last executing test programs: 3m27.948213252s ago: executing program 5 (id=931): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x0, 0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$kcm(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000680)=""/233, 0xe9}], 0x1}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x20048880) 3m26.917547556s ago: executing program 5 (id=933): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000000c0), 0x8) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 3m25.719492495s ago: executing program 5 (id=936): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000008000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x0, 0x0, 0x0) r4 = io_uring_setup(0x1b94, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20000}) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3m24.415213984s ago: executing program 5 (id=937): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 'syz0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000000)={0x9, 0x0, 0x0, 0x0, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x0, 0xb, &(0x7f00000000c0)=@framed={{}, [@printk={@lu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x22040400) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000040), 0x100000000000026a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f00000002c0)=0x3f, 0x4) r2 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@local, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x3}, 0x20) inotify_init1(0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="636f6465706167652c6d6163696e7569742c6572726f72733d636f6e74696e75652c646d617330303030303030303030303030303030303030372c646d61736b3d30303430303030303030303030303030303030303031302c6572723d6c25cfd845c9a3f1b77abf0bf76f72733d636f6e74696e75652c757466382c616c6c6f775f7574696d653d3030303030303030303030303030", @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d64656661756c742c0005945c9bb548387f70671dbb30ffc816e56645eb180b252c0c9fbce7a51fe4311c99a452877f5a676949945ab4e7ae0976f36c2d9a6e3dfe5a4ba661a79591ff3ab34c862126059d95c19d569e4639e1621395f14a1a52821a016a798c07edb22b80dbedfd38a6181ac6777e0182c849b8a7c675b2da16ea969d5846da6372ce0a4f3e7ea022a7eac4b579a094e05c9a92841005280c8f4ea2f2f25e99c50d36490c1e5fa050c8f272f71556661ddd0e99b252a18f008fbfb7706781a865e2d4ccdfa03fa0642fd2815d1eabffbd593e16e418c48f56b77076fe2d8214a2a00b3251b4358237bbd7e46f58222f08422216800a7938eca1f24c187b1600ede5a6ca5f3ace5d55398ab4e36e380790b0b4f477da1fc698ac0a7830e484352df323d41d8d1711e226ef8a7b5b4be118934f998127"], 0x0, 0x150b, &(0x7f0000000580)="$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") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 3m23.923462767s ago: executing program 5 (id=940): r0 = open(&(0x7f0000000200)='./file0\x00', 0x28c80, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@my=0x1}) r2 = syz_open_dev$vbi(&(0x7f0000000840), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000080)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7}) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000180)={{@host}, 0x40}) fcntl$notify(r0, 0x402, 0x6) fcntl$setsig(r0, 0xa, 0x21) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0}, 0x0) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 3m23.134643329s ago: executing program 5 (id=941): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x1c, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="5aee41dea43e9eee28e622e563a3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(0x0, 0x0) r6 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) r7 = socket(0x8000000010, 0x2, 0x0) write(r7, &(0x7f00000002c0)="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", 0xfc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="cf00000010ec4a0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500160003000000"], 0x3c}}, 0x0) 2m2.950521583s ago: executing program 0 (id=1020): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r6, 0x40305829, &(0x7f0000000240)=0x20) 2m1.841515005s ago: executing program 0 (id=1023): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ftruncate(0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080), 0x4) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000180)="66454a021f406c83568aa8e7873e9c412e2491fe8c6294955e187dc73fb3dfc3d7df595656700a2ccd63c4446887bb598e0f377b779c689c8378c7d8d5adc71641db6d060ad285eb3d18c4255b3986dc5c1e809e7e4d2b4b72b537f4a407e4148a0246a7287750ad177c61ae70fc063f39d375ba312f732cab1c530f81fd22937c7202e40ab2bde66ae7ccbd5d4f83d4b4e017a657a70de61ab02d395b76659691d0096b744564f20661fbd93d2fd4ae80dfa34677c11307b109bf9e534658d12cd863ab4ca800ba92", 0xc9) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) sendto$packet(r1, &(0x7f00000000c0)="a70f3665041de2dc77a335194ab614a2d6dd5bd790d236039a26512db6a5c8db5943cf59f301ab747c7e5d9f49d058ad8e8bdb4b22d496ec86bf424b45e05558fdc14989495126699cbcf7e84ae143febd682463c0dda894805e8e5ebe832e3b718b58350fb1c097fc698b3f787146c13736ed95f27a2c5e11bef8351a7671475745eb477312c5", 0x87, 0x4040040, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x0, 0x6, @broadcast}, 0x14) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) 1m56.994031575s ago: executing program 0 (id=1028): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x2000004c, &(0x7f0000000a00)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a06160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adcae0097c2e16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d00"/229, @ANYRES8], 0xfe, 0x152e, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r3, 0xee72) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x28}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000600), &(0x7f0000000640)=r4}, 0x20) 1m55.577822962s ago: executing program 0 (id=1029): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51b8, &(0x7f0000005280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) lseek(r0, 0x7fff, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000600)={0x78}, 0x78) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) write$dsp(r1, &(0x7f0000000100)='n', 0x1) sendfile(r1, r2, 0x0, 0x1000000201005) open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xce, &(0x7f00000000c0)={0x0, 0x0, 0x8}, &(0x7f0000000040), &(0x7f0000000000)) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x4c02, &(0x7f0000000140)) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f00000007c0)=ANY=[@ANYBLOB="626172726965722c6e6f646973636172642c6e6f7265636f766572792c6f726465723d7374726963742c6e6f626172726965722c6f726465723d7374726963742c6e6f646973636172642c6f7276a78c98fe78f6da7f55a36465723d72656c617865642c2c"], 0x3, 0xebd, &(0x7f0000004540)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 1m52.837374845s ago: executing program 0 (id=1032): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0xb0, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x9c, 0xe, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}]}, 0xb0}}, 0x0) 1m49.887396235s ago: executing program 3 (id=1036): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000fc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001200)='thermal_power_allocator_pid\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1, 0x2, 0x0) setsockopt(r4, 0x1, 0x4c, &(0x7f00000000c0)="971a4c43", 0x4) connect$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000500)=@abs={0x1}, 0x6e) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a90f16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0xfffffffa, 0x4) io_setup(0x1000, &(0x7f0000000480)=0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001080)=ANY=[@ANYRESHEX=r5, @ANYBLOB="b0a26a9a93098c234f17f1b1aa816109bf52219f0ebc487044e7853f917515566384eed8c08e3feadcea3e346e0ffc27fc2cee4d6aca8041e4c207b753afdd2cc89a476b386708281656daca9fb0b6e82dec2de079c78b5ebbec68ffec0b5f6404e867846c", @ANYRES8, @ANYRESDEC=r4, @ANYBLOB="a8768c0de0cafe0afb150be234aee2bd85ba9ae8e37d828369f86dbb3d00aad6654016bd5ff534d9aeb71d7972863b"], 0x74}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) 1m49.765542989s ago: executing program 0 (id=1037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0x83, 0x0, 0x0, 0x0, 0x1) syz_mount_image$msdos(&(0x7f0000002280), &(0x7f0000000200)='./file0\x00', 0x8, &(0x7f00000022c0)=ANY=[], 0x1, 0x206, &(0x7f0000002040)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000080), 0xfecc) 1m47.836466389s ago: executing program 3 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = creat(0x0, 0xd931d3864d39dcca) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0b1ac9"], 0xe) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000a80)={[{@min_batch_time={'min_batch_time', 0x3d, 0xeb92}}, {@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@nolazytime}, {@errors_continue}]}, 0x9, 0x635, &(0x7f0000001a80)="$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") 1m45.732074842s ago: executing program 3 (id=1042): socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="303030304e303030303030303030303030462ca0179058936d6561737572652c00", @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc2d, &(0x7f00000001c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x4004556a, &(0x7f00000000c0)) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1m45.372757071s ago: executing program 3 (id=1044): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e237f000001925aa80020007b00090080007f240001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1m44.299332384s ago: executing program 3 (id=1047): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x0, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f3668d3d1d1a7834313117f693b1796314416836cdb45961f89c3f3421927b848e15337a8da6ac921d9395e146c2898d275fb842ccbb7e3f7f66fd6840480edf"}}, 0x80}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r1, 0x8983, &(0x7f0000001140)) bind$alg(r1, &(0x7f0000001200)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-simd\x00'}, 0x58) accept4(r1, &(0x7f00000002c0)=@phonet, &(0x7f0000000340)=0x80, 0x800) 1m41.589043076s ago: executing program 3 (id=1051): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r2, 0x1c2}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x74}, {0x3c}, {0x6}]}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001340)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x2e}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 52.893806912s ago: executing program 4 (id=1127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x3c, 0x0, 0x1, 0xfffffffd, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'vlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 50.681743217s ago: executing program 4 (id=1128): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x800, &(0x7f0000000040)=ANY=[], 0x1, 0x670, &(0x7f0000000640)="$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") syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000540)={[{@test_dummy_encryption}]}, 0x1, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0xd8f3dccb89506ebe, 0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) creat(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 49.503910907s ago: executing program 4 (id=1129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000001640)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f1b4fc851faf8228c2eb860e73d800000000fc8f28daf7b92d399638f3725b771bae16409426ba68f49ea9bc3f00000009000000af03f86e3850000000000000000000006fb7eb6e741aefc8dcea14cf372aa94362bb72d286ef49ca7100a2ab5ee798265a3fdbfc1304f534906c81748f507aee574b8a29d8c6d2ee"], 0x1, 0xa12, &(0x7f00000020c0)="$eJzs3U2MG1cdAPBn73rTfJQ4JaFLGtqEQls+uttslvARQVM1F6Km4lap4hKlaYlIAyKVoFUPSU7caFWFKx/i1EtFERK9oKgnLpVoJC49FQ4ciIJUiQMUkkXxvuf1/mNr7M3uer3+/aTZ55n/s98b73g8npn3XgLGVr31d35+upbS5XfeOPaPh/6+9daSx9s5mq2/kx1zjZRSLc9Phtf7cGIxvfHRq6e6pbU01/pb5tPT19vP3Z5SupD2pyupmfZevvr6e3NPnbh4/NKB9988cm1t1h4AAMbLd64cmd/z1z/ft+vjt+4/mra0l5fj82ae35GP+4/mA/9y/F9Py+drHVOnqZBvMk/1kG+iS77Ochoh32SP8qfC6zZ65NtSUf5Ex7Ju6w2jrGzHzVSrzyybr9dnZhZ/k6fW7/qp2sy5M2efPz+kigKr7l8PpJT2m0ymcZwWdg57DwSwKF4vvM2FeGbhzrRfbbK/8q8/Ue/+fFgF6739K3+0yv/NRXscVs9m3ZrKepXP0Y48H68jxPuXBv38l9eL1yMafdaz13WEUbm+0KueE+tcj5XqVf+4XWxW38xpeR++FeKdn5/4Px2V/zHQ3b+d/zeZxnZaGPYOCNiw4n1zC1mJx/v6YnxLRfyuivjWivi2ivj2ijiMs9+99LP0Wm3pd378TT/o+bBynu3unH5iwPrE85GDlh/v+x3UnZYf7yeGjewPJ585/bXnnr26eP9/rb3938zb+/4838yfrSs5QzlfGM+rt+/9by4vp94j3z2hPnd3yd96vHt5vtrupddJHfuZ2+oxvfx5O3vl27c8XzPk25qnu0J94/HJtvC8cvxR9qvl/ZoM69sI6zEV6lH2K7tyGusBK1G2x173/5ftczo1as+fOXv6sTxfttM/TTS23Fp+cJ3rDdy5ftv/TKfl7X92tJc36p37hZ1Ly2ud+4VmWD7XY/mhPF++5743sbW1fObUD84+t9orD2Pu/MuvfP/k2bOnf+SBBxv7wYWNUY1xeTDsPROw1mZfevGHs+dffuXRMy+efOH0C6fPHTp8+NDc3OGvH5qfbR3Xz3Ye3QObydKX/rBrAgAAAAAAAAAAAPTrx8ePXf3Lu1/9YLH9/1L7v9L+v9z5W9r//zS0/4/t5Es7+NIOcFeXeCtP6GB1KuRr5OmTob67Qzl7wvM+ldP2OH65/X8pLvbrWupzb1ge++8t+UJ3Arf1lzIV+iCJ4wV+NqeXcvrrBENU29p9cU6r+rcu23rpn0K/FKOp/N/K1lD6MSntv3v161T2/7vWoY6svvVoTjjsdQS6+6f+v8d7ensD1ME0tGlhwSgewMYw7PE/y3nPkp7747fvujWVbNefWL6/jP2Xwp3Y6ONPKn9zjf/ZHv+u7/1fGDGvubJy//OLax90FJv29lt+XP/SD/Tuwcr/OJdf1ubh1F/5C78K5ccLQn36byh/W5/l37b++1ZW/v9y+eVte+TBfstfrHGtvrwe8bxxuf4XzxsXN8L6l749B17/FQ7UeDOXD+NsVMaZHdSojP/bS7wP4yt5vuwIy30OcbyTQetf7q8o3wN7wuvXKr7fjP872r6R06rPQxn/t2yPzS7z9Y75Rpf3drPua2BUfej6n8k0ttPCwsLantCqMNTCGfr7P+zfCcMuf9jvf5U4/m88ho/j/8Z4HP83xuP4vzEex9eL8Tj+b3w/4/i/MX5veN04PvB0RfzTFfG9FfH7KuL7KuKfqYgfqIjfXxF/oCJ+T0X8wYr45yrin6+IP1QRf6Qi/oWK+GZX2qOM6/rDOIvt83z+YXyU6z+9Pv+7K+LA6Pr5WweffPbt7zYX2/9Ptc6HbOm4jnc052vk384/yfPxunfqmL8VezfP/y3EN/r5Dhgnsf+M+P3+cEUcGF3lPi+fbxhDte499vTbb1Wv43xGyxdz+qWcfjmnj+Z0JqezOT2Y07l1qh9r48nf/v7Ia7Wl3/s7Q7zf+8lje6DYT9ShPusTzw8Mej977MdvUHda/gqbgwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAxNvfV3fn66ltLld9449syJM7O3ljzeztFs/Z3smGu0n5fSYzmdyOkv84MbH716qjO9mdNamku1VGsvT09fb5e0PaV0Ie1PV1Iz7b189fX35p46cfH4pQPvv3nk2tq9AwAAALD5/T8AAP//iNsORA==") sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f00000000c0)=[{0x0}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 46.14835667s ago: executing program 4 (id=1134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) r5 = syz_open_procfs(r0, &(0x7f0000000100)='net/sockstat\x00') r6 = fanotify_init(0x0, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r6, 0x1, 0x40001019, r5, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 43.224684065s ago: executing program 4 (id=1138): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000002200)={[{@block}]}, 0x1, 0x3d8, &(0x7f00000025c0)="$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") r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) mkdir(&(0x7f00000002c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000200)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x3000, 0x0) rmdir(&(0x7f00000000c0)='./bus/file0\x00') setpgid(0x0, r1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x562, &(0x7f0000000600)="$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") 42.631068111s ago: executing program 4 (id=1141): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x9, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) capget(&(0x7f0000feaff9)={0x20071026}, &(0x7f00000001c0)) socket(0x2c, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000a40)={{{@in6=@mcast1, @in6=@private0}}, {{@in=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 10.191364382s ago: executing program 2 (id=1188): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/fscaps', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)='net/ip6_tables_targets\x00') lseek(0xffffffffffffffff, 0xd7, 0x0) io_uring_enter(0xffffffffffffffff, 0x291c, 0x0, 0x0, 0x0, 0x0) preadv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/86, 0x56}], 0x1, 0x100, 0x0) 9.008867311s ago: executing program 2 (id=1189): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x9, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000240)={r4, &(0x7f0000000100), 0x0}, 0x20) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x365a, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000100)={0x30000000}) 6.465192767s ago: executing program 2 (id=1191): pipe2(&(0x7f0000000080), 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x4508, &(0x7f00000000c0), 0xe, 0x4f7, &(0x7f0000002a80)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="6f59bb69296212101db2d25d7d1550eabd8017f1dcae8582eee7d0417821deba372ff17566312ebdfed0dee4fcaabfcd0f157495460a5f6fcd15448f", 0x3c}], 0x1}}], 0x1, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x83}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) poll(&(0x7f0000000180)=[{r1}], 0x1, 0x800) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000200)={0x0, r1}) read(r1, &(0x7f0000000040)=""/14, 0xe) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000500)) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x800800, &(0x7f00000000c0)=ANY=[], 0x1, 0x1ca, &(0x7f00000024c0)="$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") setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000840)={@remote}, 0x14) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000000640)=""/87, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 5.180888594s ago: executing program 2 (id=1193): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700002000000000000a0000100c0002006e6c3830323131"], 0x20}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000ffffffffffffffff0000001077d551234b639ca3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000280)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000180)=""/253, 0xfd}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000000300)=""/143, 0x8f}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/70, 0x46}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0xaa1}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x7fffffff}], 