last executing test programs: 15.635609486s ago: executing program 0 (id=196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3601a000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r5, 0x932, 0x200000000005) 14.101346455s ago: executing program 0 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 12.97875831s ago: executing program 0 (id=204): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.032136144s ago: executing program 2 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xb, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setpriority(0x2, 0x0, 0xffffffffffffffcd) socket$inet6_tcp(0xa, 0x1, 0x0) setrlimit(0xc, &(0x7f00000001c0)={0xd}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) creat(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000c40)=ANY=[], 0x13) setsockopt$inet6_tcp_int(r3, 0x6, 0x4, &(0x7f0000000000)=0x7f, 0x4) setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) 11.156726705s ago: executing program 0 (id=210): ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x5421, &(0x7f0000000240)=@attr_arm64={0x0, 0x7, 0x1, 0x0}) syz_extract_tcp_res(0x0, 0x6, 0x51) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x13732000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 9.273781414s ago: executing program 2 (id=214): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='load ', r5) keyctl$get_keyring_id(0x0, r6, 0x10000) 9.273371814s ago: executing program 3 (id=215): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xf8, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000000e0c0)=""/102400, 0x19000) keyctl$clear(0x3, 0xfffffffffffffffd) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005500)={0x28c, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x145}, @nested={0x274, 0x1, 0x0, 0x1, [@generic="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"]}]}, 0x28c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) 9.251433885s ago: executing program 1 (id=216): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[], 0x2, 0x232, &(0x7f0000000500)="$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") lstat(&(0x7f0000000140)='./file0\x00', 0x0) 7.27494128s ago: executing program 2 (id=217): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00e7ffffff00000000000004010100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb0000080000"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000240)={0x78, 0x0, r6, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r7}}}, 0x78) close(0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 6.620642468s ago: executing program 1 (id=218): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.608137179s ago: executing program 3 (id=219): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00e7ffffff00000000000004010100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb0000080000"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000003980)={0x2020}, 0x2020) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 6.558847421s ago: executing program 0 (id=220): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000080)='./file1\x00', 0x1000801, &(0x7f0000002680)=ANY=[], 0x1, 0x1f4, &(0x7f0000000a40)="$eJzsmb+LE0EUx78zu9k7DxFsLGyu8MATvWR3o3LNFSdYCsIpahm8vSO6d5HNCklAMNjYWFoIWtpYWlhYpfAvsNVCBcHClHbCyPzY3XHdhKBiRN8HMvnu7Ns3816S78IGBEH8t3x4/+Xdg3Prl04BOIgVLJj5T04Rw634t49un3y4cf7x8zdPX+0fuvOynI8BEGL29T0Ao00HKZirZ76/ekWN41GhgcvgOGH0FTDUtfwqFPogAsM1E3PD0p0DRsRR/Xon3t5px5Evh0AO4U57+UnTXl9uajxk2AawqHYnBLPOd/uDm604jpKyqIlsnR9ORYncROVVlWJa/9T+Njk2kHVPCPl5Xb1/byiPTW/gg+f9C8ARGN0Ew5bR61hAnUGXJ1ti1X/ULfI7s9Q/X/FMicNrf2rR7DfyN9T+D4vab8nDyjPyG5/PHBlnHmjHfJx77T8vlHFVOc7rpTi+8AuZvYpG5aLwJ+nsxy1/cuHm/tFI9241uv3BWnuvtRvtRvth2Dzrn/b9M2FDebMep/jfovKnJSt/bUKsxzz0WmmaBD0gTYL8ONSj5bhbLzqf1TVc+R/H6jGdg5l7Vn6jLMHMi6t3qVad6si7E2siCIIgCIIgCIIgCIIgCIKoZhkM+p8wwcwD0SrCi+oJ5bcAAAD//9EJYzA=") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x81009431, &(0x7f0000000740)={'tunl0\x00', 0x0}) 4.382098847s ago: executing program 3 (id=221): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00e7ffffff00000000000004010100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) 4.044203146s ago: executing program 2 (id=222): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000001c0)={0x0, 0x6}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x7}, 0x8) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000000)={0x19980330}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) poll(&(0x7f0000000080), 0x0, 0x5) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = semget$private(0x0, 0x7, 0x191) semtimedop(r4, 0x0, 0x0, 0x0) semop(r4, &(0x7f0000000000)=[{0x0, 0xe8c7, 0x1000}], 0x1) 3.472778489s ago: executing program 1 (id=223): r0 = socket(0x10, 0x80003, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0xe}], 0x2, 0x10122, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'sit0\x00'}) 3.270192081s ago: executing program 3 (id=224): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[r6], 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.95049474s ago: executing program 0 (id=225): r0 = openat$cachefiles(0xffffff9c, &(0x7f0000001140), 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000001440)={0x20002000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 2.909347452s ago: executing program 2 (id=226): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000020007116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r6 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='load ', r5) keyctl$get_keyring_id(0x0, r6, 0x10000) 2.76867873s ago: executing program 1 (id=227): sendmsg$802154_dgram(0xffffffffffffffff, 0x0, 0x810) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48051}, 0x40040c4) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}, 0x48) listen(r0, 0x1ad72f7) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 1.755929889s ago: executing program 3 (id=228): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file1\x00', 0x3200004, &(0x7f0000000a80)=ANY=[@ANYBLOB="63726561746f723da8fa40b32c6465636f6d706f73652c63726561746f723dbd1c66f52c6e6c733d63703836392c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c666f7263652c00f2d2d783dca321ca066f379066a92598376c0a6fb6ebb186b9be7a1d0debd4c2ce3408ded03a80e9839d59c9e7ee798f53e0387168295df851a241c8ce5a7094002fc55c1a66f9e609ea2409393aeb7f8902fcfb60db30dde50ac8f677ad022ab20fcf35644f0090f1861caf534652a239e63533b1a1d4251af75bb0ab1e3bffcf118f464e5f296a5e488bc804019abdcd6deed70d74ab439ff1b9839c7a8666aefe533565f6c6146cfd6ee47347c7dd230d2bfddd5b171026823367db7821b2c9b936b83cd77a9374bfba82530c6b3267130c"], 0x3, 0x6b4, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.613751627s ago: executing program 2 (id=229): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0) write$proc_mixer(0xffffffffffffffff, &(0x7f0000000240), 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndpcmp(0x0, 0x401, 0x4000) syz_open_dev$dri(0x0, 0x5, 0x50000) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = io_uring_setup(0xab1, &(0x7f0000000080)={0x0, 0xdf4, 0x800, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 1.474318615s ago: executing program 3 (id=230): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00e7ffffff00000000000004010100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32, @ANYBLOB="0600eb0000080000"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20000) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r5, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r5, &(0x7f0000000240)={0x78, 0x0, r6, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0xd4, 0xfffffffffffffffa, 0x0, 0xa, 0x5, 0x0, 0x200, 0xa000, 0x0, r7}}}, 0x78) close(0xffffffffffffffff) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x388, 0x2e8, 0x2e8, 0x388, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1, 0x20}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1, [], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 364.72342ms ago: executing program 1 (id=231): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 1 (id=232): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00e7ffffff00000000000004010100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. [ 73.578569][ T5754] cgroup: Unknown subsys name 'net' [ 73.704233][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.425544][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.621986][ T5770] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.630802][ T5770] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.638914][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.653084][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.661305][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.669068][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.676681][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.685284][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.693925][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.702556][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.720761][ T5782] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.729324][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.730627][ T5782] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.739049][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.746766][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.752532][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.769060][ T5783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.769291][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.783510][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.786847][ T5782] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.797741][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.814963][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.823902][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.831462][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.294794][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 78.428978][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 78.441775][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 78.484508][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.492774][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.500466][ T5765] bridge_slave_0: entered allmulticast mode [ 78.507855][ T5765] bridge_slave_0: entered promiscuous mode [ 78.523093][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.530395][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.537718][ T5765] bridge_slave_1: entered allmulticast mode [ 78.544908][ T5765] bridge_slave_1: entered promiscuous mode [ 78.561276][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 78.644519][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.700092][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.758202][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.765736][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.772950][ T5768] bridge_slave_0: entered allmulticast mode [ 78.780242][ T5768] bridge_slave_0: entered promiscuous mode [ 78.789818][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.797050][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.804246][ T5768] bridge_slave_1: entered allmulticast mode [ 78.811695][ T5768] bridge_slave_1: entered promiscuous mode [ 78.882636][ T5765] team0: Port device team_slave_0 added [ 78.892209][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.900278][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.907998][ T5767] bridge_slave_0: entered allmulticast mode [ 78.914977][ T5767] bridge_slave_0: entered promiscuous mode [ 78.946401][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.958231][ T5765] team0: Port device team_slave_1 added [ 78.964569][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.972001][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.979701][ T5767] bridge_slave_1: entered allmulticast mode [ 78.987291][ T5767] bridge_slave_1: entered promiscuous mode [ 78.998704][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.018041][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.025427][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.032775][ T5766] bridge_slave_0: entered allmulticast mode [ 79.040071][ T5766] bridge_slave_0: entered promiscuous mode [ 79.090582][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.098938][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.106584][ T5766] bridge_slave_1: entered allmulticast mode [ 79.113590][ T5766] bridge_slave_1: entered promiscuous mode [ 79.144819][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.157558][ T5768] team0: Port device team_slave_0 added [ 79.165820][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.199784][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.211048][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.218267][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.244487][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.259048][ T5768] team0: Port device team_slave_1 added [ 79.265611][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.272632][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.299197][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.321980][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.393337][ T5767] team0: Port device team_slave_0 added [ 79.400234][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.407546][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.433791][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.447315][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.454377][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.480649][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.521239][ T5765] hsr_slave_0: entered promiscuous mode [ 79.527968][ T5765] hsr_slave_1: entered promiscuous mode [ 79.536773][ T5767] team0: Port device team_slave_1 added [ 79.565927][ T5766] team0: Port device team_slave_0 added [ 79.603963][ T5766] team0: Port device team_slave_1 added [ 79.631449][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.641153][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.667403][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.680342][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.687424][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.713453][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.763442][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.771991][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.799580][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.818615][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.825824][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.851836][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.863576][ T5779] Bluetooth: hci0: command tx timeout [ 79.869765][ T5781] Bluetooth: hci1: command tx timeout [ 79.869814][ T5775] Bluetooth: hci3: command tx timeout [ 79.885646][ T51] Bluetooth: hci2: command tx timeout [ 79.902502][ T5768] hsr_slave_0: entered promiscuous mode [ 79.909357][ T5768] hsr_slave_1: entered promiscuous mode [ 79.916576][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.924849][ T5768] Cannot create hsr debugfs directory [ 79.959626][ T5767] hsr_slave_0: entered promiscuous mode [ 79.966681][ T5767] hsr_slave_1: entered promiscuous mode [ 79.973123][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.981182][ T5767] Cannot create hsr debugfs directory [ 80.097010][ T5766] hsr_slave_0: entered promiscuous mode [ 80.103572][ T5766] hsr_slave_1: entered promiscuous mode [ 80.110019][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.117673][ T5766] Cannot create hsr debugfs directory [ 80.413541][ T5765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.426699][ T5765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.439786][ T5765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.471483][ T5765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.584127][ T5768] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.611457][ T5768] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.623413][ T5768] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.641050][ T5768] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.758779][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.772109][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.783853][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.813936][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.904966][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.934964][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.945838][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.964754][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.986441][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.034738][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.061479][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.090963][ T2955] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.098532][ T2955] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.120485][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.127699][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.163082][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.184069][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.191286][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.246667][ T2955] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.253808][ T2955] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.290109][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.360213][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.384594][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.391815][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.431163][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.438475][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.582594][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.662124][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.703866][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.711143][ T4342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.742279][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.749512][ T4342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.887268][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.936766][ T51] Bluetooth: hci3: command tx timeout [ 81.942247][ T51] Bluetooth: hci2: command tx timeout [ 81.948562][ T51] Bluetooth: hci1: command tx timeout [ 81.954031][ T51] Bluetooth: hci0: command tx timeout [ 82.043914][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.100363][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.137012][ T5765] veth0_vlan: entered promiscuous mode [ 82.198812][ T5765] veth1_vlan: entered promiscuous mode [ 82.259359][ T5768] veth0_vlan: entered promiscuous mode [ 82.299896][ T5768] veth1_vlan: entered promiscuous mode [ 82.312283][ T5767] veth0_vlan: entered promiscuous mode [ 82.343410][ T5767] veth1_vlan: entered promiscuous mode [ 82.353093][ T5765] veth0_macvtap: entered promiscuous mode [ 82.375769][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.393421][ T5765] veth1_macvtap: entered promiscuous mode [ 82.444586][ T5767] veth0_macvtap: entered promiscuous mode [ 82.474653][ T5768] veth0_macvtap: entered promiscuous mode [ 82.485088][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.497920][ T5768] veth1_macvtap: entered promiscuous mode [ 82.508081][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.517790][ T5767] veth1_macvtap: entered promiscuous mode [ 82.541945][ T5765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.551105][ T5765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.560701][ T5765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.569755][ T5765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.600659][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.611994][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.623881][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.643854][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.655536][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.668246][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.685966][ T5766] veth0_vlan: entered promiscuous mode [ 82.708608][ T5766] veth1_vlan: entered promiscuous mode [ 82.733475][ T5768] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.749071][ T5768] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.757939][ T5768] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.766803][ T5768] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.811684][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.823877][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.834970][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.846571][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.859002][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.910614][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.921666][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.932340][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.943075][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.955615][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.970173][ T5766] veth0_macvtap: entered promiscuous mode [ 82.987586][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.998561][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010846][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.019880][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.059152][ T5766] veth1_macvtap: entered promiscuous mode [ 83.110369][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.126366][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.171529][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.183680][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.194922][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.205531][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.216611][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.227162][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.239062][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.257546][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.273039][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.306892][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.321079][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.331190][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.344486][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.355003][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.366240][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.378819][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.399043][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.413972][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.423169][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.435600][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.459000][ T2955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.467428][ T2955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.523751][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.555523][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.608403][ T4342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.630330][ T4342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.733656][ T1308] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.777126][ T1308] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.873247][ T3493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.900047][ T3493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.018743][ T51] Bluetooth: hci1: command tx timeout [ 84.018765][ T5781] Bluetooth: hci2: command tx timeout [ 84.024204][ T51] Bluetooth: hci3: command tx timeout [ 84.024283][ T51] Bluetooth: hci0: command tx timeout [ 84.102657][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.147826][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.437121][ T5869] syz.1.2[5869]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.563808][ T5869] loop1: detected capacity change from 0 to 4096 [ 84.576319][ T1632] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.597505][ T5872] loop0: detected capacity change from 0 to 256 [ 84.795334][ T1632] usb 4-1: config 0 has no interfaces? [ 84.814976][ T5869] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 84.866795][ T1632] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 84.935682][ T1632] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.986155][ T1632] usb 4-1: Product: syz [ 84.990691][ T1632] usb 4-1: Manufacturer: syz [ 85.011140][ T1632] usb 4-1: SerialNumber: syz [ 85.038119][ T1632] usb 4-1: config 0 descriptor?? [ 85.080022][ T28] audit: type=1804 audit(1769369618.310:2): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/file1/file1" dev="loop1" ino=33 res=1 errno=0 [ 85.136269][ T28] audit: type=1804 audit(1769369618.320:3): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2" name="/newroot/0/file1/file1" dev="loop1" ino=33 res=1 errno=0 [ 85.282516][ T5854] usb 4-1: USB disconnect, device number 2 [ 86.264797][ T51] Bluetooth: hci0: command tx timeout [ 86.265364][ T5781] Bluetooth: hci2: command tx timeout [ 86.270794][ T5779] Bluetooth: hci3: command tx timeout [ 86.275917][ T5781] Bluetooth: hci1: command tx timeout [ 86.675264][ T5877] loop1: detected capacity change from 0 to 32768 [ 86.755373][ T5877] [ 86.755373][ T5877] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 86.755373][ T5877] [ 