last executing test programs: 19.507400787s ago: executing program 0 (id=36): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x0, 0x16, 0x6, "e62a1be16ddf"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000b40)={0x34, &(0x7f00000009c0)=ANY=[@ANYBLOB="20140c00000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0x14, 0x1, "ff"}, 0x0, 0x0}) 16.748139755s ago: executing program 0 (id=55): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40080c0) 16.54335147s ago: executing program 0 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000540)={@random="b12a73e9dc0f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @loopback}}}}}}, 0x0) 16.326012026s ago: executing program 0 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0) 16.184203319s ago: executing program 0 (id=62): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="dbebda5cb735617482765f2f0ff4e0cb23ad21ef65ba38b1ae929477ff0c20c8", 0x20}], 0x1, 0x0, 0x0, 0x44}, 0xc801) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/17, 0x11}, {&(0x7f0000000ac0)=""/210, 0xd2}], 0x2}}], 0x1, 0x2000, 0x0) 15.823443928s ago: executing program 0 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.414028998s ago: executing program 32 (id=67): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.171217066s ago: executing program 1 (id=125): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) close(0x3) 3.852078954s ago: executing program 1 (id=128): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) unshare(0x2040600) ioctl$KVM_SET_DEVICE_ATTR(r2, 0x4018aee1, &(0x7f00000001c0)=@attr_riscv64=@attr_aplic={0x0, 0x1, @any=0x2, &(0x7f0000000200)=0x6}) 3.360692196s ago: executing program 1 (id=132): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 2.789756761s ago: executing program 3 (id=135): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000100)="08352d20e329", 0x6, 0x0, 0x0, 0x4a) 2.561261146s ago: executing program 3 (id=137): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000003c40), 0x12) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000005940), 0x12) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2.309702902s ago: executing program 4 (id=68): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x8031, 0xffffffffffffffff, 0xffffd000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) 2.227580894s ago: executing program 3 (id=139): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) socket(0x10, 0x803, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCSETA(r0, 0x5406, &(0x7f00000013c0)={0x4, 0x7, 0xfffd, 0x7f, 0x14, "40999f49f937a4fd"}) 1.931144612s ago: executing program 2 (id=140): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4040080) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 1.522064722s ago: executing program 2 (id=141): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000340)=0xc) setreuid(0x0, r3) 1.320635627s ago: executing program 2 (id=142): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.20311935s ago: executing program 3 (id=143): r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x9, 0xa2000) r1 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000240)={0x40000000}) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xf, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x5, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x800a, 0x400, 0x80, 0x0, 0x5, 0x1008, 0x8, 0x9, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf8, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x3ff, 0x7ffd, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x4005f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0xfff, 0x1, 0xfe000000, 0xffff, 0xa, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x1, 0x48c93690, 0x42, 0x3], [0x10000007, 0x200, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0xfffffffe, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120002, 0x3, 0x2016, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000001, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x17, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7a, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x3550, 0x5, 0x5, 0x8, 0x2, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd8, 0xdd3, 0xe, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.134823592s ago: executing program 2 (id=144): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.054826134s ago: executing program 1 (id=145): sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x0) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) recvmmsg(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/178, 0xb2}], 0x1}}, {{0x0, 0x0, 0x0}, 0x33}], 0x2, 0x2140, 0x0) close(r0) 888.100118ms ago: executing program 3 (id=146): bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0xc055}, 0x0) 731.791101ms ago: executing program 1 (id=147): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) capset(&(0x7f00000025c0)={0x20080522}, &(0x7f0000002600)={0x10001, 0x30001, 0x0, 0x0, 0x0, 0xfffffffc}) lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 661.170704ms ago: executing program 2 (id=148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x3, 0x8001, @remote, 0x5}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 632.085474ms ago: executing program 3 (id=149): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x10000000002}, {0x0, 0x0, 0x28, 0xfffe, 0x1000000000000101}, {&(0x7f0000000280)=[0x9], 0x1, 0x8, 0x98f, 0xffff}}) 252.811143ms ago: executing program 2 (id=150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000780)=@gcm_256={{0x303}, "9d24e21e71196e04", "d2b5dd1989d30c208c02359429be8aff3d0dea3d361a0700bcb54369549c87bf", "e634b333"}, 0x2) 0s ago: executing program 1 (id=151): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r3, &(0x7f0000000a00)}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.45' (ED25519) to the list of known hosts. [ 76.611751][ T5762] cgroup: Unknown subsys name 'net' [ 76.723794][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.424167][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.492320][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.505260][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.512925][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.521649][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.530433][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.540040][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.547671][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.555336][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.562640][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.585948][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.603599][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.626030][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.634557][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.641958][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.643074][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.653045][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.663841][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.671441][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.679183][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.690243][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.697454][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.709245][ T5784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.716516][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.724304][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.231440][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 