0x6, 0x0, 0x0) 5.123200943s ago: executing program 1 (id=1194): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom$rose(r0, &(0x7f0000000000)=""/237, 0xed, 0x10020, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r1 = syz_open_dev$dri(&(0x7f0000000480), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000640), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_uring_setup(0x3a70, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000000)={r5, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000480)={r6}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000180)={r6}) 4.937046375s ago: executing program 1 (id=1195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r4, 0x0) r5 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x1005, 0x4) sendto$inet(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) 2.829227356s ago: executing program 1 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.676425429s ago: executing program 2 (id=1197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x41, 0x8000038, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000400)) 1.502341443s ago: executing program 2 (id=1198): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x402}]}, 0x34}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x9c) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) 1.32015247s ago: executing program 1 (id=1199): r0 = socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x190, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r5 = syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x677d, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x3701, 0x0, 0x0, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "408100008b20aaf0"}, 0x10}}, 0x0) 224.721948ms ago: executing program 1 (id=1200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000ec0301000000000000000000000000c20805f156e108880a14000000ed"], 0x28}}, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x69) execve(0x0, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "9343b30143784bd83a618bfbc699a7868e544f"}) unshare(0x24020400) syz_emit_ethernet(0x93, &(0x7f0000000200)={@link_local, @link_local, @void, {@ipv4={0x800, @generic={{0xe, 0x4, 0x1, 0x1, 0x85, 0x64, 0x0, 0x0, 0xc, 0x0, @empty, @broadcast, {[@ra={0x94, 0x4, 0x1}, @noop, @generic={0x94, 0x12, "1d8d3131ccee10950588f5fd9c2c23e8"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x5, [{@remote, 0x18a}]}]}}, "7bdab863a1efa78a16cc3e414d237869db91ebc1fd1d6be942f1183eb90a0f9218f8626af8c0180d0f602b7b7e94bba41ba1ca04bc4108b84bf7b54430062a197b6a61c53b5777f6b2ce629c20"}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) 0s ago: executing program 1 (id=1201): socket$inet6(0xa, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x48}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x34, r3, 0x11, 0x0, 0x0, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): 95 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.5.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6377def9 code=0x7ffc0000 [ 684.365545][T10476] x_tables: unsorted entry at hook 1 [ 684.382480][ T29] audit: type=1326 audit(1726868786.506:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.5.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6377def9 code=0x7ffc0000 [ 684.411153][ T29] audit: type=1326 audit(1726868786.506:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.5.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f6377def9 code=0x7ffc0000 [ 684.434569][ T29] audit: type=1326 audit(1726868786.516:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10470 comm="syz.5.910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f6377def9 code=0x7ffc0000 [ 685.534518][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.542121][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.387499][T10508] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 687.892245][T10509] tty tty2: ldisc open failed (-12), clearing slot 1 [ 689.236229][T10528] loop5: detected capacity change from 0 to 8 [ 689.350927][T10542] loop4: detected capacity change from 0 to 764 [ 690.253154][ T5218] block nbd4: Receive control failed (result -32) [ 690.364785][T10538] block nbd4: shutting down sockets [ 690.829765][T10565] loop4: detected capacity change from 0 to 16 [ 690.889408][T10563] loop2: detected capacity change from 0 to 256 [ 690.900640][T10565] erofs: (device loop4): mounted with root inode @ nid 36. [ 690.958540][T10563] loop2: detected capacity change from 0 to 128 [ 693.048722][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.117987][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.132859][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.144330][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.156532][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.169010][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 693.184244][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 693.396281][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.410368][T10139] bond0 (unregistering): Released all slaves [ 693.799043][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 693.811991][T10559] netlink: 16 bytes leftover after parsing attributes in process `syz.0.920'. [ 693.891978][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 694.115602][T10587] loop2: detected capacity change from 0 to 32768 [ 694.130170][T10587] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.928 (10587) [ 694.162291][T10587] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 694.195610][T10587] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 694.204249][T10587] BTRFS info (device loop2): using free-space-tree [ 695.372660][ T55] Bluetooth: hci1: command tx timeout [ 695.758445][T10623] syz.0.932 (10623): drop_caches: 2 [ 696.641701][ T9878] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 697.771983][ T55] Bluetooth: hci1: command tx timeout [ 698.128157][T10645] loop5: detected capacity change from 0 to 256 [ 698.174551][T10645] exfat: Deprecated parameter 'codepage' [ 698.180545][T10645] exfat: Bad value for 'codepage' [ 698.383981][T10139] hsr_slave_0: left promiscuous mode [ 698.422588][T10649] loop4: detected capacity change from 0 to 128 [ 698.630065][T10139] hsr_slave_1: left promiscuous mode [ 698.745605][T10649] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 698.785585][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.794946][T10649] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 698.854575][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.964229][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 698.972357][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.543819][T10139] veth1_macvtap: left promiscuous mode [ 699.549460][T10139] veth0_macvtap: left promiscuous mode [ 699.607262][T10139] veth1_vlan: left promiscuous mode [ 699.646000][T10139] veth0_vlan: left promiscuous mode [ 699.842878][ T55] Bluetooth: hci1: command tx timeout [ 699.946355][T10663] loop2: detected capacity change from 0 to 4096 [ 700.101127][T10667] loop0: detected capacity change from 0 to 256 [ 700.111665][T10667] exfat: Deprecated parameter 'namecase' [ 700.118491][T10667] exfat: Deprecated parameter 'utf8' [ 700.194580][T10667] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfc6d8, utbl_chksum : 0xe619d30d) [ 700.304776][ T9643] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 700.789022][T10668] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 700.836345][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 700.836371][ T29] audit: type=1800 audit(1726868803.306:78): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.942" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 700.853791][ T5232] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 701.033799][ T5232] usb 6-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 701.059862][ T5232] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.266707][ T5232] ums-cypress 6-1:1.0: USB Mass Storage device detected [ 701.559285][T10678] loop0: detected capacity change from 0 to 8 [ 702.269739][ T55] Bluetooth: hci1: command tx timeout [ 704.038144][T10685] loop0: detected capacity change from 0 to 128 [ 709.283903][T10699] netlink: 'syz.0.949': attribute type 7 has an invalid length. [ 709.291783][T10699] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.949'. [ 709.531901][T10699] netlink: 'syz.0.949': attribute type 3 has an invalid length. [ 709.539659][T10699] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.949'. [ 710.175594][ T55] Bluetooth: hci7: command 0x0406 tx timeout [ 711.684733][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 711.724602][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 711.818709][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 711.841797][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 711.853033][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 711.861948][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 711.897008][T10718] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 713.295004][T10139] team0 (unregistering): Port device team_slave_1 removed [ 713.742224][T10139] team0 (unregistering): Port device team_slave_0 removed [ 714.001938][ T55] Bluetooth: hci2: command tx timeout [ 714.741751][ T932] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 714.926764][ T932] usb 3-1: Using ep0 maxpacket: 32 [ 714.940919][ T932] usb 3-1: New USB device found, idVendor=10cf, idProduct=8068, bcdDevice=2e.fd [ 714.950424][ T932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.991211][ T932] usb 3-1: config 0 descriptor?? [ 715.108526][ T932] vmk80xx 3-1:0.0: driver 'vmk80xx' failed to auto-configure device. [ 715.236360][ T932] usb 3-1: USB disconnect, device number 10 [ 715.270284][T10662] netlink: 'syz.5.941': attribute type 12 has an invalid length. [ 716.166280][ T55] Bluetooth: hci2: command tx timeout [ 718.244867][ T55] Bluetooth: hci2: command tx timeout [ 719.551729][ T29] audit: type=1326 audit(1726868822.016:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 719.601860][ T29] audit: type=1326 audit(1726868822.016:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 719.625021][T10763] loop4: detected capacity change from 0 to 512 [ 719.682466][ T29] audit: type=1326 audit(1726868822.016:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 719.805474][ T29] audit: type=1326 audit(1726868822.016:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 719.831603][ T29] audit: type=1326 audit(1726868822.016:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 719.878902][ T29] audit: type=1326 audit(1726868822.016:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 720.342200][ T55] Bluetooth: hci2: command tx timeout [ 720.721823][ T29] audit: type=1326 audit(1726868822.016:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 720.818716][T10773] cgroup: fork rejected by pids controller in /syz0 [ 721.053148][ T9] usb 6-1: USB disconnect, device number 18 [ 721.215826][ T29] audit: type=1326 audit(1726868822.016:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 721.249233][ T29] audit: type=1326 audit(1726868822.016:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 721.271767][ T29] audit: type=1326 audit(1726868822.056:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10761 comm="syz.4.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f439557def9 code=0x7ffc0000 [ 721.621969][T10576] chnl_net:caif_netlink_parms(): no params data found [ 721.931674][ T5232] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 722.071719][ T5232] usb 3-1: device descriptor read/64, error -71 [ 722.297176][T10790] loop4: detected capacity change from 0 to 512 [ 722.310970][T10790] EXT4-fs: Ignoring removed nobh option [ 722.323853][T10790] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 722.421257][ T5232] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 722.567248][T10790] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 722.619943][ T5232] usb 3-1: device descriptor read/64, error -71 [ 722.631712][T10790] EXT4-fs (loop4): 1 truncate cleaned up [ 722.642965][T10790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 722.962706][ T5232] usb usb3-port1: attempt power cycle [ 723.381387][ T5222] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 723.477558][ T5222] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 723.494415][ T5222] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 723.514794][ T9643] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 723.528370][ T5222] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 723.551837][ T5222] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 723.564924][ T5222] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 723.639304][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.646978][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.649201][T10806] loop4: detected capacity change from 0 to 256 [ 723.655219][T10576] bridge_slave_0: entered allmulticast mode [ 723.669341][T10576] bridge_slave_0: entered promiscuous mode [ 723.683077][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.690334][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.697775][T10576] bridge_slave_1: entered allmulticast mode [ 723.716130][T10576] bridge_slave_1: entered promiscuous mode [ 723.739444][T10806] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4f8593fa, utbl_chksum : 0xe619d30d) [ 723.791690][ T5232] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 723.848004][ T5232] usb 3-1: device descriptor read/8, error -71 [ 723.856862][T10715] chnl_net:caif_netlink_parms(): no params data found [ 723.994837][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.060325][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.092777][ T5232] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 724.132458][ T5232] usb 3-1: device descriptor read/8, error -71 [ 724.241203][T10576] team0: Port device team_slave_0 added [ 724.252197][ T5232] usb usb3-port1: unable to enumerate USB device [ 724.314888][T10576] team0: Port device team_slave_1 added [ 724.694144][T10139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.451758][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 725.452884][T10826] loop4: detected capacity change from 0 to 1024 [ 725.466582][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 725.475104][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 725.486369][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 725.501031][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 725.509047][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 725.700351][ T5222] Bluetooth: hci3: command tx timeout [ 725.767732][T10139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.882862][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 725.897978][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 725.960400][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.993348][T10715] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.009991][T10715] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.026610][T10715] bridge_slave_0: entered allmulticast mode [ 726.034689][ T5602] hfsplus: b-tree write err: -5, ino 4 [ 726.035689][T10715] bridge_slave_0: entered promiscuous mode [ 726.128233][T10139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.450238][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.101775][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.129549][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.169965][T10715] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.189153][T10715] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.196630][T10715] bridge_slave_1: entered allmulticast mode [ 727.205310][T10715] bridge_slave_1: entered promiscuous mode [ 727.313067][T10139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.369286][T10715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.471490][T10715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.493800][T10576] hsr_slave_0: entered promiscuous mode [ 727.500410][T10576] hsr_slave_1: entered promiscuous mode [ 728.351760][ T5222] Bluetooth: hci4: command tx timeout [ 728.359237][ T5222] Bluetooth: hci3: command tx timeout [ 728.381889][T10576] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 728.389497][T10576] Cannot create hsr debugfs directory [ 728.559472][T10852] loop4: detected capacity change from 0 to 1024 [ 728.821131][T10853] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 728.828304][T10853] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 728.879244][T10851] netlink: 'syz.2.985': attribute type 10 has an invalid length. [ 729.474096][T10851] netlink: 40 bytes leftover after parsing attributes in process `syz.2.985'. [ 729.643070][T10853] vhci_hcd vhci_hcd.0: Device attached [ 729.782007][ T5232] vhci_hcd: vhci_device speed not set [ 729.797709][T10854] vhci_hcd: connection closed [ 729.826358][ T5292] vhci_hcd: stop threads [ 729.861843][ T5232] usb 13-1: new full-speed USB device number 2 using vhci_hcd [ 729.904600][ T5292] vhci_hcd: release socket [ 729.924174][T10715] team0: Port device team_slave_0 added [ 729.941600][ T5292] vhci_hcd: disconnect device [ 729.970826][T10715] team0: Port device team_slave_1 added [ 730.288891][T10715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.309690][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 730.436131][T10715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.775492][ T55] Bluetooth: hci3: command tx timeout [ 730.784461][ T55] Bluetooth: hci4: command tx timeout [ 731.025169][T10868] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 731.055532][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.2.987'. [ 731.141307][T10139] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.245241][T10796] chnl_net:caif_netlink_parms(): no params data found [ 731.264422][T10715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.442412][T10873] loop4: detected capacity change from 0 to 2048 [ 731.483077][T10873] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 731.650415][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 731.650515][ T29] audit: type=1800 audit(1726868834.006:112): pid=10873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.988" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 731.696776][T10715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 731.995324][T10715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.431858][T10878] loop4: detected capacity change from 0 to 2048 [ 732.465491][T10878] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 732.525194][T10878] bio_check_eod: 405 callbacks suppressed [ 732.525245][T10878] syz.4.989: attempt to access beyond end of device [ 732.525245][T10878] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 732.557046][T10879] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 732.811625][ T5222] Bluetooth: hci4: command tx timeout [ 732.820053][ T5222] Bluetooth: hci3: command tx timeout [ 733.130028][T10139] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.357463][T10576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.415303][T10886] loop4: detected capacity change from 0 to 64 [ 734.513062][T10139] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 734.551274][ T9643] hfs: node 4:3 still has 1 user(s)! [ 734.619387][T10715] hsr_slave_0: entered promiscuous mode [ 734.647989][T10715] hsr_slave_1: entered promiscuous mode [ 734.670450][T10715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 734.701948][T10715] Cannot create hsr debugfs directory [ 734.881694][ T55] Bluetooth: hci4: command tx timeout [ 734.953388][ T5232] vhci_hcd: vhci_device speed not set [ 734.984027][T10576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.055971][T10827] chnl_net:caif_netlink_parms(): no params data found [ 735.206892][T10139] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.557003][T10576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.601056][T10796] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.609570][T10796] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.631999][T10796] bridge_slave_0: entered allmulticast mode [ 736.648033][T10796] bridge_slave_0: entered promiscuous mode [ 736.660033][T10919] Bluetooth: MGMT ver 1.23 [ 736.799851][T10576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 736.858548][T10827] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.873864][T10827] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.881260][T10827] bridge_slave_0: entered allmulticast mode [ 736.892133][T10827] bridge_slave_0: entered promiscuous mode [ 736.903046][T10827] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.910228][T10827] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.926057][T10827] bridge_slave_1: entered allmulticast mode [ 736.970674][T10827] bridge_slave_1: entered promiscuous mode [ 737.117673][T10796] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.125060][T10796] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.132525][T10796] bridge_slave_1: entered allmulticast mode [ 737.139611][T10796] bridge_slave_1: entered promiscuous mode [ 738.112868][T10827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.204670][T10827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.294829][T10796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.593524][T10796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.748972][T10934] binder: BINDER_SET_CONTEXT_MGR already set [ 738.761453][T10934] binder: 10933:10934 ioctl 4018620d 20000100 returned -16 [ 738.797972][T10827] team0: Port device team_slave_0 added [ 738.851265][T10827] team0: Port device team_slave_1 added [ 739.955211][T10796] team0: Port device team_slave_0 added [ 739.972018][T10940] smc: net device lo applied user defined pnetid SYZ2 [ 740.101939][T10139] bridge_slave_1: left allmulticast mode [ 740.107890][T10139] bridge_slave_1: left promiscuous mode [ 740.162671][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.402731][T10139] bridge_slave_0: left allmulticast mode [ 740.436578][T10139] bridge_slave_0: left promiscuous mode [ 740.578635][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.711447][T10139] bridge_slave_1: left allmulticast mode [ 740.717757][T10139] bridge_slave_1: left promiscuous mode [ 740.723823][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.737867][T10139] bridge_slave_0: left allmulticast mode [ 740.744676][T10139] bridge_slave_0: left promiscuous mode [ 740.750397][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.777795][T10139] bridge_slave_1: left allmulticast mode [ 740.783813][T10139] bridge_slave_1: left promiscuous mode [ 740.789539][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.821924][T10139] bridge_slave_0: left allmulticast mode [ 740.838654][T10139] bridge_slave_0: left promiscuous mode [ 740.845344][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.882233][T10139] bridge_slave_1: left allmulticast mode [ 740.887965][T10139] bridge_slave_1: left promiscuous mode [ 740.894654][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.906796][T10139] bridge_slave_0: left allmulticast mode [ 740.913125][T10139] bridge_slave_0: left promiscuous mode [ 740.918868][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.526698][ T29] audit: type=1326 audit(1726868848.996:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10971 comm="syz.2.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9862f7def9 code=0x0 [ 746.842971][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.849914][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.540369][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.563053][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.575537][T10139] bond0 (unregistering): Released all slaves [ 748.589399][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.601725][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.615619][T10139] bond0 (unregistering): Released all slaves [ 748.809957][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.821923][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.841336][T10139] bond0 (unregistering): Released all slaves [ 749.106246][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 749.118219][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 749.130347][T10139] bond0 (unregistering): Released all slaves [ 749.173396][T10796] team0: Port device team_slave_1 added [ 749.185107][T10576] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 749.202614][T10576] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 749.290732][T10827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.300431][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.327492][T10827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.406290][T10980] syz_tun: entered promiscuous mode [ 749.416668][T10980] syz_tun: left promiscuous mode [ 749.560114][T10576] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 749.605339][T10984] loop2: detected capacity change from 0 to 128 [ 749.634361][T10576] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 749.672261][T10827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.679264][T10827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.742409][T10984] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 749.802775][T10984] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 749.853588][T10827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.915508][ T5222] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 749.965402][ T5222] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 750.085674][ T5222] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 750.096251][ T5222] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 750.104347][ T5222] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 750.114140][ T5222] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 750.270739][T10796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.284457][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.692860][T10796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.714063][T10796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.721067][T10796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.778610][T10796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.145966][ T9878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 751.244098][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 751.256863][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 751.274072][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 751.288470][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 751.299123][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 751.308626][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 751.784762][T10796] hsr_slave_0: entered promiscuous mode [ 751.822692][T10796] hsr_slave_1: entered promiscuous mode [ 751.862988][T10796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.870648][T10796] Cannot create hsr debugfs directory [ 751.952348][T10827] hsr_slave_0: entered promiscuous mode [ 752.029148][T10827] hsr_slave_1: entered promiscuous mode [ 752.039525][T10827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.056044][T10827] Cannot create hsr debugfs directory [ 752.301906][ T55] Bluetooth: hci5: command tx timeout [ 752.584422][T11019] loop2: detected capacity change from 0 to 2048 [ 752.607273][T11019] EXT4-fs: Ignoring removed mblk_io_submit option [ 752.662923][T11019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 752.735276][T10715] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 752.752613][T11018] EXT4-fs (loop2): shut down requested (0) [ 752.807002][T11019] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1014: bg 0: block 234: padding at end of block bitmap is not set [ 752.838608][T11019] EXT4-fs (loop2): Remounting filesystem read-only [ 752.926475][T10715] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 752.944941][T10715] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 753.063716][ T9878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 753.131025][T10715] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 753.380336][T10987] chnl_net:caif_netlink_parms(): no params data found [ 753.442383][ T55] Bluetooth: hci6: command tx timeout [ 753.941755][T10139] hsr_slave_0: left promiscuous mode [ 753.949509][T10139] hsr_slave_1: left promiscuous mode [ 753.957777][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 753.969299][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.979277][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 753.987373][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.000060][T10139] hsr_slave_0: left promiscuous mode [ 754.020674][T10139] hsr_slave_1: left promiscuous mode [ 754.029705][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.042695][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.056231][T10139] hsr_slave_0: left promiscuous mode [ 754.063543][T10139] hsr_slave_1: left promiscuous mode [ 754.069749][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.081675][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.089990][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.100004][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.118002][T10139] hsr_slave_0: left promiscuous mode [ 754.124651][T10139] hsr_slave_1: left promiscuous mode [ 754.130840][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.139075][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.147393][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.156292][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.236943][T10139] veth1_macvtap: left promiscuous mode [ 754.242912][T10139] veth0_macvtap: left promiscuous mode [ 754.248606][T10139] veth1_vlan: left promiscuous mode [ 754.254962][T10139] veth0_vlan: left promiscuous mode [ 754.261747][T10139] veth1_macvtap: left promiscuous mode [ 754.267352][T10139] veth0_macvtap: left promiscuous mode [ 754.273465][T10139] veth1_vlan: left promiscuous mode [ 754.278811][T10139] veth0_vlan: left promiscuous mode [ 754.285724][T10139] veth1_macvtap: left promiscuous mode [ 754.291294][T10139] veth0_macvtap: left promiscuous mode [ 754.298368][T10139] veth1_vlan: left promiscuous mode [ 754.303941][T10139] veth0_vlan: left promiscuous mode [ 754.331764][ T55] Bluetooth: hci5: command tx timeout [ 755.492290][T10139] team0 (unregistering): Port device team_slave_1 removed [ 755.541588][ T55] Bluetooth: hci6: command tx timeout [ 755.594320][T10139] team0 (unregistering): Port device team_slave_0 removed [ 756.407136][ T55] Bluetooth: hci5: command tx timeout [ 756.833427][T10139] team0 (unregistering): Port device team_slave_1 removed [ 756.953342][T10139] team0 (unregistering): Port device team_slave_0 removed [ 757.601952][ T55] Bluetooth: hci6: command tx timeout [ 758.182731][T10139] team0 (unregistering): Port device team_slave_1 removed [ 758.276640][T10139] team0 (unregistering): Port device team_slave_0 removed [ 758.482108][ T55] Bluetooth: hci5: command tx timeout [ 759.689738][ T55] Bluetooth: hci6: command tx timeout [ 760.239398][T10139] team0 (unregistering): Port device team_slave_1 removed [ 760.347310][T10139] team0 (unregistering): Port device team_slave_0 removed [ 761.506074][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.513610][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.520926][T10987] bridge_slave_0: entered allmulticast mode [ 761.530473][T10987] bridge_slave_0: entered promiscuous mode [ 761.541784][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.548989][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.557405][T10987] bridge_slave_1: entered allmulticast mode [ 761.565335][T10987] bridge_slave_1: entered promiscuous mode [ 761.698867][T10715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.707964][T10796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 761.816139][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.828400][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.866445][T10796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 761.877963][T10796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 761.890055][T10994] chnl_net:caif_netlink_parms(): no params data found [ 761.987351][T10987] team0: Port device team_slave_0 added [ 762.002117][T10796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 762.127031][T10987] team0: Port device team_slave_1 added [ 762.328005][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 762.335773][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.363609][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.389114][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.404360][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.432004][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.538241][T10715] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.607408][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.614649][T10270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.757852][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.765415][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.786081][T10994] bridge_slave_0: entered allmulticast mode [ 762.793754][T10994] bridge_slave_0: entered promiscuous mode [ 762.808137][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.816118][T10270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.853910][T10987] hsr_slave_0: entered promiscuous mode [ 762.863092][T10987] hsr_slave_1: entered promiscuous mode [ 762.869829][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 762.878042][T10987] Cannot create hsr debugfs directory [ 762.898410][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.926235][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.933899][T10994] bridge_slave_1: entered allmulticast mode [ 762.941252][T10994] bridge_slave_1: entered promiscuous mode [ 763.103331][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 763.269250][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.370145][T10827] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 763.444216][T10994] team0: Port device team_slave_0 added [ 763.465236][T10827] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 763.495744][ T5222] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 763.501288][T10827] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 763.510030][ T5222] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.520677][ T5222] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 763.533574][ T5222] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 763.545226][ T5222] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 763.553890][ T5222] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 763.595188][T10994] team0: Port device team_slave_1 added [ 763.696772][T10827] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 763.743754][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 763.750759][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.778290][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 