last executing test programs: 1m10.715948373s ago: executing program 0 (id=146): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000008000000030000005800018044000400200001000a000004000000020000000000000000000000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7379ea07"], 0x6c}}, 0x0) 1m9.962546247s ago: executing program 0 (id=149): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, 0x0) syz_io_uring_setup(0x70d6, &(0x7f0000000040)={0x0, 0xe92b, 0x8000, 0x0, 0x293}, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x2, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c80)={0xffffffffffffffff, 0xe0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000019c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001a00)=[0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0], 0x0, 0x24, &(0x7f0000001a80)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001ac0), &(0x7f0000001b00), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000001b40)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001cc0)={'batadv_slave_0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f40)={&(0x7f0000001d00)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 1m1.353374515s ago: executing program 0 (id=174): ioprio_set$pid(0x2, 0x0, 0x6000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$qat_adf_ctl(0xffffff9c, &(0x7f0000000340), 0x41c0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000009, 0x3, 0x0, 0xf99, 0x8000000, 0x5, 0xa000, 0x10000, 0x0, r5, 0x734, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, &(0x7f00000001c0)) r6 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7) fcntl$addseals(r6, 0x409, 0x8) sendfile(r0, r0, 0x0, 0x200000) 59.002000078s ago: executing program 0 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 57.586683536s ago: executing program 0 (id=181): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, 0x0) 56.058780736s ago: executing program 0 (id=185): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) unshare(0x6a040000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x228, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f00000000c0)=""/14, 0xe) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18009a5a7b0693c9689c36315ec86f801100000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002e7438e9a30001001400000018000180140002006e6574"], 0x44}}, 0x10000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffff8c) sendmsg$nl_route(r9, 0x0, 0x4000000) 40.610876158s ago: executing program 32 (id=185): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) unshare(0x6a040000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x228, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f00000000c0)=""/14, 0xe) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18009a5a7b0693c9689c36315ec86f801100000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002e7438e9a30001001400000018000180140002006e6574"], 0x44}}, 0x10000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffff8c) sendmsg$nl_route(r9, 0x0, 0x4000000) 38.128953748s ago: executing program 2 (id=216): socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x30002, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [{@dont_measure}], 0x2c}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) write$6lowpan_enable(r1, &(0x7f0000000000)='1', 0x1) 32.49827015s ago: executing program 2 (id=224): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) io_uring_setup(0x39e5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1}, 0x17ba}], 0x1, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000000)=0x1e) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) 31.603716548s ago: executing program 2 (id=226): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x0, 0x0}) getpid() syz_open_dev$hidraw(&(0x7f0000000080), 0xcac6, 0x418080) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 25.341088168s ago: executing program 2 (id=236): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x7, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a00003400000000001190468029d34f4278de7800000000ffffffff4414d1337f00000100000007ac1414bb0000004000004e20000c907801000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x800, 0x6, 0xd4}, &(0x7f0000000240), &(0x7f0000000b80)) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x22c000, 0x800}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000104050000000700000000000700000305000100010000000a00020000000003"], 0x48}, 0x1, 0x0, 0x0, 0x20040024}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x760e, &(0x7f0000000600)={0x0, 0xfad6, 0x10000, 0x3}, &(0x7f0000000140), &(0x7f0000000280)) 20.891786417s ago: executing program 2 (id=242): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) semctl$GETPID(0x0, 0x0, 0xb, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) 19.318631871s ago: executing program 2 (id=243): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) unshare(0x6a040000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x228, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f00000000c0)=""/14, 0xe) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18009a5a7b0693c9689c36315ec86f801100000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002e7438e9a30001001400000018000180140002006e6574"], 0x44}}, 0x10000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffff8c) sendmsg$nl_route(r9, 0x0, 0x4000000) 16.125254183s ago: executing program 5 (id=249): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e04fd0a20"], 0x7) r0 = socket(0x1e, 0x4, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000140)=[{0x6, 0x7, 0x1, 0x81, @time={0xffff, 0x80000001}, {0x8, 0x30}, {0x2}, @time=@tick=0xfffffff7}], 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r6, r7, 0x6, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x334, 0x103502) ioctl$SG_GET_REQUEST_TABLE(r8, 0x2286, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = dup3(r5, r0, 0x0) recvmmsg(r9, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r9) 14.887762796s ago: executing program 3 (id=252): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0xd0, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0xbc, 0x1, [@m_skbmod={0xb8, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x8c, 0x6, "eed6873f2981611ecb395b8716e117716864532f5465722919225448bbf6ed8357f76bf1fa9b55291316eb1809fcd4600358cdd945d387bd97c729258624b869b3ec525874365044249128c92c13f801e6fed8b7988ebfccfd15c08b07e85451a3df562d217b2010aeac8dbef98e6cbbb363bf1bff633baa160e0fd89d93f14810b030488376ad9f"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000001300010000000000000000"], 0x14}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) 12.656484081s ago: executing program 3 (id=253): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x7, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a00003400000000001190468029d34f4278de7800000000ffffffff4414d1337f00000100000007ac1414bb0000004000004e20000c907801000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x800, 0x6, 0xd4}, &(0x7f0000000240), &(0x7f0000000b80)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x22c000, 0x800}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000104050000000700000000000700000305000100010000000a00020000000003"], 0x48}, 0x1, 0x0, 0x0, 0x20040024}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x760e, &(0x7f0000000600)={0x0, 0xfad6, 0x10000, 0x3}, &(0x7f0000000140), &(0x7f0000000280)) 12.294184491s ago: executing program 4 (id=254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20040084) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) unshare(0x4000000) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x0, 0x10003}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x2}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x3}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x200c811) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 12.159754765s ago: executing program 1 (id=255): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12.156945892s ago: executing program 3 (id=256): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r1}, 0x38) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r3, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000001600)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlOatND2YC9epAgiFsS73j0W/wH/ioIWipSgBy8rs5lNk2Y3u0m2SXQ/H5jwvjuz+86zM8+bd/adZQPoWyPZn0LEyxHxVRJxNCKSfN1g5CtHlrdbenprMluSqNc//SNpbJfVm6/VfN7hvPJSRPzyRcTpwvp2qwuLM6VyOZ3L66O12Wuj1YXFM1dmS9PpdHp1fGLi3NsT4++9+07PYn3j4l/ffvLww3Nfnlz65qfHx+4ncT6O5OtWx7ENd1ZXRmIkf0+G4vxzG471oLG9JNntHWBLBvI8H4qsDzgaA3nWA/99tyOiDvSpRP5Dn2qOA5rX9m2ug+u3d3ZYsmOefLB8AbQ+/sHlz0biQOPa6NBSsubKKLveHe5B+1kbP//+4H62RO8+hwDo6M7diDg7OLi+/0vy/m/rznaxzfNt6P9g5zzMxj9vthr/FFbGP9Fi/HO4Re5uRef8LzzuQTNtZeO/91uOf1cmrYYH8tr/GmO+oeTylXKa9W3/j4hTMbQ/q280n3Nu6VG93brV479sydpvjgXz/Xg8uH/tc6ZKN7cT8hpP7ka80nL8m6wc/6TF8c/ej4tdtnEiffBau3Wd43+x6j9EvN7y+D+b0Uo2np8cbZwPo82zYr0/7534tV37m4+/tzNt2fE/tHH8w8nq+drq5tv4/sDfabt1a+KPbs//Wmlf8lmjvC9/7EapVpsbi9iXfLz+8fFnz23Wm9tn8Z86uXH/1+r8PxgRn3cZ/73jP77aVfy7cP5n8U9t6vhvvvDoo5vftWu/u/7vrUbpVP5Idvw7xdXtDm7nvQMAAAAAAIC9phARRyIpFFfKhUKxuHx/x/E4VChXqrXTlyvzV6ei8V3Z4RgqNGe6j666H2Isvx+2WR9/rj4REcci4uuBg416cbJSntrt4AEAAAAAAAAAAAAAAAAAAGCPONzm+/+Z3wZ2e++AF85PfkP/6pj/vfilJ2BP8v8f+pf8h/4l/6F/yX/oX/If+pf8h/4l/6F/yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqYsXLmRLfenprcmsPnV9YX6mcv3MVFqdKc7OTxYnK3PXitOVynQ5LU5WZju9XrlSuTY2HvM3RmtptTZaXVi8NFuZv1q7dGW2NJ1eSod2JCoAAAAAAAAAAAAAAAAAAAD4d6kuLM6UyuV0TkFhS4XBvbEbCj0u7HbPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP/BMAAP//Yko41g==") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfea7) sendmsg$nl_netfilter(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1}, 0x17ba}], 0x1, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000000)=0x1e) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) 10.734318435s ago: executing program 3 (id=257): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002c00010026bd70f7fbdbdf250400002804001d00"], 0x18}, 0x1, 0x0, 0x0, 0x404000c}, 0x40000) r1 = socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x94, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x63, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x9}}, 0x0, @default, 0x1882, @void, @val={0x1, 0x4, [{0x79, 0x1}, {0x17, 0x1}, {0x2}, {0x4}]}, @void, @val={0x4, 0x6, {0x7, 0x4, 0x1, 0x4}}, @void, @val={0x5, 0x26, {0x6, 0xac, 0x26, "4535a7d15d92ed3883177b0403cbc09fa3dbf799bd588a59887355f0766d272c4f077e"}}, @val={0x25, 0x3, {0x0, 0x38, 0x6b}}, @void, @void, @void, @void, @void, @void}}], @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x94}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x18, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x5) getsockopt$MRT6(r1, 0x29, 0xd0, 0x0, 0x0) io_setup(0x400, &(0x7f0000001080)) 10.450996321s ago: executing program 4 (id=258): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800f7ffffffff34b17f0000950000001f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0xfffffffe, 0x4) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 9.587134708s ago: executing program 1 (id=259): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000005c0), &(0x7f0000000600)=0x14) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setuid(0xee00) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) 8.400510922s ago: executing program 1 (id=260): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) read$dsp(r0, &(0x7f0000000340)=""/100, 0x64) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f3", 0xf) 8.07224187s ago: executing program 1 (id=261): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_setup(0x39e5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000001600)="$eJzs3c9rHOUbAPBnNkl/f79NoRQVkUAPVmo3TeKPCh7qUbRY0Htdkmko2XRLdlOatND2YC9epAgiFsS73j0W/wH/ioIWipSgBy8rs5lNk2Y3u0m2SXQ/H5jwvjuz+86zM8+bd/adZQPoWyPZn0LEyxHxVRJxNCKSfN1g5CtHlrdbenprMluSqNc//SNpbJfVm6/VfN7hvPJSRPzyRcTpwvp2qwuLM6VyOZ3L66O12Wuj1YXFM1dmS9PpdHp1fGLi3NsT4++9+07PYn3j4l/ffvLww3Nfnlz65qfHx+4ncT6O5OtWx7ENd1ZXRmIkf0+G4vxzG471oLG9JNntHWBLBvI8H4qsDzgaA3nWA/99tyOiDvSpRP5Dn2qOA5rX9m2ug+u3d3ZYsmOefLB8AbQ+/sHlz0biQOPa6NBSsubKKLveHe5B+1kbP//+4H62RO8+hwDo6M7diDg7OLi+/0vy/m/rznaxzfNt6P9g5zzMxj9vthr/FFbGP9Fi/HO4Re5uRef8LzzuQTNtZeO/91uOf1cmrYYH8tr/GmO+oeTylXKa9W3/j4hTMbQ/q280n3Nu6VG93brV479sydpvjgXz/Xg8uH/tc6ZKN7cT8hpP7ka80nL8m6wc/6TF8c/ej4tdtnEiffBau3Wd43+x6j9EvN7y+D+b0Uo2np8cbZwPo82zYr0/7534tV37m4+/tzNt2fE/tHH8w8nq+drq5tv4/sDfabt1a+KPbs//Wmlf8lmjvC9/7EapVpsbi9iXfLz+8fFnz23Wm9tn8Z86uXH/1+r8PxgRn3cZ/73jP77aVfy7cP5n8U9t6vhvvvDoo5vftWu/u/7vrUbpVP5Idvw7xdXtDm7nvQMAAAAAAIC9phARRyIpFFfKhUKxuHx/x/E4VChXqrXTlyvzV6ei8V3Z4RgqNGe6j666H2Isvx+2WR9/rj4REcci4uuBg416cbJSntrt4AEAAAAAAAAAAAAAAAAAAGCPONzm+/+Z3wZ2e++AF85PfkP/6pj/vfilJ2BP8v8f+pf8h/4l/6F/yX/oX/If+pf8h/4l/6F/yX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqYsXLmRLfenprcmsPnV9YX6mcv3MVFqdKc7OTxYnK3PXitOVynQ5LU5WZju9XrlSuTY2HvM3RmtptTZaXVi8NFuZv1q7dGW2NJ1eSod2JCoAAAAAAAAAAAAAAAAAAAD4d6kuLM6UyuV0TkFhS4XBvbEbCj0u7HbPBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP/BMAAP//Yko41g==") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfea7) copy_file_range(r6, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1}, 0x17ba}], 0x1, 0x2000, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) 7.858564799s ago: executing program 5 (id=262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800f7ffffffff34b17f0000950000001f000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r0, 0x0, 0x1}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003}) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x2, &(0x7f0000000000)=0xfffffffe, 0x4) socket$alg(0x26, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = openat$incfs(0xffffffffffffff9c, 0x0, 0x100, 0x1c4) openat(r7, &(0x7f0000000040)='./file0\x00', 0x10201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 7.680794906s ago: executing program 1 (id=263): socket$inet_udplite(0x2, 0x2, 0x88) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = dup(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000000)='1', 0x1) 6.397072679s