81.247430][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.372926][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 81.441701][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 81.454558][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.462608][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.472511][ T5773] bridge_slave_0: entered allmulticast mode [ 81.479781][ T5773] bridge_slave_0: entered promiscuous mode [ 81.489973][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.497518][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.504681][ T5773] bridge_slave_1: entered allmulticast mode [ 81.512078][ T5773] bridge_slave_1: entered promiscuous mode [ 81.618291][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.630425][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.671432][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.678879][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.686276][ T5774] bridge_slave_0: entered allmulticast mode [ 81.693276][ T5774] bridge_slave_0: entered promiscuous mode [ 81.730128][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.738894][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.747901][ T5774] bridge_slave_1: entered allmulticast mode [ 81.754868][ T5774] bridge_slave_1: entered promiscuous mode [ 81.794627][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.802030][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.809295][ T5779] bridge_slave_0: entered allmulticast mode [ 81.817452][ T5779] bridge_slave_0: entered promiscuous mode [ 81.828575][ T5773] team0: Port device team_slave_0 added [ 81.834882][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.842163][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.849498][ T5779] bridge_slave_1: entered allmulticast mode [ 81.857253][ T5779] bridge_slave_1: entered promiscuous mode [ 81.897702][ T5773] team0: Port device team_slave_1 added [ 81.903850][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.911100][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.918728][ T5787] bridge_slave_0: entered allmulticast mode [ 81.926838][ T5787] bridge_slave_0: entered promiscuous mode [ 81.949487][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.972255][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.979629][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.987062][ T5787] bridge_slave_1: entered allmulticast mode [ 81.994132][ T5787] bridge_slave_1: entered promiscuous mode [ 82.014812][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.027416][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.062288][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.069740][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.096502][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.110728][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.134130][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.148743][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.158638][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.165764][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.191756][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.233847][ T5774] team0: Port device team_slave_0 added [ 82.271318][ T5779] team0: Port device team_slave_0 added [ 82.314548][ T5774] team0: Port device team_slave_1 added [ 82.322966][ T5779] team0: Port device team_slave_1 added [ 82.342618][ T5787] team0: Port device team_slave_0 added [ 82.352416][ T5787] team0: Port device team_slave_1 added [ 82.364075][ T5773] hsr_slave_0: entered promiscuous mode [ 82.371687][ T5773] hsr_slave_1: entered promiscuous mode [ 82.428319][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.435425][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.461922][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.474847][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.482395][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.509907][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.542867][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.550304][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.576454][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.595468][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.602465][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.628770][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.641104][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.648388][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.674667][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.687801][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.694798][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.721118][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.735961][ T5083] Bluetooth: hci0: command tx timeout [ 82.815304][ T5083] Bluetooth: hci2: command tx timeout [ 82.821013][ T5083] Bluetooth: hci1: command tx timeout [ 82.825371][ T5789] Bluetooth: hci3: command tx timeout [ 82.832336][ T5774] hsr_slave_0: entered promiscuous mode [ 82.839574][ T5774] hsr_slave_1: entered promiscuous mode [ 82.846270][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.854031][ T5774] Cannot create hsr debugfs directory [ 82.982931][ T5779] hsr_slave_0: entered promiscuous mode [ 82.991758][ T5779] hsr_slave_1: entered promiscuous mode [ 83.000802][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.008519][ T5779] Cannot create hsr debugfs directory [ 83.019925][ T5787] hsr_slave_0: entered promiscuous mode [ 83.029462][ T5787] hsr_slave_1: entered promiscuous mode [ 83.035878][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.043441][ T5787] Cannot create hsr debugfs directory [ 83.310594][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.322632][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.358533][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.370218][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.515967][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.530660][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.541307][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.552361][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.660541][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.671335][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.694018][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.714212][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.794484][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.804697][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.826598][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.853091][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.871870][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.892944][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.935268][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.942633][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.982019][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.989255][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.054645][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.126668][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.142224][ T5773] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.154235][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.188635][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.231798][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.239030][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.261114][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.268323][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.283305][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.318559][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.343193][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.350496][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.376985][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.384180][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.469197][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.540518][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.547726][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.574597][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.581828][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.652780][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.817653][ T5789] Bluetooth: hci0: command tx timeout [ 84.867181][ T5773] veth0_vlan: entered promiscuous mode [ 84.896810][ T5789] Bluetooth: hci1: command tx timeout [ 84.902297][ T5789] Bluetooth: hci3: command tx timeout [ 84.905103][ T5083] Bluetooth: hci2: command tx timeout [ 84.921523][ T5773] veth1_vlan: entered promiscuous mode [ 85.022570][ T5773] veth0_macvtap: entered promiscuous mode [ 85.059789][ T5773] veth1_macvtap: entered promiscuous mode [ 85.108026][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.161805][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.181028][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.210978][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.222123][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.232696][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.244869][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.274766][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.293332][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.416684][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.430988][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.492792][ T5774] veth0_vlan: entered promiscuous mode [ 85.513683][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.523783][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.553595][ T5779] veth0_vlan: entered promiscuous mode [ 85.563711][ T5787] veth0_vlan: entered promiscuous mode [ 85.592274][ T5779] veth1_vlan: entered promiscuous mode [ 85.613616][ T5774] veth1_vlan: entered promiscuous mode [ 85.626209][ T5787] veth1_vlan: entered promiscuous mode [ 85.734070][ T5787] veth0_macvtap: entered promiscuous mode [ 85.788148][ T5779] veth0_macvtap: entered promiscuous mode [ 85.811233][ T5787] veth1_macvtap: entered promiscuous mode [ 85.829444][ T5779] veth1_macvtap: entered promiscuous mode [ 85.846248][ T5774] veth0_macvtap: entered promiscuous mode [ 85.883091][ T5774] veth1_macvtap: entered promiscuous mode [ 85.901305][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.914580][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.927480][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.941915][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.953749][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.963713][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.974253][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.987889][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.043255][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.059952][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.071245][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.085097][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.099316][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.110121][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.122748][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.133134][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.143784][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.157149][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.181413][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.198993][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.208987][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.222059][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.241004][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.258871][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.290929][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.301424][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.312573][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.322905][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.333454][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.347471][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.356884][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.373661][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.382901][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.395197][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.424512][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.435206][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.452480][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.462881][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.499362][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.521011][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.530430][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.539500][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.710339][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.739590][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.801456][ T3414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.823728][ T3414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.896002][ T5083] Bluetooth: hci0: command tx timeout [ 86.975284][ T5781] Bluetooth: hci3: command tx timeout [ 86.980789][ T5781] Bluetooth: hci1: command tx timeout [ 86.986491][ T5083] Bluetooth: hci2: command tx timeout [ 87.069938][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132413][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.173915][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.199058][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.291600][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.314164][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.435322][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.443242][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.550278][ T5860] syz.3.11[5860]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 88.494887][ T5876] loop2: detected capacity change from 0 to 512 [ 88.604585][ T5876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.624484][ T5860] loop3: detected capacity change from 0 to 40427 [ 88.642137][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 88.657159][ T5880] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 88.666562][ T5880] gretap0: entered promiscuous mode [ 88.714988][ T5860] F2FS-fs (loop3): invalid crc value [ 88.726438][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 88.765733][ T5860] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.947359][ T5860] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.975227][ T5083] Bluetooth: hci0: command tx timeout [ 88.995515][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.055173][ T5083] Bluetooth: hci2: command tx timeout [ 89.055561][ T5789] Bluetooth: hci3: command tx timeout [ 89.070319][ T5781] Bluetooth: hci1: command tx timeout [ 89.334824][ T5774] syz-executor: attempt to access beyond end of device [ 89.334824][ T5774] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 89.358045][ T5774] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 89.657089][ T5893] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 89.699947][ T5893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'. [ 89.725090][ T5893] netlink: 