763.870990][T10796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.894886][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 763.903527][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 763.932274][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.994507][T10796] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.222673][T10987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.277265][ T5498] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.284769][ T5498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.336449][T10994] hsr_slave_0: entered promiscuous mode [ 764.357950][T10994] hsr_slave_1: entered promiscuous mode [ 764.369889][T10994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 764.377848][T10994] Cannot create hsr debugfs directory [ 764.454382][T10987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.494750][T10270] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.502505][T10270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.614706][T10987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.708272][T10139] IPVS: stop unused estimator thread 0... [ 764.728162][T10987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.954529][T10715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.337918][T10827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.586987][T11055] chnl_net:caif_netlink_parms(): no params data found [ 765.603381][ T5222] Bluetooth: hci1: command tx timeout [ 765.615159][T10987] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 765.628176][T10987] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 765.707428][T10987] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 765.721000][T10987] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 765.750396][T10827] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.788773][T10796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.869271][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.876504][T10552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.889179][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.896437][T10552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.013013][T11055] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.020354][T11055] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.029501][T11055] bridge_slave_0: entered allmulticast mode [ 766.038469][T11055] bridge_slave_0: entered promiscuous mode [ 766.048137][T11055] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.056438][T11055] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.064542][T11055] bridge_slave_1: entered allmulticast mode [ 766.076242][T11055] bridge_slave_1: entered promiscuous mode [ 766.111184][T10715] veth0_vlan: entered promiscuous mode [ 766.169631][T10715] veth1_vlan: entered promiscuous mode [ 766.211094][T11055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.225920][T11055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.339812][T10139] bridge_slave_1: left allmulticast mode [ 766.352389][T10139] bridge_slave_1: left promiscuous mode [ 766.358238][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.376741][T10139] bridge_slave_0: left allmulticast mode [ 766.382999][T10139] bridge_slave_0: left promiscuous mode [ 766.388855][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.403589][T10139] bridge_slave_1: left allmulticast mode [ 766.409313][T10139] bridge_slave_1: left promiscuous mode [ 766.416323][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.426873][T10139] bridge_slave_0: left allmulticast mode [ 766.433820][T10139] bridge_slave_0: left promiscuous mode [ 766.440526][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.077518][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.097638][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.117063][T10139] bond0 (unregistering): Released all slaves [ 767.490098][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 767.506688][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 767.518328][T10139] bond0 (unregistering): Released all slaves [ 767.599755][T11055] team0: Port device team_slave_0 added [ 767.692442][ T5222] Bluetooth: hci1: command tx timeout [ 767.736133][T11055] team0: Port device team_slave_1 added [ 767.814374][T10796] veth0_vlan: entered promiscuous mode [ 767.989691][T11055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.002892][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.030955][T11055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.066633][T10796] veth1_vlan: entered promiscuous mode [ 768.207113][T10715] veth0_macvtap: entered promiscuous mode [ 768.219746][T11055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.236499][T11055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.266231][T11055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.295891][T10715] veth1_macvtap: entered promiscuous mode [ 768.365600][T10139] hsr_slave_0: left promiscuous mode [ 768.372482][T10139] hsr_slave_1: left promiscuous mode [ 768.378755][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.397086][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.417741][T10139] hsr_slave_0: left promiscuous mode [ 768.429411][T10139] hsr_slave_1: left promiscuous mode [ 768.436361][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.444442][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.455046][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.463351][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 768.495166][T10139] veth1_macvtap: left promiscuous mode [ 768.500751][T10139] veth0_macvtap: left promiscuous mode [ 768.507782][T10139] veth1_vlan: left promiscuous mode [ 768.513394][T10139] veth0_vlan: left promiscuous mode [ 768.910181][T10139] team0 (unregistering): Port device team_slave_1 removed [ 768.984657][T10139] team0 (unregistering): Port device team_slave_0 removed [ 769.777610][ T5222] Bluetooth: hci1: command tx timeout [ 770.264181][T10139] team0 (unregistering): Port device team_slave_1 removed [ 770.358800][T10139] team0 (unregistering): Port device team_slave_0 removed [ 771.355708][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 771.411380][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 771.427716][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 771.455289][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 771.478525][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 771.500059][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 771.685758][T10139] smc: removing net device lo with user defined pnetid SYZ2 [ 771.780072][T10827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.842185][ T55] Bluetooth: hci1: command tx timeout [ 771.857762][T10987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.935402][T11055] hsr_slave_0: entered promiscuous mode [ 771.972509][T11055] hsr_slave_1: entered promiscuous mode [ 771.991596][T11055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 772.002453][T11055] Cannot create hsr debugfs directory [ 772.114562][T10796] veth0_macvtap: entered promiscuous mode [ 772.135364][T10796] veth1_macvtap: entered promiscuous mode [ 772.527878][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.569726][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.591792][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.603400][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.615260][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 772.627659][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.639892][T10796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 772.652975][T10994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 772.697285][T10994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 772.736012][T10827] veth0_vlan: entered promiscuous mode [ 772.762515][T10987] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.789247][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.801484][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.827255][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.845056][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.861844][T10796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 772.882508][T10796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 772.929130][T10796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 772.995455][T10994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 773.036384][T10994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 773.075231][T10270] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.082445][T10270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.111930][T10827] veth1_vlan: entered promiscuous mode [ 773.226213][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.233437][T10548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.266041][T10796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.282696][T10796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.299627][T10796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.308922][T10796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.595457][T11084] chnl_net:caif_netlink_parms(): no params data found [ 773.621389][ T55] Bluetooth: hci7: command tx timeout [ 773.735376][T11055] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.953906][T11055] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.973820][T10827] veth0_macvtap: entered promiscuous mode [ 774.061166][T10827] veth1_macvtap: entered promiscuous mode [ 774.108769][T11055] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.134682][T11084] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.143383][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.150622][T11084] bridge_slave_0: entered allmulticast mode [ 774.161255][T11084] bridge_slave_0: entered promiscuous mode [ 774.267302][T11055] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.291721][T11084] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.298872][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.306858][T11084] bridge_slave_1: entered allmulticast mode [ 774.315303][T11084] bridge_slave_1: entered promiscuous mode [ 774.339096][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.359279][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 774.366283][T10987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.405820][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.473306][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.496627][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.511581][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.534160][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.551678][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.572552][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.594005][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 774.611601][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.633334][T10827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 774.665849][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.753917][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.781710][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.802000][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.826382][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.838439][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.849141][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.860052][T10827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 774.871269][T10827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 774.884425][T10827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.932588][T11084] team0: Port device team_slave_0 added [ 774.947783][T11084] team0: Port device team_slave_1 added [ 774.998628][T10827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.018678][T10827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.031398][T10827] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.044235][T10827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.069684][T10548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.095405][T10548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.293356][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.300367][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.340315][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.355730][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.363045][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.390518][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.560645][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.681842][ T55] Bluetooth: hci7: command tx timeout [ 775.860143][T11084] hsr_slave_0: entered promiscuous mode [ 775.868854][T11084] hsr_slave_1: entered promiscuous mode [ 775.882873][T11084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.901226][T11084] Cannot create hsr debugfs directory [ 775.925529][T10987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 775.966779][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.047313][T11055] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.115604][ T5498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.132162][ T5498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.155987][T11055] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.191596][T10548] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.198796][T10548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.239866][T10548] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.247115][T10548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.259802][T11055] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.292419][T11055] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 776.358264][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.376862][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.376980][T11164] TCP: out of memory -- consider tuning tcp_mem [ 776.566575][T10139] bridge_slave_1: left allmulticast mode [ 776.584651][T10139] bridge_slave_1: left promiscuous mode [ 776.590831][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.607860][T11186] loop3: detected capacity change from 0 to 2048 [ 776.637022][T11186] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 776.648542][T11186] UDF-fs: Scanning with blocksize 512 failed [ 776.659318][T10139] bridge_slave_0: left allmulticast mode [ 776.667176][T10139] bridge_slave_0: left promiscuous mode [ 776.673747][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.700658][T11186] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.802271][ T55] Bluetooth: hci7: command tx timeout [ 779.065123][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.151560][ C0] vkms_vblank_simulate: vblank timer overrun [ 779.228903][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.250851][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.265602][T10139] bond0 (unregistering): Released all slaves [ 779.500080][T10139] hsr_slave_0: left promiscuous mode [ 779.512077][T10139] hsr_slave_1: left promiscuous mode [ 779.518733][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.586324][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.897227][ T55] Bluetooth: hci7: command tx timeout [ 780.458854][T10139] veth1_macvtap: left promiscuous mode [ 780.475194][T11209] loop3: detected capacity change from 0 to 8 [ 780.501784][T10139] veth0_macvtap: left promiscuous mode [ 780.507460][T10139] veth1_vlan: left promiscuous mode [ 780.532560][T10139] veth0_vlan: left promiscuous mode [ 781.442828][T11223] loop3: detected capacity change from 0 to 128 [ 781.567916][T11223] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 781.652804][T11223] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 781.784953][T10796] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.870727][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.965936][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.101572][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.214631][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.400703][T10139] team0 (unregistering): Port device team_slave_1 removed [ 784.499494][T10139] team0 (unregistering): Port device team_slave_0 removed [ 785.233984][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.267219][T10987] veth0_vlan: entered promiscuous mode [ 785.403227][T11248] loop0: detected capacity change from 0 to 256 [ 785.481196][T11248] exFAT-fs (loop0): failed to read boot sector [ 785.502896][T11248] exFAT-fs (loop0): failed to recognize exfat type [ 785.556511][T11248] loop0: detected capacity change from 0 to 512 [ 785.617108][T11248] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 785.673840][T10987] veth1_vlan: entered promiscuous mode [ 785.842087][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 786.133846][ T8100] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 786.616176][T11055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.835326][T10987] veth0_macvtap: entered promiscuous mode [ 786.933529][T10987] veth1_macvtap: entered promiscuous mode [ 786.947643][T11055] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.972749][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.006615][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.013861][T10552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.033502][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.044570][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.055886][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.067308][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.078104][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.089250][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.099780][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.112070][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.129116][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.141842][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.154292][T10987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 