86.825898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.186430][ T5893] ERROR: (device loop1): diWrite: ixpxd invalid [ 87.186430][ T5893] [ 87.455658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.541307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.643658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.696341][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.704611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 88.013425][ T5893] ERROR: (device loop1): txCommit: [ 88.013425][ T5893] [ 88.155635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 88.211990][ T5766] [ 88.211990][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.211990][ T5766] [ 88.264591][ T5766] [ 88.264591][ T5766] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.264591][ T5766] [ 88.464231][ T5900] loop2: detected capacity change from 0 to 2048 [ 88.649066][ T5905] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.687278][ T5887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10'. [ 88.965205][ T28] audit: type=1800 audit(1769369622.180:4): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.14" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 89.274045][ T5905] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 89.553654][ T5905] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 89.739542][ T5905] Remounting filesystem read-only [ 89.885664][ T5768] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer [ 89.894805][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=15 [ 89.933054][ T5768] NILFS (loop2): discard dirty block: blocknr=22, size=1024 [ 89.947892][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 89.967400][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 89.989502][ T5768] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 90.032737][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=6 [ 90.058572][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.070862][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.099665][ T5768] NILFS (loop2): discard dirty block: blocknr=37, size=1024 [ 90.129399][ T5768] NILFS (loop2): discard dirty block: blocknr=38, size=1024 [ 90.161280][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 90.179938][ T5768] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 90.203248][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.226795][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.252625][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.279703][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 90.295222][ T5768] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 90.302581][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.324285][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.334511][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.347359][ T5768] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 90.354095][ T5768] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 90.367674][ T5768] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 90.375034][ T5768] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 90.385244][ T5856] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 90.393124][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.402706][ T5768] NILFS (loop2): discard dirty page: offset=229376, ino=3 [ 90.421632][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.433150][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.444633][ T5768] NILFS (loop2): discard dirty block: blocknr=50, size=1024 [ 90.454485][ T5768] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 90.597691][ T5856] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 90.625188][ T5856] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 90.665208][ T5856] usb 4-1: config 0 interface 0 has no altsetting 0 [ 90.697405][ T5856] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 90.725244][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 90.748626][ T5912] loop0: detected capacity change from 0 to 32768 [ 90.764413][ T5914] loop1: detected capacity change from 0 to 32768 [ 90.773505][ T5856] usb 4-1: Product: syz [ 90.781647][ T5856] usb 4-1: Manufacturer: syz [ 90.788470][ T5912] ======================================================= [ 90.788470][ T5912] WARNING: The mand mount option has been deprecated and [ 90.788470][ T5912] and is ignored by this kernel. Remove the mand [ 90.788470][ T5912] option from the mount to silence this warning. [ 90.788470][ T5912] ======================================================= [ 90.839205][ T5856] usb 4-1: SerialNumber: syz [ 90.913696][ T5914] (syz.1.17,5914,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 90.931168][ T5856] usb 4-1: config 0 descriptor?? [ 91.073526][ T5921] CUSE: unknown device info "" [ 91.078651][ T5921] CUSE: zero length info key specified [ 91.106561][ T5921] xt_policy: too many policy elements [ 91.210166][ T5914] (syz.1.17,5914,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.227431][ T5912] JBD2: Ignoring recovery information on journal [ 91.849878][ T5856] usb 4-1: selecting invalid altsetting 0 [ 91.899620][ T5914] JBD2: Ignoring recovery information on journal [ 91.953588][ T787] cfg80211: failed to load regulatory.db [ 91.976617][ T5914] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 91.996331][ T5912] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.085618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.065522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.178324][ T5930] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.205552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.227742][ T5766] ocfs2: Unmounting device (7,1) on (node local) [ 93.270885][ T5767] ocfs2: Unmounting device (7,0) on (node local) [ 93.329012][ T5936] loop2: detected capacity change from 0 to 8 [ 93.351488][ T5936] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 93.383724][ T5785] udevd[5785]: incorrect cramfs checksum on /dev/loop2 [ 93.883755][ T5778] udevd[5778]: incorrect cramfs checksum on /dev/loop2 [ 96.192374][ T8] usb 4-1: USB disconnect, device number 3 [ 96.545345][ T5817] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.628662][ T5961] xt_l2tp: v2 tid > 0xffff: 37482740 [ 96.686073][ T5962] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 97.213703][ T5781] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 97.222963][ T5781] Bluetooth: hci0: Injecting HCI hardware error event [ 97.234652][ T51] Bluetooth: hci0: hardware error 0x00 [ 97.504856][ T5969] loop2: detected capacity change from 0 to 512 [ 97.515510][ T5817] usb 1-1: Using ep0 maxpacket: 16 [ 97.530012][ T5969] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.563900][ T5817] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 97.574748][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.587566][ T5817] usb 1-1: Product: syz [ 97.591803][ T5817] usb 1-1: Manufacturer: syz [ 97.617085][ T5817] usb 1-1: SerialNumber: syz [ 97.657024][ T5969] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.30: Parent and EA inode have the same ino 15 [ 97.682530][ T5817] usb 1-1: config 0 descriptor?? [ 97.716694][ T5817] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 97.738881][ T5969] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2852: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 97.762792][ T5969] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.30: Parent and EA inode have the same ino 15 [ 97.789114][ T5969] EXT4-fs (loop2): 1 orphan inode deleted [ 97.806696][ T5969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.951644][ T5817] gp8psk: usb in 128 operation failed. [ 97.975916][ T5817] gp8psk: usb in 137 operation failed. [ 97.985606][ T5817] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 98.026912][ T5817] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 98.063211][ T5817] usb 1-1: media controller created [ 98.146781][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.295828][ T5967] loop1: detected capacity change from 0 to 32768 [ 99.625507][ T51] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 99.768766][ T5979] block device autoloading is deprecated and will be removed. [ 99.988294][ T5817] gp8psk_fe: Frontend revision 1 attached [ 99.994760][ T5817] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 100.004378][ T5817] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 100.065667][ T5967] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (5967) [ 100.215476][ T5967] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.248358][ T5967] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 100.265328][ T5967] BTRFS info (device loop1): using free space tree [ 100.296721][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.323943][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 100.326048][ T5817] gp8psk: usb in 138 operation failed. [ 100.334302][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 100.341480][ T5817] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 100.341517][ T5817] gp8psk: found Genpix USB device pID = 201 (hex) [ 100.351401][ T5817] usb 1-1: USB disconnect, device number 2 [ 100.656573][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 100.682982][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 100.989482][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 101.610900][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 101.670937][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 101.694050][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 101.704142][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 101.715621][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 101.726579][ T5967] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 101.742217][ T5817] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 101.803534][ T5967] BTRFS error (device loop1): open_ctree failed: -12 [ 101.823402][ T6004] xt_policy: too many policy elements [ 103.078026][ T6015] xt_l2tp: v2 tid > 0xffff: 37482740 [ 103.346151][ T787] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 104.034815][ T6029] md: md2 stopped. [ 105.820205][ T787] usb 1-1: device descriptor read/all, error -71 [ 107.102845][ T6045] xt_policy: too many policy elements [ 107.606347][ T6055] xt_l2tp: v2 tid > 0xffff: 37482740 [ 108.067386][ T6048] loop2: detected capacity change from 0 to 32768 [ 108.125374][ T6048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.49 (6048) [ 108.306450][ T6048] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.355031][ T6048] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 108.365539][ T5854] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.388498][ T6048] BTRFS info (device loop2): using free space tree [ 108.577356][ T6048] BTRFS info (device loop2): enabling ssd optimizations [ 108.593456][ T6048] BTRFS info (device loop2): auto enabling async discard [ 108.768472][ T5854] usb 2-1: Using ep0 maxpacket: 16 [ 109.895229][ T6078] CUSE: unknown device info "" [ 109.900204][ T6078] CUSE: zero length info key specified [ 110.327096][ T5854] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 110.354951][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.373367][ T5854] usb 2-1: Product: syz [ 110.390956][ T5854] usb 2-1: config 0 descriptor?? [ 110.415784][ T5854] usb 2-1: can't set config #0, error -71 [ 110.441253][ T5854] usb 2-1: USB disconnect, device number 2 [ 110.522622][ T5768] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.977459][ T6091] netlink: 160 bytes leftover after parsing attributes in process `syz.2.56'. [ 111.309301][ T6081] loop3: detected capacity change from 0 to 32768 [ 111.321792][ T6081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.54 (6081) [ 111.518367][ T6081] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 111.570491][ T6081] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 111.628520][ T6098] xt_l2tp: v2 tid > 0xffff: 37482740 [ 111.690814][ T6081] BTRFS info (device loop3): using free space tree [ 112.240943][ T6102] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.675122][ C1] sched: RT throttling activated [ 112.816522][ T6081] BTRFS info (device loop3): enabling ssd optimizations [ 112.985242][ T6081] BTRFS info (device loop3): auto enabling async discard [ 113.329808][ T6123] CUSE: unknown device info "" [ 113.334737][ T6123] CUSE: zero length info key specified [ 116.818609][ T5765] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 117.096533][ T6142] (null): rxe_set_mtu: Set mtu to 1024 [ 118.227817][ T6142] infiniband syz2: set down [ 118.232764][ T6142] infiniband syz2: added ipvlan0 [ 118.659319][ T6142] RDS/IB: syz2: added [ 118.664347][ T6142] smc: adding ib device syz2 with port count 1 [ 118.671992][ T6142] smc: ib device syz2 port 1 has pnetid [ 119.276891][ T6155] xt_l2tp: v2 tid > 0xffff: 37482740 [ 119.600921][ T6161] CUSE: unknown device info "" [ 119.639224][ T6161] CUSE: zero length info key specified [ 119.754732][ T6160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.830181][ T6160] bond0: (slave rose0): Enslaving as an active interface with an up link [ 121.557311][ T6195] CUSE: unknown device info "" [ 121.580763][ T6195] CUSE: zero length info key specified [ 121.818579][ T6201] xt_l2tp: v2 tid > 0xffff: 37482740 [ 122.315794][ T6205] CUSE: unknown device info "" [ 122.391869][ T6205] CUSE: zero length info key specified [ 123.709220][ T6211] loop0: detected capacity change from 0 to 1024 [ 123.852919][ T6211] EXT4-fs: Ignoring removed orlov option [ 123.938003][ T6218] loop3: detected capacity change from 0 to 64 [ 124.004624][ T6211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.420786][ T28] audit: type=1800 audit(1769369658.580:5): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.88" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 125.552323][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.611427][ T6244] xt_l2tp: v2 tid > 0xffff: 37482740 [ 125.785556][ T787] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.058470][ T787] usb 2-1: config 0 has no interfaces? [ 126.064153][ T787] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 126.104648][ T6259] CUSE: unknown device info "" [ 126.109707][ T6259] CUSE: zero length info key specified [ 126.882332][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.931291][ T787] usb 2-1: config 0 descriptor?? [ 129.666341][ T23] usb 2-1: USB disconnect, device number 3 [ 130.080836][ T6289] loop1: detected capacity change from 0 to 8192 [ 130.273934][ T6300] xt_l2tp: v2 tid > 0xffff: 37482740 [ 130.331554][ T6301] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 130.933329][ T787] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 131.027841][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.339251][ T6305] loop2: detected capacity change from 0 to 128 [ 131.436447][ T5778] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 131.459173][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.483127][ T787] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.505168][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.515416][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.523463][ T787] usb 1-1: Product: syz [ 131.538160][ T27] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 131.556576][ T787] usb 1-1: Manufacturer: syz [ 131.561230][ T787] usb 1-1: SerialNumber: syz [ 131.567848][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.617321][ T27] usb 4-1: config 0 descriptor?? [ 132.088682][ T27] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 132.096785][ T27] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 132.104276][ T27] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 132.123479][ T27] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 132.143607][ T27] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0 [ 132.165869][ T27] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 132.224510][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 132.281117][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 132.340138][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 132.402094][ T787] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 132.459741][ T787] lan78xx: probe of 1-1:1.0 failed with error -71 [ 132.912224][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951261][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.326935][ T27] input: HID 054c:0df2 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0001/input/input5 [ 133.339623][ T787] usb 1-1: USB disconnect, device number 5 [ 133.373273][ T27] input: HID 054c:0df2 Motion Sensors as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0001/input/input6 [ 133.393076][ T27] input: HID 054c:0df2 Touchpad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:054C:0DF2.0001/input/input7 [ 133.484496][ T27] playstation 0003:054C:0DF2.0001: Registered DualSense controller hw_version=0xe8f2453f fw_version=0xa9ff1c9c [ 133.550896][ T27] usb 4-1: USB disconnect, device number 4 [ 134.327378][ T6335] CUSE: unknown device info "" [ 134.332298][ T6335] CUSE: zero length info key specified [ 134.339371][ T6335] xt_policy: too many policy elements [ 134.578205][ T6334] xt_l2tp: v2 tid > 0xffff: 37482740 [ 134.628493][ T6336] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 136.880670][ T6347] loop3: detected capacity change from 0 to 128 [ 137.218003][ T6350] loop1: detected capacity change from 0 to 128 [ 137.261543][ T6350] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.279895][ T6350] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.352293][ T5766] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.577091][ T6354] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 137.877708][ T6360] loop1: detected capacity change from 0 to 2048 [ 137.954550][ T6360] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 139.055021][ T6370] xt_l2tp: v2 tid > 0xffff: 37482740 [ 139.303947][ T6368] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 139.320609][ T6373] CUSE: unknown device info "" [ 139.325714][ T6373] CUSE: zero length info key specified [ 139.332869][ T6373] xt_policy: too many policy elements [ 140.084219][ T6385] loop0: detected capacity change from 0 to 128 [ 140.122128][ T6385] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 140.187210][ T6385] hpfs: filesystem error: improperly stopped [ 140.225366][ T6385] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 140.249209][ T6387] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 140.278043][ T6385] hpfs: You really don't want any checks? You are crazy... [ 140.357211][ T6385] hpfs: hpfs_map_sector(): read error [ 140.370611][ T6385] hpfs: code page support is disabled [ 140.395317][ T6385] hpfs: hpfs_map_4sectors(): unaligned read [ 140.428024][ T6385] hpfs: hpfs_map_4sectors(): unaligned read [ 140.458385][ T6385] hpfs: filesystem error: unable to find root dir [ 140.524497][ T6385] hpfs: hpfs_map_4sectors(): unaligned read [ 140.627169][ T6385] hpfs: hpfs_map_sector(): read error [ 140.661110][ T6385] hpfs: hpfs_map_4sectors(): unaligned read [ 140.689664][ T6385] hpfs: hpfs_map_sector(): read error [ 141.036296][ T6386] ALSA: mixer_oss: invalid OSS volume '' [ 141.217472][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 141.226427][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 141.234944][ T5781] Bluetooth: hci2: hardware error 0x00 [ 141.291353][ T6382] loop3: detected capacity change from 0 to 32768 [ 141.511876][ T6382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.130 (6382) [ 141.564779][ T6398] loop2: detected capacity change from 0 to 128 [ 142.205708][ T6382] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.261975][ T6382] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 142.293733][ T6382] BTRFS info (device loop3): turning off barriers [ 142.310592][ T6382] BTRFS info (device loop3): setting nodatasum [ 142.326507][ T6382] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 142.349583][ T6382] BTRFS info (device loop3): use zstd compression, level 3 [ 142.369834][ T6382] BTRFS info (device loop3): using free space tree [ 144.025225][ T6410] CUSE: unknown device info "" [ 144.030159][ T6410] CUSE: zero length info key specified [ 144.574946][ T5781] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 144.625502][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 144.646076][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 144.755855][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 144.772305][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 144.783029][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 144.793972][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 144.804231][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 144.814957][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 144.825516][ T6382] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 144.888205][ T6382] BTRFS error (device loop3): open_ctree failed: -12 [ 146.616483][ T6447] CUSE: unknown device info "" [ 146.621474][ T6447] CUSE: zero length info key specified [ 146.633167][ T6447] xt_policy: too many policy elements [ 148.275241][ T6449] CUSE: unknown device info "" [ 148.280175][ T6449] CUSE: zero length info key specified [ 148.944887][ T6451] loop2: detected capacity change from 0 to 128 [ 149.186374][ T6345] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 151.679809][ T6477] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 151.700241][ T6477] overlayfs: failed to look up (file2) for ino (-5) [ 151.995212][ T6482] CUSE: unknown device info "" [ 152.000187][ T6482] CUSE: zero length info key specified [ 152.777743][ T6489] loop1: detected capacity change from 0 to 128 [ 153.001044][ T5784] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 153.111789][ T6493] xt_l2tp: v2 tid > 0xffff: 37482740 [ 153.169506][ T6495] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 155.834427][ T6514] loop3: detected capacity change from 0 to 256 [ 158.405299][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 158.457723][ T6535] loop0: detected capacity change from 0 to 128 [ 158.548658][ T6538] loop2: detected capacity change from 0 to 64 [ 158.606524][ T9] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 160.535616][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.544567][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.556342][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.564469][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.573680][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.584861][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.593146][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.602305][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.613417][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.621485][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.630600][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.641801][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.650060][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.681844][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.732494][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.770543][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.801752][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.830034][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.846776][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.856284][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.868767][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 160.877238][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 162.111390][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 162.122452][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 162.186319][ T9] usb 2-1: string descriptor 0 read error: -71 [ 162.209446][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 162.223431][ T9] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 162.476517][ T9] usb 2-1: config 0 descriptor?? [ 162.492447][ T9] usb 2-1: can't set config #0, error -71 [ 162.624250][ T9] usb 2-1: USB disconnect, device number 4 [ 163.475331][ T6564] dvmrp6: entered allmulticast mode [ 163.738489][ T6570] CUSE: unknown device info "" [ 163.743415][ T6570] CUSE: zero length info key specified [ 164.576057][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 164.726210][ T6575] loop1: detected capacity change from 0 to 2048 [ 164.795525][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 165.675944][ T6575] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.832968][ T9] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.008115][ T9] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 166.121724][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 166.255272][ T9] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 166.318095][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.366975][ T9] usb 4-1: config 0 descriptor?? [ 166.478537][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 166.487750][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 166.584961][ T9] usb 4-1: USB disconnect, device number 5 [ 167.904926][ T6581] CUSE: unknown device info "" [ 167.909931][ T6581] CUSE: zero length info key specified [ 167.916541][ T6581] xt_policy: too many policy elements [ 169.612049][ T6593] loop3: detected capacity change from 0 to 1024 [ 170.440089][ T6593] hfsplus: found bad thread record in catalog [ 170.536683][ T6593] hfsplus: found bad thread record in catalog [ 170.770501][ T6600] loop0: detected