ago: executing program 5 (id=264): socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0xd0, 0x30, 0x216822a75a8bdd29, 0xffffffff, 0x0, {}, [{0xbc, 0x1, [@m_skbmod={0xb8, 0x3ffd, 0x0, 0x0, {{0xb}, {0x4}, {0x8c, 0x6, "eed6873f2981611ecb395b8716e117716864532f5465722919225448bbf6ed8357f76bf1fa9b55291316eb1809fcd4600358cdd945d387bd97c729258624b869b3ec525874365044249128c92c13f801e6fed8b7988ebfccfd15c08b07e85451a3df562d217b2010aeac8dbef98e6cbbb363bf1bff633baa160e0fd89d93f14810b030488376ad9f"}, {0xc}, {0xc}}}]}]}, 0xd0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="140000001300010000000000000000"], 0x14}], 0x1}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66ddccccb3b7d59d649973f756dcc67b8269b77d1b2f1b9300c4ac5a275a6c4a695205187987cdcd7e0d9b41cc3fb0730f78fcaee057e27d620c20ddb170b9f373bbae2c37811b5580807a9f9fcd8c3fa89701006e07d7e6bb0ac4bece3d7fed58fa392146813bb30fae31f9a1fcd70af66142c32740a78b39d2061a5c878a6f0eec9d6794317253ff7fcd9dff23c5986fb6dd53cd0e97434cd5a887052f3055c2f823127dd21b4c36dec4e267f3c7ad9a4585f64dc27e7791c3b4a6a7fe000000000000", @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',\x00']) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xb}, 0xa) 6.067877817s ago: executing program 4 (id=265): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x44894}, 0x0) 5.148051792s ago: executing program 5 (id=266): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0xcc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa0, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1008, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x6}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x5, 0xb, 0x2, 0x42}, {0x6, 0x4, 0x8, 0xf}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800004, 0xa525}]}}, @TCA_U32_LINK={0x8}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x40) 4.968606227s ago: executing program 4 (id=267): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1}}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x1, 0x0, {}, [{0x90, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xffff}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x4, 0x0, 0x0, {{0x7}, {0x7, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x3, 0x0, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004a00003400000000001190468029d34f4278de7800000000ffffffff4414d1337f00000100000007ac1414bb0000004000004e20000c907801000000"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x5b8, &(0x7f00000001c0)={0x0, 0x7b5f, 0x800, 0x6, 0xd4}, &(0x7f0000000240), &(0x7f0000000b80)) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x22c000, 0x800}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000000104050000000700000000000700000305000100010000000a00020000000003"], 0x48}, 0x1, 0x0, 0x0, 0x20040024}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_io_uring_setup(0x760e, &(0x7f0000000600)={0x0, 0xfad6, 0x10000, 0x3}, &(0x7f0000000140), &(0x7f0000000280)) 4.547910255s ago: executing program 4 (id=268): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48094) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 3.093316186s ago: executing program 33 (id=243): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) unshare(0x6a040000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x228, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f00000000c0)=""/14, 0xe) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18009a5a7b0693c9689c36315ec86f801100000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002e7438e9a30001001400000018000180140002006e6574"], 0x44}}, 0x10000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xffffff8c) sendmsg$nl_route(r9, 0x0, 0x4000000) 3.085701585s ago: executing program 4 (id=270): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_setup(0x39e5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfea7) copy_file_range(r6, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1}, 0x17ba}], 0x1, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000000)=0x1e) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) 3.021724475s ago: executing program 5 (id=271): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xc003}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000000)=0xfffffffe, 0x4) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88b81, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0x14) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 2.751767637s ago: executing program 3 (id=272): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) 1.42137995s ago: executing program 5 (id=273): accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3}, 0x38) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) io_uring_setup(0x39e5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000001600)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000200), 0xfea7) copy_file_range(r6, 0x0, r5, 0x0, 0xffffffffa003e45c, 0x700000000000000) sendmsg$nl_netfilter(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)=""/141, 0x8d}], 0x1}, 0x17ba}], 0x1, 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, &(0x7f0000000000)=0x1e) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r8, 0x4c80, 0xffffffffffffffb6) 1.195498856s ago: executing program 1 (id=274): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 0s ago: executing program 3 (id=275): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) unshare(0x6a040000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x228, &(0x7f0000000380)={0x0, 0x1ffffa, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x708, 0x41e3, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r6, &(0x7f00000000c0)=""/14, 0xe) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18009a5a7b0693c9689c36315ec86f801100000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002e7438e9a30001001400000018000180140002006e6574"], 0x44}}, 0x10000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x8c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa8}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) listxattr(0x0, 0x0, 0x0) sendmsg$nl_route(r9, 0x0, 0x4000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 84.623688][ T5820] cgroup: Unknown subsys name 'net' [ 84.756956][ T5820] cgroup: Unknown subsys name 'cpuset' [ 84.767107][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.315414][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.399448][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.408971][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.432968][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.442247][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.456553][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.465323][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.467835][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.480422][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.488974][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.489200][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.497028][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.504514][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.519681][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.533124][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.543832][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.552428][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.576346][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.592108][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.599788][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.609600][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.617222][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.625397][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.633168][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.642366][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.649475][ T5144] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.664220][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.671494][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.682179][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.690617][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.705660][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.253257][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 92.447040][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 92.647432][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.793677][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.813213][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.843729][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.851832][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.859369][ T5839] bridge_slave_0: entered allmulticast mode [ 92.867341][ T5839] bridge_slave_0: entered promiscuous mode [ 92.876573][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.884308][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.893058][ T5831] bridge_slave_0: entered allmulticast mode [ 92.900911][ T5831] bridge_slave_0: entered promiscuous mode [ 92.947157][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.954539][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.961880][ T5839] bridge_slave_1: entered allmulticast mode [ 92.969335][ T5839] bridge_slave_1: entered promiscuous mode [ 92.976866][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.984216][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.991434][ T5831] bridge_slave_1: entered allmulticast mode [ 92.999315][ T5831] bridge_slave_1: entered promiscuous mode [ 93.194068][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.231488][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.249502][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.257298][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.264833][ T5835] bridge_slave_0: entered allmulticast mode [ 93.272913][ T5835] bridge_slave_0: entered promiscuous mode [ 93.290738][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.317419][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.332785][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 93.346401][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.354330][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.361512][ T5835] bridge_slave_1: entered allmulticast mode [ 93.369573][ T5835] bridge_slave_1: entered promiscuous mode [ 93.462518][ T5839] team0: Port device team_slave_0 added [ 93.549373][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.576181][ T5839] team0: Port device team_slave_1 added [ 93.592510][ T5844] Bluetooth: hci3: command tx timeout [ 93.592857][ T56] Bluetooth: hci2: command tx timeout [ 93.598123][ T5841] Bluetooth: hci0: command tx timeout [ 93.617719][ T5831] team0: Port device team_slave_0 added [ 93.626629][ T5831] team0: Port device team_slave_1 added [ 93.654549][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.661818][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.668973][ T5834] bridge_slave_0: entered allmulticast mode [ 93.672470][ T5841] Bluetooth: hci4: command tx timeout [ 93.677276][ T5834] bridge_slave_0: entered promiscuous mode [ 93.690842][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.715180][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.722838][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.729991][ T5846] bridge_slave_0: entered allmulticast mode [ 93.741412][ T5846] bridge_slave_0: entered promiscuous mode [ 93.756751][ T5841] Bluetooth: hci5: command tx timeout [ 93.762312][ T56] Bluetooth: hci1: command tx timeout [ 93.796770][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.804299][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.811629][ T5834] bridge_slave_1: entered allmulticast mode [ 93.819942][ T5834] bridge_slave_1: entered promiscuous mode [ 93.841878][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.849006][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.856660][ T5846] bridge_slave_1: entered allmulticast mode [ 93.864086][ T5846] bridge_slave_1: entered promiscuous mode [ 93.886994][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.894362][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.921146][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.934708][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.941781][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.968302][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.995073][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.002111][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.028124][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.071124][ T5835] team0: Port device team_slave_0 added [ 94.079615][ T5835] team0: Port device team_slave_1 added [ 94.109991][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.117027][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.143177][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.209546][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.222766][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.234543][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.241660][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.249732][ T5842] bridge_slave_0: entered allmulticast mode [ 94.257781][ T5842] bridge_slave_0: entered promiscuous mode [ 94.268152][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.281648][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.347274][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.354813][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.362735][ T5842] bridge_slave_1: entered allmulticast mode [ 94.370224][ T5842] bridge_slave_1: entered promiscuous mode [ 94.410132][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.417178][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.443726][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.535927][ T5834] team0: Port device team_slave_0 added [ 94.543655][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.550597][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.577518][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.598301][ T5846] team0: Port device team_slave_0 added [ 94.607371][ T5846] team0: Port device team_slave_1 added [ 94.619168][ T5839] hsr_slave_0: entered promiscuous mode [ 94.626482][ T5839] hsr_slave_1: entered promiscuous mode [ 94.640156][ T5831] hsr_slave_0: entered promiscuous mode [ 94.646694][ T5831] hsr_slave_1: entered promiscuous mode [ 94.652982][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.660636][ T5831] Cannot create hsr debugfs directory [ 94.686018][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.697302][ T5834] team0: Port device team_slave_1 added [ 94.751594][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.758914][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.785927][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.800143][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.838958][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.846259][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.881798][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.958882][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.966150][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.992535][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.048805][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.056086][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.082369][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.142943][ T5842] team0: Port device team_slave_0 added [ 95.155142][ T5835] hsr_slave_0: entered promiscuous mode [ 95.161550][ T5835] hsr_slave_1: entered promiscuous mode [ 95.168335][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.175934][ T5835] Cannot create hsr debugfs directory [ 95.213497][ T5842] team0: Port device team_slave_1 added [ 95.253971][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.260927][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.287368][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.373797][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.380800][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.407925][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.468944][ T5846] hsr_slave_0: entered promiscuous mode [ 95.475847][ T5846] hsr_slave_1: entered promiscuous mode [ 95.483319][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.490896][ T5846] Cannot create hsr debugfs directory [ 95.547440][ T5834] hsr_slave_0: entered promiscuous mode [ 95.554174][ T5834] hsr_slave_1: entered promiscuous mode [ 95.560353][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.567973][ T5834] Cannot create hsr debugfs directory [ 95.672529][ T56] Bluetooth: hci0: command tx timeout [ 95.677992][ T56] Bluetooth: hci2: command tx timeout [ 95.680849][ T5841] Bluetooth: hci3: command tx timeout [ 95.753297][ T5841] Bluetooth: hci4: command tx timeout [ 95.832149][ T5841] Bluetooth: hci1: command tx timeout [ 95.841857][ T5841] Bluetooth: hci5: command tx timeout [ 95.851252][ T5842] hsr_slave_0: entered promiscuous mode [ 95.857861][ T5842] hsr_slave_1: entered promiscuous mode [ 95.864030][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.871600][ T5842] Cannot create hsr debugfs directory [ 96.175504][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.214923][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.231002][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.287937][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.373931][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.390661][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.403835][ T9] cfg80211: failed to load regulatory.db [ 96.415403][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.433237][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.545299][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.558646][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.587077][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.600406][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.680732][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.702406][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.719100][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.729422][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.757510][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.845073][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.876378][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.900460][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.907690][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.917628][ T5834] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.955711][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.962871][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.970666][ T5834] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.987739][ T5834] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.000121][ T5834] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.061094][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.119016][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.126216][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.181536][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.188715][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.258732][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.271139][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.299597][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.315309][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.349478][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.379000][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.395988][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.443663][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.450797][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.476882][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.484079][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.539852][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.580696][ T4042] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.587872][ T4042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.694024][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.701183][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.735684][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.753206][ T5841] Bluetooth: hci2: command tx timeout [ 97.758637][ T5841] Bluetooth: hci0: command tx timeout [ 97.766746][ T5844] Bluetooth: hci3: command tx timeout [ 97.770679][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.807772][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.815057][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.835083][ T5844] Bluetooth: hci4: command tx timeout [ 97.854460][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.912856][ T5844] Bluetooth: hci5: command tx timeout [ 97.918319][ T5844] Bluetooth: hci1: command tx timeout [ 97.926648][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.933837][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.986104][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.044546][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.266738][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.297063][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.357190][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.388250][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.395431][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.440406][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.447566][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.640781][ T5846] veth0_vlan: entered promiscuous mode [ 98.688203][ T5846] veth1_vlan: entered promiscuous mode [ 98.719186][ T5835] veth0_vlan: entered promiscuous mode [ 98.766479][ T5835] veth1_vlan: entered promiscuous mode [ 98.787320][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.836217][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.942772][ T5839] veth0_vlan: entered promiscuous mode [ 98.967604][ T5846] veth0_macvtap: entered promiscuous mode [ 98.993513][ T5839] veth1_vlan: entered promiscuous mode [ 99.027531][ T5835] veth0_macvtap: entered promiscuous mode [ 99.061478][ T5846] veth1_macvtap: entered promiscuous mode [ 99.096490][ T5835] veth1_macvtap: entered promiscuous mode [ 99.201352][ T5839] veth0_macvtap: entered promiscuous mode [ 99.223693][ T5831] veth0_vlan: entered promiscuous mode [ 99.254554][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.267157][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.279735][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.295816][ T5839] veth1_macvtap: entered promiscuous mode [ 99.306505][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.317742][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.330199][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.347793][ T5831] veth1_vlan: entered promiscuous mode [ 99.375217][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.384266][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.396004][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.404918][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.418565][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.430045][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.442074][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.458734][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.469603][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.480183][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.490800][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.503904][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.525917][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.535237][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.544080][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.554755][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.577480][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.588075][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.598277][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.609750][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.621474][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.650411][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.659407][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.669159][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.679939][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.829086][ T5842] veth0_vlan: entered promiscuous mode [ 99.832593][ T5844] Bluetooth: hci3: command tx timeout [ 99.839988][ T5844] Bluetooth: hci0: command tx timeout [ 99.845535][ T5841] Bluetooth: hci2: command tx timeout [ 99.861251][ T5831] veth0_macvtap: entered promiscuous mode [ 99.881356][ T5834] veth0_vlan: entered promiscuous mode [ 99.890710][ T5842] veth1_vlan: entered promiscuous mode [ 99.911581][ T5831] veth1_macvtap: entered promiscuous mode [ 99.917482][ T56] Bluetooth: hci4: command tx timeout [ 99.951190][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.958930][ T5842] veth0_macvtap: entered promiscuous mode [ 99.965990][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.993741][ T56] Bluetooth: hci1: command tx timeout [ 99.993768][ T5844] Bluetooth: hci5: command tx timeout [ 100.025188][ T5842] veth1_macvtap: entered promiscuous mode [ 100.061235][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.069979][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.081012][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.081211][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.091656][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.092610][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.119856][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.132073][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.143931][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.155286][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.165958][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.175969][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.186443][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.196373][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.208027][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.218046][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.228551][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.241488][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.272860][ T5834] veth1_vlan: entered promiscuous mode [ 100.289005][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.299785][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.309722][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.320422][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.330354][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.340802][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.354474][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.365753][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.377943][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.386938][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.396385][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.412868][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.421641][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.445664][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.464910][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.475759][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.486469][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.496353][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.507730][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.517632][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.528103][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.539195][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.573498][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.582985][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.591778][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.600482][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.616803][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.628386][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.709026][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 