787.209421][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.228519][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.244778][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.267374][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.278046][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.289169][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.299654][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.310750][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.322031][T10987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 787.342272][T10987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 787.359873][T10987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.403783][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.410909][T10139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.439884][T10987] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.481700][T10987] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.491322][T10987] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.507490][T11268] loop0: detected capacity change from 0 to 32768 [ 787.514176][T10987] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.553227][T11268] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1029 (11268) [ 787.747726][T11084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 787.796337][T11084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 787.814644][T11268] BTRFS info (device loop0): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 787.842189][T11268] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 787.860360][T11268] BTRFS info (device loop0): using free-space-tree [ 787.916667][T11084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 787.927797][T11084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 787.981014][T10994] veth0_vlan: entered promiscuous mode [ 788.147702][T10994] veth1_vlan: entered promiscuous mode [ 788.233411][T10139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.241272][T10139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.476843][T10994] veth0_macvtap: entered promiscuous mode [ 788.558003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.559366][T10994] veth1_macvtap: entered promiscuous mode [ 788.574286][T11292] loop0: detected capacity change from 32768 to 0 [ 788.584536][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.628822][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.677134][T11268] syz.0.1029: attempt to access beyond end of device [ 788.677134][T11268] loop0: rw=2049, sector=10280, nr_sectors = 8 limit=0 [ 788.691744][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.703238][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.729905][T11268] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 788.741597][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.793252][ T11] kworker/u8:0: attempt to access beyond end of device [ 788.793252][ T11] loop0: rw=1, sector=10472, nr_sectors = 40 limit=0 [ 788.794075][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.820559][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 788.820966][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.855365][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.876011][ T11] kworker/u8:0: attempt to access beyond end of device [ 788.876011][ T11] loop0: rw=1, sector=10296, nr_sectors = 16 limit=0 [ 788.890130][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.904384][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.916039][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.938540][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 788.951458][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.952036][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 788.979452][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.028581][ T11] kworker/u8:0: attempt to access beyond end of device [ 789.028581][ T11] loop0: rw=6145, sector=10448, nr_sectors = 8 limit=0 [ 789.085531][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.108623][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 789.125420][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.139915][ T11] kworker/u8:0: attempt to access beyond end of device [ 789.139915][ T11] loop0: rw=6145, sector=10456, nr_sectors = 8 limit=0 [ 789.151744][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.165578][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 789.180534][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.180988][ T11] kworker/u8:0: attempt to access beyond end of device [ 789.180988][ T11] loop0: rw=6145, sector=10464, nr_sectors = 8 limit=0 [ 789.207804][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 789.222856][ T11] kworker/u8:0: attempt to access beyond end of device [ 789.222856][ T11] loop0: rw=6145, sector=13440, nr_sectors = 8 limit=0 [ 789.237401][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 789.254315][ T11] kworker/u8:0: attempt to access beyond end of device [ 789.254315][ T11] loop0: rw=6145, sector=13448, nr_sectors = 8 limit=0 [ 789.254463][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.268484][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 8, rd 0, flush 0, corrupt 0, gen 0 [ 789.293716][ T11] kworker/u8:0: attempt to access beyond end of device [ 789.293716][ T11] loop0: rw=6145, sector=13456, nr_sectors = 8 limit=0 [ 789.305182][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.308016][ T11] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 9, rd 0, flush 0, corrupt 0, gen 0 [ 789.318250][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.343277][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.344792][T11268] BTRFS error (device loop0 state A): Transaction aborted (error -5) [ 789.365235][T11268] BTRFS: error (device loop0 state A) in btrfs_start_dirty_block_groups:3462: errno=-5 IO failure [ 789.378717][T11268] BTRFS info (device loop0 state EA): forced readonly [ 789.378754][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.378842][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.394626][T11268] BTRFS error (device loop0 state EMA): remounting read-write after error is not allowed [ 789.419069][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.453186][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.500609][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 789.513945][T10827] BTRFS info (device loop0 state EA): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 789.531233][T10994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.541827][T10994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.597585][T10994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.621306][T10994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 789.901013][T11055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.981969][T11084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 791.197043][T11055] veth0_vlan: entered promiscuous mode [ 791.375378][T11084] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.818530][T10139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.931139][T11055] veth1_vlan: entered promiscuous mode [ 793.211221][T10139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.363696][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.370973][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.155864][T10139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.232217][ T5222] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 794.247325][ T5222] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 794.260257][ T5222] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 794.286560][ T5222] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 794.316666][ T5222] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 794.324452][ T5222] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 794.375338][T11330] loop4: detected capacity change from 0 to 8 [ 794.542507][T10139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.755671][T11331] input: syz0 as /devices/virtual/input/input10 [ 795.157012][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.164231][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.482654][T11055] veth0_macvtap: entered promiscuous mode [ 795.632578][T11335] loop3: detected capacity change from 0 to 1024 [ 795.653337][ T55] Bluetooth: hci3: unexpected subevent 0x1a length: 10 > 6 [ 795.750031][T11335] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 795.760224][T11335] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 795.784462][T11335] jbd2_journal_init_inode: Cannot locate journal superblock [ 795.791943][T11335] EXT4-fs (loop3): Could not load journal inode [ 796.386810][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 796.388172][T11055] veth1_macvtap: entered promiscuous mode [ 796.401494][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 796.406740][ T55] Bluetooth: hci2: command tx timeout [ 796.676882][T11337] loop3: detected capacity change from 0 to 2048 [ 796.689209][T11337] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 796.729309][T11339] futex_wake_op: syz.4.1043 tries to shift op by 144; fix this program [ 796.798957][T11339] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1043'. [ 796.818373][T11339] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.830474][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.928973][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.949802][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.963023][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 796.974242][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.011741][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.031626][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.067389][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.091746][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.102053][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.122972][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.141636][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.152343][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.165262][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 797.202112][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 797.473802][T11055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.711707][ T55] Bluetooth: hci3: command tx timeout [ 798.003973][T11347] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1046'. [ 798.035126][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.055889][ T55] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 798.074754][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.094839][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.111628][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.143771][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.171652][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.189963][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.202301][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.231715][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.257411][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.293874][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.325293][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.367268][T11055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.419236][T11055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.456768][T11055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.470846][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.479428][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.489979][ T55] Bluetooth: hci2: command tx timeout [ 798.811434][T10139] bridge_slave_1: left allmulticast mode [ 798.864532][T10139] bridge_slave_1: left promiscuous mode [ 798.974634][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.073377][T10139] bridge_slave_0: left allmulticast mode [ 799.079293][T10139] bridge_slave_0: left promiscuous mode [ 799.091885][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.530714][T10139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.547380][T10139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.560325][T10139] bond0 (unregistering): Released all slaves [ 800.602474][ T55] Bluetooth: hci2: command tx timeout [ 800.752273][T11055] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.802017][T11055] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.810778][T11055] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.858277][T11055] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.693718][ T29] audit: type=1326 audit(1726868904.166:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.1051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65aeb7def9 code=0x0 [ 801.859004][T11385] loop4: detected capacity change from 0 to 512 [ 802.015486][T11385] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1052: bad orphan inode 13 [ 802.051112][T11385] ext4_test_bit(bit=12, block=4) = 1 [ 802.060175][T11385] is_bad_inode(inode)=0 [ 802.067418][T11385] NEXT_ORPHAN(inode)=0 [ 802.073930][T11385] max_ino=32 [ 802.077494][T11385] i_nlink=1 [ 802.091283][T11385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.651780][ T55] Bluetooth: hci2: command tx timeout [ 802.764304][T10139] hsr_slave_0: left promiscuous mode [ 802.785176][T10139] hsr_slave_1: left promiscuous mode [ 802.806633][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 802.815528][T10139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 802.829963][T10139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 802.838448][T10139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 802.870420][T10139] veth1_macvtap: left promiscuous mode [ 802.876163][T10139] veth0_macvtap: left promiscuous mode [ 802.882833][T10139] veth1_vlan: left promiscuous mode [ 802.888539][T10139] veth0_vlan: left promiscuous mode [ 803.011817][ T5233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 803.200503][ T5233] usb 5-1: Using ep0 maxpacket: 32 [ 803.230929][ T5233] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 803.243402][ T5233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.253712][ T5233] usb 5-1: config 0 descriptor?? [ 803.284497][ T5233] rndis_host 5-1:0.0: probe with driver rndis_host failed with error -22 [ 803.468745][T11388] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 803.904954][T10139] team0 (unregistering): Port device team_slave_1 removed [ 804.009273][T10139] team0 (unregistering): Port device team_slave_0 removed [ 806.038988][ T932] usb 5-1: USB disconnect, device number 7 [ 806.117030][T10987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.523229][ T5232] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 807.682160][ T5232] usb 2-1: Using ep0 maxpacket: 8 [ 807.737024][ T5232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 808.245939][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.374562][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.533535][ T5232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 808.543726][ T5232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 808.553819][ T5232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 808.567035][ T5232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 808.576609][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.825553][ T5232] usb 2-1: usb_control_msg returned -32 [ 808.833294][ T5232] usbtmc 2-1:16.0: can't read capabilities [ 808.877540][T11411] Bluetooth: MGMT ver 1.23 [ 809.220270][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 809.259970][T11414] usbtmc 2-1:16.0: Unable to send data, error -71 [ 810.040196][T11418] loop4: detected capacity change from 0 to 256 [ 811.337697][T11423] loop4: detected capacity change from 0 to 4096 [ 811.355606][T11423] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 811.394045][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 811.408977][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 811.421310][T11423] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 811.438666][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 811.450837][T11423] ntfs3: loop4: Failed to load $MFT (-22). [ 811.474099][T11426] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 811.548458][T11426] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 811.568483][T11426] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 811.738910][T11429] loop4: detected capacity change from 0 to 128 [ 811.842391][T11429] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 811.855047][T11429] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 812.989055][T10987] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.222609][T11426] Bluetooth: hci4: command tx timeout [ 816.150690][T11327] chnl_net:caif_netlink_parms(): no params data found [ 816.179444][ T5233] usb 2-1: USB disconnect, device number 8 [ 816.223109][T10270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 816.252344][T10270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 816.286753][T11426] Bluetooth: hci4: command tx timeout [ 816.465388][T11084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 817.214117][T11455] batadv0: entered promiscuous mode [ 