last executing test programs: 28.288074991s ago: executing program 1 (id=69): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x1400000100000000, 0x0) 27.34359137s ago: executing program 1 (id=68): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x735}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 26.371393921s ago: executing program 1 (id=79): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000180)=0x7, 0x4) syz_emit_ethernet(0x157, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd600a843501210600fc010000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="c00200009078"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 26.184517481s ago: executing program 1 (id=81): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 25.586756443s ago: executing program 1 (id=83): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)=""/124, 0x7c}, {&(0x7f0000000ac0)=""/158, 0x9e}], 0x2}, 0x8005}], 0x1, 0x0, 0x0) 23.55640099s ago: executing program 1 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xed}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7fc0, 0x7, 0xa, 0x7}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 22.815964049s ago: executing program 32 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0xed}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newtaction={0x68, 0x30, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7fc0, 0x7, 0xa, 0x7}, 0x3, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 5.953472006s ago: executing program 4 (id=92): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@generic={0x91, 0x1, 0x1, 0x7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xa6}]}}]}, 0x38}}, 0x24040084) 5.595897835s ago: executing program 2 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x1, 0x9}}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 5.308027901s ago: executing program 4 (id=147): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x200000000000000) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000e40)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="001e14"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.179944137s ago: executing program 2 (id=148): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 4.872339563s ago: executing program 2 (id=150): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000004c0)=0x7d, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c3506", 0x43}], 0x1}}], 0x1, 0x4004) 4.655233455s ago: executing program 2 (id=152): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="83000500012c0000240012800b00010067726574617000001400028008000700ac1414"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @local}}}], 0x20}}], 0x1, 0x4880) 4.293323004s ago: executing program 2 (id=153): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f00000009c0)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716, @ANYRESHEX, @ANYBLOB="99b77d5bf0e4f488f1a06d3eaadf288d1a0bc9008f6a3bcf6564a3bb5d28e7605fcd02c5b1692869cd162d8accf9c2d716b7537a34aea4d2212a59e6b6205bb2b3ec1d7f1c1521d56d697305db68aeb1f641f73293b945e4a7c4ea5eaae5e241d70c42aa26b50f699caeec0b3ae27d32208d654541c7d2b05b73441275b81e91a5610bddc43ac550a55f5d56c8cece27675c29446ee82f70d92bcac9c21953637402f90a9eb507c8b69cdb6d090cfa24e99dff71609ae03282267987feec0478b447840876084eda7a22aecf54efa457d9ab75ad861e", @ANYBLOB="be0c386e4cdc3da35edc21c83330dd2cd3675bc494b4e83934f360ff1e86d52fd7c8efe5bb669a90b583ded38147d1"], 0x5, 0x5593, &(0x7f00000061c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000200)='./file0\x00', 0x2f9c08, 0x0, 0x1, 0x0, &(0x7f0000000000)) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.864295209s ago: executing program 0 (id=158): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, r1, {{0x5b2, 0x325, 0x8, 0xe, 0x6, 0xb6c, 0x2, 0x64a6}}}, 0x60) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0xd6e, 0x0, 0x6a9}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 2.863745869s ago: executing program 4 (id=159): mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 2.475873249s ago: executing program 3 (id=160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) 2.475427479s ago: executing program 4 (id=161): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000f40)='./file1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x7fff, 0x100000001, 0x800000000000000, 0x1b}) 2.352716376s ago: executing program 0 (id=162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x9, 0x8000000000000000, 0x7, 0xb, 0xf8, 0x2, 0x1002, 0x7, 0xfffffffffffffffa, 0x81, 0xfffffffffffffffe, 0x9, 0x8bd8, 0x7, 0x3fb, 0x208], 0x25000, 0x216156}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.956693357s ago: executing program 3 (id=163): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000480)="9586a26e2862e86c8e4f12d8f826203e05e85cc88a2b", 0x16}], 0x1) 1.763585547s ago: executing program 4 (id=164): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x1, 0x7ffffd, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.633773813s ago: executing program 0 (id=165): bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="c3f83e"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1.495643761s ago: executing program 3 (id=166): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1.115878371s ago: executing program 4 (id=167): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1bf40000102030109025c0002010000000904000001020d0000052406000105240000000d240f13f3de55aacf5f84000006241a0000000905810300020005000904010000020dd6b30904010102020d0000090582020002000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0xfeeb0425, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x10, 0x7fffffff, 0x10, 0x4, 0x10, 0xfffa, 0x10, 0x10, 0x3, 0x122, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.072368663s ago: executing program 0 (id=168): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000040)={0x2, [0x3, 0x1]}, 0x8) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0xffff, 0x5]}, &(0x7f0000000100)=0x8) 904.246312ms ago: executing program 3 (id=169): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) listen(r0, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000003, 0x4) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 861.976484ms ago: executing program 2 (id=170): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xe08) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r1) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 699.977523ms ago: executing program 0 (id=171): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x80000}, 0x20) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 553.96072ms ago: executing program 3 (id=172): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) 473.799775ms ago: executing program 0 (id=173): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xea, 0x440, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x3, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 76.839439][ T5757] cgroup: Unknown subsys name 'net' [ 77.009921][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.608410][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.121719][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.132066][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.142153][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.152401][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.162421][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.169757][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.230170][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.243742][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.262287][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.274432][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.295302][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.303411][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.313962][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.370373][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.380002][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.388232][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.396069][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.403517][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.403542][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.419289][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.427068][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.435170][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.442956][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.450315][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.820654][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 