100.714271][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.731508][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.761030][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.769803][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.936774][ T5834] veth0_macvtap: entered promiscuous mode [ 100.971206][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.976286][ T5834] veth1_macvtap: entered promiscuous mode [ 101.005038][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.223646][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.233339][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.244203][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.252540][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.264691][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.276368][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.307657][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.353714][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.396820][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.408731][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.440888][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.473011][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.518068][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.321298][ T5954] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 102.332953][ T5954] batman_adv: batadv0: Adding interface: gretap1 [ 102.339296][ T5954] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.364662][ T5954] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 102.447473][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.470454][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.491779][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.524545][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.534598][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.556721][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.568985][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.579785][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.589791][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.603667][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.628355][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.732542][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.817657][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.844505][ T5834] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.878956][ T5834] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.896101][ T5834] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.910503][ T5834] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.160130][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.198042][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.262438][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.501402][ T5973] 9pnet_virtio: no channels available for device syz [ 103.522453][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.812058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.961941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.152568][ T5852] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.258235][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.285565][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.442596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.532081][ T5852] usb 2-1: Using ep0 maxpacket: 16 [ 104.547254][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.275062][ T5852] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.286696][ T5852] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 105.295774][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.422945][ T5852] usb 2-1: config 0 descriptor?? [ 105.914348][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.043323][ T5852] kye 0003:0458:5016.0001: control desc unexpectedly large [ 106.067842][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.145260][ T5852] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input5 [ 106.183526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.227098][ T30] audit: type=1326 audit(1744002940.438:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 106.231103][ T5852] input: HID 0458:5016 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5016.0001/input/input6 [ 106.249839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.352611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.384848][ T30] audit: type=1326 audit(1744002940.518:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 106.422126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.430981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.538879][ T5852] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 106.607147][ T30] audit: type=1326 audit(1744002940.518:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 106.757795][ T30] audit: type=1326 audit(1744002940.518:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5992 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 107.495078][ T5924] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 108.226163][ T5924] usb 2-1: device descriptor read/64, error -32 [ 109.392200][ T30] audit: type=1326 audit(1744002942.968:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 109.476108][ T30] audit: type=1326 audit(1744002942.968:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 109.591925][ T30] audit: type=1326 audit(1744002942.968:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 109.618177][ T30] audit: type=1326 audit(1744002942.968:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 109.662160][ T30] audit: type=1326 audit(1744002942.978:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 109.876644][ T24] usb 2-1: USB disconnect, device number 2 [ 109.896471][ T30] audit: type=1326 audit(1744002942.978:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 110.619284][ T6040] syz.5.17 uses obsolete (PF_INET,SOCK_PACKET) [ 110.666951][ T6040] overlay: Unknown parameter 'defcontext' [ 112.872164][ T5906] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 112.982707][ T6061] 9pnet_virtio: no channels available for device syz [ 113.267732][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 113.307041][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.922213][ T6074] netlink: 32 bytes leftover after parsing attributes in process `syz.1.23'. [ 114.294492][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.310847][ T5906] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 114.320142][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.417923][ T6076] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[6076] [ 115.017800][ T5906] usb 6-1: config 0 descriptor?? [ 115.582060][ T5906] kye 0003:0458:5016.0002: control desc unexpectedly large [ 115.628130][ T5906] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0002/input/input7 [ 115.652238][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 115.786432][ T5906] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0002/input/input8 [ 116.008248][ T5906] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 116.095062][ T6091] loop1: detected capacity change from 0 to 512 [ 116.112385][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 116.150732][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.211347][ T6091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.537965][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 117.184448][ T10] usb 4-1: config 0 descriptor?? [ 118.114925][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.366825][ T10] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 118.495655][ T10] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 118.518194][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 118.536071][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 118.553363][ T6000] usb 6-1: USB disconnect, device number 2 [ 118.567352][ T10] [drm] Initialized udl on minor 2 [ 118.621883][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.711454][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 118.739073][ T5843] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.772175][ T10] usb 4-1: USB disconnect, device number 2 [ 118.952423][ T5843] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 120.187369][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 120.187390][ T30] audit: type=1326 audit(1744002954.398:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.4.35" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x0 [ 120.370878][ T6129] loop4: detected capacity change from 0 to 256 [ 120.483372][ T6120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 120.537606][ T6120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.543180][ T6129] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 120.668550][ T6120] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.880334][ T6138] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[6138] [ 121.508912][ T6120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.706114][ T6120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.772610][ T6120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.843108][ T6120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.877941][ T6120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.094578][ T6120] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.118031][ T6120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.151849][ T6120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.196333][ T6154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.39'. [ 122.231815][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 122.251142][ T6120] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.537385][ T6120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 122.552125][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.713818][ T6120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.507450][ T6120] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 123.513506][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.333738][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.339840][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.352199][ T30] audit: type=1326 audit(1744002957.848:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.443111][ T6120] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 124.449132][ T6120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 124.549664][ T30] audit: type=1326 audit(1744002957.848:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.581978][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.607046][ T30] audit: type=1326 audit(1744002957.848:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.632164][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 124.653934][ T30] audit: type=1326 audit(1744002957.848:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.680149][ T6120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 124.689651][ T30] audit: type=1326 audit(1744002957.848:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.721422][ T30] audit: type=1326 audit(1744002957.848:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.751415][ T30] audit: type=1326 audit(1744002957.858:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.780590][ T30] audit: type=1326 audit(1744002957.858:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 124.882017][ T30] audit: type=1326 audit(1744002957.858:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6160 comm="syz.0.42" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 125.594192][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.236919][ T6184] 9pnet_virtio: no channels available for device syz [ 126.392126][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.398255][ T56] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.480373][ T5844] Bluetooth: hci5: command 0x0405 tx timeout [ 126.605958][ T6190] 9pnet: Unknown protocol version 9p2000.u>@jK [ 126.631857][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.722882][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.852383][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 128.487664][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 128.493813][ T56] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.551821][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 128.713653][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 129.423626][ T6234] ptrace attach of "./syz-executor exec"[5842] was attempted by "./syz-executor exec"[6234] [ 130.671823][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 131.390187][ T6244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.744226][ T6260] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 133.764544][ T6260] batman_adv: batadv0: Adding interface: gretap1 [ 133.770945][ T6260] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.796403][ T6260] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 135.541832][ T5843] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 135.662345][ T6273] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.668757][ T6273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 135.678281][ T6273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 135.684717][ T6273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.690946][ T6273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 135.699698][ T6273] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 135.737510][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 135.756694][ T5843] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 135.783315][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 135.842651][ T5843] usb 3-1: Product: syz [ 135.883846][ T5843] usb 3-1: config 0 descriptor?? [ 135.931479][ T5843] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 135.993014][ T5843] gspca_stv06xx: st6422 sensor detected [ 136.985233][ T6294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 137.366848][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.386592][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.681955][ T56] Bluetooth: hci1: command 0x0c1a tx timeout [ 137.688881][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.773034][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 137.779102][ T56] Bluetooth: hci4: command 0x0c1a tx timeout [ 137.785347][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 137.791382][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.362219][ T6303] loop4: detected capacity change from 0 to 1024 [ 138.372657][ T6303] ======================================================= [ 138.372657][ T6303] WARNING: The mand mount option has been deprecated and [ 138.372657][ T6303] and is ignored by this kernel. Remove the mand [ 138.372657][ T6303] option from the mount to silence this warning. [ 138.372657][ T6303] ======================================================= [ 138.409865][ T6303] EXT4-fs: Ignoring removed nobh option [ 138.415596][ T6303] EXT4-fs: Ignoring removed bh option [ 138.537456][ T6303] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.955456][ T5843] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 138.963961][ T5839] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.011028][ T5843] usb 3-1: USB disconnect, device number 2 [ 139.720439][ T6325] 9pnet: Unknown protocol version 9p2000.u>@jK [ 140.139804][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 140.139826][ T30] audit: type=1326 audit(1744002974.278:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 140.172321][ T30] audit: type=1326 audit(1744002974.278:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 140.330453][ T30] audit: type=1326 audit(1744002974.278:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 140.812072][ T30] audit: type=1326 audit(1744002974.278:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 140.955764][ T30] audit: type=1326 audit(1744002974.278:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 141.415325][ T30] audit: type=1326 audit(1744002974.278:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 141.611989][ T30] audit: type=1326 audit(1744002974.278:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 141.767185][ T30] audit: type=1326 audit(1744002974.278:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 142.065645][ T1158] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 142.604644][ T30] audit: type=1326 audit(1744002974.278:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 142.626687][ T30] audit: type=1326 audit(1744002974.278:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6292 comm="syz.0.69" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe650b8d169 code=0x7ffc0000 [ 142.649922][ T1158] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 142.702116][ T1158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.754921][ T1158] usb 3-1: config 0 descriptor?? [ 142.860598][ T6359] loop5: detected capacity change from 0 to 1024 [ 142.869077][ T6359] EXT4-fs: Ignoring removed nobh option [ 142.875154][ T6359] EXT4-fs: Ignoring removed bh option [ 143.169302][ T6359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.980024][ T1158] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 144.001795][ T1158] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 144.091167][ T1158] [drm:udl_init] *ERROR* Selecting channel failed [ 144.206210][ T1158] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 144.263244][ T1158] [drm] Initialized udl on minor 2 [ 144.326473][ T1158] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 144.368130][ T1158] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 144.395449][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.418982][ T5923] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 144.453595][ T5923] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 144.460932][ T1158] usb 3-1: USB disconnect, device number 3 [ 144.869176][ T6376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.84'. [ 145.522888][ T6375] loop5: detected capacity change from 0 to 512 [ 145.639394][ T6375] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.855107][ T6389] tty tty30: ldisc open failed (-12), clearing slot 29 [ 147.372641][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.642077][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 148.642100][ T30] audit: type=1326 audit(1744002982.178:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 148.842189][ T30] audit: type=1326 audit(1744002982.178:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 148.985354][ T30] audit: type=1326 audit(1744002982.198:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 149.168285][ T30] audit: type=1326 audit(1744002982.198:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 150.891766][ T30] audit: type=1326 audit(1744002982.198:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 151.019321][ T6426] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.96'. [ 151.427565][ T30] audit: type=1326 audit(1744002982.198:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 151.489368][ T30] audit: type=1326 audit(1744002982.208:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 152.227621][ T30] audit: type=1326 audit(1744002982.208:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 152.249960][ T30] audit: type=1326 audit(1744002982.208:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 152.287407][ T30] audit: type=1326 audit(1744002982.208:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.2.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 153.244639][ T6440] loop5: detected capacity change from 0 to 512 [ 154.262109][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 154.262135][ T30] audit: type=1326 audit(1744002988.158:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 154.712111][ T30] audit: type=1326 audit(1744002988.158:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 154.735164][ T30] audit: type=1326 audit(1744002988.158:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 154.763940][ T30] audit: type=1326 audit(1744002988.158:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 154.803077][ T6440] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.810464][ T30] audit: type=1326 audit(1744002988.158:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 154.873330][ T6456] 9pnet: Unknown protocol version 9p2000.u>@jK [ 154.942351][ T30] audit: type=1326 audit(1744002988.158:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 155.213922][ T30] audit: type=1326 audit(1744002988.158:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 155.564181][ T30] audit: type=1326 audit(1744002988.158:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 155.733216][ T30] audit: type=1326 audit(1744002988.158:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 155.775260][ T30] audit: type=1326 audit(1744002988.158:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.1.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 155.831841][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 156.041793][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 156.070202][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.111047][ T5906] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 156.131606][ T6471] loop1: detected capacity change from 0 to 40427 [ 156.132010][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 156.158933][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.166740][ T6471] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x3fffff [ 156.192005][ T6471] F2FS-fs (loop1): invalid crc value [ 156.258244][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 156.279874][ T5906] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 156.311921][ T6471] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 156.355635][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.422161][ T5906] hub 5-1:1.0: bad descriptor, ignoring hub [ 156.433225][ T5923] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 156.459727][ T5906] hub 5-1:1.0: probe with driver hub failed with error -5 [ 156.509148][ T5906] cdc_wdm 5-1:1.0: skipping garbage [ 156.548734][ T5906] cdc_wdm 5-1:1.0: skipping garbage [ 156.639098][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 156.759992][ T1158] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.836799][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 156.855441][ T5906] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 156.950374][ T5906] cdc_wdm 5-1:1.0: Unknown control protocol [ 156.996017][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 157.166058][ T5923] usb 3-1: Product: syz [ 157.384700][ T1158] usb 6-1: Using ep0 maxpacket: 16 [ 157.943062][ T5906] usb 5-1: USB disconnect, device number 2 [ 158.253817][ T1158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.460368][ T1158] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.506375][ T1158] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 158.534184][ T5846] syz-executor: attempt to access beyond end of device [ 158.534184][ T5846] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.539941][ T1158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.654171][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz-executor Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 158.654207][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.654221][ T5846] Call Trace: [ 158.654231][ T5846] [ 158.654241][ T5846] dump_stack_lvl+0x241/0x360 [ 158.654288][ T5846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.654325][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.654360][ T5846] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 158.654388][ T5846] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.654417][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.654445][ T5846] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 158.654486][ T5846] f2fs_handle_critical_error+0x392/0x5a0 [ 158.654531][ T5846] f2fs_write_end_io+0x563/0x790 [ 158.654579][ T5846] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 158.654622][ T5846] ? bio_endio+0x7e4/0x890 [ 158.654654][ T5846] ? bio_endio+0x82a/0x890 [ 158.654687][ T5846] __submit_merged_bio+0x2a9/0x710 [ 158.654718][ T5846] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 158.654758][ T5846] f2fs_submit_merged_write_cond+0x29f/0x380 [ 158.654804][ T5846] f2fs_write_data_pages+0x2f99/0x38d0 [ 158.654885][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 158.654939][ T5846] ? __pfx_stack_trace_save+0x10/0x10 [ 158.654974][ T5846] ? __bfs+0x14c/0x270 [ 158.655061][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655089][ T5846] ? __lock_acquire+0xad5/0xd80 [ 158.655120][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655148][ T5846] ? do_raw_spin_lock+0x151/0x370 [ 158.655194][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655222][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 158.655263][ T5846] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 158.655304][ T5846] do_writepages+0x366/0x890 [ 158.655344][ T5846] ? __pfx_do_writepages+0x10/0x10 [ 158.655367][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655395][ T5846] ? __lock_acquire+0xad5/0xd80 [ 158.655426][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655454][ T5846] ? do_raw_spin_lock+0x151/0x370 [ 158.655503][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655531][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 158.655578][ T5846] filemap_fdatawrite+0x1f2/0x2a0 [ 158.655609][ T5846] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 158.655684][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655715][ T5846] ? do_raw_spin_unlock+0x13c/0x8b0 [ 158.655765][ T5846] f2fs_sync_dirty_inodes+0x34f/0x860 [ 158.655823][ T5846] f2fs_write_checkpoint+0x857/0x1da0 [ 158.655871][ T5846] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 158.655942][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.655970][ T5846] ? kfree+0x198/0x430 [ 158.656000][ T5846] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 158.656028][ T5846] ? kill_f2fs_super+0x290/0x6d0 [ 158.656059][ T5846] kill_f2fs_super+0x2b8/0x6d0 [ 158.656090][ T5846] ? __pfx_kill_f2fs_super+0x10/0x10 [ 158.656122][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.656150][ T5846] ? shrinker_free+0x2ca/0x3d0 [ 158.656186][ T5846] deactivate_locked_super+0xc6/0x130 [ 158.656217][ T5846] cleanup_mnt+0x422/0x4c0 [ 158.656244][ T5846] ? lockdep_hardirqs_on+0x9d/0x150 [ 158.656276][ T5846] task_work_run+0x253/0x310 [ 158.656323][ T5846] ? __pfx_task_work_run+0x10/0x10 [ 158.656373][ T5846] ? srso_alias_return_thunk+0x5/0xfbef5 [ 158.656407][ T5846] syscall_exit_to_user_mode+0x13f/0x340 [ 158.656441][ T5846] do_syscall_64+0x100/0x230 [ 158.656479][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.656503][ T5846] RIP: 0033:0x7f08b578e497 [ 158.656524][ T5846] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 158.656544][ T5846] RSP: 002b:00007fffe0a4b088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 158.656571][ T5846] RAX: 0000000000000000 RBX: 00007f08b580e08c RCX: 00007f08b578e497 [ 158.656588][ T5846] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffe0a4b140 [ 158.656604][ T5846] RBP: 00007fffe0a4b140 R08: 0000000000000000 R09: 0000000000000000 [ 158.656619][ T5846] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffe0a4c1d0 [ 158.656636][ T5846] R13: 00007f08b580e08c R14: 000000000002636e R15: 00007fffe0a4c210 [ 158.656674][ T5846] [ 158.656684][ T5846] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 159.083862][ T1158] usb 6-1: config 0 descriptor?? [ 159.103096][ T5923] usb 3-1: config 0 descriptor?? [ 159.154398][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 