'syz.1.19': attribute type 1 has an invalid length. [ 89.976726][ T5897] loop4: detected capacity change from 0 to 7 [ 89.998101][ T5897] Dev loop4: unable to read RDB block 7 [ 90.016014][ T5897] loop4: unable to read partition table [ 90.029901][ T5899] bridge_slave_0: left allmulticast mode [ 90.038874][ T5897] loop4: partition table beyond EOD, truncated [ 90.049390][ T5899] bridge_slave_0: left promiscuous mode [ 90.055955][ T5897] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 90.076738][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.115801][ T5138] Dev loop4: unable to read RDB block 7 [ 90.124575][ T5138] loop4: unable to read partition table [ 90.127125][ T5899] bridge_slave_1: left allmulticast mode [ 90.140793][ T5138] loop4: partition table beyond EOD, truncated [ 90.152204][ T5899] bridge_slave_1: left promiscuous mode [ 90.181849][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.254240][ T5899] bond0: (slave bond_slave_0): Releasing backup interface [ 90.335159][ T5899] bond0: (slave bond_slave_1): Releasing backup interface [ 90.472116][ T5899] team0: Port device team_slave_0 removed [ 90.532284][ T5899] team0: Port device team_slave_1 removed [ 90.567764][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.590580][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.621695][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.658717][ T5899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.255585][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.299879][ T5816] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.457274][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 91.475464][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 91.489530][ T9] usb 4-1: config 0 has no interface number 0 [ 91.496148][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 91.509044][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 91.522220][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.531659][ T9] usb 4-1: Product: syz [ 91.540418][ T9] usb 4-1: Manufacturer: syz [ 91.546753][ T5816] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 91.556108][ T9] usb 4-1: SerialNumber: syz [ 91.560888][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.586148][ T9] usb 4-1: config 0 descriptor?? [ 91.594858][ T5816] usb 1-1: Product: syz [ 91.599259][ T5816] usb 1-1: Manufacturer: syz [ 91.603910][ T5816] usb 1-1: SerialNumber: syz [ 91.897686][ T5924] loop2: detected capacity change from 0 to 40427 [ 91.925803][ T5924] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 91.932289][ T5924] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 91.950765][ T5924] F2FS-fs (loop2): invalid crc value [ 92.023479][ T27] cfg80211: failed to load regulatory.db [ 92.043568][ T5931] loop1: detected capacity change from 0 to 1024 [ 92.085250][ T5816] ttusb_dec_init_stb: unknown model returned by firmware (00000000) - please report [ 92.137799][ T5816] ttusb-dec: probe of 1-1:1.0 failed with error -2 [ 92.250157][ T5924] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 92.267277][ T5924] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.374269][ T5816] usb 1-1: USB disconnect, device number 2 [ 92.506726][ T5787] syz-executor: attempt to access beyond end of device [ 92.506726][ T5787] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.527865][ T5787] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.848049][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 92.865383][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 92.882978][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 92.901402][ T9] f81534: probe of 4-1:0.12 failed with error -71 [ 92.946050][ T9] usb 4-1: USB disconnect, device number 2 [ 93.355882][ T5951] mmap: syz.1.37 (5951) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 93.525058][ T5154] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.578424][ T5953] loop1: detected capacity change from 0 to 1024 [ 93.737310][ T5154] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 93.750227][ T5154] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 93.764235][ T5154] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 93.773463][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.782420][ T5154] usb 1-1: Product: syz [ 93.786718][ T5154] usb 1-1: Manufacturer: syz [ 93.791500][ T5154] usb 1-1: SerialNumber: syz [ 93.805340][ T5962] process 'syz.1.42' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 93.808640][ T5154] usb 1-1: config 0 descriptor?? [ 93.919620][ T5947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.932736][ T5947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 93.994084][ T5965] loop1: detected capacity change from 0 to 512 [ 94.031941][ T5965] ======================================================= [ 94.031941][ T5965] WARNING: The mand mount option has been deprecated and [ 94.031941][ T5965] and is ignored by this kernel. Remove the mand [ 94.031941][ T5965] option from the mount to silence this warning. [ 94.031941][ T5965] ======================================================= [ 94.091909][ T5965] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.178017][ T5947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.186496][ T5947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.274883][ T5967] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.590222][ T5971] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 95.223372][ T5154] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 95.284824][ T5154] dm9601 1-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, e6:2a:1b:e1:6d:df [ 95.324333][ T5154] usb 1-1: USB disconnect, device number 3 [ 95.358168][ T5154] dm9601 1-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 96.731485][ T6014] loop1: detected capacity change from 0 to 256 [ 96.769452][ T6014] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 96.951062][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.110690][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.193870][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.339145][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.559902][ T6031] IPv6: NLM_F_CREATE should be specified when creating new route [ 97.602876][ T6031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.610570][ T6031] IPv6: NLM_F_CREATE should be set when creating new route [ 97.664822][ T6032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.672190][ T6032] IPv6: NLM_F_CREATE should be set when creating new route [ 97.733757][ T6034] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.224724][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.265200][ T5789] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.273465][ T5789] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.288651][ T5789] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.305716][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.313876][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.126914][ T5816] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.325517][ T5816] usb 4-1: Using ep0 maxpacket: 16 [ 99.344080][ T5816] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 99.372831][ T5816] usb 4-1: config 0 has no interface number 0 [ 99.396973][ T5816] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.450227][ T5816] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 99.489703][ T5816] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 99.501411][ T5816] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 99.514117][ T5816] usb 4-1: Product: syz [ 99.521133][ T5816] usb 4-1: SerialNumber: syz [ 99.551679][ T5816] usb 4-1: config 0 