80.911928][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.979509][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.987542][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.994968][ T5768] bridge_slave_0: entered allmulticast mode [ 81.003475][ T5768] bridge_slave_0: entered promiscuous mode [ 81.020147][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.048456][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.056861][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.065613][ T5768] bridge_slave_1: entered allmulticast mode [ 81.073289][ T5768] bridge_slave_1: entered promiscuous mode [ 81.152010][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.168112][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.197777][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 81.266465][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.273750][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.281162][ T5774] bridge_slave_0: entered allmulticast mode [ 81.288931][ T5774] bridge_slave_0: entered promiscuous mode [ 81.305602][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.313034][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.320182][ T5773] bridge_slave_0: entered allmulticast mode [ 81.327684][ T5773] bridge_slave_0: entered promiscuous mode [ 81.339002][ T5768] team0: Port device team_slave_0 added [ 81.350003][ T5768] team0: Port device team_slave_1 added [ 81.366733][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.375573][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.382941][ T5774] bridge_slave_1: entered allmulticast mode [ 81.389918][ T5774] bridge_slave_1: entered promiscuous mode [ 81.417317][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.424596][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.431751][ T5773] bridge_slave_1: entered allmulticast mode [ 81.439253][ T5773] bridge_slave_1: entered promiscuous mode [ 81.489326][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.496388][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.522682][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.537050][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.550288][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.576609][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.583935][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.609957][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.661418][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.689914][ T5774] team0: Port device team_slave_0 added [ 81.698818][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.730589][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.738795][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.746115][ T5771] bridge_slave_0: entered allmulticast mode [ 81.754310][ T5771] bridge_slave_0: entered promiscuous mode [ 81.765813][ T5774] team0: Port device team_slave_1 added [ 81.793343][ T5773] team0: Port device team_slave_0 added [ 81.799610][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.807320][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.815023][ T5771] bridge_slave_1: entered allmulticast mode [ 81.822188][ T5771] bridge_slave_1: entered promiscuous mode [ 81.861291][ T5773] team0: Port device team_slave_1 added [ 81.894244][ T5768] hsr_slave_0: entered promiscuous mode [ 81.900712][ T5768] hsr_slave_1: entered promiscuous mode [ 81.921118][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.948288][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.955486][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.981950][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.005140][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.034620][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.041620][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.067921][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.085766][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.093438][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.119507][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.141381][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.148409][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.174659][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.225251][ T5771] team0: Port device team_slave_0 added [ 82.260151][ T5771] team0: Port device team_slave_1 added [ 82.266185][ T5084] Bluetooth: hci0: command tx timeout [ 82.324978][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.332363][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.360272][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.376969][ T5773] hsr_slave_0: entered promiscuous mode [ 82.383740][ T5773] hsr_slave_1: entered promiscuous mode [ 82.390099][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.398159][ T5773] Cannot create hsr debugfs directory [ 82.422484][ T5084] Bluetooth: hci1: command tx timeout [ 82.433476][ T5774] hsr_slave_0: entered promiscuous mode [ 82.440136][ T5774] hsr_slave_1: entered promiscuous mode [ 82.446448][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.454332][ T5774] Cannot create hsr debugfs directory [ 82.461064][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.468134][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.494105][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.504879][ T5084] Bluetooth: hci3: command tx timeout [ 82.504901][ T5777] Bluetooth: hci2: command tx timeout [ 82.619941][ T5771] hsr_slave_0: entered promiscuous mode [ 82.626634][ T5771] hsr_slave_1: entered promiscuous mode [ 82.633149][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.640723][ T5771] Cannot create hsr debugfs directory [ 82.786544][ T5768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.822226][ T5768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.872429][ T5768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.906197][ T5768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.069033][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.081108][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.101493][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.111470][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.209541][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.224939][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.238138][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.249908][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.266468][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.324208][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.351605][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.358913][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.403387][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.410567][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.419715][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.439712][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.451757][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.462348][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.553645][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.628501][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.650845][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.685728][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.692953][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.733018][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.740191][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.798859][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.857267][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.864512][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.885976][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.893244][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.948554][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.995911][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.041432][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.056101][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.063318][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.127531][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.134766][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.170283][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.239917][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.342735][ T5084] Bluetooth: hci0: command tx timeout [ 84.398814][ T5768] veth0_vlan: entered promiscuous mode [ 84.417094][ T5768] veth1_vlan: entered promiscuous mode [ 84.494855][ T5768] veth0_macvtap: entered promiscuous mode [ 84.503161][ T5084] Bluetooth: hci1: command tx timeout [ 84.524037][ T5768] veth1_macvtap: entered promiscuous mode [ 