capacity change from 0 to 32768 [ 170.851466][ T6600] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 170.886497][ T1308] hfsplus: found bad thread record in catalog [ 170.893633][ T1308] hfsplus: found bad thread record in catalog [ 170.933494][ T6600] XFS (loop0): Ending clean mount [ 170.942504][ T6610] loop1: detected capacity change from 0 to 2048 [ 170.967822][ T6600] XFS (loop0): Quotacheck needed: Please wait. [ 171.085331][ T6610] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.176514][ T6600] XFS (loop0): Quotacheck: Done. [ 172.057862][ T5767] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 173.329503][ T6615] loop3: detected capacity change from 0 to 40427 [ 173.407530][ T6615] F2FS-fs (loop3): invalid crc value [ 173.748260][ T6615] F2FS-fs (loop3): Found nat_bits in checkpoint [ 174.703684][ T6639] xt_policy: too many policy elements [ 175.641203][ C0] Unknown status report in ack skb [ 175.729251][ T6647] loop3: detected capacity change from 0 to 2048 [ 175.807582][ T6647] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.684771][ T6666] xt_l2tp: v2 tid > 0xffff: 37482740 [ 177.735152][ T6665] trusted_key: encrypted_key: insufficient parameters specified [ 178.313815][ T6652] loop2: detected capacity change from 0 to 32768 [ 178.418675][ T6652] JBD2: Ignoring recovery information on journal [ 178.479026][ T6652] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.810515][ T6652] syz.2.200 (6652) used greatest stack depth: 18288 bytes left [ 179.047522][ T6683] xt_policy: too many policy elements [ 179.366792][ T5768] ocfs2: Unmounting device (7,2) on (node local) [ 181.846956][ T6709] loop1: detected capacity change from 0 to 16 [ 182.028457][ T6709] erofs: (device loop1): mounted with root inode @ nid 36. [ 182.179935][ T6711] xt_l2tp: v2 tid > 0xffff: 37482740 [ 182.218516][ T6712] trusted_key: encrypted_key: insufficient parameters specified [ 183.769956][ T6709] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 184.135034][ T6709] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 184.158469][ T6709] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 184.724206][ T6727] CUSE: unknown device info "" [ 184.729253][ T6727] CUSE: zero length info key specified [ 184.735954][ T6727] xt_policy: too many policy elements [ 186.355323][ T6729] xt_policy: too many policy elements [ 187.113218][ T6735] capability: warning: `syz.2.222' uses 32-bit capabilities (legacy support in use) [ 188.732319][ T6746] xt_l2tp: v2 tid > 0xffff: 37482740 [ 188.790374][ T6748] trusted_key: encrypted_key: insufficient parameters specified [ 189.290226][ T6752] loop3: detected capacity change from 0 to 1024 [ 189.367513][ T6752] hfsplus: bad catalog entry type [ 189.452932][ T6747] hfsplus: b-tree write err: -5, ino 4 [ 190.696345][ T6764] CUSE: unknown device info "" [ 190.701283][ T6764] CUSE: zero length info key specified [ 190.707997][ T6764] xt_policy: too many policy elements [ 191.272341][ C1] ------------[ cut here ]------------ [ 191.277942][ C1] WARNING: CPU: 1 PID: 6761 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 191.288073][ C1] Modules linked in: [ 191.292026][ C1] CPU: 1 PID: 6761 Comm: syz.3.230 Not tainted syzkaller #0 [ 191.294221][ T1308] ------------[ cut here ]------------ [ 191.299379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.299408][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 191.299436][ C1] Code: 24 4c 89 e7 e8 5e 86 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 ce 84 f7 0f 0b e9 f6 f7 ff ff e8 4d ce 84 f7 <0f> 0b e9 48 fb ff ff e8 41 ce 84 f7 48 c7 c7 e0 4c 64 8e 4c 89 e6 [ 191.299452][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 191.299471][ C1] RAX: ffffffff8a0244d3 RBX: ffffffff8a0232d6 RCX: ffff888022819e00 [ 191.299485][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.299497][ C1] RBP: 0000000000000000 R08: ffff888022819e00 R09: 0000000000000003 [ 191.299510][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c8063c0 [ 191.299522][ C1] R13: dffffc0000000000 R14: ffff88805c8068b0 R15: ffff88805cf7c824 [ 191.299537][ C1] FS: 00007fe136bf66c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 191.299554][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.299567][ C1] CR2: 00007fe1389e8400 CR3: 000000002707c000 CR4: 00000000003506e0 [ 191.299586][ C1] Call Trace: [ 191.299596][ C1] [ 191.299606][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 191.305325][ T1308] WARNING: CPU: 0 PID: 1308 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 191.315439][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 191.315471][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 191.315506][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 191.315540][ C1] __iterate_interfaces+0x243/0x500 [ 191.321854][ T1308] Modules linked in: [ 191.341528][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.341553][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 191.341582][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.341606][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 191.347835][ T1308] CPU: 0 PID: 1308 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 191.355725][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 191.363687][ T1308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.371689][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 191.371720][ C1] ? hw_scan_work+0xf60/0xf60 [ 191.381498][ T1308] Workqueue: phy7 ieee80211_csa_finalize_work [ 191.387750][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 191.387776][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 191.387814][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 191.396761][ T1308] [ 191.396772][ T1308] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 191.403362][ C1] handle_softirqs+0x280/0x820 [ 191.411378][ T1308] Code: 48 89 df e8 0a 4a d8 f7 e9 dc fc ff ff e8 d0 22 80 f7 eb 24 e8 c9 22 80 f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 22 80 f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 22 80 f7 48 8b 7c 24 08 4c 8b 7c [ 191.414672][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 191.417664][ T1308] RSP: 0000:ffffc90004e0f9c0 EFLAGS: 00010293 [ 191.423094][ C1] ? do_softirq+0x1a0/0x1a0 [ 191.434147][ T1308] [ 191.439568][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 191.446331][ T1308] RAX: ffffffff8a06ec6e RBX: 0000000000000001 RCX: ffff888024c78000 [ 191.446350][ T1308] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 191.451892][ C1] __irq_exit_rcu+0xd3/0x190 [ 191.457510][ T1308] RBP: dffffc0000000000 R08: ffff88805c8055af R09: 1ffff1100b900ab5 [ 191.461009][ C1] ? irq_exit_rcu+0x20/0x20 [ 191.467274][ T1308] R10: dffffc0000000000 R11: ffffed100b900ab6 R12: 0000000000000001 [ 191.474485][ C1] irq_exit_rcu+0x9/0x20 [ 191.481821][ T1308] R13: ffff88805c8065d9 R14: ffff88807e59ac70 R15: ffff88807e59ace8 [ 191.487796][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 191.487821][ C1] [ 191.487829][ C1] [ 191.487838][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.487864][ C1] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 191.495422][ T1308] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 191.500622][ C1] Code: 65 8b 05 dd 94 7f 75 65 8b 0d d2 94 7f 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 191.510802][ T1308] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.515946][ C1] RSP: 0018:ffffc900033278e8 EFLAGS: 00000246 [ 191.520616][ T1308] CR2: 0000001b2ce24000 CR3: 000000000cf32000 CR4: 00000000003506f0 [ 191.526712][ C1] [ 191.526720][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 1b7ec1615501ed00 [ 191.526736][ C1] RDX: 0000000000000000 RSI: ffffffff8b1c80c0 RDI: ffffffff8b1c8080 [ 191.526749][ C1] RBP: ffffc90003327a48 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 191.526766][ C1] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: ffffffff81cb1e1a [ 191.531871][ T1308] Call Trace: [ 191.537968][ C1] R13: dffffc0000000000 R14: ffffc90003327ae0 R15: 1ffff92000664f34 [ 191.537989][ C1] ? __might_fault+0xaa/0x120 [ 191.543107][ T1308] [ 191.545488][ C1] rcu_is_watching+0x15/0xb0 [ 191.552799][ T1308] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 191.557577][ C1] lock_release+0xb5/0x8c0 [ 191.577272][ T1308] ieee80211_csa_finalize+0x5a6/0xf20 [ 191.581988][ C1] ? __might_sleep+0xe0/0xe0 [ 191.582017][ C1] ? read_lock_is_recursive+0x20/0x20 [ 191.582045][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 191.582070][ C1] ? verify_lock_unused+0x140/0x140 [ 191.582096][ C1] ? __might_fault+0xaa/0x120 [ 191.582118][ C1] ? __might_fault+0xc6/0x120 [ 191.582138][ C1] ? __might_fault+0xaa/0x120 [ 191.582161][ C1] _copy_from_user+0x2a/0xe0 [ 191.582191][ C1] ___sys_recvmsg+0x176/0x590 [ 191.582220][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 191.582277][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 191.582309][ C1] ? __might_fault+0xc6/0x120 [ 191.582334][ C1] ? __might_fault+0xaa/0x120 [ 191.582359][ C1] do_recvmmsg+0x39a/0x870 [ 191.582409][ C1] ? __sys_recvmmsg+0x290/0x290 [ 191.588702][ T1308] ? mutex_lock_nested+0x20/0x20 [ 191.593048][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 191.595517][ T1308] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 191.600589][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 191.608605][ T1308] ? ieee80211_csa_finalize_work+0x140/0x140 [ 191.616622][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 191.616650][ C1] ? do_recvmmsg+0x870/0x870 [ 191.621251][ T1308] ? read_lock_is_recursive+0x20/0x20 [ 191.629282][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 191.633838][ T1308] ieee80211_csa_finalize_work+0xf6/0x140 [ 191.641842][ C1] do_syscall_64+0x55/0xa0 [ 191.646129][ T1308] ? process_scheduled_works+0x96f/0x15d0 [ 191.654113][ C1] ? clear_bhb_loop+0x40/0x90 [ 191.659766][ T1308] process_scheduled_works+0xa5d/0x15d0 [ 191.662713][ C1] ? clear_bhb_loop+0x40/0x90 [ 191.665775][ T1308] ? assign_work+0x430/0x430 [ 191.671672][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.678100][ T1308] ? assign_work+0x3d0/0x430 [ 191.686978][ C1] RIP: 0033:0x7fe13899acb9 [ 191.687009][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.687025][ C1] RSP: 002b:00007fe136bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 191.687050][ C1] RAX: ffffffffffffffda RBX: 00007fe138c16090 RCX: 00007fe13899acb9 [ 191.687065][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 191.687079][ C1] RBP: 00007fe138a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 191.687093][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 191.687107][ C1] R13: 00007fe138c16128 R14: 00007fe138c16090 R15: 00007ffc9ef4a3f8 [ 191.687138][ C1] [ 191.687149][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 191.687165][ C1] CPU: 1 PID: 6761 Comm: syz.3.230 Not tainted syzkaller #0 [ 191.687185][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.687196][ C1] Call Trace: [ 191.687203][ C1] [ 191.687210][ C1] dump_stack_lvl+0x18c/0x250 [ 191.687243][ C1] ? show_regs_print_info+0x20/0x20 [ 191.687272][ C1] ? load_image+0x400/0x400 [ 191.687354][ C1] panic+0x2dc/0x730 [ 191.687382][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 191.687437][ C1] __warn+0x2e0/0x470 [ 191.687496][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 191.687580][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 191.687645][ C1] report_bug+0x2be/0x4f0 [ 191.687715][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 191.687782][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 191.687841][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 191.687900][ C1] handle_bug+0xcf/0x120 [ 191.687970][ C1] exc_invalid_op+0x1a/0x50 [ 191.688046][ C1] asm_exc_invalid_op+0x1a/0x20 [ 191.688095][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 191.688156][ C1] Code: 24 4c 89 e7 e8 5e 86 c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 59 ce 84 f7 0f 0b e9 f6 f7 ff ff e8 4d ce 84 f7 <0f> 0b e9 48 fb ff ff e8 41 ce 84 f7 48 c7 c7 e0 4c 64 8e 4c 89 e6 [ 191.688197][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 191.688238][ C1] RAX: ffffffff8a0244d3 RBX: ffffffff8a0232d6 RCX: ffff888022819e00 [ 191.688288][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.688328][ C1] RBP: 0000000000000000 R08: ffff888022819e00 R09: 0000000000000003 [ 191.688358][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c8063c0 [ 191.688395][ C1] R13: dffffc0000000000 R14: ffff88805c8068b0 R15: ffff88805cf7c824 [ 191.688437][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 191.688500][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 191.688596][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 191.688659][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 191.688743][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 191.688815][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 191.688928][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 191.689029][ C1] __iterate_interfaces+0x243/0x500 [ 191.689101][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.689163][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 191.689244][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 191.689326][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 191.689416][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 191.689478][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 191.689553][ C1] ? hw_scan_work+0xf60/0xf60 [ 191.689627][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 191.689681][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 191.689783][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 191.689853][ C1] handle_softirqs+0x280/0x820 [ 191.689920][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 191.689987][ C1] ? do_softirq+0x1a0/0x1a0 [ 191.690047][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 191.690125][ C1] __irq_exit_rcu+0xd3/0x190 [ 191.690175][ C1] ? irq_exit_rcu+0x20/0x20 [ 191.690251][ C1] irq_exit_rcu+0x9/0x20 [ 191.690333][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 191.690417][ C1] [ 191.690437][ C1] [ 191.690469][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 191.690545][ C1] RIP: 0010:check_preemption_disabled+0x42/0x110 [ 191.690595][ C1] Code: 65 8b 05 dd 94 7f 75 65 8b 0d d2 94 7f 75 f7 c1 ff ff ff 7f 74 1f 65 48 8b 0c 25 28 00 00 00 48 3b 4c 24 08 0f 85 c4 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 48 c7 04 24 00 00 00 00 9c 8f 04 [ 191.690632][ C1] RSP: 0018:ffffc900033278e8 EFLAGS: 00000246 [ 191.690669][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 1b7ec1615501ed00 [ 191.690698][ C1] RDX: 0000000000000000 RSI: ffffffff8b1c80c0 RDI: ffffffff8b1c8080 [ 191.690728][ C1] RBP: ffffc90003327a48 R08: ffffffff8e8ad9ef R09: 1ffffffff1d15b3d [ 191.690764][ C1] R10: dffffc0000000000 R11: fffffbfff1d15b3e R12: ffffffff81cb1e1a [ 191.690801][ C1] R13: dffffc0000000000 R14: ffffc90003327ae0 R15: 1ffff92000664f34 [ 191.690839][ C1] ? __might_fault+0xaa/0x120 [ 191.690924][ C1] rcu_is_watching+0x15/0xb0 [ 191.690991][ C1] lock_release+0xb5/0x8c0 [ 191.691047][ C1] ? __might_sleep+0xe0/0xe0 [ 191.691104][ C1] ? read_lock_is_recursive+0x20/0x20 [ 191.691161][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 191.691256][ C1] ? verify_lock_unused+0x140/0x140 [ 191.691311][ C1] ? __might_fault+0xaa/0x120 [ 191.691360][ C1] ? __might_fault+0xc6/0x120 [ 191.691402][ C1] ? __might_fault+0xaa/0x120 [ 191.691460][ C1] _copy_from_user+0x2a/0xe0 [ 191.691517][ C1] ___sys_recvmsg+0x176/0x590 [ 191.691588][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 191.691711][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 191.691811][ C1] ? __might_fault+0xc6/0x120 [ 191.691853][ C1] ? __might_fault+0xaa/0x120 [ 191.691906][ C1] do_recvmmsg+0x39a/0x870 [ 191.691963][ C1] ? __sys_recvmmsg+0x290/0x290 [ 191.692043][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 191.692093][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 191.692180][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 191.692239][ C1] ? do_recvmmsg+0x870/0x870 [ 191.692300][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 191.692355][ C1] do_syscall_64+0x55/0xa0 [ 191.692424][ C1] ? clear_bhb_loop+0x40/0x90 [ 191.692475][ C1] ? clear_bhb_loop+0x40/0x90 [ 191.692536][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 191.692581][ C1] RIP: 0033:0x7fe13899acb9 [ 191.692624][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.692657][ C1] RSP: 002b:00007fe136bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 191.692708][ C1] RAX: ffffffffffffffda RBX: 00007fe138c16090 RCX: 00007fe13899acb9 [ 191.692747][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 191.692779][ C1] RBP: 00007fe138a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 191.692810][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 191.692840][ C1] R13: 00007fe138c16128 R14: 00007fe138c16090 R15: 00007ffc9ef4a3f8 [ 191.692913][ C1] [ 191.707580][ C1] Kernel Offset: disabled