817.260115][T10270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.268122][T10270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.965101][T11476] loop1: detected capacity change from 0 to 8 [ 817.972198][T11476] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 818.466630][T11426] Bluetooth: hci4: command tx timeout [ 819.674792][T11424] chnl_net:caif_netlink_parms(): no params data found [ 819.906120][T11327] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.012739][T11327] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.031906][T11327] bridge_slave_0: entered allmulticast mode [ 820.041032][T11327] bridge_slave_0: entered promiscuous mode [ 820.172429][T11327] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.794139][T11426] Bluetooth: hci4: command tx timeout [ 820.831806][T11327] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.841001][T11327] bridge_slave_1: entered allmulticast mode [ 820.853001][T11327] bridge_slave_1: entered promiscuous mode [ 822.410682][T11327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 822.422998][T11327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 822.513891][T11503] loop1: detected capacity change from 0 to 1024 [ 822.587614][T11501] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1078'. [ 822.670204][T11327] team0: Port device team_slave_0 added [ 822.686823][T11084] veth0_vlan: entered promiscuous mode [ 822.719007][T11424] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.759937][T11424] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.821929][T11424] bridge_slave_0: entered allmulticast mode [ 823.124649][T11424] bridge_slave_0: entered promiscuous mode [ 823.489292][T11424] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.529347][T11424] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.578904][T11424] bridge_slave_1: entered allmulticast mode [ 823.614327][T11424] bridge_slave_1: entered promiscuous mode [ 823.724188][T11084] veth1_vlan: entered promiscuous mode [ 823.735580][T11327] team0: Port device team_slave_1 added [ 828.164489][ T29] audit: type=1107 audit(1726868930.626:115): pid=11526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 828.219627][T11527] loop4: detected capacity change from 0 to 512 [ 828.296388][T11527] ext4: Bad value for 'sb' [ 828.523173][ T5292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.132805][T11424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.354351][T11424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.440084][T11327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.456660][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 830.378275][T11327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 830.390948][T11536] loop1: detected capacity change from 0 to 1024 [ 830.933721][ T5292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.306564][T11543] loop4: detected capacity change from 0 to 1024 [ 831.348340][T11327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.381803][T11543] hfsplus: bad catalog folder entry [ 831.392234][T11327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.571244][T10548] hfsplus: b-tree write err: -5, ino 4 [ 831.581665][T11327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 831.837864][ T5292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.856022][T11550] binder: BINDER_SET_CONTEXT_MGR already set [ 831.863015][T11550] binder: 11549:11550 ioctl 4018620d 20000100 returned -16 [ 831.927755][T11424] team0: Port device team_slave_0 added [ 832.065975][T11553] loop1: detected capacity change from 0 to 256 [ 832.088268][ T5292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.134164][T11426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.158827][T11553] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 832.174915][T11426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.323207][T11426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.331684][T11426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.340115][T11426] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 832.350494][T11426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 832.370462][T11327] hsr_slave_0: entered promiscuous mode [ 832.444314][ T29] audit: type=1800 audit(1726868934.916:116): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1093" name="file1" dev="loop1" ino=1048799 res=0 errno=0 [ 833.142345][T11327] hsr_slave_1: entered promiscuous mode [ 833.164129][T11327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 833.244111][T11327] Cannot create hsr debugfs directory [ 833.471211][T11424] team0: Port device team_slave_1 added [ 833.633771][T11569] loop1: detected capacity change from 0 to 8 [ 834.063037][T11575] SQUASHFS error: Failed to read block 0x8f: -5 [ 834.072016][T11575] SQUASHFS error: Failed to read block 0xc00090: -5 [ 834.079061][T11575] SQUASHFS error: Failed to read block 0x8f: -5 [ 834.085631][T11575] SQUASHFS error: Failed to read block 0x8f: -5 [ 834.092231][T11575] SQUASHFS error: Failed to read block 0x8f: -5 [ 834.098779][T11575] SQUASHFS error: Failed to read block 0x8f: -5 [ 834.108026][T11575] SQUASHFS error: Failed to read block 0x8f: -5 [ 834.138131][ T29] audit: type=1800 audit(1726868936.586:117): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1097" name="file2" dev="loop1" ino=6 res=0 errno=0 [ 835.202062][T11424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.265045][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.334120][T11426] Bluetooth: hci3: command tx timeout [ 835.436443][T11424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.459179][T11580] loop1: detected capacity change from 0 to 1024 [ 835.467991][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 835.504645][T11424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.551865][T11424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.591696][T11424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.751903][T11580] syz.1.1099: attempt to access beyond end of device [ 835.751903][T11580] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 835.796758][T11580] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 835.844399][T11586] syz.1.1099: attempt to access beyond end of device [ 835.844399][T11586] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 835.869027][T11586] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 835.881171][T11580] syz.1.1099: attempt to access beyond end of device [ 835.881171][T11580] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 835.900401][T11580] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 835.917352][T11586] syz.1.1099: attempt to access beyond end of device [ 835.917352][T11586] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 835.921829][T11260] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 835.977914][T11586] Buffer I/O error on dev loop1, logical block 100663296, async page read [ 835.982409][T11424] hsr_slave_0: entered promiscuous mode [ 835.996434][T11424] hsr_slave_1: entered promiscuous mode [ 836.009776][T11424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 836.017976][T11424] Cannot create hsr debugfs directory [ 836.113585][T11260] usb 5-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 836.141608][T11260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.170746][T11260] usb 5-1: config 0 descriptor?? [ 836.257561][T11598] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 836.296682][T11597] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 836.333579][T11597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1104'. [ 836.372785][T11599] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 836.379400][T11599] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 836.430458][T11599] vhci_hcd vhci_hcd.0: Device attached [ 836.469940][ T5292] bridge_slave_1: left allmulticast mode [ 836.476536][ T5292] bridge_slave_1: left promiscuous mode [ 836.485047][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.495137][T11600] vhci_hcd: connection closed [ 836.498637][ T81] vhci_hcd: stop threads [ 836.507926][ T81] vhci_hcd: release socket [ 836.515734][ T81] vhci_hcd: disconnect device [ 836.523061][ T5292] bridge_slave_0: left allmulticast mode [ 836.529376][ T5292] bridge_slave_0: left promiscuous mode [ 836.536861][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.884407][T11260] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 836.902090][T11260] asix 5-1:0.0: probe with driver asix failed with error -71 [ 836.920330][T11260] usb 5-1: USB disconnect, device number 8 [ 837.383789][T11426] Bluetooth: hci3: command tx timeout [ 837.878085][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 838.108965][ T5292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.196699][T11614] trusted_key: encrypted_key: key user:syz not found [ 838.842037][ T5292] bond0 (unregistering): Released all slaves [ 839.512698][T11426] Bluetooth: hci3: command tx timeout [ 840.313369][T11631] xt_NFQUEUE: number of queues (65532) out of range (got 75748) [ 840.995096][ T29] audit: type=1326 audit(1726868943.456:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11625 comm="syz.1.1111" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdceb7def9 code=0x0 [ 841.718749][T11426] Bluetooth: hci3: command tx timeout [ 842.953404][T11646] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 842.960334][T11646] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 843.015918][T11646] vhci_hcd vhci_hcd.0: Device attached [ 843.087825][T11644] netlink: 'syz.4.1116': attribute type 10 has an invalid length. [ 843.301471][T11644] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1116'. [ 843.303346][T11647] vhci_hcd: connection closed [ 843.720689][ T62] vhci_hcd: stop threads [ 843.745730][ T62] vhci_hcd: release socket [ 843.761794][ T9] vhci_hcd: vhci_device speed not set [ 843.770929][ T62] vhci_hcd: disconnect device [ 843.846312][ T9] usb 17-1: new full-speed USB device number 2 using vhci_hcd [ 843.886484][ T9] usb 17-1: enqueue for inactive port 0 [ 844.109699][ T9] vhci_hcd: vhci_device speed not set [ 845.703454][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.717715][T11556] chnl_net:caif_netlink_parms(): no params data found [ 846.060063][T11671] usb usb8: usbfs: process 11671 (syz.1.1121) did not claim interface 0 before use [ 846.072655][T11671] loop1: detected capacity change from 0 to 16 [ 846.799051][T11671] erofs: (device loop1): mounted with root inode @ nid 36. [ 846.848673][T11671] syz.1.1121: attempt to access beyond end of device [ 846.848673][T11671] loop1: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 846.863623][T11671] erofs: (device loop1): z_erofs_read_folio: read error -5 @ 0 of nid 36 [ 847.642568][ T5292] hsr_slave_0: left promiscuous mode [ 847.704025][ T5292] hsr_slave_1: left promiscuous mode [ 847.765618][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 847.787696][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.078206][T11679] loop4: detected capacity change from 0 to 32768 [ 848.087826][T11679] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1123 (11679) [ 848.109765][T11679] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 848.120280][T11679] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 848.129193][T11679] BTRFS info (device loop4): using free-space-tree [ 848.188085][ T5292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.332415][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.489667][ T5292] veth1_macvtap: left promiscuous mode [ 848.651675][ T5292] veth0_macvtap: left promiscuous mode [ 848.657420][ T5292] veth1_vlan: left promiscuous mode [ 848.681973][ T5292] veth0_vlan: left promiscuous mode [ 849.771033][T10987] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 851.637794][T11710] loop4: detected capacity change from 0 to 1024 [ 851.789054][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 851.955000][ T5292] team0 (unregistering): Port device team_slave_0 removed [ 852.194003][T11712] hfsplus: request for non-existent node 2048 in B*Tree [ 852.202477][T11712] hfsplus: request for non-existent node 2048 in B*Tree [ 852.886790][T11714] loop4: detected capacity change from 0 to 2048 [ 852.896998][T11714] NILFS (loop4): invalid segment: Sequence number mismatch [ 852.904645][T11714] NILFS (loop4): trying rollback from an earlier position [ 852.943918][T11714] NILFS (loop4): recovery complete [ 852.968194][T11716] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 854.495654][T11703] dummy0: entered promiscuous mode [ 854.522854][T11703] batadv0: entered promiscuous mode [ 854.589550][T11718] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 854.596296][T11718] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 854.639730][T11718] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 854.659411][T11718] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 854.665815][T11718] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 854.682649][T11718] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 854.716386][T11718] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 854.723153][T11718] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 854.767999][T11718] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 854.827254][T11718] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 854.833709][T11718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 854.946009][T11718] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 855.253240][T11718] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 855.259732][T11718] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 855.579858][T11718] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 855.888584][T11718] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 855.894834][T11718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 856.023039][T11718] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 856.192675][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 856.204096][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 856.214289][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 856.222782][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 856.230437][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 856.237971][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 857.258496][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 857.258557][T11426] Bluetooth: hci1: command 0x0c1a tx timeout [ 857.264633][ T5218] Bluetooth: hci6: command 0x0c1a tx timeout [ 857.282246][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 858.493033][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 858.500674][ T55] Bluetooth: hci2: command tx timeout [ 859.088070][T11556] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.122110][T11556] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.182343][T11556] bridge_slave_0: entered allmulticast mode [ 859.185309][T11756] loop4: detected capacity change from 0 to 136 [ 859.222014][T11556] bridge_slave_0: entered promiscuous mode [ 859.234457][T11556] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.245638][T11556] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.259684][T11756] loop4: detected capacity change from 0 to 1024 [ 859.269161][T11556] bridge_slave_1: entered allmulticast mode [ 859.289427][ T5218] Bluetooth: hci5: command 0x0c1a tx timeout [ 859.295733][ T5218] Bluetooth: hci1: command 0x0c1a tx timeout [ 859.302151][ T5218] Bluetooth: hci6: command 0x0c1a tx timeout [ 859.318189][T11556] bridge_slave_1: entered promiscuous mode [ 859.378544][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 859.389835][T11756] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.1138: bad orphan inode 2048 [ 859.420936][T11756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.462457][T11756] ext4 filesystem being mounted at /46/file1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.606297][ T29] audit: type=1326 audit(1726868962.076:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11757 comm="syz.1.1139" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efdceb7def9 code=0x0 [ 859.644554][T11556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.694298][T11556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.877039][T11556] team0: Port device team_slave_0 added [ 859.904344][T11556] team0: Port device team_slave_1 added [ 859.947250][T11556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.967649][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 860.038875][T11556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.357136][T11556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.643710][ T5218] Bluetooth: hci3: command 0x0c1a tx timeout [ 860.651347][ T55] Bluetooth: hci2: command tx timeout [ 861.031742][T11556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.091830][T11556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.363340][ T5218] Bluetooth: hci1: command 0x0c1a tx timeout [ 861.381840][T11426] Bluetooth: hci5: command 0x0c1a tx timeout [ 861.402059][ T55] Bluetooth: hci6: command 0x0c1a tx timeout [ 861.441834][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 861.535180][T11424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 861.606128][T11556] hsr_slave_0: entered promiscuous mode [ 861.623916][T11556] hsr_slave_1: entered promiscuous mode [ 861.650875][T11556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 861.688913][T11556] Cannot create hsr debugfs directory [ 861.694900][T11424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 861.790741][T11424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 861.912250][ T8143] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 