84.558695][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.570956][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.584191][ T5084] Bluetooth: hci3: command tx timeout [ 84.589662][ T5084] Bluetooth: hci2: command tx timeout [ 84.608920][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.640425][ T5768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.657420][ T5768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.678518][ T5768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.688058][ T5768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.731277][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.798353][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.841766][ T5774] veth0_vlan: entered promiscuous mode [ 84.858382][ T5774] veth1_vlan: entered promiscuous mode [ 84.938482][ T5773] veth0_vlan: entered promiscuous mode [ 84.956269][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.978579][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.040168][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.071666][ T5773] veth1_vlan: entered promiscuous mode [ 85.077333][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.097566][ T5774] veth0_macvtap: entered promiscuous mode [ 85.108719][ T5771] veth0_vlan: entered promiscuous mode [ 85.128541][ T5774] veth1_macvtap: entered promiscuous mode [ 85.138274][ T5771] veth1_vlan: entered promiscuous mode [ 85.233533][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.245581][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.259744][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.268061][ T5773] veth0_macvtap: entered promiscuous mode [ 85.288531][ T5773] veth1_macvtap: entered promiscuous mode [ 85.310853][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.324612][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.336385][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.350882][ T5771] veth0_macvtap: entered promiscuous mode [ 85.379124][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.412011][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.422181][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.440830][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.454243][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.474763][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.496454][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.512084][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.520915][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.557032][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.581868][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.591764][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.604357][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.621204][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.630609][ T5771] veth1_macvtap: entered promiscuous mode [ 85.663089][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.680819][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.690546][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.706950][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.761651][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.775530][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.786248][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.797101][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.807843][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.821591][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.836413][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.895647][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.909891][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.920807][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.931317][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.941209][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.956039][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.967623][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.009834][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.020111][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.031624][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.043721][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.074913][ T3549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.090352][ T3549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.171200][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.183777][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.191641][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.199017][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.284489][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.300818][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.413680][ T1065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.423483][ T5084] Bluetooth: hci0: command tx timeout [ 86.461720][ T1065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.525263][ T5835] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.583007][ T5084] Bluetooth: hci1: command tx timeout [ 86.612952][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.631904][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.662867][ T5084] Bluetooth: hci2: command tx timeout [ 86.666306][ T5777] Bluetooth: hci3: command tx timeout [ 87.115950][ T5854] syz.0.7[5854]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.182299][ T5854] loop0: detected capacity change from 0 to 512 [ 87.213054][ T5854] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.258546][ T5854] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.294487][ T5854] EXT4-fs (loop0): 1 truncate cleaned up [ 87.313984][ T5854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.392415][ T5804] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.446084][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.521043][ T5864] capability: warning: `syz.2.11' uses deprecated v2 capabilities in a way that may be insecure [ 87.596015][ T5804] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 87.611894][ T5804] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 87.635930][ T5804] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 87.660157][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.703479][ T5804] usb 2-1: Product: syz [ 87.707718][ T5804] usb 2-1: Manufacturer: syz [ 87.732070][ T5804] usb 2-1: SerialNumber: syz [ 87.750614][ T5804] usb 2-1: config 0 descriptor?? [ 87.818465][ T5804] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 87.967115][ T5872] syzkaller1: entered promiscuous mode [ 87.991306][ T5872] syzkaller1: entered allmulticast mode [ 88.507785][ T5777] Bluetooth: hci0: command tx timeout [ 88.672690][ T5777] Bluetooth: hci1: command tx timeout [ 88.742110][ T5777] Bluetooth: hci3: command tx timeout [ 88.744585][ T5084] Bluetooth: hci2: command tx timeout [ 89.022953][ T5804] gspca_sunplus: reg_r err -71 [ 89.036811][ T5804] sunplus: probe of 2-1:0.0 failed with error -71 [ 89.058172][ T5804] usb 2-1: USB disconnect, device number 2 [ 89.198672][ T5893] sctp: [Deprecated]: syz.3.21 (pid 5893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.198672][ T5893] Use struct sctp_sack_info instead [ 89.589274][ T5888] loop2: detected capacity change from 0 to 40427 [ 89.627770][ T5888] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 89.656669][ T5888] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 89.723367][ T5888] F2FS-fs (loop2): invalid crc value [ 89.767704][ T5888] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.960595][ T5888] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 89.984340][ T5888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.283486][ T3549] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 90.312879][ T3549] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 90.383271][ T5899] loop0: detected capacity change from 0 to 32768 [ 90.401058][ T5899] ======================================================= [ 90.401058][ T5899] WARNING: The mand mount option has been deprecated and [ 90.401058][ T5899] and is ignored by this kernel. Remove the mand [ 90.401058][ T5899] option from the mount to silence this warning. [ 90.401058][ T5899] ======================================================= [ 90.576434][ T5899] JBD2: Ignoring recovery information on journal [ 90.693436][ T5899] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 91.248915][ T5774] ocfs2: Unmounting device (7,0) on (node local) [ 91.462453][ T5804] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.517011][ T5924] loop3: detected capacity change from 0 to 2048 [ 91.581198][ T5922] loop2: detected capacity change from 0 to 8192 [ 91.597643][ T5924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.653553][ T5922] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 91.667646][ T5922] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 91.678137][ T5922] REISERFS (device loop2): using ordered data mode [ 91.684999][ T5922] reiserfs: using flush barriers [ 91.697057][ T5922] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 91.713676][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 91.750414][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.816044][ T5922] REISERFS (device loop2): checking transaction log (loop2) [ 91.824611][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.843520][ T5924] EXT4-fs (loop3): Online defrag not supported with bigalloc [ 91.865319][ T5922] REISERFS (device loop2): Using r5 hash to sort names [ 91.872983][ T5804] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 91.894812][ T5922] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 91.912448][ T5804] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 91.921619][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.959514][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.976983][ T5804] usb 2-1: config 0 descriptor?? [ 92.019615][ T28] audit: type=1800 audit(1777314619.760:2): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.27" name="file1" dev="loop2" ino=3 res=0 errno=0 [ 92.046525][ T966] cfg80211: failed to load regulatory.db [ 92.451434][ T5804] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.0001/input/input5 [ 92.669935][ T5804] appleir 0003:05AC:8241.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 92.899196][ T5932] loop0: detected capacity change from 0 to 40427 [ 92.927013][ T5932] F2FS-fs (loop0): invalid crc value [ 92.956143][ T5932] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.106951][ T5932] F2FS-fs (loop0): Start checkpoint disabled! [ 93.133172][ T5932] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 93.330704][ T5806] usb 2-1: USB disconnect, device number 3 [ 93.441490][ T5945] loop2: detected capacity change from 0 to 32768 [ 93.487975][ T1089] kworker/u4:7: attempt to access beyond end of device [ 93.487975][ T1089] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.503372][ T1089] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 93.513078][ T5945] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 93.514489][ T1089] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 93.571674][ T5945] XFS (loop2): Ending clean mount [ 93.599820][ T5945] XFS (loop2): Quotacheck needed: Please wait. [ 93.736769][ T5945] XFS (loop2): Quotacheck: Done. [ 94.056478][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.554621][ T5960] loop3: detected capacity change from 0 to 32768 [ 94.666119][ T5960] JBD2: Ignoring recovery information on journal [ 94.829913][ T5960] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.162161][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 95.560245][ T5977] loop1: detected capacity change from 0 to 128 [ 95.615051][ T5977] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.669043][ T5977] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 95.851920][ T1197] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.876888][ T5768] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.006350][ T5982] netlink: 'syz.1.47': attribute type 1 has an invalid length. [ 96.062029][ T1197] usb 4-1: Using ep0 maxpacket: 8 [ 96.073784][ T1197] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 96.091511][ T1197] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 96.105355][ T1197] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.121084][ T1197] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.138728][ T1197] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.150590][ T1197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.380012][ T1197] usb 4-1: GET_CAPABILITIES returned 0 [ 96.385650][ T1197] usbtmc 4-1:16.0: can't read capabilities [ 96.536551][ T5964] loop0: detected capacity change from 0 to 131072 [ 96.549887][ T5964] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 96.567309][ T5964] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.594907][ T5964] F2FS-fs (loop0): invalid crc value [ 96.603705][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.616778][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.626895][ T5964] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.634629][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 96.648499][ T8] usb 4-1: USB disconnect, device number 2 [ 96.730312][ T5964] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.741080][ T5964] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 96.811148][ T28] audit: type=1800 audit(1777314624.550:3): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.39" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 97.375885][ T5998] veth1_to_bond: entered allmulticast mode [ 97.398655][ T5998] veth1_to_bond: entered promiscuous mode [ 97.421855][ T5998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 97.535152][ T5998] veth1_to_bond (unregistering): left promiscuous mode [ 97.551999][ T5998] veth1_to_bond (unregistering): left allmulticast mode [ 97.611204][ T5991] loop1: detected capacity change from 0 to 32768 [ 97.639207][ T5991] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.50 (5991) [ 97.695284][ T5991] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.706421][ T5998] bond0: (slave bond_slave_1): Releasing backup interface [ 97.718005][ T5991] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 97.744317][ T5991] BTRFS info (device loop1): allowing degraded mounts [ 97.764433][ T5991] BTRFS info (device loop1): enabling auto defrag [ 97.776525][ T5991] BTRFS info (device loop1): using free space tree [ 97.976044][ T5991] BTRFS info (device loop1): enabling ssd optimizations [ 97.983205][ T5991] BTRFS info (device loop1): auto enabling async discard [ 98.284533][ T5991] BTRFS error (device loop1: state M): unrecognized mount option '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Őt}˛0ü$‰' [ 98.412534][ T5768] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.664056][ T966] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.878900][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.899537][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.920428][ T966] usb 1-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 98.941355][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.985961][ T966] usb 1-1: config 0 descriptor?? [ 99.429287][ T966] hid-generic 0003:0925:8066.0002: unbalanced collection at end of report description [ 99.447020][ T966] hid-generic: probe of 0003:0925:8066.0002 failed with error -22 [ 99.591273][ T6026] loop3: detected capacity change from 0 to 32768 [ 99.641976][ T5804] usb 1-1: USB disconnect, device number 2 [ 99.652929][ T6026] JBD2: Ignoring recovery information on journal [ 99.730165][ T6026] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 99.823580][ T6026] (syz.3.57,6026,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 99.919495][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 100.379433][ T6046] loop0: detected capacity change from 0 to 8192 [ 100.398064][ T6046] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 100.421749][ T6046] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 100.432219][ T6046] REISERFS (device loop0): using ordered data mode [ 100.438851][ T6046] reiserfs: using flush barriers [ 100.452039][ T6046] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.512780][ T6046] REISERFS (device loop0): checking transaction log (loop0) [ 100.716204][ T6046] REISERFS (device loop0): Using tea hash to sort names [ 100.739295][ T6046] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 100.962638][ T6046] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 2) not found (pos 4) [ 101.007116][ T6046] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [3 5 0x0 SD] (nlink == 3) not found (pos 4) [ 101.155302][ T6065] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 102.048876][ T6086] loop1: detected capacity change from 0 to 512 [ 102.118276][ T6086] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 102.209690][ T6086] EXT4-fs error (device loop1): ext4_iget_extra_inode:4739: inode #15: comm syz.1.81: corrupted in-inode xattr: e_value size too large [ 102.301873][ T6086] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.81: couldn't read orphan inode 15 (err -117) [ 102.334960][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.371320][ T6080] loop2: detected capacity change from 0 to 40427 [ 102.404955][ T6080] F2FS-fs (loop2): Found nat_bits in checkpoint [ 102.432827][ T6086] overlayfs: upper fs needs to support d_type. [ 