159.219014][ T5923] usb 3-1: can't set config #0, error -32 [ 159.554039][ T1158] usbhid 6-1:0.0: can't add hid device: -71 [ 159.566008][ T5923] usb 3-1: USB disconnect, device number 4 [ 159.572924][ T1158] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 159.771635][ T6498] overlayfs: overlapping lowerdir path [ 159.886954][ T6499] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 160.474577][ T1158] usb 6-1: USB disconnect, device number 3 [ 162.665353][ T1158] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 162.905002][ T1158] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.941107][ T1158] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 162.992333][ T1158] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 163.034011][ T1158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.077155][ T1158] usb 6-1: config 0 descriptor?? [ 163.125198][ T1158] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 163.142814][ T1158] dvb-usb: bulk message failed: -22 (3/0) [ 163.182098][ T1158] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 163.203405][ T1158] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 163.210623][ T1158] usb 6-1: media controller created [ 163.212793][ T6516] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.113'. [ 163.264653][ T1158] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.366186][ T1158] dvb-usb: bulk message failed: -22 (6/0) [ 163.632217][ T1158] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 163.668015][ T1158] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 164.432838][ T1158] dvb-usb: schedule remote query interval to 150 msecs. [ 164.439843][ T1158] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 164.548227][ T1158] usb 6-1: USB disconnect, device number 4 [ 164.801230][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 164.808370][ T5906] dvb-usb: error while querying for an remote control event. [ 165.681779][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 165.681803][ T30] audit: type=1326 audit(1744002999.198:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 165.824559][ T1158] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 165.963168][ T30] audit: type=1326 audit(1744002999.198:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 166.340946][ T30] audit: type=1326 audit(1744002999.198:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 166.363867][ T30] audit: type=1326 audit(1744002999.208:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.524786][ T30] audit: type=1326 audit(1744002999.208:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.658848][ T30] audit: type=1326 audit(1744002999.208:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.711228][ T30] audit: type=1326 audit(1744002999.208:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.742091][ T5923] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.744885][ T30] audit: type=1326 audit(1744002999.208:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.789212][ T30] audit: type=1326 audit(1744002999.218:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.824962][ T30] audit: type=1326 audit(1744002999.218:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6531 comm="syz.1.127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b578d169 code=0x7ffc0000 [ 167.971842][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 168.002960][ T5923] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.038078][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.078961][ T6562] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.137'. [ 168.088197][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 168.088235][ T5923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 168.088284][ T5923] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.088312][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.124352][ T5923] hub 3-1:1.0: bad descriptor, ignoring hub [ 168.181838][ T5923] hub 3-1:1.0: probe with driver hub failed with error -5 [ 168.210469][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 168.224023][ T5923] cdc_wdm 3-1:1.0: skipping garbage [ 168.257659][ T5923] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 168.292717][ T5923] cdc_wdm 3-1:1.0: Unknown control protocol [ 170.103632][ T6581] syz.1.144 (6581): drop_caches: 2 [ 170.710048][ T6556] cdc_wdm 3-1:1.0: Error autopm - -16 [ 170.836667][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 170.836687][ T30] audit: type=1326 audit(1744003005.058:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6586 comm="syz.5.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f398418d169 code=0x0 [ 170.873054][ T6590] tipc: Started in network mode [ 170.895970][ T6590] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 170.944368][ T6591] loop5: detected capacity change from 0 to 256 [ 170.955050][ T6590] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 171.026876][ T6591] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 171.042538][ T6590] tipc: Enabled bearer , priority 10 [ 171.086227][ T6000] usb 3-1: USB disconnect, device number 5 [ 171.723141][ T6000] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.928957][ T6000] usb 4-1: Using ep0 maxpacket: 8 [ 171.982425][ T6000] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 172.129978][ T6000] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 172.284767][ T1158] tipc: Node number set to 1 [ 172.288130][ T6000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 172.393486][ T6608] loop2: detected capacity change from 0 to 1024 [ 172.420405][ T6608] EXT4-fs: Ignoring removed nobh option [ 172.422897][ T6000] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 172.426789][ T6608] EXT4-fs: Ignoring removed bh option [ 172.559521][ T6608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.562562][ T6000] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 172.633248][ T6000] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.693457][ T6000] hub 4-1:1.0: bad descriptor, ignoring hub [ 172.709397][ T6000] hub 4-1:1.0: probe with driver hub failed with error -5 [ 172.728904][ T6000] cdc_wdm 4-1:1.0: skipping garbage [ 172.756622][ T6000] cdc_wdm 4-1:1.0: skipping garbage [ 172.787580][ T6000] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 172.801770][ T6000] cdc_wdm 4-1:1.0: Unknown control protocol [ 172.920082][ T6617] loop5: detected capacity change from 0 to 1024 [ 172.932265][ T6617] EXT4-fs: Ignoring removed nobh option [ 172.937929][ T6617] EXT4-fs: Ignoring removed bh option [ 173.035864][ T6617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.548564][ T6625] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.156'. [ 173.705742][ T6626] 9pnet: Unknown protocol version 9p2000.u>@jK [ 173.722313][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.743969][ T6000] usb 4-1: USB disconnect, device number 3 [ 174.103392][ T6633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.149'. [ 174.195110][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.264614][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 174.456244][ T5843] usb 2-1: Using ep0 maxpacket: 32 [ 174.586668][ T5843] usb 2-1: New USB device found, idVendor=046d, idProduct=08f6, bcdDevice=81.8a [ 174.753368][ T5843] usb 2-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 174.905816][ T5843] usb 2-1: Product: syz [ 175.042326][ T6637] process 'syz.3.160' launched './file1' with NULL argv: empty string added [ 175.052596][ T5843] usb 2-1: config 0 descriptor?? [ 175.078792][ T5843] gspca_main: STV06xx-2.14.0 probing 046d:08f6 [ 175.137319][ T6639] 8021q: VLANs not supported on nlmon0 [ 175.154020][ T5843] gspca_stv06xx: st6422 sensor detected [ 175.630538][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 178.114953][ T6663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.162'. [ 178.177039][ T5843] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 178.215185][ T5843] usb 2-1: USB disconnect, device number 3 [ 178.409349][ T6671] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.169'. [ 179.331886][ T30] audit: type=1326 audit(1744003013.318:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 179.870984][ T30] audit: type=1326 audit(1744003013.318:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 180.676336][ T6681] syz.1.172 (6681): drop_caches: 2 [ 180.684373][ T6681] syz.1.172 (6681): drop_caches: 2 [ 180.709772][ T30] audit: type=1326 audit(1744003013.328:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 180.958686][ T30] audit: type=1326 audit(1744003013.328:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 181.261765][ T30] audit: type=1326 audit(1744003013.328:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 181.400850][ T30] audit: type=1326 audit(1744003013.328:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 182.042912][ T5843] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.211848][ T30] audit: type=1326 audit(1744003013.328:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 182.262266][ T5843] usb 3-1: Using ep0 maxpacket: 16 [ 182.354416][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.371802][ T30] audit: type=1326 audit(1744003013.328:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 182.457376][ T5843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.492341][ T5843] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 182.520851][ T30] audit: type=1326 audit(1744003013.338:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 182.554789][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.599288][ T5843] usb 3-1: config 0 descriptor?? [ 182.660345][ T30] audit: type=1326 audit(1744003013.348:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6672 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb19d8d169 code=0x7ffc0000 [ 183.759776][ T5843] kye 0003:0458:5016.0003: control desc unexpectedly large [ 183.799961][ T5843] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0003/input/input10 [ 183.855779][ T5843] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0003/input/input11 [ 183.982458][ T6709] 9pnet: Unknown protocol version 9p2000.u>@jK [ 184.345965][ T5843] kye 0003:0458:5016.0003: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 184.562078][ T6714] loop3: detected capacity change from 0 to 1024 [ 184.569376][ T6714] EXT4-fs: Ignoring removed nobh option [ 184.586324][ T6714] EXT4-fs: Ignoring removed bh option [ 184.666111][ T6714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.685035][ T5843] usb 3-1: USB disconnect, device number 6 [ 185.963939][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 187.064107][ T6741] syz.4.189 (6741): drop_caches: 2 [ 187.071427][ T6741] syz.4.189 (6741): drop_caches: 2 [ 187.523969][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.401907][ T5906] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 191.001788][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 191.008709][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.028638][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.042682][ T5906] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 191.052091][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.090262][ T5906] usb 5-1: config 0 descriptor?? [ 191.964645][ T6775] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 191.975744][ T6775] batman_adv: batadv0: Adding interface: gretap1 [ 191.982126][ T6775] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.008505][ T6775] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 192.587613][ T5906] kye 0003:0458:5016.0004: control desc unexpectedly large [ 192.849458][ T5906] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input12 [ 193.557200][ T6792] debugfs: Directory 'ptm1' with parent 'caif_serial' already present! [ 194.355288][ T6803] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 194.597585][ T5906] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0004/input/input13 [ 194.774695][ T5906] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 195.036960][ T5906] usb 5-1: USB disconnect, device number 3 [ 196.902241][ T56] Bluetooth: hci5: command 0x0405 tx timeout [ 198.925534][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 198.986713][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.002195][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.237589][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 202.237641][ T30] audit: type=1326 audit(1744003036.308:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 203.401322][ T30] audit: type=1326 audit(1744003036.308:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 203.491793][ T30] audit: type=1326 audit(1744003036.308:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 203.665087][ T30] audit: type=1326 audit(1744003036.308:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 203.824416][ T6859] loop5: detected capacity change from 0 to 1024 [ 203.830088][ T30] audit: type=1326 audit(1744003036.308:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 203.906608][ T6859] EXT4-fs: Ignoring removed nobh option [ 203.936629][ T30] audit: type=1326 audit(1744003036.308:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 203.958907][ T6859] EXT4-fs: Ignoring removed bh option [ 204.023276][ T6864] loop1: detected capacity change from 0 to 1024 [ 204.059838][ T6864] EXT4-fs: Ignoring removed nobh option [ 204.072911][ T30] audit: type=1326 audit(1744003036.308:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 204.096959][ T30] audit: type=1326 audit(1744003036.308:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 204.119715][ T30] audit: type=1326 audit(1744003036.308:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 204.142265][ T30] audit: type=1326 audit(1744003036.308:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6840 comm="syz.4.