861.920535][T11424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 862.072791][ T8143] usb 2-1: Using ep0 maxpacket: 8 [ 862.088062][ T8143] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 862.110776][ T8143] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.126052][ T8143] usb 2-1: Product: syz [ 862.130772][ T8143] usb 2-1: Manufacturer: syz [ 862.136087][ T8143] usb 2-1: SerialNumber: syz [ 862.164695][ T8143] usb 2-1: config 0 descriptor?? [ 862.197298][T11720] chnl_net:caif_netlink_parms(): no params data found [ 862.388772][ T8143] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 862.648956][T11720] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.657646][T11720] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.669775][T11720] bridge_slave_0: entered allmulticast mode [ 862.695603][T11720] bridge_slave_0: entered promiscuous mode [ 862.720847][T11720] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.728574][T11720] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.731612][ T55] Bluetooth: hci2: command tx timeout [ 862.735865][T11720] bridge_slave_1: entered allmulticast mode [ 862.741066][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 862.748329][T11720] bridge_slave_1: entered promiscuous mode [ 863.009306][T11720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.034531][T11720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.228384][T11720] team0: Port device team_slave_0 added [ 863.246030][T11720] team0: Port device team_slave_1 added [ 863.368091][ T5292] bridge_slave_1: left allmulticast mode [ 863.374479][ T5292] bridge_slave_1: left promiscuous mode [ 863.393138][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.408409][ T5292] bridge_slave_0: left allmulticast mode [ 863.416952][ T5292] bridge_slave_0: left promiscuous mode [ 863.423137][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.444611][ T5292] bridge_slave_1: left allmulticast mode [ 863.450282][ T5292] bridge_slave_1: left promiscuous mode [ 863.458123][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.473270][ T5292] bridge_slave_0: left allmulticast mode [ 863.479521][ T5292] bridge_slave_0: left promiscuous mode [ 863.488606][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.854111][ T8143] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 863.902248][ T8143] usb 2-1: USB disconnect, device number 9 [ 864.316860][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.333331][ T5292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.357857][ T5292] bond0 (unregistering): Released all slaves [ 864.801870][ T55] Bluetooth: hci2: command tx timeout [ 864.881756][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 864.890982][ T5292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 864.924526][ T5292] bond0 (unregistering): Released all slaves [ 864.977430][T11720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.001428][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.084514][T11720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.124797][T11720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.140293][T11801] loop1: detected capacity change from 0 to 512 [ 865.148905][T11720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.180683][T11799] Bluetooth: MGMT ver 1.23 [ 865.188122][T11801] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 865.247458][T11801] EXT4-fs (loop1): 1 truncate cleaned up [ 865.254962][T11720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.272663][T11801] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 865.854367][T11809] syz.1.1148 (pid 11809) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 866.589121][T11556] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 866.884878][T11556] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 866.913142][T11556] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 866.935826][T11556] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 866.971051][ T5292] hsr_slave_0: left promiscuous mode [ 867.002009][ T5292] hsr_slave_1: left promiscuous mode [ 867.010945][T10994] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.024515][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.033321][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.057339][ T5292] hsr_slave_0: left promiscuous mode [ 867.267077][T11813] loop1: detected capacity change from 0 to 16 [ 867.316718][T11813] erofs: (device loop1): mounted with root inode @ nid 36. [ 867.410293][ T5292] hsr_slave_1: left promiscuous mode [ 867.417816][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 867.430245][ T5292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 867.794564][ T5292] veth1_vlan: left promiscuous mode [ 867.853504][ T5292] veth0_vlan: left promiscuous mode [ 869.621340][T11826] syz.1.1154: attempt to access beyond end of device [ 869.621340][T11826] nbd1: rw=0, sector=1, nr_sectors = 1 limit=0 [ 869.637283][T11826] qnx4: unable to read the superblock [ 869.849454][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.949719][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.637686][T10987] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.512379][T11260] kernel write not supported for file /dsp (pid: 11260 comm: kworker/0:4) [ 871.672769][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 872.020050][ T5292] team0 (unregistering): Port device team_slave_0 removed [ 872.265821][ T5218] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 872.291318][ T5218] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 872.304111][ T5218] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 872.315242][ T5218] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 872.335271][ T5218] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 872.359120][ T5218] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 872.438210][ T5218] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 872.483152][ T5218] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 872.495178][ T5218] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 872.504636][ T5218] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 872.514729][ T5218] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 872.522653][ T5218] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 874.124483][T11859] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 874.140738][T11859] 9pnet_fd: Insufficient options for proto=fd [ 874.376539][ T5292] team0 (unregistering): Port device team_slave_1 removed [ 874.495915][ T55] Bluetooth: hci5: command tx timeout [ 874.506952][ T5292] team0 (unregistering): Port device team_slave_0 removed [ 874.697663][ T55] Bluetooth: hci7: command tx timeout [ 875.375732][ T55] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 875.621739][ T8143] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 875.814777][ T8143] usb 3-1: Using ep0 maxpacket: 16 [ 875.823537][ T8143] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 875.833011][ T8143] usb 3-1: config 0 has no interface number 0 [ 875.839146][ T8143] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 875.891645][ T8143] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 875.933432][ T8143] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 875.942986][ T8143] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 875.951099][ T8143] usb 3-1: Product: syz [ 875.966233][ T8143] usb 3-1: SerialNumber: syz [ 875.982346][ T8143] usb 3-1: config 0 descriptor?? [ 876.001235][ T8143] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 876.043406][ T8143] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input12 [ 876.561668][ T55] Bluetooth: hci5: command tx timeout [ 876.724450][ T55] Bluetooth: hci7: command tx timeout [ 877.934093][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 877.934660][ T9] usb 3-1: USB disconnect, device number 15 [ 877.941336][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 878.015180][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 878.125146][T11720] hsr_slave_0: entered promiscuous mode [ 878.164478][T11720] hsr_slave_1: entered promiscuous mode [ 878.176245][T11720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.211822][T11720] Cannot create hsr debugfs directory [ 878.317999][T11556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.334619][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.345758][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.352911][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.468026][T11873] Cannot find del_set index 0 as target [ 878.642804][ T55] Bluetooth: hci5: command tx timeout [ 878.802037][ T5218] Bluetooth: hci7: command tx timeout [ 879.159206][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.166397][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 880.250477][T11556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 880.281380][T11556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 881.019975][ C0] vkms_vblank_simulate: vblank timer overrun [ 881.731372][ T5218] Bluetooth: hci5: command tx timeout [ 881.737265][ T5218] Bluetooth: hci7: command tx timeout [ 882.120691][T11844] chnl_net:caif_netlink_parms(): no params data found [ 882.184162][T11842] chnl_net:caif_netlink_parms(): no params data found [ 882.818441][T11556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.871338][T11844] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.929595][T11917] ipt_REJECT: ECHOREPLY no longer supported. [ 883.038895][T11844] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.192869][T11844] bridge_slave_0: entered allmulticast mode [ 883.356519][T11844] bridge_slave_0: entered promiscuous mode [ 883.515970][T11844] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.541828][T11844] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.569503][T11844] bridge_slave_1: entered allmulticast mode [ 883.590779][T11844] bridge_slave_1: entered promiscuous mode [ 883.735780][T11844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.791399][T11844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.827489][T11928] loop1: detected capacity change from 0 to 256 [ 883.884839][ T29] audit: type=1804 audit(1726868986.336:120): pid=11928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1176" name="/newroot/46/file1/file0" dev="loop1" ino=1048800 res=1 errno=0 [ 884.014959][ T29] audit: type=1326 audit(1726868986.486:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11929 comm="syz.2.1177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f720457def9 code=0x0 [ 884.050494][T11842] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.058096][T11842] bridge0: port 1(bridge_slave_0) entered disabled state [ 884.075635][T11842] bridge_slave_0: entered allmulticast mode [ 884.128425][T11842] bridge_slave_0: entered promiscuous mode [ 884.338223][T11842] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.358557][T11842] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.373707][T11842] bridge_slave_1: entered allmulticast mode [ 884.380830][T11842] bridge_slave_1: entered promiscuous mode [ 884.432977][T11844] team0: Port device team_slave_0 added [ 884.486417][T11844] team0: Port device team_slave_1 added [ 884.526005][T11842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.586210][T11842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.598808][T11844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.610327][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.637370][T11844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.725549][T11844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.739113][T11844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.771806][T11844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.829105][T11842] team0: Port device team_slave_0 added [ 884.838555][T11842] team0: Port device team_slave_1 added [ 884.996221][T11844] hsr_slave_0: entered promiscuous mode [ 885.024341][T11844] hsr_slave_1: entered promiscuous mode [ 885.030840][T11844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.043325][T11844] Cannot create hsr debugfs directory [ 885.092862][T11842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.099959][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.153992][T11842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.372366][T11842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.379349][T11842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 885.826720][T11842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 886.127393][T11720] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 886.229686][T11720] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 886.287690][T11720] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 886.590973][T11948] loop1: detected capacity change from 0 to 1024 [ 886.714630][T10058] kernel write not supported for file /dsp (pid: 10058 comm: kworker/1:7) [ 886.889600][T11720] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 887.342064][T11951] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.365426][T11951] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.416614][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.431940][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.506623][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.515145][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.524344][T11842] hsr_slave_0: entered promiscuous mode [ 887.532613][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.540532][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.549996][T11842] hsr_slave_1: entered promiscuous mode [ 887.566534][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.566557][T11842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 887.581201][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.593339][T11956] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 887.596306][T11842] Cannot create hsr debugfs directory [ 887.636838][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.658685][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.676804][ T5292] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.681084][T11951] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.697782][T11951] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.719440][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.736098][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.790018][T11556] veth0_vlan: entered promiscuous mode [ 887.808893][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.817911][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.848018][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.855596][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.874721][ T5292] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.896842][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.921823][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.939386][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.959109][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.990122][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 887.998093][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 888.013527][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 888.042288][T11948] hfsplus: request for non-existent node 33423360 in B*Tree [ 888.067455][T11556] veth1_vlan: entered promiscuous mode [ 888.076615][T11951] hfsplus: request for non-existent node 33423360 in B*Tree [ 888.095872][T11951] hfsplus: request for non-existent node 33423360 in B*Tree [ 888.275902][ T5292] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.255187][ T5292] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.722310][ T5218] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 895.734204][ T5218] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 895.746208][ T5218] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 895.756671][ T5218] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 895.764358][ T5218] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 895.802473][ T5218] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 895.900841][ T5292] bridge_slave_1: left allmulticast mode [ 895.910590][ T5292] bridge_slave_1: left promiscuous mode [ 895.945261][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.023113][ T5292] bridge_slave_0: left allmulticast mode [ 896.055134][ T5292] bridge_slave_0: left promiscuous mode [ 896.062366][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.119620][ T5292] bridge_slave_1: left allmulticast mode [ 896.131567][ T5292] bridge_slave_1: left promiscuous mode [ 896.137472][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.180507][ T5292] bridge_slave_0: left allmulticast mode [ 896.195523][ T5292] bridge_slave_0: left promiscuous mode [ 896.212198][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.405517][ T5218] Bluetooth: hci4: command tx timeout [ 900.487512][ T55] Bluetooth: hci4: command tx timeout [ 901.477504][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.578581][ T5292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.727747][ T5292] bond0 (unregistering): Released all slaves [ 902.330597][ T30] INFO: task syz-executor:9878 blocked for more than 143 seconds. [ 902.342502][ T30] Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 902.349897][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.361064][ T30] task:syz-executor state:D stack:20992 pid:9878 tgid:9878 ppid:1 flags:0x00004006 [ 902.372412][ T30] Call Trace: [ 902.375834][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 902.378979][ T30] __schedule+0x1893/0x4b50 [ 902.384832][ T30] ? __pfx___schedule+0x10/0x10 [ 902.389896][ T30] ? __pfx_lock_release+0x10/0x10 [ 902.421313][ T30] ? schedule+0x90/0x320 [ 902.431820][ T30] schedule+0x14b/0x320 [ 902.513585][ T30] schedule_timeout+0xb0/0x310 [ 902.518451][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 902.551726][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 902.557772][ T30] ? wait_for_completion+0x2fe/0x620 [ 902.571623][ T30] ? wait_for_completion+0x2fe/0x620 [ 902.576958][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 902.583780][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.601678][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 902.606956][ T30] ? wait_for_completion+0x2fe/0x620 [ 902.612573][ T30] wait_for_completion+0x355/0x620 [ 902.617725][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.635582][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 902.641309][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.647184][ T30] ? kthread_unpark+0x17b/0x210 [ 902.652149][ T30] kthread_stop+0x19e/0x640 [ 902.656703][ T30] ext4_stop_mmpd+0x47/0xb0 [ 902.661238][ T30] ext4_put_super+0x753/0xd50 [ 902.666082][ T30] ? __pfx_ext4_put_super+0x10/0x10 [ 902.671324][ T30] generic_shutdown_super+0x13b/0x2d0 [ 902.676921][ T30] kill_block_super+0x44/0x90 [ 902.681896][ T30] ext4_kill_sb+0x68/0xa0 [ 902.686271][ T30] deactivate_locked_super+0xc6/0x130 [ 902.691954][ T30] cleanup_mnt+0x41f/0x4b0 [ 902.696414][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.702144][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 902.707392][ T30] task_work_run+0x251/0x310 [ 902.712157][ T30] ? __pfx_task_work_run+0x10/0x10 [ 902.717424][ T30] ? __x64_sys_umount+0x123/0x170 [ 902.722617][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 902.728395][ T30] syscall_exit_to_user_mode+0x168/0x370 [ 902.737435][ T30] do_syscall_64+0x100/0x230 [ 902.742142][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.748081][ T30] RIP: 0033:0x7f9862f7f227 [ 902.752804][ T30] RSP: 002b:00007fff41632008 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 902.761269][ T30] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9862f7f227 [ 902.769338][ T30] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff416320c0 [ 902.777538][ T30] RBP: 00007fff416320c0 R08: 0000000000000000 R09: 0000000000000000 [ 902.785601][ T30] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff41633140 [ 902.793826][ T30] R13: 00007f9862ff0a14 R14: 00000000000b7ae7 R15: 00007fff41633180 [ 902.802499][ T55] Bluetooth: hci4: command tx timeout [ 902.808059][ T30] [ 902.811263][ T30] INFO: task kmmpd-loop2:11020 blocked for more than 143 seconds. [ 902.825349][ T30] Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 902.833036][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 902.844953][ T30] task:kmmpd-loop2 state:D stack:27472 pid:11020 tgid:11020 ppid:2 flags:0x00024000 [ 902.860680][ T30] Call Trace: [ 902.864469][ T30] [ 902.867432][ T30] __schedule+0x1893/0x4b50 [ 902.872377][ T30] ? __pfx___schedule+0x10/0x10 [ 902.877279][ T30] ? __pfx_lock_release+0x10/0x10 [ 902.882453][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 902.888625][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 902.895287][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.900973][ T30] ? schedule+0x90/0x320 [ 902.905298][ T30] schedule+0x14b/0x320 [ 902.909511][ T30] ? percpu_rwsem_wait+0x34c/0x450 [ 902.914777][ T30] percpu_rwsem_wait+0x3c2/0x450 [ 902.919756][ T30] ? __pfx_percpu_rwsem_wait+0x10/0x10 [ 902.925285][ T30] ? __pfx_percpu_rwsem_wake_function+0x10/0x10 [ 902.931621][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.938707][ T30] ? rcu_is_watching+0x15/0xb0 [ 902.943599][ T30] __percpu_down_read+0xee/0x130 [ 902.948561][ T30] ? kmmpd+0x26d/0xaa0 [ 902.953706][ T30] write_mmp_block+0x2f2/0x3a0 [ 902.958609][ T30] kmmpd+0x26d/0xaa0 [ 902.962619][ T30] ? __pfx_kmmpd+0x10/0x10 [ 902.967088][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 902.972866][ T30] ? __kthread_parkme+0x169/0x1d0 [ 902.977939][ T30] ? __pfx_kmmpd+0x10/0x10 [ 902.982468][ T30] kthread+0x2f2/0x390 [ 902.986569][ T30] ? __pfx_kmmpd+0x10/0x10 [ 902.991018][ T30] ? __pfx_kthread+0x10/0x10 [ 902.995776][ T30] ret_from_fork+0x4d/0x80 [ 903.000229][ T30] ? __pfx_kthread+0x10/0x10 [ 903.004910][ T30] ret_from_fork_asm+0x1a/0x30 [ 903.009933][ T30] [ 903.031689][ T30] [ 903.031689][ T30] Showing all locks held in the system: [ 903.040743][ T30] 3 locks held by kworker/u8:0/11: [ 903.083757][ T30] #0: ffff88801ac81148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 903.122063][ T30] #1: ffffc90000107d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 903.142682][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 903.162661][ T30] 1 lock held by khungtaskd/30: [ 903.167548][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 903.181858][ T30] 3 locks held by kworker/u8:5/81: [ 903.187001][ T30] 4 locks held by kworker/0:2/932: [ 903.201820][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 903.213508][ T30] #1: ffffc90003d7fd00 ((delayed_fput_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 903.232638][ T30] #2: ffff88805b9bf408 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 903.259686][ T30] #3: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: raw_release+0x1b8/0x8b0 [ 903.283267][ T30] 2 locks held by dhcpcd/4886: [ 903.288054][ T30] #0: ffff888079b9b6c8 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 903.301665][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 903.331682][ T30] 2 locks held by getty/4969: [ 903.336409][ T30] #0: ffff8880327710a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 903.352068][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 903.362511][ T30] 5 locks held by kworker/u8:7/5292: [ 903.367810][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 903.379026][ T30] #1: ffffc9000389fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 903.389715][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 903.399363][ T30] #3: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 903.408565][ T30] #4: ffffffff8e93df78 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 903.420296][ T30] 1 lock held by syz-executor/9878: [ 903.425588][ T30] #0: ffff888065c3c0e0 (&type->s_umount_key#33){++++}-{3:3}, at: deactivate_super+0xb5/0xf0 [ 903.435976][ T30] 3 locks held by kworker/u8:19/10555: [ 903.441446][ T30] #0: ffff88802d7c4948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 903.454678][ T30] #1: ffffc90003c67d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 903.468160][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 903.477793][ T30] 1 lock held by kmmpd-loop2/11020: [ 903.483343][ T30] #0: ffff888065c3c420 (sb_writers#4){++++}-{0:0}, at: kmmpd+0x26d/0xaa0 [ 903.492334][ T30] 3 locks held by kworker/0:4/11260: [ 903.497664][ T30] #0: ffff88801ac78948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 903.509819][ T30] #1: ffffc90003fd7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 903.521144][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 903.532582][ T30] 1 lock held by syz-executor/11556: [ 903.537878][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 903.546984][ T30] 1 lock held by syz-executor/11720: [ 903.553517][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 903.563075][ T30] 1 lock held by syz-executor/11842: [ 903.568385][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 903.577942][ T30] 7 locks held by syz-executor/11844: [ 903.583415][ T30] #0: ffff88802dcca420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 903.592506][ T30] #1: ffff888054cc3088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 903.602430][ T30] #2: ffff8880278e33c8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 903.612607][ T30] #3: ffffffff8f5676c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 903.623017][ T30] #4: ffff88805ca410e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 903.633752][ T30] #5: ffff88804d9d8250 (&devlink->lock_key#50){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 903.644805][ T30] #6: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 903.655144][ T30] 2 locks held by syz-executor/11987: [ 903.660532][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 903.670052][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 903.679791][ T30] 1 lock held by syz.2.1198/12022: [ 903.685181][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 903.694742][ T30] 1 lock held by syz.1.1201/12031: [ 903.699862][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 903.709048][ T30] [ 903.711393][ T30] ============================================= [ 903.711393][ T30] [ 903.719865][ T30] NMI backtrace for cpu 1 [ 903.724206][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 903.734380][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 903.744464][ T30] Call Trace: [ 903.747755][ T30] [ 903.750688][ T30] dump_stack_lvl+0x241/0x360 [ 903.755579][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.760823][ T30] ? __pfx__printk+0x10/0x10 [ 903.765450][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 903.770493][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 903.775978][ T30] ? _printk+0xd5/0x120 [ 903.780151][ T30] ? __pfx__printk+0x10/0x10 [ 903.784762][ T30] ? __wake_up_klogd+0xcc/0x110 [ 903.789633][ T30] ? __pfx__printk+0x10/0x10 [ 903.794243][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.799897][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 903.804942][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 903.810938][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 903.816935][ T30] watchdog+0xff4/0x1040 [ 903.821197][ T30] ? watchdog+0x1ea/0x1040 [ 903.825637][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.830332][ T30] kthread+0x2f2/0x390 [ 903.834505][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.839200][ T30] ? __pfx_kthread+0x10/0x10 [ 903.843806][ T30] ret_from_fork+0x4d/0x80 [ 903.848328][ T30] ? __pfx_kthread+0x10/0x10 [ 903.852931][ T30] ret_from_fork_asm+0x1a/0x30 [ 903.857743][ T30] [ 903.862156][ T30] Sending NMI from CPU 1 to CPUs 0: [ 903.867401][ C0] NMI backtrace for cpu 0 [ 903.867416][ C0] CPU: 0 UID: 0 PID: 4661 Comm: klogd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 903.867444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 903.867460][ C0] RIP: 0010:preempt_count_add+0x34/0x190 [ 903.867497][ C0] Code: fb 48 c7 c0 00 69 3a 9a 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d bc 51 d7 18 00 <75> 07 65 8b 05 7b bf a0 7e 65 01 1d 74 bf a0 7e 48 c7 c0 00 69 3a [ 903.867518][ C0] RSP: 0018:ffffc900052f74b0 EFLAGS: 00000046 [ 903.867540][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a3a6903 [ 903.867558][ C0] RDX: 0000000000000000 RSI: ffffffff8c60dce0 RDI: 0000000000000001 [ 903.867575][ C0] RBP: ffffc900052f7630 R08: ffffffff901c5aaf R09: 1ffffffff2038b55 [ 903.867595][ C0] R10: dffffc0000000000 R11: fffffbfff2038b56 R12: ffff88807ea4a244 [ 903.867620][ C0] R13: ffff88807ea4a248 R14: 1ffff1100fd49449 R15: dffffc0000000000 [ 903.867643][ C0] FS: 00007f6b18531380(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 903.867665][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 903.867683][ C0] CR2: 0000001b33217ff8 CR3: 0000000032148000 CR4: 0000000000350ef0 [ 903.867703][ C0] Call Trace: [ 903.867712][ C0] [ 903.867722][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 903.867750][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 903.867791][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 903.867818][ C0] ? nmi_handle+0x2a/0x5a0 [ 903.867854][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 903.867888][ C0] ? nmi_handle+0x151/0x5a0 [ 903.867913][ C0] ? nmi_handle+0x2a/0x5a0 [ 903.867939][ C0] ? preempt_count_add+0x34/0x190 [ 903.867970][ C0] ? default_do_nmi+0x63/0x160 [ 903.868000][ C0] ? exc_nmi+0x123/0x1f0 [ 903.868027][ C0] ? end_repeat_nmi+0xf/0x53 [ 903.868072][ C0] ? preempt_count_add+0x34/0x190 [ 903.868106][ C0] ? preempt_count_add+0x34/0x190 [ 903.868139][ C0] ? preempt_count_add+0x34/0x190 [ 903.868172][ C0] [ 903.868181][ C0] [ 903.868192][ C0] _raw_spin_lock+0x12/0x40 [ 903.868224][ C0] rcu_note_context_switch+0x2a9/0xff0 [ 903.868263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.868307][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.868346][ C0] ? rcu_read_lock_sched_held+0x8d/0x130 [ 903.868378][ C0] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 903.868418][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.868457][ C0] ? rcu_is_watching+0x15/0xb0 [ 903.868485][ C0] __schedule+0x348/0x4b50 [ 903.868519][ C0] ? __asan_memset+0x23/0x50 [ 903.868552][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.868597][ C0] ? try_to_wake_up+0x92e/0x1480 [ 903.868626][ C0] ? __pfx_lock_release+0x10/0x10 [ 903.868664][ C0] ? __pfx___schedule+0x10/0x10 [ 903.868699][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.868738][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 903.868779][ C0] ? preempt_schedule+0xe1/0xf0 [ 903.868832][ C0] preempt_schedule_common+0x84/0xd0 [ 903.868868][ C0] preempt_schedule+0xe1/0xf0 [ 903.868902][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 903.868938][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.868981][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 903.869023][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 903.869063][ C0] preempt_schedule_thunk+0x1a/0x30 [ 903.869094][ C0] _raw_spin_unlock_irqrestore+0x130/0x140 [ 903.869129][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 903.869167][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.869206][ C0] ? autoremove_wake_function+0x37/0x110 [ 903.869245][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 903.869287][ C0] sock_def_readable+0x20f/0x5b0 [ 903.869318][ C0] ? sock_def_readable+0xd7/0x5b0 [ 903.869351][ C0] unix_dgram_sendmsg+0x1495/0x1f80 [ 903.869400][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.869444][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 903.869484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.869525][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.869564][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 903.869602][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.869647][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 903.869684][ C0] __sock_sendmsg+0x223/0x270 [ 903.869717][ C0] __sys_sendto+0x398/0x4f0 [ 903.869758][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 903.869813][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.869852][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 903.869892][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 903.869934][ C0] __x64_sys_sendto+0xde/0x100 [ 903.869974][ C0] do_syscall_64+0xf3/0x230 [ 903.870011][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.870053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.870087][ C0] RIP: 0033:0x7f6b186939b5 [ 903.870107][ C0] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 903.870128][ C0] RSP: 002b:00007ffed6a5b588 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 903.870152][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6b186939b5 [ 903.870170][ C0] RDX: 000000000000004a RSI: 000056474656cac0 RDI: 0000000000000003 [ 903.870186][ C0] RBP: 0000564746564910 R08: 0000000000000000 R09: 0000000000000000 [ 903.870203][ C0] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 903.870219][ C0] R13: 00007f6b18821212 R14: 00007ffed6a5b688 R15: 0000000000000000 [ 903.870248][ C0] [ 903.870939][ T5292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.891598][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 903.891616][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07341-gbaeb9a7d8b60 #0 [ 903.891647][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 903.891665][ T30] Call Trace: [ 903.891676][ T30] [ 903.891689][ T30] dump_stack_lvl+0x241/0x360 [ 903.891735][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 903.891777][ T30] ? __pfx__printk+0x10/0x10 [ 903.891814][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 903.891862][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.891905][ T30] ? vscnprintf+0x5d/0x90 [ 903.891938][ T30] panic+0x349/0x880 [ 903.891974][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.892018][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 903.892052][ T30] ? __pfx_panic+0x10/0x10 [ 903.892086][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 903.892117][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.892158][ T30] ? __irq_work_queue_local+0x137/0x410 [ 903.892195][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.892237][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 903.892268][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 903.892299][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 903.892334][ T30] ? srso_alias_return_thunk+0x5/0xfbef5 [ 903.892381][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 903.892417][ T30] watchdog+0x1033/0x1040 [ 903.892457][ T30] ? watchdog+0x1ea/0x1040 [ 903.892500][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.892537][ T30] kthread+0x2f2/0x390 [ 903.892565][ T30] ? __pfx_watchdog+0x10/0x10 [ 903.892601][ T30] ? __pfx_kthread+0x10/0x10 [ 903.892630][ T30] ret_from_fork+0x4d/0x80 [ 903.892671][ T30] ? __pfx_kthread+0x10/0x10 [ 903.892699][ T30] ret_from_fork_asm+0x1a/0x30 [ 903.892755][ T30] [ 903.896211][ T30] Kernel Offset: disabled