102.615667][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.653812][ T6080] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.669992][ T6078] loop3: detected capacity change from 0 to 32768 [ 102.694576][ T5768] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 102.739834][ T6080] syz.2.78: attempt to access beyond end of device [ 102.739834][ T6080] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 102.801078][ T6078] XFS (loop3): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 102.816617][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.850021][ T5768] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 102.963386][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 102.993325][ T5771] syz-executor: attempt to access beyond end of device [ 102.993325][ T5771] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 102.994387][ T5768] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 103.035173][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 103.056408][ T5771] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 103.137351][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.147939][ T5768] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 103.167961][ T6090] loop0: detected capacity change from 0 to 32768 [ 103.207364][ T6090] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.82 (6090) [ 103.233837][ T5768] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 18: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=256, rec_len=1024, size=1024 fake=0 [ 103.292362][ T6090] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.322006][ T6090] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 103.343988][ T5768] EXT4-fs error (device loop1): ext4_empty_dir:3177: inode #11: block 18: comm syz-executor: bad entry in directory: inode out of bounds - offset=4096, inode=256, rec_len=1024, size=1024 fake=0 [ 103.352171][ T6090] BTRFS info (device loop0): force clearing of disk cache [ 103.392615][ T6090] BTRFS info (device loop0): turning on async discard [ 103.399488][ T6090] BTRFS info (device loop0): use no compression [ 103.441944][ T6090] BTRFS info (device loop0): disabling free space tree [ 103.448892][ T6090] BTRFS info (device loop0): enabling ssd optimizations [ 103.492026][ T6090] BTRFS info (device loop0): using spread ssd allocation scheme [ 103.499857][ T6090] BTRFS info (device loop0): not using ssd optimizations [ 103.550245][ T6090] BTRFS info (device loop0): not using spread ssd allocation scheme [ 103.753280][ T6090] BTRFS info (device loop0): rebuilding free space tree [ 103.811681][ T6120] loop2: detected capacity change from 0 to 1024 [ 103.819473][ T6120] EXT4-fs: inline encryption not supported [ 103.864429][ T6120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.904050][ T28] audit: type=1800 audit(1777314631.650:4): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 103.962871][ T6090] BTRFS info (device loop0): disabling free space tree [ 103.981412][ T6090] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.002346][ T6090] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.046794][ T6041] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.061596][ T6090] BTRFS info (device loop0): checking UUID tree [ 104.197809][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.561502][ T5768] syz-executor (5768) used greatest stack depth: 20552 bytes left [ 104.733063][ T6137] loop2: detected capacity change from 0 to 256 [ 104.788247][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.810478][ T6137] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 104.961570][ T5774] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.004922][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.167693][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.339796][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.939432][ T6148] loop0: detected capacity change from 0 to 64 [ 106.243496][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.254887][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.271971][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.284209][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.292749][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.303306][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.413889][ T5824] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.630340][ T5824] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 106.648889][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.689627][ T5824] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.719728][ T5824] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.777251][ T5824] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.830044][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.883372][ T5824] usb 4-1: config 0 descriptor?? [ 107.329789][ T5824] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 107.368289][ T5824] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 107.403385][ T6170] loop2: detected capacity change from 0 to 32768 [ 107.412300][ T5824] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 107.520840][ T28] audit: type=1800 audit(1777314635.260:5): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.99" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 107.653650][ T6158] chnl_net:caif_netlink_parms(): no params data found [ 107.724514][ T1197] usb 4-1: USB disconnect, device number 3 [ 107.760811][ T6163] loop0: detected capacity change from 0 to 40427 [ 107.820071][ T6163] F2FS-fs (loop0): Wrong MAIN_AREA boundary, start(4096) end(12800) block(12288) [ 107.850827][ T6163] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 107.905735][ T6163] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 107.969030][ T6163] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x7ffff [ 108.011966][ T6163] F2FS-fs (loop0): Image doesn't support compression [ 108.055860][ T6163] F2FS-fs (loop0): invalid crc value [ 108.102777][ T6163] F2FS-fs (loop0): Found nat_bits in checkpoint [ 108.172608][ T49] hsr_slave_0: left promiscuous mode [ 108.202352][ T49] hsr_slave_1: left promiscuous mode [ 108.227652][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.284404][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.322122][ T6163] F2FS-fs (loop0): Start checkpoint disabled! [ 108.342344][ T5084] Bluetooth: hci0: command tx timeout [ 108.354783][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.380168][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.412071][ T6163] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 108.419170][ T6163] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 108.432864][ T49] bridge_slave_1: left allmulticast mode [ 108.456084][ T49] bridge_slave_1: left promiscuous mode [ 108.484421][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.525066][ T49] bridge_slave_0: left allmulticast mode [ 108.530779][ T49] bridge_slave_0: left promiscuous mode [ 108.580012][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.625024][ T6163] syz.0.97: attempt to access beyond end of device [ 108.625024][ T6163] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 108.689510][ T49] veth1_macvtap: left promiscuous mode [ 108.706964][ T49] veth0_macvtap: left promiscuous mode [ 108.726543][ T49] veth1_vlan: left promiscuous mode [ 108.752463][ T49] veth0_vlan: left promiscuous mode [ 109.064812][ T11] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_write_inode+0x3c0/0x4b0 [ 109.082934][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 109.362460][ T5804] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.577586][ T5804] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 109.592462][ T5804] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 109.600686][ T5804] usb 3-1: Product: syz [ 109.632974][ T5804] usb 3-1: Manufacturer: syz [ 109.637658][ T5804] usb 3-1: SerialNumber: syz [ 109.664991][ T5804] usb 3-1: config 0 descriptor?? [ 109.673318][ T5804] ch341 3-1:0.0: ch341-uart converter detected [ 110.338216][ T49] team0 (unregistering): Port device team_slave_1 removed [ 110.422680][ T5084] Bluetooth: hci0: command tx timeout [ 110.430100][ T49] team0 (unregistering): Port device team_slave_0 removed [ 110.491058][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.542733][ T6221] loop3: detected capacity change from 0 to 32768 [ 110.578053][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.592847][ T6221] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 110.655226][ T6221] XFS (loop3): Ending clean mount [ 110.708018][ T5804] ch341-uart ttyUSB0: failed to read break control: -71 [ 110.717810][ T5804] ch341-uart: probe of ttyUSB0 failed with error -71 [ 110.747366][ T5804] usb 3-1: USB disconnect, device number 2 [ 