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 204.203791][ T6859] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.255815][ T6864] EXT4-fs: Ignoring removed bh option [ 205.244020][ T6864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.167410][ T6881] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 206.437335][ T56] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.452076][ T56] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.500247][ T56] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.513115][ T56] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.520864][ T56] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.619348][ T5841] Bluetooth: hci6: command tx timeout [ 209.031180][ T6906] loop2: detected capacity change from 0 to 1024 [ 209.042233][ T6906] EXT4-fs: Ignoring removed nobh option [ 209.048060][ T6906] EXT4-fs: Ignoring removed bh option [ 209.483448][ T6906] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.089744][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.376523][ T5834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.643719][ T6927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.227'. [ 210.653031][ T56] Bluetooth: hci6: command tx timeout [ 211.246962][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 211.295969][ T5939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.305915][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.402849][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 211.428230][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.466103][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.495545][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 211.530728][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 211.909004][ T6932] loop3: detected capacity change from 0 to 40427 [ 212.077201][ T6932] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3fffff [ 212.095408][ T6932] F2FS-fs (loop3): invalid crc value [ 212.567990][ T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 212.731345][ T56] Bluetooth: hci6: command tx timeout [ 212.809303][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.828788][ T6932] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 212.957565][ T5939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.970254][ T9] hub 3-1:1.0: bad descriptor, ignoring hub [ 213.242445][ T6932] F2FS-fs (loop3): inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x197/0xcc0 [ 214.314544][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 214.314562][ T30] audit: type=1326 audit(1744003047.558:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 214.549290][ T9] hub 3-1:1.0: probe with driver hub failed with error -5 [ 215.324764][ T56] Bluetooth: hci6: command tx timeout [ 215.413910][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 215.423776][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 215.438191][ T30] audit: type=1326 audit(1744003047.558:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 215.508776][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.546894][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 215.558905][ T5835] syz-executor: attempt to access beyond end of device [ 215.558905][ T5835] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 215.586150][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.595080][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 215.601467][ T30] audit: type=1326 audit(1744003047.568:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 215.613687][ T5835] CPU: 1 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 215.613722][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.613737][ T5835] Call Trace: [ 215.613746][ T5835] [ 215.613756][ T5835] dump_stack_lvl+0x241/0x360 [ 215.613802][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.613838][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.613866][ T5835] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 215.613893][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.613921][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.613948][ T5835] ? f2fs_hw_is_readonly+0x3a3/0x470 [ 215.613988][ T5835] f2fs_handle_critical_error+0x392/0x5a0 [ 215.614032][ T5835] f2fs_write_end_io+0x563/0x790 [ 215.614078][ T5835] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 215.614120][ T5835] ? bio_endio+0x7e4/0x890 [ 215.614151][ T5835] ? bio_endio+0x82a/0x890 [ 215.614184][ T5835] __submit_merged_bio+0x2a9/0x710 [ 215.614213][ T5835] ? f2fs_submit_merged_write_cond+0x101/0x380 [ 215.614252][ T5835] f2fs_submit_merged_write_cond+0x29f/0x380 [ 215.614298][ T5835] f2fs_write_data_pages+0x2f99/0x38d0 [ 215.614376][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.614428][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614490][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614517][ T5835] ? __mod_memcg_lruvec_state+0x301/0x4f0 [ 215.614560][ T5835] ? __pfx___mod_memcg_lruvec_state+0x10/0x10 [ 215.614605][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614648][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614675][ T5835] ? __lock_acquire+0xad5/0xd80 [ 215.614706][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614733][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 215.614777][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614804][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.614844][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 215.614883][ T5835] do_writepages+0x366/0x890 [ 215.614919][ T5835] ? __pfx_do_writepages+0x10/0x10 [ 215.614941][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.614968][ T5835] ? __lock_acquire+0xad5/0xd80 [ 215.614998][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.615025][ T5835] ? do_raw_spin_lock+0x151/0x370 [ 215.615073][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.615100][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.615146][ T5835] filemap_fdatawrite+0x1f2/0x2a0 [ 215.615177][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 215.615201][ T5835] ? mlock_drain_local+0x79/0x490 [ 215.615276][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.615303][ T5835] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.615348][ T5835] f2fs_sync_dirty_inodes+0x34f/0x860 [ 215.615405][ T5835] f2fs_write_checkpoint+0x857/0x1da0 [ 215.615452][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 215.615522][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.615549][ T5835] ? kfree+0x198/0x430 [ 215.615586][ T5835] ? f2fs_stop_gc_thread+0x7f/0xb0 [ 215.615613][ T5835] ? kill_f2fs_super+0x290/0x6d0 [ 215.615643][ T5835] kill_f2fs_super+0x2b8/0x6d0 [ 215.615674][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 215.615706][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.615733][ T5835] ? shrinker_free+0x2ca/0x3d0 [ 215.615768][ T5835] deactivate_locked_super+0xc6/0x130 [ 215.615801][ T5835] cleanup_mnt+0x422/0x4c0 [ 215.615829][ T5835] ? lockdep_hardirqs_on+0x9d/0x150 [ 215.615862][ T5835] task_work_run+0x253/0x310 [ 215.615909][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 215.615952][ T5835] ? srso_alias_return_thunk+0x5/0xfbef5 [ 215.615984][ T5835] syscall_exit_to_user_mode+0x13f/0x340 [ 215.616019][ T5835] do_syscall_64+0x100/0x230 [ 215.616056][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.616080][ T5835] RIP: 0033:0x7fa98dd8e497 [ 215.616102][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 215.616121][ T5835] RSP: 002b:00007ffd114bf768 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 215.616147][ T5835] RAX: 0000000000000000 RBX: 00007fa98de0e08c RCX: 00007fa98dd8e497 [ 215.616164][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd114bf820 [ 215.616179][ T5835] RBP: 00007ffd114bf820 R08: 0000000000000000 R09: 0000000000000000 [ 215.616194][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd114c08b0 [ 215.616211][ T5835] R13: 00007fa98de0e08c R14: 00000000000340ca R15: 00007ffd114c08f0 [ 215.616248][ T5835] [ 215.616694][ T5835] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 215.766638][ T6883] chnl_net:caif_netlink_parms(): no params data found [ 215.911861][ T30] audit: type=1326 audit(1744003047.568:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 216.390358][ T24] usb 3-1: USB disconnect, device number 7 [ 216.398508][ T30] audit: type=1326 audit(1744003047.568:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 216.429575][ T30] audit: type=1326 audit(1744003047.568:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 216.453105][ T30] audit: type=1326 audit(1744003047.568:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 216.490906][ T6964] overlay: Unknown parameter 'dont_measure' [ 217.069214][ T30] audit: type=1326 audit(1744003047.568:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 217.217166][ T30] audit: type=1326 audit(1744003047.578:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 217.243755][ T30] audit: type=1326 audit(1744003047.578:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6944 comm="syz.4.231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b2438d169 code=0x7ffc0000 [ 217.275291][ T5939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.624970][ T6976] 9pnet_virtio: no channels available for device syz [ 219.247347][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.5.237'. [ 219.256370][ T6976] netlink: 24 bytes leftover after parsing attributes in process `syz.5.237'. [ 219.642621][ T6977] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 219.846212][ T5939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.018624][ T6986] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 221.030026][ T6986] batman_adv: batadv0: Adding interface: gretap1 [ 221.036494][ T6986] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.104884][ T6986] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 221.942305][ T6883] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.949871][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.980962][ T6883] bridge_slave_0: entered allmulticast mode [ 222.009542][ T6883] bridge_slave_0: entered promiscuous mode [ 222.032986][ T6883] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.061378][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.080516][ T6883] bridge_slave_1: entered allmulticast mode [ 222.098130][ T6993] syz.4.241 (6993): drop_caches: 2 [ 222.108484][ T6993] syz.4.241 (6993): drop_caches: 2 [ 222.224202][ T6883] bridge_slave_1: entered promiscuous mode [ 223.930070][ T6883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.044189][ T6883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.230325][ T56] Bluetooth: hci1: unexpected event for opcode 0x200a [ 225.236904][ T6883] team0: Port device team_slave_0 added [ 226.019797][ T6883] team0: Port device team_slave_1 added [ 226.720549][ T5939] bridge_slave_1: left allmulticast mode [ 226.733179][ T5939] bridge_slave_1: left promiscuous mode [ 226.740388][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.486570][ T5939] bridge_slave_0: left allmulticast mode [ 227.521774][ T5939] bridge_slave_0: left promiscuous mode [ 227.832288][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.272030][ T7042] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 228.876283][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.3.253'. [ 229.347735][ T7059] loop3: detected capacity change from 0 to 1024 [ 229.355127][ T7059] EXT4-fs: Ignoring removed nobh option [ 229.360716][ T7059] EXT4-fs: Ignoring removed bh option [ 229.455032][ T7059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.433484][ T7071] mmap: syz.4.254 (7071) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.607778][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.289272][ T7088] loop1: detected capacity change from 0 to 1024 [ 233.290157][ T7088] EXT4-fs: Ignoring removed nobh option [ 233.290185][ T7088] EXT4-fs: Ignoring removed bh option [ 233.384200][ T7088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.603373][ T5939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.525960][ T5939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.616982][ T5939] bond0 (unregistering): Released all slaves [ 234.632207][ T5846] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.763904][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.763926][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.763955][ T6883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.829232][ T6883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.829257][ T6883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.829289][ T6883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.964542][ T7110] 9pnet: Could not find request transport: f̳՝dsV{i}/ [ 236.201115][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.575774][ T7118] netlink: 32 bytes leftover after parsing attributes in process `syz.4.267'. [ 236.650503][ T5939] tipc: Disabling bearer [ 236.658112][ T5939] tipc: Left network mode [ 238.162181][ T5841] Bluetooth: hci6: command 0x0405 tx timeout [ 238.457939][ T6883] hsr_slave_0: entered promiscuous mode [ 238.470648][ T7142] loop4: detected capacity change from 0 to 1024 [ 238.486292][ T7142] EXT4-fs: Ignoring removed nobh option [ 238.503376][ T6883] hsr_slave_1: entered promiscuous mode [ 238.509239][ T7142] EXT4-fs: Ignoring removed bh option [ 238.552844][ T7142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.561512][ T6883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.591764][ T6883] Cannot create hsr debugfs directory [ 240.243927][ T7157] loop5: detected capacity change from 0 to 1024 [ 240.251304][ T7157] EXT4-fs: Ignoring removed nobh option [ 240.262014][ T7152] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 240.269850][ T7157] EXT4-fs: Ignoring removed bh option [ 240.513802][ T7157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.298184][ T7168] ================================================================== [ 241.306308][ T7168] BUG: KASAN: use-after-free in ext4_find_extent+0xb92/0xd80 [ 241.313712][ T7168] Read of size 4 at addr ffff888078070018 by task syz.5.273/7168 [ 241.321426][ T7168] [ 241.323755][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.5.273 