descriptor?? [ 99.577830][ T5816] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 99.598245][ T5816] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5 [ 99.790764][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 99.908088][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 99.917593][ T6083] loop2: detected capacity change from 0 to 32768 [ 100.247950][ T6102] loop2: detected capacity change from 0 to 128 [ 100.315008][ T6102] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 100.340752][ T5781] Bluetooth: hci2: command tx timeout [ 100.350407][ T6102] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 100.432770][ T49] hsr_slave_0: left promiscuous mode [ 100.482757][ T49] hsr_slave_1: left promiscuous mode [ 100.683548][ T49] veth1_macvtap: left promiscuous mode [ 100.713553][ T49] veth0_macvtap: left promiscuous mode [ 100.749508][ T49] veth1_vlan: left promiscuous mode [ 100.758960][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.767015][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.774221][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.774274][ T49] veth0_vlan: left promiscuous mode [ 100.785165][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.794291][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.801573][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.808823][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 100.815832][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 100.824001][ T6110] loop1: detected capacity change from 0 to 256 [ 100.843224][ T5816] usb 4-1: USB disconnect, device number 3 [ 100.900385][ T5816] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 101.235334][ T5834] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.459326][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 101.471342][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.491620][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.522905][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.555328][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.563412][ T5834] usb 2-1: Product: syz [ 101.583699][ T5834] usb 2-1: Manufacturer: syz [ 101.598500][ T5834] usb 2-1: SerialNumber: syz [ 101.854759][ T5834] usb 2-1: 0:2 : does not exist [ 101.879271][ T5834] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 101.999127][ T5834] usb 2-1: USB disconnect, device number 2 [ 102.121356][ T5776] udevd[5776]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.255473][ T6131] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 102.415285][ T5789] Bluetooth: hci2: command tx timeout [ 102.971926][ T6153] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 103.691371][ T49] bond0 (unregistering): Released all slaves [ 103.856990][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.864538][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.876365][ T6048] bridge_slave_0: entered allmulticast mode [ 103.884016][ T6048] bridge_slave_0: entered promiscuous mode [ 103.951308][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.959728][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.981626][ T6048] bridge_slave_1: entered allmulticast mode [ 103.999459][ T6048] bridge_slave_1: entered promiscuous mode [ 104.117744][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.157689][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.199753][ T6161] netlink: 36 bytes leftover after parsing attributes in process `syz.1.106'. [ 104.377280][ T6048] team0: Port device team_slave_0 added [ 104.420572][ T6048] team0: Port device team_slave_1 added [ 104.505007][ T5789] Bluetooth: hci2: command tx timeout [ 104.561533][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.614706][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.654843][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.690216][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.701426][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.772088][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.940268][ T6048] hsr_slave_0: entered promiscuous mode [ 104.956330][ T6048] hsr_slave_1: entered promiscuous mode [ 104.968801][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.994321][ T6048] Cannot create hsr debugfs directory [ 105.390610][ T6048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.413042][ T6048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.430245][ T6048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.478753][ T6048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.720993][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.793057][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.851914][ T3414] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.859198][ T3414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.902987][ T1093] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.910290][ T1093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.930475][ T6198] loop2: detected capacity change from 0 to 512 [ 105.947414][ T6198] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.575160][ T5789] Bluetooth: hci2: command tx timeout [ 106.833328][ T6221] loop2: detected capacity change from 0 to 256 [ 106.884321][ T6221] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 107.016107][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.426434][ T6272] syz.1.120 uses obsolete (PF_INET,SOCK_PACKET) [ 107.738340][ T6282] loop2: detected capacity change from 0 to 256 [ 108.768746][ T6048] veth0_vlan: entered promiscuous mode [ 108.855730][ T6048] veth1_vlan: entered promiscuous mode [ 108.949608][ T6048] veth0_macvtap: entered promiscuous mode [ 109.019420][ T6048] veth1_macvtap: entered promiscuous mode [ 109.109722][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.143318][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.160607][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.172093][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.183279][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.194678][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.208466][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.242608][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.254755][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.328389][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.362791][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.389682][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.413947][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.453907][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.516289][ T6048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.543487][ T6048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.565706][ T6048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.574637][ T6048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.938635][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.986061][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.106630][ T6274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.114549][ T6274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.671890][ T6376] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 111.695843][ C0] Illegal XDP return value 16128 on prog (id 6) dev lo, expect packet loss! [ 111.795654][ T6264] tipc: Subscription rejected, illegal request [ 112.041469][ T6384] loop1: detected capacity change from 0 to 512 [ 112.150086][ T6384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.215071][ T6384] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.277338][ T6391] loop3: detected capacity change from 0 to 4096 [ 112.458816][ T6396] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 