110.776857][ T5804] ch341 3-1:0.0: device disconnected [ 110.840126][ T5773] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 111.366442][ T49] bond0 (unregistering): Released all slaves [ 111.724344][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.761552][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.774907][ T6246] loop0: detected capacity change from 0 to 1024 [ 111.783337][ T6158] bridge_slave_0: entered allmulticast mode [ 111.803125][ T6246] ext4: Bad value for 'max_dir_size_kb' [ 111.825732][ T6158] bridge_slave_0: entered promiscuous mode [ 111.849968][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.860079][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.860395][ T5761] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 111.891455][ T6158] bridge_slave_1: entered allmulticast mode [ 111.899839][ T6158] bridge_slave_1: entered promiscuous mode [ 111.917206][ T6242] loop2: detected capacity change from 0 to 32768 [ 111.982701][ T6242] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.115 (6242) [ 112.038991][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.055178][ T6242] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 112.125314][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.135008][ T6242] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 112.156639][ T6242] BTRFS info (device loop2): using free space tree [ 112.289143][ T6158] team0: Port device team_slave_0 added [ 112.309339][ T6158] team0: Port device team_slave_1 added [ 112.349944][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.358352][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.438047][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.474292][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.481458][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.524031][ T5084] Bluetooth: hci0: command tx timeout [ 112.569962][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.602077][ T6242] BTRFS info (device loop2): enabling ssd optimizations [ 112.609100][ T6242] BTRFS info (device loop2): auto enabling async discard [ 112.797590][ C1] Unknown status report in ack skb [ 112.816988][ T28] audit: type=1800 audit(1777314640.560:6): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.115" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 112.859400][ T6158] hsr_slave_0: entered promiscuous mode [ 112.884081][ T6158] hsr_slave_1: entered promiscuous mode [ 113.089272][ T5771] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 113.253763][ T5761] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop2 scanned by udevd (5761) [ 113.254021][ C1] hrtimer: interrupt took 121897 ns [ 114.174173][ T6158] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 114.221324][ T6158] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 114.294892][ T6158] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 114.365267][ T6158] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 114.581960][ T5084] Bluetooth: hci0: command tx timeout [ 114.859016][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.876559][ T6294] loop0: detected capacity change from 0 to 32768 [ 114.918386][ T6294] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 115.218783][ T6158] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.267274][ T5759] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 115.295159][ T3549] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.302366][ T3549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.356035][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.363350][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.503320][ T6297] loop2: detected capacity change from 0 to 32768 [ 115.590519][ T6297] (syz.2.124,6297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.673918][ T6297] (syz.2.124,6297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 115.842461][ T6297] JBD2: Ignoring recovery information on journal [ 116.069060][ T6300] loop3: detected capacity change from 0 to 32768 [ 116.078240][ T6297] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 116.213616][ T6300] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.336615][ T6320] (syz.2.124,6320,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 116.463980][ T6320] (syz.2.124,6320,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 116.488642][ T6320] (syz.2.124,6320,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 116.500867][ T6320] (syz.2.124,6320,0):ocfs2_quota_read:201 ERROR: status = -5 [ 116.522176][ T6320] Quota error (device loop2): find_next_id: Can't read quota tree block 4 [ 116.589555][ T6320] (syz.2.124,6320,1):ocfs2_get_next_id:909 ERROR: status = -5 [ 116.668075][ T6297] (syz.2.124,6297,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x438, computed 0x1cec3d0f. Applying ECC. [ 116.731129][ T6300] XFS (loop3): Ending clean mount [ 116.737352][ T6297] (syz.2.124,6297,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x438, computed 0x1cec3d0f [ 116.789330][ T6297] (syz.2.124,6297,0):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 116.805312][ T6329] loop0: detected capacity change from 0 to 16 [ 116.830696][ T6297] (syz.2.124,6297,0):ocfs2_quota_read:201 ERROR: status = -5 [ 116.873615][ T6297] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 4 [ 116.930302][ T6297] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 116.948996][ T6329] erofs: (device loop0): mounted with root inode @ nid 36. [ 116.979812][ T5773] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.990524][ T6158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.006624][ T6297] (syz.2.124,6297,0):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 117.046457][ T6297] (syz.2.124,6297,1):ocfs2_mknod:314 ERROR: status = -5 [ 117.054859][ T6297] (syz.2.124,6297,1):ocfs2_mknod:502 ERROR: status = -5 [ 117.066677][ T6297] (syz.2.124,6297,1):ocfs2_create:676 ERROR: status = -5 [ 117.451560][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 118.676277][ T6158] veth0_vlan: entered promiscuous mode [ 118.778640][ T6158] veth1_vlan: entered promiscuous mode [ 119.068392][ T6158] veth0_macvtap: entered promiscuous mode [ 119.098385][ T6158] veth1_macvtap: entered promiscuous mode [ 119.167798][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.199336][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.227399][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.258795][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.288866][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.300478][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.319035][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.451272][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.475392][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.501617][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.534452][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.586742][ T6158] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.654031][ T6158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.813878][ T6158] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.994831][ T6158] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.162297][ T6158] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.222005][ T6158] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.230779][ T6158] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.879387][ T6447] syz.3.139 uses obsolete (PF_INET,SOCK_PACKET) [ 121.105005][ T6450] loop2: detected capacity change from 0 to 64 [ 121.395139][ T6450] syz.2.140: attempt to access beyond end of device [ 121.395139][ T6450] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64 [ 121.494650][ T6450] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 121.528905][ T6403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.583894][ T6403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.772041][ T6403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.818374][ T6403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.284480][ T6465] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.294050][ T6465] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.461996][ T5155] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.665831][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 123.680451][ T5155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.723673][ T5155] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.760651][ T5155] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 123.791841][ T5155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.814221][ T5155] usb 5-1: config 0 descriptor?? [ 124.231417][ T5155] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.267463][ T5155] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.277108][ T5155] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.288501][ T5155] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.318014][ T5155] playstation 0003:054C:0DF2.0004: unknown main item tag 0x0 [ 124.371359][ T5155] playstation 0003:054C:0DF2.0004: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 124.492946][ T5155] playstation 0003:054C:0DF2.0004: Invalid reportID received, expected 9 got 0 [ 124.517837][ T5155] playstation 0003:054C:0DF2.0004: Failed to retrieve DualSense pairing info: -22 [ 124.556857][ T5155] playstation 0003:054C:0DF2.0004: Failed to get MAC address from DualSense [ 124.606581][ T5155] playstation 0003:054C:0DF2.0004: Failed to create dualsense. [ 124.649849][ T5155] playstation: probe of 0003:054C:0DF2.0004 failed with error -22 [ 124.747860][ T5155] usb 5-1: USB disconnect, device number 2 [ 125.542522][ T6527] Bluetooth: MGMT ver 1.22 [ 125.855199][ T6534] loop4: detected capacity change from 0 to 512 [ 125.966962][ T6534] EXT4-fs (loop4): 1 truncate cleaned up [ 125.977416][ T6534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.025389][ T6508] loop2: detected capacity change from 0 to 40427 [ 126.042232][ T6508] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 126.064021][ T6534] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.161: invalid indirect mapped block 4294901760 (level 0) [ 126.079132][ T6508] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 126.124783][ T6508] F2FS-fs (loop2): invalid crc value [ 126.164531][ T6508] F2FS-fs (loop2): Found nat_bits in checkpoint [ 126.175232][ T6534] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.161: invalid indirect mapped block 4294967295 (level 1) [ 126.420224][ T6158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.472986][ T6508] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 126.514183][ T6508] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 127.316097][ T2961] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 127.356297][ T2961] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 127.442098][ T966] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 127.665172][ T966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.707736][ T966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 127.739472][ T966] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 127.802089][ T966] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 127.866595][ T966] usb 5-1: New USB device found, idVendor=0525, idProduct=bfa1, bcdDevice= 0.40 [ 127.900584][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.931075][ T966] usb 5-1: Product: syz [ 127.941452][ T966] usb 5-1: Manufacturer: syz [ 127.977262][ T966] usb 5-1: SerialNumber: syz [ 128.000352][ T6562] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 128.205333][ T6403] ------------[ cut here ]------------ [ 128.211376][ T6403] WARNING: CPU: 0 PID: 6403 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.223072][ T6403] Modules linked in: [ 128.227479][ T6403] CPU: 0 PID: 6403 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 128.235233][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.245455][ T6403] Workqueue: phy8 ieee80211_csa_finalize_work [ 128.251634][ T6403] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.259077][ T6403] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 128.279138][ T6403] RSP: 0018:ffffc90003a779c0 EFLAGS: 00010293 [ 128.285643][ T6403] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff88802d9b0000 [ 128.293784][ T6403] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.302990][ C0] ------------[ cut here ]------------ [ 128.303027][ C0] WARNING: CPU: 0 PID: 6403 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 128.303072][ C0] Modules linked in: [ 128.303090][ C0] CPU: 0 PID: 6403 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 128.303112][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.303126][ C0] Workqueue: phy8 ieee80211_csa_finalize_work [ 128.303158][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 128.303188][ C0] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 128.303207][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 128.303227][ C0] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff88802d9b0000 [ 128.303245][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.303260][ C0] RBP: 0000000000000000 R08: ffff88802d9b0000 R09: 0000000000000003 [ 128.303275][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c52e3c0 [ 128.303291][ C0] R13: dffffc0000000000 R14: ffff88805c52e8b0 R15: ffff888025865824 [ 128.303309][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 128.303328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.303345][ C0] CR2: 00007fcf1d7b8e9c CR3: 0000000019a8f000 CR4: 00000000003506f0 [ 128.303366][ C0] Call Trace: [ 128.303387][ C0] [ 128.303400][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 128.303442][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 128.303478][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 128.303521][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 128.303559][ C0] __iterate_interfaces+0x243/0x500 [ 128.303595][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 128.303624][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 128.303664][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 128.303692][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 128.303745][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 128.303774][ C0] __hrtimer_run_queues+0x520/0xc40 [ 128.303799][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 128.303833][ C0] ? hw_scan_work+0xf60/0xf60 [ 128.303866][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 128.303890][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 128.303946][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 128.303978][ C0] handle_softirqs+0x280/0x820 [ 128.304008][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 128.304049][ C0] ? do_softirq+0x1a0/0x1a0 [ 128.304079][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 128.304114][ C0] __irq_exit_rcu+0xd3/0x190 [ 128.304139][ C0] ? irq_exit_rcu+0x20/0x20 [ 128.304173][ C0] irq_exit_rcu+0x9/0x20 [ 128.304195][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 128.304223][ C0] [ 128.304233][ C0] [ 128.304243][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.304273][ C0] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 128.304304][ C0] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 128.304329][ C0] RSP: 0018:ffffc90003a77340 EFLAGS: 00000293 [ 128.304353][ C0] RAX: ffffffff816b9b86 RBX: ffffc90003a774df RCX: ffff88802d9b0000 [ 128.304371][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.304386][ C0] RBP: ffffc90003a774b0 R08: ffffffff911c6507 R09: 1ffffffff2238ca0 [ 128.304404][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffff8d8b9540 [ 128.304422][ C0] R13: 1ffffffff19f970c R14: ffffffff8d8b9598 R15: dffffc0000000000 [ 128.304449][ C0] ? console_flush_all+0x8a6/0xd20 [ 128.304490][ C0] ? console_flush_all+0x10a/0xd20 [ 128.304534][ C0] ? is_console_locked+0x20/0x20 [ 128.304565][ C0] ? lock_chain_count+0x20/0x20 [ 128.304597][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 128.304631][ C0] console_unlock+0xad/0x350 [ 128.304662][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 128.304688][ C0] ? vprintk_emit+0x53d/0x610 [ 128.304718][ C0] ? printk_sprint+0x460/0x460 [ 128.304772][ C0] ? __wake_up_klogd+0xd9/0x100 [ 128.304798][ C0] vprintk_emit+0x497/0x610 [ 128.304834][ C0] ? printk_sprint+0x460/0x460 [ 128.304863][ C0] ? _printk+0xde/0x130 [ 128.304893][ C0] ? copy_from_kernel_nofault+0x1d2/0x310 [ 128.304938][ C0] _printk+0xde/0x130 [ 128.304968][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 128.305001][ C0] ? load_image+0x420/0x420 [ 128.305053][ C0] __show_regs+0x159/0x600 [ 128.305083][ C0] ? dump_stack_print_info+0xf5/0x150 [ 128.305122][ C0] show_regs+0x44/0x90 [ 128.305152][ C0] __warn+0x160/0x470 [ 128.305178][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.305209][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.305236][ C0] report_bug+0x2be/0x4f0 [ 128.305260][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.305290][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.305318][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 128.305347][ C0] handle_bug+0xcf/0x120 [ 128.305371][ C0] exc_invalid_op+0x1a/0x50 [ 128.305394][ C0] asm_exc_invalid_op+0x1a/0x20 [ 128.305421][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.305451][ C0] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 128.305470][ C0] RSP: 0018:ffffc90003a779c0 EFLAGS: 00010293 [ 