R12: 0000000000000001 [ 153.788571][ T2907] R13: ffff88805e24e5d9 R14: ffff888053f62c70 R15: ffff888053f62ce8 [ 153.788589][ T2907] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 153.788608][ T2907] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 153.788633][ T2907] CR2: 00007fba7eb056c0 CR3: 00000000255b1000 CR4: 00000000003506e0 [ 153.788653][ T2907] Call Trace: [ 153.788663][ T2907] [ 153.788692][ T2907] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 153.788735][ T2907] ieee80211_csa_finalize+0x59a/0xf00 [ 153.788767][ T2907] ? ieee80211_csa_finalize_work+0x140/0x140 [ 153.788790][ T2907] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 153.799946][ T6382] ? genl_bind+0x360/0x360 [ 153.819477][ T2907] ieee80211_channel_switch+0xa8a/0xe30 [ 153.825065][ T6382] ? nl80211_exit+0x30/0x30 [ 153.825103][ T6382] ? nl80211_set_coalesce+0x1310/0x1310 [ 153.825128][ T6382] ? nl80211_pre_doit+0x930/0x930 [ 153.825164][ T6382] ? ref_tracker_free+0x634/0x7d0 [ 153.825187][ T6382] ? __copy_skb_header+0xa7/0x550 [ 153.825232][ T6382] netlink_rcv_skb+0x216/0x480 [ 153.825263][ T6382] ? genl_bind+0x360/0x360 [ 153.825297][ T6382] ? netlink_ack+0x1110/0x1110 [ 153.825340][ T6382] ? __lock_acquire+0x7c80/0x7c80 [ 153.825378][ T6382] ? down_read+0x1ac/0x2e0 [ 153.834073][ T2907] ? ieee80211_csa_finalize+0xf00/0xf00 [ 153.841453][ T6382] genl_rcv+0x28/0x40 [ 153.841489][ T6382] netlink_unicast+0x751/0x8d0 [ 153.841530][ T6382] netlink_sendmsg+0x8c1/0xbe0 [ 153.841567][ T6382] ? netlink_getsockopt+0x580/0x580 [ 153.841598][ T6382] ? aa_sock_msg_perm+0x94/0x150 [ 153.841635][ T6382] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 153.841662][ T6382] ? security_socket_sendmsg+0x80/0xa0 [ 153.841685][ T6382] ? netlink_getsockopt+0x580/0x580 [ 153.841712][ T6382] ____sys_sendmsg+0x5bf/0x950 [ 153.841755][ T6382] ? __asan_memset+0x22/0x40 [ 153.841785][ T6382] ? __sys_sendmsg_sock+0x30/0x30 [ 153.841815][ T6382] ? __import_iovec+0x5f2/0x860 [ 153.841859][ T6382] ? import_iovec+0x73/0xa0 [ 153.841895][ T6382] ___sys_sendmsg+0x220/0x290 [ 153.841931][ T6382] ? __sys_sendmsg+0x270/0x270 [ 153.842026][ T6382] __se_sys_sendmsg+0x1a5/0x270 [ 153.842062][ T6382] ? __x64_sys_sendmsg+0x80/0x80 [ 153.850042][ T2907] ? rcu_is_watching+0x15/0xb0 [ 153.858128][ T6382] ? lockdep_hardirqs_on+0x98/0x150 [ 153.858171][ T6382] do_syscall_64+0x55/0xb0 [ 153.858198][ T6382] ? clear_bhb_loop+0x40/0x90 [ 153.858221][ T6382] ? clear_bhb_loop+0x40/0x90 [ 153.858246][ T6382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.858282][ T6382] RIP: 0033:0x7f564618eba9 [ 153.858318][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.858338][ T6382] RSP: 002b:00007f56470e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.858365][ T6382] RAX: ffffffffffffffda RBX: 00007f56463d5fa0 RCX: 00007f564618eba9 [ 153.858383][ T6382] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 153.858398][ T6382] RBP: 00007f5646211e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.866779][ T2907] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 153.875890][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.883590][ T2907] ieee80211_ibss_process_chanswitch+0x938/0xb60 [ 153.891474][ T6382] R13: 00007f56463d6038 R14: 00007f56463d5fa0 R15: 00007ffcefb77d78 [ 153.891517][ T6382] [ 153.891529][ T6382] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.891540][ T6382] CPU: 0 PID: 6382 Comm: syz.2.130 Not tainted syzkaller #0 [ 153.891559][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.891573][ T6382] Call Trace: [ 153.891583][ T6382] [ 153.891592][ T6382] dump_stack_lvl+0x16c/0x230 [ 153.891642][ T6382] ? show_regs_print_info+0x20/0x20 [ 153.891671][ T6382] ? load_image+0x3b0/0x3b0 [ 153.891712][ T6382] panic+0x2c0/0x710 [ 153.891756][ T6382] ? bpf_jit_dump+0xd0/0xd0 [ 153.891814][ T6382] __warn+0x2e0/0x470 [ 153.891847][ T6382] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.891886][ T6382] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.891921][ T6382] report_bug+0x2be/0x4f0 [ 153.891951][ T6382] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.891987][ T6382] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.892023][ T6382] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 153.892058][ T6382] handle_bug+0xcf/0x120 [ 153.892088][ T6382] exc_invalid_op+0x1a/0x50 [ 153.892117][ T6382] asm_exc_invalid_op+0x1a/0x20 [ 153.892140][ T6382] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 153.892177][ T6382] Code: 48 89 df e8 7a ea e9 f7 e9 dc fc ff ff e8 70 9f 92 f7 eb 24 e8 69 9f 92 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 58 9f 92 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 4a 9f 92 f7 48 8b 7c 24 08 4c 8b 7c [ 153.892196][ T6382] RSP: 0018:ffffc9000c4d6e20 EFLAGS: 00010283 [ 153.892217][ T6382] RAX: ffffffff89f2ecee RBX: 0000000000000001 RCX: 0000000000080000 [ 153.892233][ T6382] RDX: ffffc9000c809000 RSI: 0000000000009f07 RDI: 0000000000009f08 [ 153.892247][ T6382] RBP: dffffc0000000000 R08: ffffffff90da75c7 R09: 1ffffffff21b4eb8 [ 153.892265][ T6382] R10: dffffc0000000000 R11: fffffbfff21b4eb9 R12: 0000000000000001 [ 153.892281][ T6382] R13: ffff88805e21e5d9 R14: ffff88801eabac70 R15: ffff88801eabace8 [ 153.892309][ T6382] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 153.892372][ T6382] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 153.892416][ T6382] ieee80211_csa_finalize+0x59a/0xf00 [ 153.892447][ T6382] ? ieee80211_csa_finalize_work+0x140/0x140 [ 153.892472][ T6382] ? cfg80211_ch_switch_started_notify+0x253/0x490 [ 153.892519][ T6382] ieee80211_channel_switch+0xa8a/0xe30 [ 153.892558][ T6382] ? ieee80211_csa_finalize+0xf00/0xf00 [ 153.892591][ T6382] ? mutex_lock_nested+0x20/0x20 [ 153.892635][ T6382] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 153.892677][ T6382] rdev_channel_switch+0xeb/0x240 [ 153.892715][ T6382] nl80211_channel_switch+0xa07/0x1040 [ 153.892740][ T6382] ? genl_family_rcv_msg_doit+0xb9/0x2f0 [ 153.892791][ T6382] ? nl80211_set_coalesce+0x1310/0x1310 [ 153.892866][ T6382] ? __nla_parse+0x40/0x50 [ 153.892905][ T6382] ? nl80211_pre_doit+0x4f1/0x930 [ 153.892949][ T6382] genl_family_rcv_msg_doit+0x209/0x2f0 [ 153.892991][ T6382] ? genl_family_rcv_msg_dumpit+0x2c0/0x2c0 [ 153.893038][ T6382] ? bpf_lsm_capable+0x9/0x10 [ 153.893070][ T6382] ? security_capable+0x89/0xb0 [ 153.893111][ T6382] genl_rcv_msg+0x60b/0x790 [ 153.893152][ T6382] ? genl_bind+0x360/0x360 [ 153.893181][ T6382] ? nl80211_exit+0x30/0x30 [ 153.893213][ T6382] ? nl80211_set_coalesce+0x1310/0x1310 [ 153.893238][ T6382] ? nl80211_pre_doit+0x930/0x930 [ 153.893274][ T6382] ? ref_tracker_free+0x634/0x7d0 [ 153.893295][ T6382] ? __copy_skb_header+0xa7/0x550 [ 153.893342][ T6382] netlink_rcv_skb+0x216/0x480 [ 153.893374][ T6382] ? genl_bind+0x360/0x360 [ 153.893409][ T6382] ? netlink_ack+0x1110/0x1110 [ 153.893454][ T6382] ? __lock_acquire+0x7c80/0x7c80 [ 153.893491][ T6382] ? down_read+0x1ac/0x2e0 [ 153.893527][ T6382] genl_rcv+0x28/0x40 [ 153.893557][ T6382] netlink_unicast+0x751/0x8d0 [ 153.893600][ T6382] netlink_sendmsg+0x8c1/0xbe0 [ 153.893649][ T6382] ? netlink_getsockopt+0x580/0x580 [ 153.893683][ T6382] ? aa_sock_msg_perm+0x94/0x150 [ 153.893712][ T6382] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 153.893739][ T6382] ? security_socket_sendmsg+0x80/0xa0 [ 153.893765][ T6382] ? netlink_getsockopt+0x580/0x580 [ 153.893794][ T6382] ____sys_sendmsg+0x5bf/0x950 [ 153.893838][ T6382] ? __asan_memset+0x22/0x40 [ 153.893867][ T6382] ? __sys_sendmsg_sock+0x30/0x30 [ 153.893897][ T6382] ? __import_iovec+0x5f2/0x860 [ 153.893940][ T6382] ? import_iovec+0x73/0xa0 [ 153.893978][ T6382] ___sys_sendmsg+0x220/0x290 [ 153.894015][ T6382] ? __sys_sendmsg+0x270/0x270 [ 153.894116][ T6382] __se_sys_sendmsg+0x1a5/0x270 [ 153.894153][ T6382] ? __x64_sys_sendmsg+0x80/0x80 [ 153.894208][ T6382] ? lockdep_hardirqs_on+0x98/0x150 [ 153.894247][ T6382] do_syscall_64+0x55/0xb0 [ 153.894274][ T6382] ? clear_bhb_loop+0x40/0x90 [ 153.894295][ T6382] ? clear_bhb_loop+0x40/0x90 [ 153.894321][ T6382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.894358][ T6382] RIP: 0033:0x7f564618eba9 [ 153.894379][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.894398][ T6382] RSP: 002b:00007f56470e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.894421][ T6382] RAX: ffffffffffffffda RBX: 00007f56463d5fa0 RCX: 00007f564618eba9 [ 153.894436][ T6382] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 153.894451][ T6382] RBP: 00007f5646211e19 R08: 0000000000000000 R09: 0000000000000000 [ 153.894466][ T6382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.894478][ T6382] R13: 00007f56463d6038 R14: 00007f56463d5fa0 R15: 00007ffcefb77d78 [ 153.894516][ T6382] [ 153.895080][ T6382] Kernel Offset: disabled