112.650018][ T28] audit: type=1800 audit(1786568765.646:2): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.149" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 112.714572][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.857117][ T6402] NILFS (loop3): nilfs_sufile_do_free: segment 9 is already clean [ 132.978411][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.985364][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.419083][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.425606][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.745020][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 206.751229][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 206.751241][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 227.215291][ T5781] Bluetooth: hci2: command 0x0406 tx timeout [ 255.858582][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865314][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.975427][ T29] INFO: task syz-executor:5762 blocked for more than 143 seconds. [ 260.983343][ T29] Not tainted syzkaller #0 [ 260.988476][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 260.997321][ T29] task:syz-executor state:D stack:21848 pid:5762 ppid:5761 flags:0x00004002 [ 261.006665][ T29] Call Trace: [ 261.009984][ T29] [ 261.012962][ T29] __schedule+0x15ae/0x4660 [ 261.018233][ T29] ? mark_lock+0x94/0x320 [ 261.022630][ T29] ? asan.module_dtor+0x20/0x20 [ 261.027810][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 261.032902][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 261.038930][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 261.044322][ T29] schedule+0xbd/0x170 [ 261.048494][ T29] io_schedule+0x80/0xd0 [ 261.052788][ T29] bit_wait_io+0x11/0xd0 [ 261.057349][ T29] __wait_on_bit+0x9f/0x2c0 [ 261.061915][ T29] ? bit_wait+0xd0/0xd0 [ 261.066167][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 261.071681][ T29] ? bit_wait+0xd0/0xd0 [ 261.076910][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 261.081738][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 261.086941][ T29] ? bit_waitqueue+0x30/0x30 [ 261.091586][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 261.097042][ T29] do_get_write_access+0x5c9/0xe00 [ 261.102236][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 261.108307][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 261.114534][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 261.121348][ T29] ? __might_sleep+0xe0/0xe0 [ 261.129525][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 261.137887][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 261.143482][ T29] ext4_dirty_inode+0xcb/0x110 [ 261.153622][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 261.159620][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 261.164707][ T29] file_update_time+0x187/0x1a0 [ 261.173891][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 261.179073][ T29] ? do_wp_page+0x4ce/0x34d0 [ 261.183713][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 261.195529][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 261.200790][ T29] do_page_mkwrite+0x153/0x3f0 [ 261.205856][ T29] do_wp_page+0xd4d/0x34d0 [ 261.210350][ T29] ? folio_put+0xd0/0xd0 [ 261.214651][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 261.220538][ T29] ? __rwlock_init+0x150/0x150 [ 261.225810][ T29] handle_mm_fault+0x1306/0x4a50 [ 261.230822][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 261.236153][ T29] ? numa_migrate_prep+0x350/0x350 [ 261.241345][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 261.247212][ T29] do_user_addr_fault+0x736/0x12d0 [ 261.252390][ T29] exc_page_fault+0x64/0x100 [ 261.257447][ T29] ? clear_bhb_loop+0x40/0x90 [ 261.262190][ T29] asm_exc_page_fault+0x26/0x30 [ 261.267705][ T29] RIP: 0033:0x7fee9627c662 [ 261.272166][ T29] RSP: 002b:00007ffda1fd2c20 EFLAGS: 00010246 [ 261.278721][ T29] RAX: 00007fee94028000 RBX: 0000555576f607f0 RCX: 0000000000000000 [ 261.286864][ T29] RDX: 0000000000003da7 RSI: 0000555576f607e0 RDI: 0000000000000001 [ 261.294979][ T29] RBP: 00007ffda1fd3120 R08: 0000555576f607e0 R09: 0000000000000091 [ 261.303004][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffda1fd2f60 [ 261.311160][ T29] R13: 00007ffda1fd2d50 R14: 585858582e7a7973 R15: 00007ffda1fd2ca0 [ 261.319270][ T29] [ 261.323349][ T29] INFO: task syz.3.149:6386 blocked for more than 143 seconds. [ 261.331258][ T29] Not tainted syzkaller #0 [ 261.336479][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.345416][ T29] task:syz.3.149 state:D stack:27048 pid:6386 ppid:5774 flags:0x00004004 [ 261.354703][ T29] Call Trace: [ 261.358330][ T29] [ 261.361374][ T29] __schedule+0x15ae/0x4660 [ 261.366237][ T29] ? mark_lock+0x94/0x320 [ 261.370631][ T29] ? asan.module_dtor+0x20/0x20 [ 261.376180][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 261.381283][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 261.387544][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 261.392818][ T29] schedule+0xbd/0x170 [ 261.397187][ T29] io_schedule+0x80/0xd0 [ 261.401493][ T29] bit_wait_io+0x11/0xd0 [ 261.406090][ T29] __wait_on_bit+0x9f/0x2c0 [ 261.410648][ T29] ? bit_wait+0xd0/0xd0 [ 261.414829][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 261.420434][ T29] ? bit_wait+0xd0/0xd0 [ 261.425675][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 261.430521][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 261.435892][ T29] ? bit_waitqueue+0x30/0x30 [ 261.440562][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 261.446154][ T29] do_get_write_access+0x5c9/0xe00 [ 261.451361][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 261.466057][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 261.472312][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 261.478818][ T29] ? __might_sleep+0xe0/0xe0 [ 261.483487][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 261.489310][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 261.494833][ T29] ext4_dirty_inode+0xcb/0x110 [ 261.500089][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 261.506004][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 261.511078][ T29] file_update_time+0x187/0x1a0 [ 261.516018][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 261.521108][ T29] ? filemap_fault+0x103c/0x1540 [ 261.527048][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 261.532841][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 261.539218][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 261.544297][ T29] ? __pte_offset_map+0x20d/0x280 [ 261.549426][ T29] do_page_mkwrite+0x153/0x3f0 [ 261.554262][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 261.559304][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 261.564312][ T29] ? numa_migrate_prep+0x350/0x350 [ 261.573211][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 261.578629][ T29] do_user_addr_fault+0x736/0x12d0 [ 261.583803][ T29] exc_page_fault+0x64/0x100 [ 261.588598][ T29] ? clear_bhb_loop+0x40/0x90 [ 261.593342][ T29] asm_exc_page_fault+0x26/0x30 [ 261.598463][ T29] RIP: 0033:0x7f97d4a72729 [ 261.602941][ T29] RSP: 002b:00007ffedda70a40 EFLAGS: 00010202 [ 261.609128][ T29] RAX: 0000001b2de1b000 RBX: ffffffff81e6a705 RCX: 0000001b2de1aff8 [ 261.617548][ T29] RDX: 0000001b2d824220 RSI: 0000000000000008 RDI: 00007f97d5955720 [ 261.626606][ T29] RBP: 0000000000000093 R08: 00007f97d4e10000 R09: 00007f97d4e12000 [ 261.636185][ T29] R10: 0000000081e6a709 R11: 0000000000000002 R12: 00007f97d4e26038 [ 261.644224][ T29] R13: 00000000000010b3 R14: ffffffff81e6aedf R15: 00007f97d5955720 [ 261.652287][ T29] ? page_counter_charge+0xdf/0x100 [ 261.657589][ T29] ? release_pte_folio+0xb5/0x3a0 [ 261.662662][ T29] [ 261.665761][ T29] INFO: task syz.2.150:6398 blocked for more than 144 seconds. [ 261.673337][ T29] Not tainted syzkaller #0 [ 261.678408][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 261.690769][ T29] task:syz.2.150 state:D stack:27048 pid:6398 ppid:5787 flags:0x00004004 [ 261.701834][ T29] Call Trace: [ 261.707470][ T29] [ 261.710437][ T29] __schedule+0x15ae/0x4660 [ 261.715895][ T29] ? mark_lock+0x94/0x320 [ 261.720262][ T29] ? asan.module_dtor+0x20/0x20 [ 261.727413][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 261.733436][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 261.739554][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 261.744879][ T29] schedule+0xbd/0x170 [ 261.749008][ T29] io_schedule+0x80/0xd0 [ 261.753279][ T29] bit_wait_io+0x11/0xd0 [ 261.757701][ T29] __wait_on_bit+0x9f/0x2c0 [ 261.762278][ T29] ? bit_wait+0xd0/0xd0 [ 261.766520][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 261.772057][ T29] ? bit_wait+0xd0/0xd0 [ 261.776417][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 261.781245][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 261.786416][ T29] ? bit_waitqueue+0x30/0x30 [ 261.791068][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 261.796416][ T29] do_get_write_access+0x5c9/0xe00 [ 261.801640][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 261.807873][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 261.814107][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 261.821816][ T29] ? __might_sleep+0xe0/0xe0 [ 261.826705][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 261.832361][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 261.839678][ T29] ext4_dirty_inode+0xcb/0x110 [ 261.844522][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 261.850677][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 261.856153][ T29] file_update_time+0x187/0x1a0 [ 261.861078][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 261.866605][ T29] ? filemap_fault+0x103c/0x1540 [ 261.871665][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 261.877819][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 261.884131][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 261.889502][ T29] ? __pte_offset_map+0x20d/0x280 [ 261.894580][ T29] do_page_mkwrite+0x153/0x3f0 [ 261.899445][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 261.904432][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 261.909516][ T29] ? numa_migrate_prep+0x350/0x350 [ 261.914684][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 261.920075][ T29] do_user_addr_fault+0x736/0x12d0 [ 261.925510][ T29] exc_page_fault+0x64/0x100 [ 261.930176][ T29] asm_exc_page_fault+0x26/0x30 [ 261.935384][ T29] RIP: 0033:0x7f0679a72eb2 [ 261.940941][ T29] RSP: 002b:00007fff9274a6a0 EFLAGS: 00010202 [ 261.948176][ T29] RAX: 0000000000003008 RBX: 00007f067a955720 RCX: 0000000000000000 [ 261.956349][ T29] RDX: 0000001b2dd21000 RSI: 0000000000000008 RDI: 00007f067a955720 [ 261.964386][ T29] RBP: 00000000000001ac R08: 00007f0679e10000 R09: 00007f0679e26038 [ 261.972725][ T29] R10: 0000000000000007 R11: 0000000000000004 R12: ffffffff815861e6 [ 261.980827][ T29] R13: 00007f0679e26038 R14: 0000000000000141 R15: ffffffffffffd000 [ 261.988898][ T29] ? get_work_pool+0x16/0x180 [ 261.993632][ T29] [ 261.996740][ T29] INFO: task syz.1.151:6407 blocked for more than 144 seconds. [ 262.004315][ T29] Not tainted syzkaller #0 [ 262.009330][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.018153][ T29] task:syz.1.151 state:D stack:27560 pid:6407 ppid:5773 flags:0x00004004 [ 262.027464][ T29] Call Trace: [ 262.030794][ T29] [ 262.033772][ T29] __schedule+0x15ae/0x4660 [ 262.039470][ T29] ? mark_lock+0x94/0x320 [ 262.043874][ T29] ? asan.module_dtor+0x20/0x20 [ 262.048902][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 262.054010][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 262.061095][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 262.067318][ T29] schedule+0xbd/0x170 [ 262.071424][ T29] io_schedule+0x80/0xd0 [ 262.075777][ T29] bit_wait_io+0x11/0xd0 [ 262.080089][ T29] __wait_on_bit+0x9f/0x2c0 [ 262.084650][ T29] ? bit_wait+0xd0/0xd0 [ 262.088924][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 262.094435][ T29] ? bit_wait+0xd0/0xd0 [ 262.099073][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 262.103907][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 262.109296][ T29] ? bit_waitqueue+0x30/0x30 [ 262.113953][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 262.119484][ T29] do_get_write_access+0x5c9/0xe00 [ 262.124661][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 262.130790][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 262.139302][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 262.146302][ T29] ? __might_sleep+0xe0/0xe0 [ 262.150975][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 262.156761][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 262.162285][ T29] ext4_dirty_inode+0xcb/0x110 [ 262.167153][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 262.173006][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 262.178459][ T29] file_update_time+0x187/0x1a0 [ 262.183398][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 262.188794][ T29] ? filemap_fault+0x103c/0x1540 [ 262.193805][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 262.199996][ T29] ? pte_alloc_one+0x3b6/0x540 [ 262.204918][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 262.211226][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 262.216350][ T29] do_page_mkwrite+0x153/0x3f0 [ 262.221154][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 262.226208][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 262.231197][ T29] ? numa_migrate_prep+0x350/0x350 [ 262.236464][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 262.241839][ T29] do_user_addr_fault+0x736/0x12d0 [ 262.247752][ T29] exc_page_fault+0x64/0x100 [ 262.252407][ T29] ? clear_bhb_loop+0x40/0x90 [ 262.257348][ T29] asm_exc_page_fault+0x26/0x30 [ 262.262259][ T29] RIP: 0033:0x7f958626ba23 [ 262.266808][ T29] RSP: 002b:00007fffcbbfece0 EFLAGS: 00010246 [ 262.272934][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b2d664000 [ 262.281057][ T29] RDX: 0000001b2d624000 RSI: 0000000000600000 RDI: 00007f95865e0708 [ 262.289122][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 262.297264][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 262.305494][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffcbbfef70 [ 262.313598][ T29] [ 262.317074][ T29] [ 262.317074][ T29] Showing all locks held in the system: [ 262.325126][ T29] 1 lock held by khungtaskd/29: [ 262.330032][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 262.340296][ T29] 6 locks held by kworker/u4:3/49: [ 262.346072][ T29] #0: ffff88801e256538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 262.357505][ T29] #1: ffffc90000b9fd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 262.370070][ T29] #2: ffff88814dd520e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 262.380729][ T29] #3: ffff88814dd54c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 262.391307][ T29] #4: ffff88814dd56990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 262.401162][ T29] #5: ffff88807721e688 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 262.411103][ T29] 2 locks held by getty/5534: [ 262.416052][ T29] #0: ffff88802d7170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 262.425947][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 262.436220][ T29] 3 locks