128.305493][ C0] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff88802d9b0000 [ 128.305510][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.305523][ C0] RBP: dffffc0000000000 R08: ffff88805c52d5af R09: 1ffff1100b8a5ab5 [ 128.305541][ C0] R10: dffffc0000000000 R11: ffffed100b8a5ab6 R12: 0000000000000001 [ 128.305557][ C0] R13: ffff88805c52e5d9 R14: ffff888077ecac70 R15: ffff888077ecace8 [ 128.305585][ C0] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 128.305634][ C0] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 128.305668][ C0] ieee80211_csa_finalize+0x5a6/0xf20 [ 128.305700][ C0] ? mutex_lock_nested+0x20/0x20 [ 128.305727][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 128.305755][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 128.305786][ C0] ? read_lock_is_recursive+0x20/0x20 [ 128.305822][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 128.305855][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 128.305885][ C0] process_scheduled_works+0xa5d/0x15d0 [ 128.305956][ C0] ? worker_attach_to_pool+0x380/0x380 [ 128.305992][ C0] ? assign_work+0x3d2/0x5d0 [ 128.306033][ C0] worker_thread+0xa55/0xfc0 [ 128.306089][ C0] kthread+0x2fa/0x390 [ 128.306111][ C0] ? pr_cont_work+0x560/0x560 [ 128.306140][ C0] ? kthread_blkcg+0xd0/0xd0 [ 128.306164][ C0] ret_from_fork+0x48/0x80 [ 128.306190][ C0] ? kthread_blkcg+0xd0/0xd0 [ 128.306214][ C0] ret_from_fork_asm+0x11/0x20 [ 128.306260][ C0] [ 128.306279][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 128.306295][ C0] CPU: 0 PID: 6403 Comm: kworker/u4:13 Not tainted syzkaller #0 [ 128.306315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.306327][ C0] Workqueue: phy8 ieee80211_csa_finalize_work [ 128.306355][ C0] Call Trace: [ 128.306363][ C0] [ 128.306370][ C0] dump_stack_lvl+0x18c/0x250 [ 128.306405][ C0] ? show_regs_print_info+0x20/0x20 [ 128.306443][ C0] ? load_image+0x420/0x420 [ 128.306484][ C0] panic+0x2dc/0x730 [ 128.306534][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 128.306569][ C0] ? ret_from_fork_asm+0x11/0x20 [ 128.306605][ C0] __warn+0x2e0/0x470 [ 128.306629][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 128.306658][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 128.306685][ C0] report_bug+0x2be/0x4f0 [ 128.306706][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 128.306735][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 128.306763][ C0] ? __ieee80211_beacon_get+0x1235/0x1600 [ 128.306790][ C0] handle_bug+0xcf/0x120 [ 128.306812][ C0] exc_invalid_op+0x1a/0x50 [ 128.306833][ C0] asm_exc_invalid_op+0x1a/0x20 [ 128.306857][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 128.306885][ C0] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 128.306902][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 128.306920][ C0] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff88802d9b0000 [ 128.306935][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.306948][ C0] RBP: 0000000000000000 R08: ffff88802d9b0000 R09: 0000000000000003 [ 128.306961][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c52e3c0 [ 128.306975][ C0] R13: dffffc0000000000 R14: ffff88805c52e8b0 R15: ffff888025865824 [ 128.306996][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 128.307032][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 128.307066][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 128.307095][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 128.307131][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 128.307164][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 128.307205][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 128.307239][ C0] __iterate_interfaces+0x243/0x500 [ 128.307271][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 128.307298][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 128.307334][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 128.307360][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 128.307399][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 128.307425][ C0] __hrtimer_run_queues+0x520/0xc40 [ 128.307448][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 128.307482][ C0] ? hw_scan_work+0xf60/0xf60 [ 128.307512][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 128.307534][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 128.307570][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 128.307599][ C0] handle_softirqs+0x280/0x820 [ 128.307626][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 128.307653][ C0] ? do_softirq+0x1a0/0x1a0 [ 128.307679][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 128.307712][ C0] __irq_exit_rcu+0xd3/0x190 [ 128.307733][ C0] ? irq_exit_rcu+0x20/0x20 [ 128.307762][ C0] irq_exit_rcu+0x9/0x20 [ 128.307782][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 128.307808][ C0] [ 128.307814][ C0] [ 128.307823][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.307850][ C0] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 128.307877][ C0] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 128.307893][ C0] RSP: 0018:ffffc90003a77340 EFLAGS: 00000293 [ 128.307911][ C0] RAX: ffffffff816b9b86 RBX: ffffc90003a774df RCX: ffff88802d9b0000 [ 128.307927][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.307939][ C0] RBP: ffffc90003a774b0 R08: ffffffff911c6507 R09: 1ffffffff2238ca0 [ 128.307954][ C0] R10: dffffc0000000000 R11: fffffbfff2238ca1 R12: ffffffff8d8b9540 [ 128.307970][ C0] R13: 1ffffffff19f970c R14: ffffffff8d8b9598 R15: dffffc0000000000 [ 128.307994][ C0] ? console_flush_all+0x8a6/0xd20 [ 128.308043][ C0] ? console_flush_all+0x10a/0xd20 [ 128.308081][ C0] ? is_console_locked+0x20/0x20 [ 128.308108][ C0] ? lock_chain_count+0x20/0x20 [ 128.308136][ C0] ? __down_trylock_console_sem+0xf6/0x1f0 [ 128.308168][ C0] console_unlock+0xad/0x350 [ 128.308198][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 128.308221][ C0] ? vprintk_emit+0x53d/0x610 [ 128.308249][ C0] ? printk_sprint+0x460/0x460 [ 128.308277][ C0] ? __wake_up_klogd+0xd9/0x100 [ 128.308307][ C0] vprintk_emit+0x497/0x610 [ 128.308336][ C0] ? printk_sprint+0x460/0x460 [ 128.308363][ C0] ? _printk+0xde/0x130 [ 128.308401][ C0] ? copy_from_kernel_nofault+0x1d2/0x310 [ 128.308442][ C0] _printk+0xde/0x130 [ 128.308468][ C0] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 128.308497][ C0] ? load_image+0x420/0x420 [ 128.308539][ C0] __show_regs+0x159/0x600 [ 128.308565][ C0] ? dump_stack_print_info+0xf5/0x150 [ 128.308601][ C0] show_regs+0x44/0x90 [ 128.308628][ C0] __warn+0x160/0x470 [ 128.308651][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.308679][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.308703][ C0] report_bug+0x2be/0x4f0 [ 128.308723][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.308748][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.308773][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 128.308798][ C0] handle_bug+0xcf/0x120 [ 128.308819][ C0] exc_invalid_op+0x1a/0x50 [ 128.308840][ C0] asm_exc_invalid_op+0x1a/0x20 [ 128.308864][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 128.308890][ C0] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 128.308904][ C0] RSP: 0018:ffffc90003a779c0 EFLAGS: 00010293 [ 128.308921][ C0] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff88802d9b0000 [ 128.308935][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 128.308946][ C0] RBP: dffffc0000000000 R08: ffff88805c52d5af R09: 1ffff1100b8a5ab5 [ 128.308961][ C0] R10: dffffc0000000000 R11: ffffed100b8a5ab6 R12: 0000000000000001 [ 128.308974][ C0] R13: ffff88805c52e5d9 R14: ffff888077ecac70 R15: ffff888077ecace8 [ 128.308996][ C0] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 128.309064][ C0] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 128.309095][ C0] ieee80211_csa_finalize+0x5a6/0xf20 [ 128.309123][ C0] ? mutex_lock_nested+0x20/0x20 [ 128.309146][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 128.309172][ C0] ? ieee80211_csa_finalize_work+0x140/0x140 [ 128.309201][ C0] ? read_lock_is_recursive+0x20/0x20 [ 128.309233][ C0] ieee80211_csa_finalize_work+0xf6/0x140 [ 128.309262][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 128.309290][ C0] process_scheduled_works+0xa5d/0x15d0 [ 128.309346][ C0] ? worker_attach_to_pool+0x380/0x380 [ 128.309380][ C0] ? assign_work+0x3d2/0x5d0 [ 128.309413][ C0] worker_thread+0xa55/0xfc0 [ 128.309478][ C0] kthread+0x2fa/0x390 [ 128.309497][ C0] ? pr_cont_work+0x560/0x560 [ 128.309523][ C0] ? kthread_blkcg+0xd0/0xd0 [ 128.309544][ C0] ret_from_fork+0x48/0x80 [ 128.309566][ C0] ? kthread_blkcg+0xd0/0xd0 [ 128.309588][ C0] ret_from_fork_asm+0x11/0x20 [ 128.309630][ C0] [ 128.309770][ C0] Kernel Offset: disabled