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 241.323782][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.323795][ T7168] Call Trace: [ 241.323805][ T7168] [ 241.323815][ T7168] dump_stack_lvl+0x241/0x360 [ 241.323852][ T7168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.323882][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.323908][ T7168] ? rcu_is_watching+0x15/0xb0 [ 241.323935][ T7168] ? __virt_addr_valid+0x183/0x530 [ 241.323966][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.323990][ T7168] ? lock_release+0x4e/0x3e0 [ 241.324015][ T7168] ? __virt_addr_valid+0x183/0x530 [ 241.324045][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324072][ T7168] print_report+0x16e/0x5b0 [ 241.324101][ T7168] ? __virt_addr_valid+0x183/0x530 [ 241.324130][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324155][ T7168] ? __virt_addr_valid+0x45f/0x530 [ 241.324183][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324208][ T7168] ? __phys_addr+0xba/0x170 [ 241.324237][ T7168] ? ext4_find_extent+0xb92/0xd80 [ 241.324269][ T7168] kasan_report+0x143/0x180 [ 241.324298][ T7168] ? ext4_find_extent+0xb92/0xd80 [ 241.324333][ T7168] ext4_find_extent+0xb92/0xd80 [ 241.324370][ T7168] ext4_ext_map_blocks+0x2e6/0x7d80 [ 241.324405][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324438][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324463][ T7168] ? __lock_acquire+0xad5/0xd80 [ 241.324487][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324515][ T7168] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 241.324547][ T7168] ? __lock_acquire+0xad5/0xd80 [ 241.324578][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324619][ T7168] ? __pfx_down_write+0x10/0x10 [ 241.324649][ T7168] ? ext4_es_lookup_extent+0x61a/0xa90 [ 241.324677][ T7168] ext4_map_blocks+0x909/0x1a70 [ 241.324710][ T7168] ? __pfx_ext4_map_blocks+0x10/0x10 [ 241.324740][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324764][ T7168] ? lockdep_hardirqs_on+0x9d/0x150 [ 241.324793][ T7168] _ext4_get_block+0x23b/0x6b0 [ 241.324817][ T7168] ? mod_objcg_state+0x12a/0x9b0 [ 241.324845][ T7168] ? __pfx__ext4_get_block+0x10/0x10 [ 241.324868][ T7168] ? percpu_ref_get_many+0x19/0x140 [ 241.324902][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.324931][ T7168] ext4_get_block_unwritten+0x2f/0x100 [ 241.324957][ T7168] ext4_block_write_begin+0x4da/0x1520 [ 241.324992][ T7168] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 241.325017][ T7168] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 241.325044][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325069][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325093][ T7168] ? ext4_inode_journal_mode+0x18b/0x460 [ 241.325125][ T7168] ext4_write_begin+0x786/0x1330 [ 241.325167][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325196][ T7168] ? __pfx_ext4_write_begin+0x10/0x10 [ 241.325231][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325259][ T7168] ext4_da_write_begin+0x4aa/0xb20 [ 241.325279][ T7168] ? ext4_write_end+0x7d7/0xa30 [ 241.325305][ T7168] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 241.325326][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325352][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325380][ T7168] generic_perform_write+0x32b/0xa10 [ 241.325422][ T7168] ? __pfx_generic_perform_write+0x10/0x10 [ 241.325452][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325481][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325506][ T7168] ? ext4_write_checks+0x255/0x2c0 [ 241.325534][ T7168] ext4_buffered_write_iter+0xc7/0x390 [ 241.325563][ T7168] ext4_file_write_iter+0x97f/0x1da0 [ 241.325589][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325621][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325645][ T7168] ? __lock_acquire+0xad5/0xd80 [ 241.325669][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325697][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325723][ T7168] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 241.325756][ T7168] vfs_write+0x711/0xd10 [ 241.325784][ T7168] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 241.325811][ T7168] ? __pfx_vfs_write+0x10/0x10 [ 241.325833][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325861][ T7168] ? __fget_files+0x2a/0x420 [ 241.325881][ T7168] ? __fget_files+0x2a/0x420 [ 241.325902][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.325929][ T7168] ksys_write+0x19d/0x2d0 [ 241.325954][ T7168] ? __pfx_ksys_write+0x10/0x10 [ 241.325982][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 241.326009][ T7168] do_syscall_64+0xf3/0x230 [ 241.326040][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.326062][ T7168] RIP: 0033:0x7f398418d169 [ 241.326081][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.326099][ T7168] RSP: 002b:00007f3984f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.326122][ T7168] RAX: ffffffffffffffda RBX: 00007f39843a6160 RCX: 00007f398418d169 [ 241.326138][ T7168] RDX: 000000000000fea7 RSI: 0000200000000200 RDI: 0000000000000009 [ 241.326152][ T7168] RBP: 00007f398420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.326166][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.326179][ T7168] R13: 0000000000000000 R14: 00007f39843a6160 R15: 00007ffe171897d8 [ 241.326204][ T7168] [ 241.326211][ T7168] [ 241.845968][ T7168] The buggy address belongs to the physical page: [ 241.852375][ T7168] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4bb pfn:0x78070 [ 241.861307][ T7168] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 241.868428][ T7168] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 241.877018][ T7168] raw: 00000000000004bb 0000000000000000 00000000ffffffff 0000000000000000 [ 241.885612][ T7168] page dumped because: kasan: bad access detected [ 241.892024][ T7168] page_owner tracks the page as freed [ 241.897399][ T7168] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 7038, tgid 7036 (syz.4.251), ts 226581415281, free_ts 228936047594 [ 241.915037][ T7168] post_alloc_hook+0x1f4/0x240 [ 241.919827][ T7168] get_page_from_freelist+0x352b/0x36c0 [ 241.925390][ T7168] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 241.931199][ T7168] alloc_pages_mpol+0x339/0x690 [ 241.936056][ T7168] folio_alloc_mpol_noprof+0x36/0x70 [ 241.941354][ T7168] shmem_alloc_and_add_folio+0x490/0x1070 [ 241.947099][ T7168] shmem_get_folio_gfp+0x655/0x1800 [ 241.952314][ T7168] shmem_fault+0x223/0x5c0 [ 241.956729][ T7168] __do_fault+0x137/0x390 [ 241.961054][ T7168] handle_pte_fault+0x3f0c/0x61c0 [ 241.966081][ T7168] handle_mm_fault+0x1129/0x1bf0 [ 241.971027][ T7168] __get_user_pages+0x1adc/0x4180 [ 241.976061][ T7168] populate_vma_page_range+0x266/0x340 [ 241.981528][ T7168] __mm_populate+0x27d/0x460 [ 241.986126][ T7168] vm_mmap_pgoff+0x390/0x530 [ 241.990724][ T7168] do_syscall_64+0xf3/0x230 [ 241.995232][ T7168] page last free pid 7043 tgid 7036 stack trace: [ 242.001556][ T7168] free_unref_folios+0xe0e/0x17f0 [ 242.006596][ T7168] folios_put_refs+0x70a/0x800 [ 242.011371][ T7168] shmem_undo_range+0x595/0x1820 [ 242.016316][ T7168] shmem_evict_inode+0x29d/0xa80 [ 242.021260][ T7168] evict+0x4fb/0x9b0 [ 242.025159][ T7168] __dentry_kill+0x20d/0x630 [ 242.029746][ T7168] dput+0x19f/0x2b0 [ 242.033547][ T7168] __fput+0x60b/0x9f0 [ 242.037529][ T7168] task_work_run+0x253/0x310 [ 242.042134][ T7168] do_exit+0xa11/0x27f0 [ 242.046292][ T7168] do_group_exit+0x207/0x2c0 [ 242.050894][ T7168] get_signal+0x1696/0x1730 [ 242.055404][ T7168] arch_do_signal_or_restart+0x98/0x840 [ 242.060961][ T7168] syscall_exit_to_user_mode+0xce/0x340 [ 242.066517][ T7168] do_syscall_64+0x100/0x230 [ 242.071118][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.077016][ T7168] [ 242.079337][ T7168] Memory state around the buggy address: [ 242.084964][ T7168] ffff88807806ff00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 242.093028][ T7168] ffff88807806ff80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 242.101089][ T7168] >ffff888078070000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 242.109145][ T7168] ^ [ 242.113993][ T7168] ffff888078070080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 242.122054][ T7168] ffff888078070100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 242.130116][ T7168] ================================================================== [ 242.174717][ T7168] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 242.181975][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.5.273 Not tainted 6.14.0-syzkaller-13546-g16cd1c265776 #0 PREEMPT(full) [ 242.193543][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.203625][ T7168] Call Trace: [ 242.206922][ T7168] [ 242.209866][ T7168] dump_stack_lvl+0x241/0x360 [ 242.214586][ T7168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.219824][ T7168] ? __pfx__printk+0x10/0x10 [ 242.224449][ T7168] ? vprintk_emit+0x81f/0xa40 [ 242.229154][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.234806][ T7168] ? vscnprintf+0x5d/0x90 [ 242.239155][ T7168] panic+0x349/0x880 [ 242.243064][ T7168] ? check_panic_on_warn+0x21/0xb0 [ 242.248185][ T7168] ? __pfx_panic+0x10/0x10 [ 242.252609][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.258258][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.263991][ T7168] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 242.269980][ T7168] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 242.276321][ T7168] check_panic_on_warn+0x86/0xb0 [ 242.281283][ T7168] ? ext4_find_extent+0xb92/0xd80 [ 242.286328][ T7168] end_report+0x77/0x160 [ 242.290592][ T7168] kasan_report+0x154/0x180 [ 242.295107][ T7168] ? ext4_find_extent+0xb92/0xd80 [ 242.300152][ T7168] ext4_find_extent+0xb92/0xd80 [ 242.305022][ T7168] ext4_ext_map_blocks+0x2e6/0x7d80 [ 242.310234][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.315881][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.321517][ T7168] ? __lock_acquire+0xad5/0xd80 [ 242.326382][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.332036][ T7168] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 242.337698][ T7168] ? __lock_acquire+0xad5/0xd80 [ 242.342565][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.348207][ T7168] ? __pfx_down_write+0x10/0x10 [ 242.353067][ T7168] ? ext4_es_lookup_extent+0x61a/0xa90 [ 242.358534][ T7168] ext4_map_blocks+0x909/0x1a70 [ 242.363398][ T7168] ? __pfx_ext4_map_blocks+0x10/0x10 [ 242.368702][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.374348][ T7168] ? lockdep_hardirqs_on+0x9d/0x150 [ 242.379616][ T7168] _ext4_get_block+0x23b/0x6b0 [ 242.384394][ T7168] ? mod_objcg_state+0x12a/0x9b0 [ 242.389341][ T7168] ? __pfx__ext4_get_block+0x10/0x10 [ 242.394631][ T7168] ? percpu_ref_get_many+0x19/0x140 [ 242.399843][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.405483][ T7168] ext4_get_block_unwritten+0x2f/0x100 [ 242.410946][ T7168] ext4_block_write_begin+0x4da/0x1520 [ 242.416417][ T7168] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 242.422487][ T7168] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 242.428388][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.434024][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.439659][ T7168] ? ext4_inode_journal_mode+0x18b/0x460 [ 242.445303][ T7168] ext4_write_begin+0x786/0x1330 [ 242.450263][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.455904][ T7168] ? __pfx_ext4_write_begin+0x10/0x10 [ 242.461291][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.466931][ T7168] ext4_da_write_begin+0x4aa/0xb20 [ 242.472041][ T7168] ? ext4_write_end+0x7d7/0xa30 [ 242.476909][ T7168] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 242.482557][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.488194][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.493834][ T7168] generic_perform_write+0x32b/0xa10 [ 242.499139][ T7168] ? __pfx_generic_perform_write+0x10/0x10 [ 242.505006][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.510649][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.516283][ T7168] ? ext4_write_checks+0x255/0x2c0 [ 242.521408][ T7168] ext4_buffered_write_iter+0xc7/0x390 [ 242.526879][ T7168] ext4_file_write_iter+0x97f/0x1da0 [ 242.532171][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.537809][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.543442][ T7168] ? __lock_acquire+0xad5/0xd80 [ 242.548294][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.553932][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.559582][ T7168] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 242.565379][ T7168] vfs_write+0x711/0xd10 [ 242.569634][ T7168] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 242.575357][ T7168] ? __pfx_vfs_write+0x10/0x10 [ 242.580125][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.585771][ T7168] ? __fget_files+0x2a/0x420 [ 242.590370][ T7168] ? __fget_files+0x2a/0x420 [ 242.594958][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.600597][ T7168] ksys_write+0x19d/0x2d0 [ 242.604937][ T7168] ? __pfx_ksys_write+0x10/0x10 [ 242.609793][ T7168] ? srso_alias_return_thunk+0x5/0xfbef5 [ 242.615436][ T7168] do_syscall_64+0xf3/0x230 [ 242.619952][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.625889][ T7168] RIP: 0033:0x7f398418d169 [ 242.630303][ T7168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.649922][ T7168] RSP: 002b:00007f3984f9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 242.658348][ T7168] RAX: ffffffffffffffda RBX: 00007f39843a6160 RCX: 00007f398418d169 [ 242.666323][ T7168] RDX: 000000000000fea7 RSI: 0000200000000200 RDI: 0000000000000009 [ 242.674292][ T7168] RBP: 00007f398420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.682266][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.690243][ T7168] R13: 0000000000000000 R14: 00007f39843a6160 R15: 00007ffe171897d8 [ 242.698229][ T7168] [ 242.701498][ T7168] Kernel Offset: disabled [ 242.705828][ T7168] Rebooting in 86400 seconds..