held by syz-executor/5762: [ 262.441534][ T29] #0: ffff88802f155720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 262.452134][ T29] #1: ffff88814dd52510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 262.462087][ T29] #2: ffff88814dd56990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 262.472155][ T29] 2 locks held by kworker/u4:16/6262: [ 262.477832][ T29] 3 locks held by syz.3.149/6386: [ 262.482900][ T29] #0: ffff88802f1ab120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 262.492976][ T29] #1: ffff88814dd52510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 262.502999][ T29] #2: ffff88814dd56990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 262.513087][ T29] 3 locks held by syz.2.150/6398: [ 262.518399][ T29] #0: ffff88802f1aa7a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 262.528711][ T29] #1: ffff88814dd52510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 262.538799][ T29] #2: ffff88814dd56990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 262.548791][ T29] 3 locks held by syz.1.151/6407: [ 262.554464][ T29] #0: ffff8880257ed720 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 262.564574][ T29] #1: ffff88814dd52510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 262.574475][ T29] #2: ffff88814dd56990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 262.584742][ T29] [ 262.587324][ T29] ============================================= [ 262.587324][ T29] [ 262.596033][ T29] NMI backtrace for cpu 0 [ 262.600426][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 262.607712][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.617806][ T29] Call Trace: [ 262.621111][ T29] [ 262.624093][ T29] dump_stack_lvl+0x18c/0x250 [ 262.628803][ T29] ? __wake_up_klogd+0xd9/0x100 [ 262.633685][ T29] ? show_regs_print_info+0x20/0x20 [ 262.638916][ T29] ? load_image+0x420/0x420 [ 262.643466][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 262.648433][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 262.654623][ T29] ? load_image+0x420/0x420 [ 262.659165][ T29] ? wq_watchdog_touch+0xef/0x170 [ 262.664225][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 262.670326][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 262.676361][ T29] watchdog+0xf59/0xfa0 [ 262.680558][ T29] ? watchdog+0x1e1/0xfa0 [ 262.684928][ T29] kthread+0x2fa/0x390 [ 262.689017][ T29] ? hungtask_pm_notify+0x50/0x50 [ 262.694069][ T29] ? kthread_blkcg+0xd0/0xd0 [ 262.698688][ T29] ret_from_fork+0x48/0x80 [ 262.703134][ T29] ? kthread_blkcg+0xd0/0xd0 [ 262.707751][ T29] ret_from_fork_asm+0x11/0x20 [ 262.712559][ T29] [ 262.716291][ T29] Sending NMI from CPU 0 to CPUs 1: [ 262.721579][ C1] NMI backtrace for cpu 1 [ 262.721589][ C1] CPU: 1 PID: 6262 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 262.721605][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.721615][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 262.721641][ C1] RIP: 0010:unwind_next_frame+0x1697/0x2990 [ 262.721661][ C1] Code: 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 3b 84 c0 0f 85 d7 10 00 00 41 c6 06 00 48 8b 5c 24 20 4c 8b 74 24 40 48 8b 44 24 50 <42> 0f b6 04 38 84 c0 0f 85 58 0e 00 00 43 0f b6 04 3e 84 c0 0f 85 [ 262.721675][ C1] RSP: 0018:ffffc90003767158 EFLAGS: 00000246 [ 262.721688][ C1] RAX: 1ffffffff1e275cb RBX: ffffffff8f13ae5a RCX: 0000000000000000 [ 262.721699][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003767288 [ 262.721709][ C1] RBP: ffffc90003767278 R08: ffffc90003767287 R09: 0000000000000000 [ 262.721720][ C1] R10: ffffc90003767278 R11: fffff520006ece51 R12: ffffc900037672c0 [ 262.721732][ C1] R13: ffffc90003767228 R14: 1ffffffff1e275cb R15: dffffc0000000000 [ 262.721744][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 262.721758][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 262.721768][ C1] CR2: 0000560bcf134660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 262.721783][ C1] Call Trace: [ 262.721788][ C1] [ 262.721801][ C1] ? stack_trace_save+0xaa/0x100 [ 262.721823][ C1] ? stack_trace_save+0xaa/0x100 [ 262.721843][ C1] ? stack_trace_save+0x100/0x100 [ 262.721869][ C1] arch_stack_walk+0x144/0x190 [ 262.721889][ C1] ? kasan_set_track+0x4e/0x70 [ 262.721910][ C1] stack_trace_save+0xaa/0x100 [ 262.721930][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 262.721949][ C1] ? mark_lock+0x94/0x320 [ 262.721969][ C1] ? __lock_acquire+0x1336/0x7d80 [ 262.721987][ C1] ? arch_stack_walk+0x167/0x190 [ 262.722005][ C1] kasan_set_track+0x4e/0x70 [ 262.722049][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 262.722069][ C1] __kasan_kmalloc+0x8f/0xa0 [ 262.722088][ C1] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 262.722105][ C1] __kmalloc+0xb7/0x240 [ 262.722131][ C1] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 262.722151][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 262.722170][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.722193][ C1] ? trace_contention_end+0x39/0xe0 [ 262.722209][ C1] ? __mutex_lock+0x30d/0xc80 [ 262.722235][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 262.722256][ C1] ? mutex_lock_nested+0x20/0x20 [ 262.722279][ C1] ? ieee80211_queue_delayed_work+0x150/0x150 [ 262.722303][ C1] ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 262.722323][ C1] ? verify_lock_unused+0x140/0x140 [ 262.722344][ C1] ? verify_lock_unused+0x140/0x140 [ 262.722371][ C1] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 262.722396][ C1] ? mark_lock+0x94/0x320 [ 262.722416][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 262.722436][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 262.722455][ C1] ? lock_chain_count+0x20/0x20 [ 262.722472][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 262.722501][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 262.722526][ C1] ? skb_dequeue+0x124/0x160 [ 262.722550][ C1] ieee80211_iface_work+0x730/0xc90 [ 262.722576][ C1] cfg80211_wiphy_work+0x228/0x260 [ 262.722597][ C1] ? process_scheduled_works+0x975/0x1600 [ 262.722620][ C1] process_scheduled_works+0xa60/0x1600 [ 262.722657][ C1] ? worker_attach_to_pool+0x370/0x370 [ 262.722682][ C1] ? assign_work+0x3cc/0x5d0 [ 262.722706][ C1] worker_thread+0xa5e/0xfe0 [ 262.722741][ C1] kthread+0x2fa/0x390 [ 262.722756][ C1] ? pr_cont_work+0x550/0x550 [ 262.722777][ C1] ? kthread_blkcg+0xd0/0xd0 [ 262.722793][ C1] ret_from_fork+0x48/0x80 [ 262.722813][ C1] ? kthread_blkcg+0xd0/0xd0 [ 262.722830][ C1] ret_from_fork_asm+0x11/0x20 [ 262.722866][ C1] [ 262.726373][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 262.726406][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 262.726473][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.726510][ T29] Call Trace: [ 262.726536][ T29] [ 262.726563][ T29] dump_stack_lvl+0x18c/0x250 [ 262.726637][ T29] ? show_regs_print_info+0x20/0x20 [ 262.726700][ T29] ? load_image+0x420/0x420 [ 262.726802][ T29] panic+0x2ca/0x720 [ 262.726887][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 262.726961][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 262.727025][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 262.727109][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 262.727193][ T29] watchdog+0xf98/0xfa0 [ 262.727274][ T29] ? watchdog+0x1e1/0xfa0 [ 262.727370][ T29] kthread+0x2fa/0x390 [ 262.727422][ T29] ? hungtask_pm_notify+0x50/0x50 [ 262.727495][ T29] ? kthread_blkcg+0xd0/0xd0 [ 262.727549][ T29] ret_from_fork+0x48/0x80 [ 262.727614][ T29] ? kthread_blkcg+0xd0/0xd0 [ 262.727668][ T29] ret_from_fork_asm+0x11/0x20 [ 262.727772][ T29] [ 262.729865][ T29] Kernel Offset: disabled [ 263.210218][ T29] Rebooting in 86400 seconds..